$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa File: 77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa (raw, json) Hash identifier: P8P6qrQ5VUpeRVHnhATrxpO92fpqIVMtKXhnFaJfDsI= Subject key identifier: 21:AB:34:81:56:CD:81:BE:D8:A9:14:62:11:E5:18:F3:18:F5:6C:D4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642E12C48F65BCDA3C9EC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 66.109.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:12:c4:8f:65:bc:da:3c:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=6f24157d-e8a1-4e44-9d4c-1f5ba2e4f43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c2:46:cb:59:be:29:de:8c:8c:46:3f:d0:ab: a9:1b:9c:d2:96:f4:79:33:e7:69:6c:f5:4c:65:03: 8b:76:c6:90:f0:9c:a4:53:ab:12:24:27:87:3c:39: 3c:83:9d:2c:65:58:75:2e:9e:ef:41:4d:df:de:bd: 95:79:6f:e8:3f:7f:7b:1d:34:d8:df:f3:d4:f0:8f: 51:b7:38:ff:42:9b:3a:af:e4:23:9f:f9:7e:fb:da: f2:67:47:3e:9e:3a:83:c1:60:a7:46:50:85:7a:f0: bb:e7:aa:a7:83:07:9e:aa:14:27:a5:18:6c:d2:11: 52:1d:18:96:e6:2b:32:b6:c7:59:95:3c:b2:4d:e9: 7f:af:a3:24:88:d8:7a:23:ef:81:2d:41:48:9b:66: be:2f:cc:57:b9:05:e7:07:71:da:9b:90:10:87:42: 99:a9:16:3e:c3:0b:c1:33:fe:8f:44:1a:55:d9:8a: 8d:d3:c2:86:b5:65:32:6c:de:a4:ae:cb:24:a4:38: 44:4f:86:c7:96:65:4d:2a:8a:e5:40:a7:88:eb:12: cd:9a:67:6c:af:95:87:95:de:99:70:2c:e7:e7:49: b5:45:a5:7e:e0:dc:92:25:13:34:97:fd:7b:0d:fc: 01:4d:b5:ff:86:25:b8:b3:4d:13:3e:ec:c4:54:e2: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AB:34:81:56:CD:81:BE:D8:A9:14:62:11:E5:18:F3:18:F5:6C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 66.109.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a3:15:f7:93:3d:52:fe:ac:b7:06:71:f0:c9:f3:e9:2b:a1: ba:ce:b4:d8:e3:5a:c6:29:09:aa:0e:09:3b:ce:74:29:eb:ac: 8e:4a:ae:6b:2e:9a:59:be:1b:7f:c5:1f:03:47:72:5f:b8:85: 61:d0:49:82:f5:30:bd:85:41:b3:96:f8:a0:ca:13:19:40:82: eb:5f:2e:0e:64:ea:9b:52:15:c6:93:d5:81:a5:c5:0b:fa:63: e3:31:c4:c5:b9:04:a9:16:6e:a6:31:2d:bb:af:e6:6a:55:5b: 97:0a:b4:62:2b:09:ae:84:9f:5d:a6:06:cd:f4:8a:cd:75:f3: ab:69:8f:09:a5:b9:24:cf:18:c3:fa:68:f4:64:ba:2a:46:ce: 4d:28:50:f1:d0:78:96:47:dd:f6:f0:09:06:9c:77:8b:ec:8b: 5a:70:8d:66:87:d4:e4:49:2b:d5:84:85:0f:1d:32:b4:a0:77: 2b:1f:f2:1d:c0:42:d3:6e:f6:9e:43:a1:c2:9b:0e:c6:0c:61: 89:48:7c:29:c9:76:5d:6f:92:06:ef:38:ef:ca:30:8a:d7:cb: 66:12:68:25:65:c7:b1:5e:ec:36:3b:ba:87:b2:bc:a9:1a:28: 2e:30:e6:7c:f5:6a:a7:a0:b4:0e:d8:af:05:c1:d6:1d:ba:0a: f9:66:b5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC4SxI9lvNo8nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NmYyNDE1N2QtZThhMS00ZTQ0LTlkNGMtMWY1YmEyZTRmNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8JGy1m+Kd6MjEY/0KupG5zSlvR5M+dpbPVM ZQOLdsaQ8JykU6sSJCeHPDk8g50sZVh1Lp7vQU3f3r2VeW/oP397HTTY3/PU8I9R tzj/Qps6r+Qjn/l++9ryZ0c+njqDwWCnRlCFevC756qngweeqhQnpRhs0hFSHRiW 5isytsdZlTyyTel/r6MkiNh6I++BLUFIm2a+L8xXuQXnB3Ham5AQh0KZqRY+wwvB M/6PRBpV2YqN08KGtWUybN6krsskpDhET4bHlmVNKorlQKeI6xLNmmdsr5WHld6Z cCzn50m1RaV+4NySJRM0l/17DfwBTbX/hiW4s00TPuzEVOK2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGrNIFWzYG+2KkUYhHlGPMY9WzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzdhYTJkMWUtZmU3YS0z ZWZiLTgwYWMtMDIzNGMzYmI0OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+jFfeTPVL+rLcGcfDJ8+krobrOtNjjWsYpCaoOCTvOdCnrrI5Krmsu mlm+G3/FHwNHcl+4hWHQSYL1ML2FQbOW+KDKExlAgutfLg5k6ptSFcaT1YGlxQv6 Y+MxxMW5BKkWbqYxLbuv5mpVW5cKtGIrCa6En12mBs30is1186tpjwmluSTPGMP6 aPRkuipGzk0oUPHQeJZH3fbwCQacd4vsi1pwjWaH1ORJK9WEhQ8dMrSgdysf8h3A QtNu9p5DocKbDsYMYYlIfCnJdl1vkgbvOO/KMIrXy2YSaCVlx7Fe7DY7uoeyvKka KC4w5nz1aqegtA7YrwXB1h26CvlmtSY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:29 2025 by rpki-client