$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa File: 22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa (raw, json) Hash identifier: mWqnYNT02Ep5cNT/6hFzzrYOPxWSFThGiEQC45SRef4= Subject key identifier: D2:99:95:4B:C0:78:94:4C:05:1E:5F:6C:13:A6:EF:C8:EA:92:EB:16 Certificate issuer: /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Certificate serial: 010D0C9F432858493A5C9FDFFF0515A38261378E Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa Signing time: Tue 18 Mar 2025 10:37:20 +0000 ROA not before: Tue 18 Mar 2025 10:37:20 +0000 ROA not after: Mon 16 Jun 2025 10:37:20 +0000 asID: 29789 IP address blocks: 66.254.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:5c:9f:df:ff:05:15:a3:82:61:37:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Validity Not Before: Mar 18 10:37:20 2025 GMT Not After : Jun 16 10:37:20 2025 GMT Subject: CN=284dbd46-cb6e-4136-81ae-d5fbddf57b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:b3:ba:f6:1d:b5:a0:86:b3:5c:5a:2a:e0: b8:21:92:fc:b4:73:1e:c4:23:27:5c:57:83:19:c3: 11:73:63:81:55:b0:dd:15:97:41:5a:1c:0c:17:a3: e7:9d:7a:8c:4a:49:d4:99:63:1a:ce:62:cf:91:66: 8e:87:d5:b0:87:95:f0:3e:53:0d:92:ca:aa:64:0a: 05:b6:64:3e:a7:72:ca:7c:63:68:9e:10:ae:14:25: 33:11:25:89:84:f2:07:f2:74:fd:06:2f:14:36:c8: 7c:89:fa:48:7b:c9:a9:24:d7:81:0e:92:f3:3b:23: 8a:a5:95:dd:50:ba:3e:5b:6b:bd:88:4e:96:08:4a: 91:b3:af:36:b3:f3:ab:a7:e1:cf:2d:44:01:ac:f9: bd:2b:2c:f2:44:3a:40:5b:da:eb:b9:c3:02:a0:50: f0:ec:b3:3d:23:2f:33:00:3e:78:b7:3b:fb:ab:5d: 90:4e:12:5f:b4:6d:e3:2f:ad:c4:bf:89:5f:e1:56: dd:ca:57:8c:42:80:16:79:10:ae:0a:54:a8:48:31: e4:c6:ad:4d:c0:d6:bc:ec:72:15:7c:91:a4:e8:87: b3:25:20:a9:4a:b0:e9:35:3b:76:04:ad:e2:2a:7c: d4:77:5e:7b:10:38:4d:76:04:fc:9c:9c:8d:9d:de: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:99:95:4B:C0:78:94:4C:05:1E:5F:6C:13:A6:EF:C8:EA:92:EB:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/22a52b37-56b5-3343-98d8-ac658dd9d9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl X509v3 Authority Key Identifier: keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer sbgp-ipAddrBlock: critical IPv4: 66.254.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:48:5b:de:eb:af:3d:95:db:d7:2c:12:51:67:1c:a7:1f:99: e8:61:0d:bd:21:dc:6c:95:48:76:19:93:68:79:8b:a8:7a:87: 9e:b7:e3:30:95:a4:1f:9c:89:d2:a7:de:c3:3d:f3:8a:84:01: 06:4f:f7:7d:78:df:53:f7:d8:68:99:10:7e:54:60:64:40:14: f4:9f:01:92:77:11:bc:47:9d:e6:88:8e:85:a8:eb:ae:f0:f0: 97:13:8a:af:d1:66:d2:97:ee:f4:58:f0:e8:95:90:01:67:7f: c5:f5:53:d2:b7:6a:2e:07:5c:77:02:43:79:2e:f1:f1:9c:ae: 9c:f9:28:f1:a8:d2:93:d3:d5:ad:53:2f:e5:36:b8:91:6d:e9: 8d:50:a6:47:e8:10:e5:bf:1a:d7:74:e6:32:40:29:a4:b7:64: 15:f4:e4:31:b4:a3:ad:58:90:a5:0c:2a:93:01:f6:76:4a:5c: d2:3d:ba:90:a1:a1:ef:4a:1a:12:5c:16:68:ab:2c:91:95:65: 1e:f7:30:6a:3b:c6:0e:d6:55:0d:be:bb:7a:7d:5a:c5:6c:f6: 06:23:29:68:a9:66:c5:9e:fb:6c:87:84:21:32:79:0c:94:6d: ad:26:c9:ba:ae:67:57:56:53:ea:13:3f:5d:57:7d:4c:d3:bd: bd:23:b6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6XJ/f/wUVo4JhN44wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2 YTljMB4XDTI1MDMxODEwMzcyMFoXDTI1MDYxNjEwMzcyMFowLzEtMCsGA1UEAxMk Mjg0ZGJkNDYtY2I2ZS00MTM2LTgxYWUtZDVmYmRkZjU3YjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu82zuvYdtaCGs1xaKuC4IZL8tHMexCMnXFeD GcMRc2OBVbDdFZdBWhwMF6PnnXqMSknUmWMazmLPkWaOh9Wwh5XwPlMNksqqZAoF tmQ+p3LKfGNonhCuFCUzESWJhPIH8nT9Bi8UNsh8ifpIe8mpJNeBDpLzOyOKpZXd ULo+W2u9iE6WCEqRs682s/Orp+HPLUQBrPm9KyzyRDpAW9rrucMCoFDw7LM9Iy8z AD54tzv7q12QThJftG3jL63Ev4lf4VbdyleMQoAWeRCuClSoSDHkxq1NwNa87HIV fJGk6IezJSCpSrDpNTt2BK3iKnzUd157EDhNdgT8nJyNnd7CbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKZlUvAeJRMBR5fbBOm78jqkusWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvMjJhNTJiMzctNTZiNS0z MzQzLTk4ZDgtYWM2NThkZDlkOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv5zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5IW97rrz2V29csElFnHKcfmehhDb0h3GyVSHYZk2h5i6h6h5634zCV pB+cidKn3sM984qEAQZP931431P32GiZEH5UYGRAFPSfAZJ3EbxHneaIjoWo667w 8JcTiq/RZtKX7vRY8OiVkAFnf8X1U9K3ai4HXHcCQ3ku8fGcrpz5KPGo0pPT1a1T L+U2uJFt6Y1QpkfoEOW/Gtd05jJAKaS3ZBX05DG0o61YkKUMKpMB9nZKXNI9upCh oe9KGhJcFmirLJGVZR73MGo7xg7WVQ2+u3p9WsVs9gYjKWipZsWe+2yHhCEyeQyU ba0mybquZ1dWU+oTP11XfUzTvb0jths= -----END CERTIFICATE-----Generated at Sat Apr 12 13:20:00 2025 by rpki-client