$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a8c94e0-3d80-3698-af46-a2dfbae4cb38.roa File: 3a8c94e0-3d80-3698-af46-a2dfbae4cb38.roa (raw, json) Hash identifier: sOvpWcXAM8o3fNpvpIx+//JRUVLkh5D9LoBNS8BdGgo= Subject key identifier: 12:5D:79:AE:7C:A5:FD:D4:14:AC:0A:07:F2:47:91:47:CD:2A:81:93 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A023FC52F01BD122BCD15A680 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a8c94e0-3d80-3698-af46-a2dfbae4cb38.roa Signing time: Thu 29 May 2025 01:00:50 +0000 ROA not before: Thu 29 May 2025 01:00:50 +0000 ROA not after: Wed 27 Aug 2025 01:00:50 +0000 asID: 17203 IP address blocks: 66.115.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:3f:c5:2f:01:bd:12:2b:cd:15:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 29 01:00:50 2025 GMT Not After : Aug 27 01:00:50 2025 GMT Subject: CN=2446989a-6c4f-46e3-b910-8099e7ca8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:c6:ad:6e:29:23:09:21:3f:39:51:37:3e: 4a:8c:41:c5:10:58:21:15:40:0f:e4:a4:6d:45:be: 6f:cb:58:a7:4f:15:0a:9d:16:10:3a:de:b3:38:2e: 9b:ce:b0:14:e1:f9:62:a5:6d:f8:b0:e5:2d:03:73: 0b:5c:a3:c7:d1:fe:bd:37:c5:d4:91:9d:5e:ac:f9: b5:4c:31:7b:7c:a3:c3:60:12:85:b4:49:cd:d6:fa: 80:73:84:c1:e1:19:0a:a5:b5:d7:c8:62:01:33:07: a9:aa:65:1b:5b:64:4d:b5:fe:e9:de:6a:c3:38:de: b8:74:a9:7f:63:d7:ae:fd:4c:b1:2d:2b:65:18:20: 2f:64:b8:aa:7e:71:0e:a7:8f:c3:5d:49:19:53:13: 8d:a9:6c:f8:07:12:d1:3c:01:4e:8c:12:86:e5:88: b9:0f:bb:18:1c:65:c3:d2:d1:1b:43:00:15:30:a4: a4:dd:a4:0c:dc:16:14:71:d1:3a:04:bd:96:2d:20: 3b:6f:5d:cc:0d:45:78:ae:d7:c1:81:0b:f8:3c:ab: 9e:b1:41:53:f9:d6:c5:0b:3d:e3:59:ee:12:6a:b8: 02:0e:04:71:fc:ce:57:79:29:88:7f:0b:f4:2a:8d: 64:3a:af:7f:ea:bf:cd:2b:e0:8b:cc:ba:d1:c1:60: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5D:79:AE:7C:A5:FD:D4:14:AC:0A:07:F2:47:91:47:CD:2A:81:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a8c94e0-3d80-3698-af46-a2dfbae4cb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b8:a5:d7:a1:1a:80:06:b2:66:a1:81:43:79:9f:1d:d2:7e: ea:71:d9:38:1a:03:bb:c6:c3:86:3e:d7:37:b0:b8:84:03:2b: 2d:a8:9e:c2:03:bd:4c:9e:bf:77:01:f0:1f:d3:d7:ef:30:06: a3:d4:ce:c0:e0:b3:36:11:44:94:16:c8:99:23:f0:c3:ed:6f: 88:07:d8:5b:ff:a0:cb:86:f5:31:4e:af:07:e3:8e:0e:64:a3: 30:cc:b3:2c:56:47:92:45:7b:81:ec:be:d0:29:4b:7b:f1:b5: c9:73:9b:4e:39:e9:5f:e3:6e:43:f0:13:fb:63:62:e4:84:54: 48:4f:9c:bd:e2:2d:c0:5b:9c:5b:05:4c:39:36:99:00:61:91: 03:6b:5d:55:09:3b:95:1f:a8:e5:1f:20:c9:19:ef:71:f2:3d: 27:ea:04:13:f5:f1:66:8c:38:cd:5e:3c:72:db:38:5a:59:42: 93:0a:83:cd:7c:05:fe:40:ed:7f:6c:a7:60:43:26:43:ba:c9: a6:f4:a3:c6:11:26:44:49:4e:f4:d8:21:af:2f:8f:7e:95:f2: 24:b1:f0:ae:f2:82:43:33:10:19:f7:b0:f9:7e:dc:37:27:aa: f4:14:51:2d:20:3d:5b:bc:72:be:65:76:df:84:0d:ed:6d:b8: 93:a4:3e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCP8UvAb0SK80VpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk MjQ0Njk4OWEtNmM0Zi00NmUzLWI5MTAtODA5OWU3Y2E4ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMHGrW4pIwkhPzlRNz5KjEHFEFghFUAP5KRt Rb5vy1inTxUKnRYQOt6zOC6bzrAU4flipW34sOUtA3MLXKPH0f69N8XUkZ1erPm1 TDF7fKPDYBKFtEnN1vqAc4TB4RkKpbXXyGIBMwepqmUbW2RNtf7p3mrDON64dKl/ Y9eu/UyxLStlGCAvZLiqfnEOp4/DXUkZUxONqWz4BxLRPAFOjBKG5Yi5D7sYHGXD 0tEbQwAVMKSk3aQM3BYUcdE6BL2WLSA7b13MDUV4rtfBgQv4PKuesUFT+dbFCz3j We4SargCDgRx/M5XeSmIfwv0Ko1kOq9/6r/NK+CLzLrRwWC4BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJdea58pf3UFKwKB/JHkUfNKoGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2E4Yzk0ZTAtM2Q4MC0z Njk4LWFmNDYtYTJkZmJhZTRjYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq4pdehGoAGsmahgUN5nx3Sfupx2TgaA7vGw4Y+1zewuIQDKy2onsID vUyev3cB8B/T1+8wBqPUzsDgszYRRJQWyJkj8MPtb4gH2Fv/oMuG9TFOrwfjjg5k ozDMsyxWR5JFe4HsvtApS3vxtclzm0456V/jbkPwE/tjYuSEVEhPnL3iLcBbnFsF TDk2mQBhkQNrXVUJO5UfqOUfIMkZ73HyPSfqBBP18WaMOM1ePHLbOFpZQpMKg818 Bf5A7X9sp2BDJkO6yab0o8YRJkRJTvTYIa8vj36V8iSx8K7ygkMzEBn3sPl+3Dcn qvQUUS0gPVu8cr5ldt+EDe1tuJOkPnM= -----END CERTIFICATE-----Generated at Wed Jul 9 11:26:16 2025 by rpki-client