$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa File: 72016e7f-3aa6-391b-8024-3697c967554c.roa (raw, json) Hash identifier: m6K8zQi2UfatxIo7/d7zI2UlhM/0rqD4Yx50SO/QlwU= Subject key identifier: 21:9D:A3:F9:B0:2C:0D:41:54:70:0D:4B:F6:C0:69:D8:CE:56:C1:36 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A050A79A03EB7C0E1BB637880 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 13576 IP address blocks: 66.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:79:a0:3e:b7:c0:e1:bb:63:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=2c9bb081-a689-4cf8-bd3b-e1f83b9cdce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:c0:3e:3e:42:91:ae:e1:d1:70:b5:bb:34: 0b:69:da:8f:bd:35:23:60:91:6e:bf:42:dc:b0:2a: e2:a6:5c:ab:98:32:a3:53:6d:cc:6d:75:fc:90:92: 0e:54:7d:5f:66:98:44:f7:a9:7d:bc:e0:ee:00:a7: 3e:d3:15:75:c2:da:15:1c:65:40:b0:e3:ea:02:d3: 12:9c:6c:33:57:8e:2e:dc:de:0b:bc:3b:e1:7b:a3: b3:fa:cf:f1:8c:4b:69:3b:4e:cb:29:71:98:e2:85: 1d:c9:98:99:37:ef:82:0f:39:bc:9b:45:86:e9:f0: fc:fa:b4:ce:87:0d:43:11:00:d7:17:a8:63:88:62: 36:13:d2:6d:23:44:f5:38:d9:dc:4e:3f:43:89:a0: 69:c4:26:2a:6a:39:06:35:6b:4c:63:7f:84:46:bf: cc:48:51:e6:fe:55:43:11:24:79:c4:e4:a3:32:81: 37:2b:76:64:15:63:c3:4c:b7:fb:e0:7a:da:3e:7b: de:93:3a:4d:98:b9:df:cb:66:4f:f8:70:dc:cd:b9: c2:0f:d4:56:0f:11:46:be:7b:98:fd:9c:64:41:13: 55:ff:8a:1f:f8:c1:a6:20:fc:c2:49:d6:e6:01:b8: 78:9e:02:19:2a:bf:a7:15:49:44:28:1c:74:9c:bf: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9D:A3:F9:B0:2C:0D:41:54:70:0D:4B:F6:C0:69:D8:CE:56:C1:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:47:a0:98:92:ef:6c:11:f3:27:b8:18:67:23:98:59:85:ef: ae:34:27:1e:67:94:eb:5d:23:74:0f:83:bd:38:71:f7:7f:4b: ca:40:6f:68:e7:af:a3:0b:92:9f:16:bc:cd:c0:f0:a1:52:5e: 14:7c:66:75:88:86:2a:32:62:cc:c6:7a:cd:b4:40:72:7f:76: e4:c3:53:e5:b5:c4:d5:3c:a2:cd:69:6b:0f:ce:37:9a:b0:b1: 0d:8d:7a:2a:c2:2b:a3:27:62:d5:eb:03:f3:4b:cd:9e:b3:1b: e9:a0:bc:1b:d8:6a:df:d4:48:64:da:aa:e6:ea:13:4c:a3:17: dd:7e:7b:c0:d3:d8:ab:16:38:d6:70:80:68:d0:dc:2d:36:cb: 85:79:79:8e:18:e3:43:4c:d8:62:96:a8:e2:cc:d8:ea:c0:12: e9:e1:59:a5:70:cd:73:54:95:b8:26:5d:4f:99:2e:b7:2d:54: 04:b4:bb:f3:7a:dc:a2:18:9d:06:86:49:be:42:e2:4c:12:70: 90:91:58:31:fa:70:a3:fa:7a:ca:88:81:45:9f:57:b3:04:1b: 5e:eb:54:0d:70:03:8e:fb:31:76:e2:77:40:28:40:a3:80:da: 94:9b:5e:46:3a:73:46:96:b1:9f:b4:30:4f:38:7c:7e:4f:3d: fb:26:1e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnmgPrfA4btjeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MmM5YmIwODEtYTY4OS00Y2Y4LWJkM2ItZTFmODNiOWNkY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmnAPj5Cka7h0XC1uzQLadqPvTUjYJFuv0Lc sCriplyrmDKjU23MbXX8kJIOVH1fZphE96l9vODuAKc+0xV1wtoVHGVAsOPqAtMS nGwzV44u3N4LvDvhe6Oz+s/xjEtpO07LKXGY4oUdyZiZN++CDzm8m0WG6fD8+rTO hw1DEQDXF6hjiGI2E9JtI0T1ONncTj9DiaBpxCYqajkGNWtMY3+ERr/MSFHm/lVD ESR5xOSjMoE3K3ZkFWPDTLf74HraPnvekzpNmLnfy2ZP+HDczbnCD9RWDxFGvnuY /ZxkQRNV/4of+MGmIPzCSdbmAbh4ngIZKr+nFUlEKBx0nL+/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGdo/mwLA1BVHANS/bAadjOVsE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzIwMTZlN2YtM2FhNi0z OTFiLTgwMjQtMzY5N2M5Njc1NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRHoJiS72wR8ye4GGcjmFmF7640Jx5nlOtdI3QPg704cfd/S8pAb2jn r6MLkp8WvM3A8KFSXhR8ZnWIhioyYszGes20QHJ/duTDU+W1xNU8os1paw/ON5qw sQ2NeirCK6MnYtXrA/NLzZ6zG+mgvBvYat/USGTaqubqE0yjF91+e8DT2KsWONZw gGjQ3C02y4V5eY4Y40NM2GKWqOLM2OrAEunhWaVwzXNUlbgmXU+ZLrctVAS0u/N6 3KIYnQaGSb5C4kwScJCRWDH6cKP6esqIgUWfV7MEG17rVA1wA477MXbid0AoQKOA 2pSbXkY6c0aWsZ+0ME84fH5PPfsmHpA= -----END CERTIFICATE-----Generated at Sun Jun 8 05:10:35 2025 by rpki-client