$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0942768f-4820-3c6e-b27d-b1612c25d11a.roa File: 0942768f-4820-3c6e-b27d-b1612c25d11a.roa (raw, json) Hash identifier: A9UOgWnTAsJCslNRLNxR+HpVfC77vod6U8f0odiavrk= Subject key identifier: 94:9D:92:A0:F7:ED:D3:BB:C0:C8:B3:CC:1F:97:9D:53:E9:34:1B:A1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B64028A460C5B94D6F60300 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0942768f-4820-3c6e-b27d-b1612c25d11a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 66.115.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:02:8a:46:0c:5b:94:d6:f6:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=9d3c9a7b-d5b7-4cc6-b6fb-06da5c3b3a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:9c:8c:14:4e:8f:27:88:a2:e3:d4:e4:12: 25:dc:6b:15:21:04:cd:41:7e:2d:b1:7e:33:95:35: e4:38:8d:ba:d6:8e:50:00:af:ab:a9:95:83:11:00: 8c:70:dc:74:5c:6d:9d:26:37:ac:45:08:77:39:37: 6b:f7:8c:91:32:c4:b5:2a:e8:8a:eb:b6:3f:70:08: 4b:55:39:f0:33:bc:a6:1d:fc:fa:8d:6c:47:26:42: 31:fe:24:39:84:3c:34:c4:57:e5:79:66:2a:79:c5: b8:58:32:b0:96:d7:ec:fe:e0:f3:ac:83:96:46:38: 3c:2f:fc:61:86:e8:a7:68:9a:92:4f:64:2a:72:e3: cb:3f:08:96:65:34:71:b5:e6:9c:c9:d5:bb:11:6f: 09:60:15:11:95:8a:62:6a:1b:e4:d7:90:d4:9e:1c: a2:41:23:b6:03:65:93:3c:74:4f:be:67:12:5b:69: ab:df:49:99:ba:d6:48:e3:e2:b3:f3:0c:23:ca:78: c2:22:b0:25:14:66:7a:c7:2f:1a:a4:63:5e:b5:05: 03:74:e2:98:33:93:a1:58:4b:21:57:3f:7f:21:85: 6f:2f:b8:df:c9:73:a0:e4:4f:77:8c:b5:04:22:ee: c1:c2:24:0c:26:80:8b:72:07:fe:97:7a:c9:e6:32: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:92:A0:F7:ED:D3:BB:C0:C8:B3:CC:1F:97:9D:53:E9:34:1B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0942768f-4820-3c6e-b27d-b1612c25d11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:be:b6:3f:c6:1c:b7:bb:08:91:62:11:f8:1e:55:6a:e6:fd: f7:33:ab:fb:2a:aa:99:5e:7d:3c:38:e1:ac:5b:d8:89:7f:81: 5d:33:af:0c:52:f0:0e:f8:d3:16:81:e0:56:94:d1:6a:7c:59: 0f:f5:dc:ec:7f:b3:42:14:bf:df:03:01:40:16:83:28:dc:b8: 4d:eb:f6:dc:eb:2a:70:06:cb:42:51:68:50:7c:cb:b6:d6:1e: c9:9e:57:86:31:16:17:dc:12:27:ab:7d:22:4d:bd:e0:39:a8: 86:9e:a1:6f:26:2e:d8:20:e0:67:e9:2a:4d:87:1a:39:16:8c: c4:85:79:73:8d:a3:e1:04:a3:49:94:a2:c7:bb:e4:5a:97:5a: 11:02:d8:a1:fc:d6:ab:f3:7f:20:57:bd:4f:dc:61:c9:a1:27: 59:2b:36:0b:c7:27:a4:0d:c2:ae:1b:c7:27:93:97:67:b0:11: ed:16:18:71:7c:48:da:b2:17:6d:5f:ac:64:19:8b:44:b0:57: b9:23:60:92:fd:d8:9e:f9:15:f2:57:ef:0f:0c:b7:b9:b1:a1: 38:c8:88:94:67:a7:f2:c5:11:a0:e1:69:e8:c6:f2:d0:e4:18: 27:6b:99:ba:33:69:15:e6:74:d5:d8:fa:27:57:c3:3d:31:94: 05:8f:10:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAKKRgxblNb2AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OWQzYzlhN2ItZDViNy00Y2M2LWI2ZmItMDZkYTVjM2IzYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWycjBROjyeIouPU5BIl3GsVIQTNQX4tsX4z lTXkOI261o5QAK+rqZWDEQCMcNx0XG2dJjesRQh3OTdr94yRMsS1KuiK67Y/cAhL VTnwM7ymHfz6jWxHJkIx/iQ5hDw0xFfleWYqecW4WDKwltfs/uDzrIOWRjg8L/xh huinaJqST2QqcuPLPwiWZTRxteacydW7EW8JYBURlYpiahvk15DUnhyiQSO2A2WT PHRPvmcSW2mr30mZutZI4+Kz8wwjynjCIrAlFGZ6xy8apGNetQUDdOKYM5OhWEsh Vz9/IYVvL7jfyXOg5E93jLUEIu7BwiQMJoCLcgf+l3rJ5jKKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSdkqD37dO7wMizzB+XnVPpNBuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDk0Mjc2OGYtNDgyMC0z YzZlLWIyN2QtYjE2MTJjMjVkMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQnPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe+tj/GHLe7CJFiEfgeVWrm/fczq/sqqplefTw44axb2Il/gV0zrwxS 8A740xaB4FaU0Wp8WQ/13Ox/s0IUv98DAUAWgyjcuE3r9tzrKnAGy0JRaFB8y7bW HsmeV4YxFhfcEierfSJNveA5qIaeoW8mLtgg4GfpKk2HGjkWjMSFeXONo+EEo0mU ose75FqXWhEC2KH81qvzfyBXvU/cYcmhJ1krNgvHJ6QNwq4bxyeTl2ewEe0WGHF8 SNqyF21frGQZi0SwV7kjYJL92J75FfJX7w8Mt7mxoTjIiJRnp/LFEaDhaejG8tDk GCdrmbozaRXmdNXY+idXwz0xlAWPEBU= -----END CERTIFICATE-----Generated at Sun Apr 6 21:26:04 2025 by rpki-client