$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa File: 66d28256-cbf5-3b31-910e-e10623aa8600.roa (raw, json) Hash identifier: OGqrrd67XwuxRUJ/TBSwJDyx2wXD8q9r5yZvWowr5ME= Subject key identifier: AA:10:A7:82:37:B3:C4:2E:B0:89:4A:1E:FF:06:A6:06:02:30:4C:FB Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584945CE9B0F37B77F9237C1CE80 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa Signing time: Sat 22 Mar 2025 13:00:52 +0000 ROA not before: Sat 22 Mar 2025 13:00:52 +0000 ROA not after: Fri 20 Jun 2025 13:00:52 +0000 asID: 7018 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:45:ce:9b:0f:37:b7:7f:92:37:c1:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Mar 22 13:00:52 2025 GMT Not After : Jun 20 13:00:52 2025 GMT Subject: CN=20047080-57bd-44f3-97bd-2237c059b884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:27:e7:7b:80:82:fc:33:92:2c:08:54:26: af:5d:1c:dc:b6:dc:91:85:00:a6:e4:c1:c5:15:6c: 98:f4:e6:dc:a2:2b:3b:d2:2c:f2:1c:5e:1e:f2:3f: 16:83:a0:ea:a9:3a:af:7a:2b:32:d6:ca:03:81:a4: 26:45:50:77:0c:7f:ec:df:8f:8b:50:19:cb:23:28: 3f:6e:98:a4:42:73:59:ef:b9:f2:fb:6e:7f:2f:8a: 34:b0:fd:f4:22:60:e9:b9:6c:3a:3e:4f:e0:63:64: 1d:8b:68:9b:97:a2:94:c3:f9:bc:64:24:53:92:0a: fa:60:75:60:e1:53:47:d5:02:8d:a3:93:9a:6f:91: d0:9b:97:eb:3a:a8:25:a6:7c:c8:d2:ad:de:f3:0f: 5e:9e:21:cd:40:a6:c6:61:ab:b3:a1:37:ce:44:9c: 38:7a:cb:4a:53:0a:6d:d8:26:27:7d:97:19:5a:54: 68:da:ad:6e:60:07:38:27:1f:a6:58:a4:35:ce:d5: 51:01:d1:06:89:61:7f:26:33:9d:d9:e9:40:5d:5b: 0f:49:06:7d:d8:f5:01:d5:05:3d:2c:cb:58:c8:5e: a8:82:03:62:ba:3e:06:ff:ba:af:4d:5d:91:a1:55: 92:d4:ec:fc:4e:5e:fa:79:40:38:07:f8:fb:81:14: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:A7:82:37:B3:C4:2E:B0:89:4A:1E:FF:06:A6:06:02:30:4C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6a:19:93:92:5a:bd:c8:7e:52:c6:ec:67:6d:f6:38:97:59: 2b:04:5a:14:fb:96:f4:6c:2f:a9:f6:05:8c:4a:a8:b1:12:ef: 26:bb:8a:dc:1e:ea:53:e8:31:2e:df:5b:65:29:c2:61:99:9d: fb:67:65:d8:0c:c4:c8:8e:bd:64:ae:61:c0:ab:72:8c:72:e5: 96:ec:05:d3:2c:79:4b:63:9c:5a:57:e0:ef:39:56:ec:52:f6: 11:bc:42:53:08:27:67:4a:d7:3b:ff:79:a6:44:ab:63:31:6e: 2e:ae:2a:45:b1:ea:4e:08:ef:ce:d0:35:f3:fa:f9:8b:eb:3e: d2:01:67:d5:9f:79:a2:12:30:7f:53:52:25:62:27:22:a9:ea: a0:4d:ed:d5:9f:da:28:93:7f:db:fc:8d:3d:36:f1:aa:6a:89: 39:7c:f5:9d:6a:de:bf:36:70:48:a4:23:88:39:6a:92:c1:a4: b8:17:8b:28:42:8f:5e:7a:79:0a:ee:7d:25:1b:50:9b:19:3f: 2c:a6:87:83:46:36:d8:ec:a7:6a:99:a0:be:80:e3:92:5b:99: ae:31:e4:33:0d:73:c7:49:82:99:9d:d8:2c:b6:12:83:b3:f4: 7f:34:cc:80:ec:a6:7c:9d:52:88:a2:4c:46:95:3f:5d:64:c4: ba:cd:32:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElFzpsPN7d/kjfBzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDMyMjEzMDA1MloXDTI1MDYyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjAwNDcwODAtNTdiZC00NGYzLTk3YmQtMjIzN2MwNTliODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIn53uAgvwzkiwIVCavXRzcttyRhQCm5MHF FWyY9Obcois70izyHF4e8j8Wg6DqqTqveisy1soDgaQmRVB3DH/s34+LUBnLIyg/ bpikQnNZ77ny+25/L4o0sP30ImDpuWw6Pk/gY2Qdi2ibl6KUw/m8ZCRTkgr6YHVg 4VNH1QKNo5Oab5HQm5frOqglpnzI0q3e8w9eniHNQKbGYauzoTfORJw4estKUwpt 2CYnfZcZWlRo2q1uYAc4Jx+mWKQ1ztVRAdEGiWF/JjOd2elAXVsPSQZ92PUB1QU9 LMtYyF6oggNiuj4G/7qvTV2RoVWS1Oz8Tl76eUA4B/j7gRQEQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoQp4I3s8QusIlKHv8GpgYCMEz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjZkMjgyNTYtY2JmNS0z YjMxLTkxMGUtZTEwNjIzYWE4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJqGZOSWr3IflLG7Gdt9jiXWSsEWhT7lvRsL6n2BYxKqLES7ya7itwe 6lPoMS7fW2UpwmGZnftnZdgMxMiOvWSuYcCrcoxy5ZbsBdMseUtjnFpX4O85VuxS 9hG8QlMIJ2dK1zv/eaZEq2Mxbi6uKkWx6k4I787QNfP6+YvrPtIBZ9WfeaISMH9T UiViJyKp6qBN7dWf2iiTf9v8jT028apqiTl89Z1q3r82cEikI4g5apLBpLgXiyhC j156eQrufSUbUJsZPyymh4NGNtjsp2qZoL6A45Jbma4x5DMNc8dJgpmd2Cy2EoOz 9H80zIDspnydUoiiTEaVP11kxLrNMiY= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:23 2025 by rpki-client