$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6717b236-74f6-383b-8f04-03ec444e75ed.roa File: 6717b236-74f6-383b-8f04-03ec444e75ed.roa (raw, json) Hash identifier: ly5Go+2C/7OqeGpm/yfE55ORJlJYNqiJB/wts/THcSw= Subject key identifier: 18:25:A3:D7:0C:3E:81:46:3D:3E:FA:45:E8:B9:51:DB:46:0F:23:79 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849F17FC26806CE7D1FC1A52300 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6717b236-74f6-383b-8f04-03ec444e75ed.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 13576 IP address blocks: 66.128.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c2:68:06:ce:7d:1f:c1:a5:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=997eb734-e3a2-4e72-84f1-4b298230f0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:5e:17:a4:7c:ab:ab:df:97:bd:bb:d4:61: 54:72:72:ca:eb:3a:06:96:c3:49:cf:b4:df:2d:da: 48:2e:57:a0:2d:f2:46:15:c5:8f:e2:1c:e3:1e:ba: e4:4b:70:d3:a8:8c:0c:64:03:65:9f:71:b2:33:0d: c6:91:34:bf:0d:3d:8d:b1:b9:c8:40:f0:2e:1f:ca: d8:78:b8:c0:c1:47:71:bc:4f:43:cf:80:ab:3c:70: 7a:45:e1:ad:f2:fd:39:75:f5:00:86:65:86:a0:92: 17:db:35:cc:ca:d5:96:00:90:12:41:3d:3a:46:13: f7:1b:fe:5c:2a:20:3b:f4:08:31:24:cf:e4:c3:cd: c8:41:9c:62:4b:e8:a3:5a:68:1e:18:2a:87:0c:f9: c0:94:73:29:59:19:ac:71:3b:b9:96:17:b7:0d:75: 67:c3:32:b5:83:37:06:2b:6a:95:92:75:7f:49:92: 54:c0:62:86:cf:e3:23:4a:b5:cd:78:81:58:51:f8: 84:34:d8:d1:40:34:10:92:d4:c8:54:50:73:1e:77: 50:b4:27:e3:5b:7f:6f:cb:33:65:64:b9:75:ec:87: 35:54:91:18:eb:bd:2b:a8:d9:de:2c:3a:02:1c:6d: 2e:cf:1f:67:e7:53:40:29:cc:7e:d2:2d:e6:57:e8: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:25:A3:D7:0C:3E:81:46:3D:3E:FA:45:E8:B9:51:DB:46:0F:23:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6717b236-74f6-383b-8f04-03ec444e75ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:2e:a9:0c:8f:80:b4:34:7b:9b:20:7e:f4:1e:6b:ab:68:aa: be:10:ff:3b:b2:28:c1:39:7e:3d:b9:0c:fc:9b:b9:51:07:49: f7:a3:65:84:65:c3:cc:55:4a:c8:55:42:48:72:81:f8:eb:b1: 43:59:5f:6c:89:ac:ff:e0:9c:a1:67:a0:96:16:12:2e:6e:af: 87:33:fb:8e:42:02:dd:76:6c:6c:01:c7:20:ee:aa:88:69:7c: 8a:ab:93:09:71:a9:fc:5a:8f:4a:bd:26:1e:32:b3:8d:60:72: e2:2d:67:0e:2e:c3:48:e6:d7:b3:a1:fc:49:07:00:f1:19:a5: bd:35:61:f0:69:ba:c1:53:0f:6d:3e:a1:9f:9b:cd:2e:33:ac: 0a:6d:d8:8e:a7:8f:79:a6:99:5d:9b:dd:98:b4:9c:04:20:a9: a4:5b:19:50:b1:2a:e3:0a:c3:aa:9f:dc:24:95:76:dd:a2:ef: c4:ee:34:11:2c:7b:6f:00:0c:68:2a:cf:28:84:39:17:bb:fd: 8e:40:7f:e4:7b:a8:7c:a3:a2:c1:4c:88:74:f2:5d:c0:be:53: 4c:25:02:2d:11:22:89:8f:25:0a:17:58:93:0e:2a:75:25:68: d1:2c:15:05:d0:c1:4f:4f:91:3f:85:1b:ff:34:34:42:84:6b: 75:99:52:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8JoBs59H8GlIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OTk3ZWI3MzQtZTNhMi00ZTcyLTg0ZjEtNGIyOTgyMzBmMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMheF6R8q6vfl7271GFUcnLK6zoGlsNJz7Tf LdpILlegLfJGFcWP4hzjHrrkS3DTqIwMZANln3GyMw3GkTS/DT2NsbnIQPAuH8rY eLjAwUdxvE9Dz4CrPHB6ReGt8v05dfUAhmWGoJIX2zXMytWWAJASQT06RhP3G/5c KiA79AgxJM/kw83IQZxiS+ijWmgeGCqHDPnAlHMpWRmscTu5lhe3DXVnwzK1gzcG K2qVknV/SZJUwGKGz+MjSrXNeIFYUfiENNjRQDQQktTIVFBzHndQtCfjW39vyzNl ZLl17Ic1VJEY670rqNneLDoCHG0uzx9n51NAKcx+0i3mV+g72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBglo9cMPoFGPT76Rei5UdtGDyN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNjcxN2IyMzYtNzRmNi0z ODNiLThmMDQtMDNlYzQ0NGU3NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0uqQyPgLQ0e5sgfvQea6toqr4Q/zuyKME5fj25DPybuVEHSfejZYRl w8xVSshVQkhygfjrsUNZX2yJrP/gnKFnoJYWEi5ur4cz+45CAt12bGwBxyDuqohp fIqrkwlxqfxaj0q9Jh4ys41gcuItZw4uw0jm17Oh/EkHAPEZpb01YfBpusFTD20+ oZ+bzS4zrApt2I6nj3mmmV2b3Zi0nAQgqaRbGVCxKuMKw6qf3CSVdt2i78TuNBEs e28ADGgqzyiEORe7/Y5Af+R7qHyjosFMiHTyXcC+U0wlAi0RIomPJQoXWJMOKnUl aNEsFQXQwU9PkT+FG/80NEKEa3WZUnQ= -----END CERTIFICATE-----Generated at Sun Jun 8 10:34:34 2025 by rpki-client