$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa File: 1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa (raw, json) Hash identifier: tZepjbcfQAgEYpwbvuc0Och9obswzLzETok5I/RkpyE= Subject key identifier: 6E:87:12:BF:D9:12:34:5F:36:A6:79:58:D2:52:20:89:7F:E1:83:53 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849F17FC1CF1D0A30612AB6ADE8 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 13576 IP address blocks: 66.128.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c1:cf:1d:0a:30:61:2a:b6:ad:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=0272c744-ed0a-4441-ba5f-f28cbda6c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:d4:37:92:45:cd:aa:b6:dd:92:ee:66:71: 3d:c9:cb:25:8b:97:27:63:01:d4:21:ec:70:97:1b: 49:c0:5e:a4:1f:c0:dc:b6:1a:e8:a1:b6:16:f0:22: f2:f1:47:06:02:cd:32:2e:4d:00:87:c6:22:4b:35: cc:56:29:01:8d:3b:97:48:20:dc:3f:2d:d3:24:3e: 4c:d5:fd:c8:ca:c7:b5:5c:3a:8d:6e:6c:72:06:f9: 9e:a7:3d:ee:20:73:9a:f8:fe:5c:e5:ab:3c:8d:0d: d1:8e:0f:ea:e3:51:35:c4:40:c2:3f:62:e8:4a:d7: 64:31:5d:dc:b3:8b:7a:a9:77:26:05:33:61:c5:97: b3:9d:21:d3:8e:51:03:ba:40:48:82:fa:93:cc:4c: 7e:9d:22:d8:66:25:42:9a:3f:78:9e:be:64:87:84: 5e:fa:38:3f:29:89:26:ee:b0:67:06:d2:4d:b5:98: 5e:a6:cb:b3:01:ef:af:ea:67:b8:4f:19:ed:b0:b4: eb:da:61:35:ba:69:f7:4c:f7:ff:15:86:49:1c:e0: 28:63:77:08:0e:fc:0a:0e:86:48:8d:79:50:c0:48: 88:e0:a3:9f:c3:be:50:ba:45:d2:64:ad:ee:fb:33: b6:30:79:ef:47:79:93:12:fb:10:f5:a7:27:c7:fc: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:87:12:BF:D9:12:34:5F:36:A6:79:58:D2:52:20:89:7F:E1:83:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4b:b7:3b:20:e3:0f:ec:24:73:10:f1:83:ef:6c:ed:d4:4f: 20:50:63:48:a6:c3:61:01:0a:21:08:4d:2c:23:80:a6:77:e7: 1c:26:a6:53:27:09:65:4b:a6:fe:8e:c9:41:36:af:74:d1:28: 22:a4:fa:e9:d4:06:3e:4c:32:d1:32:c3:f1:40:49:5b:57:da: 6d:00:43:27:f3:01:d4:6f:db:56:5a:37:7f:5f:3e:cb:97:d9: 29:ce:8c:8c:0f:29:98:df:3e:de:7d:67:c3:e8:a8:92:e5:93: a7:5c:43:9b:ac:82:7f:92:3c:16:62:54:d9:57:1a:a6:f7:e2: 28:6a:1b:b0:87:8c:55:85:ea:bf:bd:2f:fa:38:cf:eb:24:11: ba:92:56:c5:dd:9e:7c:ea:4d:cb:46:39:b1:5b:ed:2f:08:d4: da:51:af:a6:40:d0:bd:f0:c6:52:20:e3:01:56:82:b2:6d:81: 23:b9:14:6f:09:a7:aa:cd:84:ad:24:01:9e:0a:32:dc:36:ef: 50:ac:b0:af:c4:3d:98:ab:ee:b1:e2:6b:f6:04:f5:34:89:0f: 7e:fe:0f:3d:1f:32:33:5f:1c:e8:99:b8:6f:4b:6c:72:d3:c8: 92:97:33:4f:01:50:8a:e3:ef:99:fb:ee:be:cb:93:41:d5:07: 29:69:40:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8HPHQowYSq2regwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MDI3MmM3NDQtZWQwYS00NDQxLWJhNWYtZjI4Y2JkYTZjNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynnUN5JFzaq23ZLuZnE9ycsli5cnYwHUIexw lxtJwF6kH8DcthroobYW8CLy8UcGAs0yLk0Ah8YiSzXMVikBjTuXSCDcPy3TJD5M 1f3Iyse1XDqNbmxyBvmepz3uIHOa+P5c5as8jQ3Rjg/q41E1xEDCP2LoStdkMV3c s4t6qXcmBTNhxZeznSHTjlEDukBIgvqTzEx+nSLYZiVCmj94nr5kh4Re+jg/KYkm 7rBnBtJNtZhepsuzAe+v6me4TxntsLTr2mE1umn3TPf/FYZJHOAoY3cIDvwKDoZI jXlQwEiI4KOfw75QukXSZK3u+zO2MHnvR3mTEvsQ9acnx/wQjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6HEr/ZEjRfNqZ5WNJSIIl/4YNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWNhNmFjMzQtNjViMi0z YzEzLWEzYWItOTc2NjgxYzBiOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFLtzsg4w/sJHMQ8YPvbO3UTyBQY0imw2EBCiEITSwjgKZ35xwmplMn CWVLpv6OyUE2r3TRKCKk+unUBj5MMtEyw/FASVtX2m0AQyfzAdRv21ZaN39fPsuX 2SnOjIwPKZjfPt59Z8PoqJLlk6dcQ5usgn+SPBZiVNlXGqb34ihqG7CHjFWF6r+9 L/o4z+skEbqSVsXdnnzqTctGObFb7S8I1NpRr6ZA0L3wxlIg4wFWgrJtgSO5FG8J p6rNhK0kAZ4KMtw271CssK/EPZir7rHia/YE9TSJD37+Dz0fMjNfHOiZuG9LbHLT yJKXM08BUIrj75n77r7Lk0HVBylpQLU= -----END CERTIFICATE-----Generated at Sun Jun 8 05:09:46 2025 by rpki-client