$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa File: 71b533e2-7f33-3621-b9d4-739786613f23.roa (raw, json) Hash identifier: SSEbn95QJ27uWCH0mE1MjUriDmYlfFVIEUuE05ZNXKY= Subject key identifier: 57:87:E5:D3:7F:8F:E4:76:D8:E0:AB:E2:17:57:9A:10:C4:53:35:92 Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Certificate serial: 010D0C9F43285849D1650697322B53885B9D9140 Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 62537 IP address blocks: 66.85.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:06:97:32:2b:53:88:5b:9d:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=3f6b0b00-6c1c-46d7-aebf-6bf8282eaf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:bd:5b:96:ee:8d:4c:82:e0:9f:b3:5f:c5: 4d:6c:c5:25:ba:c9:4c:01:55:94:7c:b8:f0:86:e0: 4c:31:6d:0c:00:cb:a0:fb:82:ed:5d:7c:b8:d4:c0: b3:5b:14:90:fb:9e:56:50:52:aa:48:88:df:53:d7: 12:33:be:5d:18:f4:bb:6b:1c:6a:3c:b8:37:18:3a: 08:43:17:fe:50:94:d5:d7:67:10:a6:5b:b8:73:af: 9e:7d:47:f2:41:65:1a:a5:c8:ca:03:dd:c7:a6:8a: 09:3f:2f:1f:83:3e:f4:24:81:77:cc:71:18:80:dd: 74:23:8c:d7:de:63:86:ff:e8:6d:b8:b1:df:63:49: 52:d7:e8:3f:b0:e3:62:83:ed:a2:26:c0:9b:d1:b3: 87:58:a1:60:e3:7f:9d:52:c3:6f:ea:e5:ac:05:3c: 63:97:a0:d5:1f:46:3e:a5:ab:28:ee:24:e6:2b:7d: f4:05:92:c4:9a:ad:8a:ce:70:6a:86:15:be:01:0b: ec:23:33:59:b8:38:e8:4e:44:94:95:29:88:b1:fb: 42:05:72:ab:ca:f2:45:f5:61:99:f1:35:d8:e7:94: 14:cd:c6:33:8b:2a:b2:cd:f0:47:58:e7:39:bc:bd: a8:1b:f5:6b:0b:ff:ee:c8:c5:36:53:bf:4f:9d:e3: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:87:E5:D3:7F:8F:E4:76:D8:E0:AB:E2:17:57:9A:10:C4:53:35:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl X509v3 Authority Key Identifier: keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer sbgp-ipAddrBlock: critical IPv4: 66.85.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0a:4d:a3:22:20:44:25:fa:e6:0b:e0:ba:3b:c4:a3:fe:bb: 1d:c3:b9:5d:66:ef:3d:5d:7d:71:a7:cf:55:b3:0a:8f:2a:66: ba:98:5a:74:08:3b:1e:56:f2:df:50:51:e8:b9:99:15:6c:78: 8e:ad:16:c8:b5:2c:54:60:3b:33:a1:51:26:d8:8f:67:db:32: 3c:c1:98:66:9b:d6:0f:cf:0f:e6:12:13:56:f3:58:18:9d:e9: 3d:5e:e4:f1:f2:26:3c:c8:ae:f5:6e:5d:5a:e5:26:63:82:7d: 3d:33:ec:ee:12:49:d0:a9:76:b8:ef:eb:ca:d4:ca:2a:f0:60: 03:e6:d0:73:50:9e:71:a2:ff:8b:3d:6a:51:ff:8a:49:19:8d: be:7c:fd:47:0a:2d:4e:64:61:71:84:f8:7e:96:05:4c:d6:5b: 19:06:48:8f:bf:25:ce:7c:ed:32:0d:eb:04:e8:2f:5b:91:9f: 69:6f:db:5f:96:28:cd:35:a9:df:dc:59:3d:92:42:1b:cb:6a: d0:59:ed:01:17:51:83:80:22:c3:33:44:34:b1:70:c1:45:e7: 74:83:f7:a2:6c:b3:35:cd:2b:40:08:cb:97:55:0f:32:c3:06: 34:d5:4c:05:1e:d6:5d:82:da:8c:19:f6:6c:2f:f6:8d:0c:09: 59:48:3f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQaXMitTiFudkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx NTZmMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk M2Y2YjBiMDAtNmMxYy00NmQ3LWFlYmYtNmJmODI4MmVhZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeS9W5bujUyC4J+zX8VNbMUluslMAVWUfLjw huBMMW0MAMug+4LtXXy41MCzWxSQ+55WUFKqSIjfU9cSM75dGPS7axxqPLg3GDoI Qxf+UJTV12cQplu4c6+efUfyQWUapcjKA93HpooJPy8fgz70JIF3zHEYgN10I4zX 3mOG/+htuLHfY0lS1+g/sONig+2iJsCb0bOHWKFg43+dUsNv6uWsBTxjl6DVH0Y+ paso7iTmK330BZLEmq2KznBqhhW+AQvsIzNZuDjoTkSUlSmIsftCBXKryvJF9WGZ 8TXY55QUzcYziyqyzfBHWOc5vL2oG/VrC//uyMU2U79PnePuNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeH5dN/j+R22OCr4hdXmhDEUzWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvNzFiNTMzZTItN2YzMy0z NjIxLWI5ZDQtNzM5Nzg2NjEzZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2 ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQlUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIKTaMiIEQl+uYL4Lo7xKP+ux3DuV1m7z1dfXGnz1WzCo8qZrqYWnQI Ox5W8t9QUei5mRVseI6tFsi1LFRgOzOhUSbYj2fbMjzBmGab1g/PD+YSE1bzWBid 6T1e5PHyJjzIrvVuXVrlJmOCfT0z7O4SSdCpdrjv68rUyirwYAPm0HNQnnGi/4s9 alH/ikkZjb58/UcKLU5kYXGE+H6WBUzWWxkGSI+/Jc587TIN6wToL1uRn2lv21+W KM01qd/cWT2SQhvLatBZ7QEXUYOAIsMzRDSxcMFF53SD96JsszXNK0AIy5dVDzLD BjTVTAUe1l2C2owZ9mwv9o0MCVlIP0E= -----END CERTIFICATE-----Generated at Sat Jun 7 22:50:15 2025 by rpki-client