$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa File: c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa (raw, json) Hash identifier: IKpXZB4u+o4ncMiZCRikxJu0/flMPbuYM53ySMcjE+8= Subject key identifier: 14:B0:D2:55:A5:D7:48:53:AF:64:01:6E:CE:8B:45:08:CE:DC:3B:FF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A480AE90A72857C590D4F45C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 395037 IP address blocks: 66.128.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e9:0a:72:85:7c:59:0d:4f:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=6271cf84-2b68-4025-8885-7e5ee01ed282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:6c:1e:8e:08:10:bd:e3:89:7d:67:fb:6f: fb:fa:c0:77:79:b3:2c:ab:73:52:cc:42:b2:82:36: 34:70:d8:46:e2:a8:e9:d3:44:9f:5f:1b:bf:f2:f0: 1b:72:c6:1f:ef:fd:97:f1:95:d6:0a:c4:f0:d5:83: 3e:f3:af:1b:92:b2:df:75:27:07:ff:1f:59:2e:f7: 43:9d:74:0b:1d:20:a0:92:c5:a2:df:ea:1c:a7:91: ac:4b:cc:53:7f:39:27:09:97:db:b3:47:9b:06:e2: dc:d4:fe:df:58:b4:d4:14:41:e6:cf:77:d8:a3:d3: 45:20:36:1c:1a:04:ca:cb:7d:f8:35:30:03:56:d9: bd:f9:40:9a:b6:88:07:a6:99:1d:8d:de:70:06:06: 0d:a8:d2:3e:a0:82:c6:57:f0:dd:fe:77:d7:25:3c: 27:bf:55:7d:8d:e3:0c:f1:29:52:2a:c1:c9:10:20: 14:05:74:d8:91:3c:68:a2:99:58:25:ef:d5:86:7d: 87:97:d3:4b:af:57:97:e2:c5:4b:3f:b7:54:67:dc: 56:6a:ff:ff:f7:e9:c1:6d:91:ba:a3:4e:04:c9:e2: f3:65:61:bb:b2:03:59:71:ab:ed:73:a7:5e:0b:3c: be:c1:2f:0d:7f:1b:58:e8:a7:19:3c:bf:d9:5c:73: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:D2:55:A5:D7:48:53:AF:64:01:6E:CE:8B:45:08:CE:DC:3B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:57:99:28:57:a0:de:4b:80:e1:cc:96:3a:54:a5:8f:20:f0: 22:c8:6f:00:52:da:c3:4f:69:a6:a0:1b:5f:3f:11:07:36:4c: d5:5c:eb:ff:7e:01:e5:dc:ef:1c:da:cd:5f:b6:8f:bc:f1:ae: ae:a3:01:cd:98:eb:2d:1a:f3:eb:80:73:4e:c2:2d:75:1d:ae: a4:84:2b:3f:e6:4d:15:66:31:85:14:5d:ec:c2:d2:1d:74:e3: 2d:21:ba:b9:2d:a9:fc:dd:62:fc:e2:2b:e5:90:c3:31:7b:91: 87:ef:62:05:a3:8f:e6:a7:cd:a5:e5:a1:11:f9:c2:9a:7d:f4: 7e:a9:62:90:72:5f:9e:e5:a9:10:0b:49:a9:48:22:8c:78:c7: c9:b0:b5:0e:36:06:16:bd:ae:d1:27:26:cc:f3:8b:41:b1:08: 3a:a7:5b:1d:c7:52:e0:9a:3c:92:db:8c:78:19:20:05:f5:ae: 70:b8:ad:50:e2:20:3f:09:81:43:2e:14:38:f6:d1:bc:a5:4a: 8f:c7:d7:b1:78:01:26:18:75:f2:e4:95:6b:fe:96:67:ac:d4: b1:ef:b9:b6:b2:82:a3:c2:bd:11:4e:4f:c6:ea:b8:ae:d7:5e: ac:5b:bd:26:03:1e:27:09:6e:03:dd:ec:a1:83:d6:e0:ac:ad: 95:7f:e2:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICukKcoV8WQ1PRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk NjI3MWNmODQtMmI2OC00MDI1LTg4ODUtN2U1ZWUwMWVkMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMtsHo4IEL3jiX1n+2/7+sB3ebMsq3NSzEKy gjY0cNhG4qjp00SfXxu/8vAbcsYf7/2X8ZXWCsTw1YM+868bkrLfdScH/x9ZLvdD nXQLHSCgksWi3+ocp5GsS8xTfzknCZfbs0ebBuLc1P7fWLTUFEHmz3fYo9NFIDYc GgTKy334NTADVtm9+UCatogHppkdjd5wBgYNqNI+oILGV/Dd/nfXJTwnv1V9jeMM 8SlSKsHJECAUBXTYkTxooplYJe/Vhn2Hl9NLr1eX4sVLP7dUZ9xWav//9+nBbZG6 o04EyeLzZWG7sgNZcavtc6deCzy+wS8NfxtY6KcZPL/ZXHOPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSw0lWl10hTr2QBbs6LRQjO3Dv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzhlYWU5Y2EtNjllZS0z ZTZiLWI5YmUtY2Q2MGE4ZGM4NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFXmShXoN5LgOHMljpUpY8g8CLIbwBS2sNPaaagG18/EQc2TNVc6/9+ AeXc7xzazV+2j7zxrq6jAc2Y6y0a8+uAc07CLXUdrqSEKz/mTRVmMYUUXezC0h10 4y0hurktqfzdYvziK+WQwzF7kYfvYgWjj+anzaXloRH5wpp99H6pYpByX57lqRAL SalIIox4x8mwtQ42Bha9rtEnJszzi0GxCDqnWx3HUuCaPJLbjHgZIAX1rnC4rVDi ID8JgUMuFDj20bylSo/H17F4ASYYdfLklWv+lmes1LHvubaygqPCvRFOT8bquK7X XqxbvSYDHicJbgPd7KGD1uCsrZV/4rk= -----END CERTIFICATE-----Generated at Wed Jul 9 11:32:20 2025 by rpki-client