$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa File: 87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa (raw, json) Hash identifier: kdTd6/TB0r4yDT5s78abREMzesE+qP+TOQnyZQYMT5U= Subject key identifier: 71:5D:FE:6F:2B:3E:D3:69:60:66:E7:F7:C5:F8:3F:C2:89:44:03:C3 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642FDF8D5DE5741B9C3D00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 66.109.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:df:8d:5d:e5:74:1b:9c:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=8ae4bb59-6ec4-4954-bf37-3254c18d13ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:1e:ef:60:94:f0:a9:7f:0c:85:46:a3:06: 65:02:fd:fb:30:5b:e3:54:28:85:4c:64:0c:3a:74: d7:77:a6:f1:53:b9:d0:5b:3f:a7:f7:0f:56:3e:43: 67:19:af:ff:a9:12:34:6e:64:21:f9:e0:5c:f3:ba: e0:1f:7e:2b:d5:4e:d8:66:54:0a:8b:b7:6e:4c:8b: 2f:99:6b:7c:3d:2f:f4:f6:32:2b:2c:30:e5:f4:55: 04:44:ba:1a:c4:b3:97:5a:3a:8b:41:63:00:54:83: a1:da:96:07:17:46:45:3c:92:90:90:54:b4:a2:88: af:fc:ed:82:d9:83:da:d2:33:6e:76:d8:0d:77:05: bf:39:c9:c1:6e:9a:78:00:db:7a:1d:65:0e:38:90: db:e6:e4:6b:0d:d8:0a:c2:b8:7d:68:f6:11:10:8a: 30:08:eb:7e:92:65:de:1b:f7:13:da:e9:a3:86:54: 01:cc:de:4a:0b:26:90:35:10:da:33:91:1d:da:4a: 57:1f:32:3a:a9:fc:95:9c:43:84:40:13:f2:0d:d3: 2d:ab:ed:99:ce:af:af:ea:b0:08:c5:38:87:ef:14: bf:94:75:71:37:82:16:1b:49:3b:e7:f6:3d:22:f8: 5b:21:09:99:28:43:56:3f:3a:d0:47:66:e3:57:83: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:FE:6F:2B:3E:D3:69:60:66:E7:F7:C5:F8:3F:C2:89:44:03:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 66.109.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1a:bb:23:71:68:14:17:a8:94:1b:4b:ea:0a:6e:52:f2:ce: b6:80:f9:0a:a9:d8:47:19:40:c3:ee:66:e4:59:1e:94:b9:86: d9:d5:cf:38:f7:a7:36:c8:2a:0e:da:72:a6:4a:99:7a:ba:95: 0b:2f:35:19:e7:34:76:3f:35:04:f2:df:97:a1:b9:74:c2:2d: 5c:38:c7:e1:3e:7e:b0:16:79:b6:8e:c4:39:7b:3e:02:d2:57: 10:d5:d6:93:06:48:e4:dc:66:5c:71:66:12:d0:68:4a:aa:05: 8e:15:82:bf:ed:97:37:a8:97:50:70:8f:fa:98:f8:ba:36:49: f7:fa:93:e9:28:74:db:14:59:f5:67:7e:7d:12:33:6d:2f:a0: b0:63:98:f6:d3:8b:3e:9a:b7:f6:18:f1:ef:95:d1:42:4e:6e: 6b:10:6e:87:f9:79:f7:19:d3:f1:0c:d3:23:84:5e:9e:b9:9e: 1d:3d:22:6f:7b:10:a0:f3:ea:16:1c:00:fa:50:19:31:ff:03: 3d:5d:fe:6f:40:58:17:cd:10:13:6e:84:a9:d6:73:7a:29:0f: af:64:ff:e6:7c:ef:77:e6:12:dc:fa:3c:a1:66:f1:19:e4:59: bf:31:f6:42:2c:dd:7f:7a:63:a8:bf:48:15:58:b4:01:23:18: 2e:bd:d6:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC/fjV3ldBucPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OGFlNGJiNTktNmVjNC00OTU0LWJmMzctMzI1NGMxOGQxM2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jUe72CU8Kl/DIVGowZlAv37MFvjVCiFTGQM OnTXd6bxU7nQWz+n9w9WPkNnGa//qRI0bmQh+eBc87rgH34r1U7YZlQKi7duTIsv mWt8PS/09jIrLDDl9FUERLoaxLOXWjqLQWMAVIOh2pYHF0ZFPJKQkFS0ooiv/O2C 2YPa0jNudtgNdwW/OcnBbpp4ANt6HWUOOJDb5uRrDdgKwrh9aPYREIowCOt+kmXe G/cT2umjhlQBzN5KCyaQNRDaM5Ed2kpXHzI6qfyVnEOEQBPyDdMtq+2Zzq+v6rAI xTiH7xS/lHVxN4IWG0k75/Y9IvhbIQmZKENWPzrQR2bjV4NGPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFd/m8rPtNpYGbn98X4P8KJRAPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODdhYTg4NDEtNDhhMS0z ODE2LWJmNDktYmI3Y2I2ODliMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYauyNxaBQXqJQbS+oKblLyzraA+Qqp2EcZQMPuZuRZHpS5htnVzzj3 pzbIKg7acqZKmXq6lQsvNRnnNHY/NQTy35ehuXTCLVw4x+E+frAWebaOxDl7PgLS VxDV1pMGSOTcZlxxZhLQaEqqBY4Vgr/tlzeol1Bwj/qY+Lo2Sff6k+kodNsUWfVn fn0SM20voLBjmPbTiz6at/YY8e+V0UJObmsQbof5efcZ0/EM0yOEXp65nh09Im97 EKDz6hYcAPpQGTH/Az1d/m9AWBfNEBNuhKnWc3opD69k/+Z873fmEtz6PKFm8Rnk Wb8x9kIs3X96Y6i/SBVYtAEjGC691iw= -----END CERTIFICATE-----Generated at Sat Apr 12 13:01:55 2025 by rpki-client