$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/6cb98a97-7fd6-3210-a587-bc220c0d976f.roa File: 6cb98a97-7fd6-3210-a587-bc220c0d976f.roa (raw, json) Hash identifier: nmxTE9wEC4AH1ikQ39P0fx+gnRaKqyzMPZ9GPQJ0/YQ= Subject key identifier: 44:2A:0D:64:26:0E:77:09:1F:28:3F:15:73:A8:29:69:E4:52:7C:FD Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F432858495529507A0AAA4CD61F887C00 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/6cb98a97-7fd6-3210-a587-bc220c0d976f.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 32329 IP address blocks: 66.179.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:50:7a:0a:aa:4c:d6:1f:88:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=9ec39ea0-44f3-4638-8336-dcfd52861efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8f:06:72:1d:e4:60:5b:d2:3b:66:72:f7:8b: 9a:cf:4b:8a:79:b5:71:b2:0a:38:6d:e9:ed:a2:a7: 1a:8c:58:72:95:ae:cf:2d:43:5a:cd:e1:8b:61:8a: bb:60:d4:b2:75:12:e4:46:e0:e4:4d:e9:89:29:86: 84:a9:cc:e5:67:8c:99:8e:34:d8:ec:1c:de:a9:45: 51:df:7e:e6:23:89:90:2c:55:42:ec:69:12:ab:4e: fe:71:46:69:42:6b:c0:75:72:5a:30:31:9b:0f:99: 44:9f:cc:7e:8d:68:40:d9:9a:45:31:65:2d:39:96: 98:b0:70:1d:a6:12:63:4f:14:6e:ed:25:a3:7a:6c: 99:1b:17:48:63:76:63:65:c8:31:45:59:d0:22:0f: 68:8d:8e:4d:e4:3f:c7:ea:9e:76:70:25:93:33:28: 4f:80:60:09:90:bb:7f:3a:a1:43:4f:1d:74:65:a4: ff:36:46:60:f9:26:64:1e:5f:36:d3:b1:2e:78:9b: 5d:04:6d:a8:9c:f6:59:8b:4b:21:2e:5a:8e:89:3f: 9f:13:34:00:ed:ce:cf:d6:89:86:74:08:55:2c:93: 7b:d7:09:b9:31:80:7e:92:1a:2f:bc:cc:93:8c:66: 9a:e8:2d:b2:93:8b:09:11:72:4e:0c:f1:e1:51:15: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:0D:64:26:0E:77:09:1F:28:3F:15:73:A8:29:69:E4:52:7C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/6cb98a97-7fd6-3210-a587-bc220c0d976f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 66.179.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e2:14:e6:cc:e8:59:09:9a:4f:5d:01:9a:86:92:89:f4:e6: 4c:1e:0b:43:2e:e0:6c:b7:ae:0f:42:9d:b7:d6:4a:2b:59:4b: bd:84:1e:ab:1d:2f:06:07:e9:62:0a:ea:60:ff:20:40:3e:f2: f2:d4:e9:14:93:31:b3:50:10:ca:4e:84:a5:d9:00:5c:84:cc: 3f:b5:bd:bd:f9:d1:dc:81:71:e7:6e:d4:35:50:27:2a:cd:4f: 33:ae:d3:d5:da:71:bd:80:63:ce:8d:6d:0a:4a:41:cc:41:58: 45:00:c0:9c:6d:b2:b1:74:75:da:f0:5a:f4:4a:57:4b:cc:d6: 29:ce:df:44:b7:e3:6a:29:c8:0f:65:d4:24:a7:9b:36:29:ec: 50:1f:da:af:74:34:d3:9c:dd:19:e1:0d:f2:2d:a5:0f:01:99: ec:f0:6e:c8:fd:71:92:31:29:d2:25:08:79:02:1c:bd:a4:f7: d1:dc:e3:db:04:b2:b5:41:73:68:80:21:d4:c4:cb:35:3a:f6: 84:da:59:92:a9:9a:d2:5d:7e:a5:88:1f:55:97:f4:b4:03:eb: 3b:ce:5d:d7:a5:79:12:03:63:e2:35:3f:fc:d4:d7:14:df:b7: f0:42:35:a2:1a:2f:9b:33:88:8b:e2:8b:46:a6:02:3c:a0:5e: 9c:9c:b2:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVB6CqpM1h+IfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk OWVjMzllYTAtNDRmMy00NjM4LTgzMzYtZGNmZDUyODYxZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY8Gch3kYFvSO2Zy94uaz0uKebVxsgo4bent oqcajFhyla7PLUNazeGLYYq7YNSydRLkRuDkTemJKYaEqczlZ4yZjjTY7BzeqUVR 337mI4mQLFVC7GkSq07+cUZpQmvAdXJaMDGbD5lEn8x+jWhA2ZpFMWUtOZaYsHAd phJjTxRu7SWjemyZGxdIY3ZjZcgxRVnQIg9ojY5N5D/H6p52cCWTMyhPgGAJkLt/ OqFDTx10ZaT/NkZg+SZkHl8207EueJtdBG2onPZZi0shLlqOiT+fEzQA7c7P1omG dAhVLJN71wm5MYB+khovvMyTjGaa6C2yk4sJEXJODPHhURVzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQqDWQmDncJHyg/FXOoKWnkUnz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvNmNiOThhOTctN2ZkNi0z MjEwLWE1ODctYmMyMjBjMGQ5NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLiFObM6FkJmk9dAZqGkon05kweC0Mu4Gy3rg9CnbfWSitZS72EHqsd LwYH6WIK6mD/IEA+8vLU6RSTMbNQEMpOhKXZAFyEzD+1vb350dyBcedu1DVQJyrN TzOu09Xacb2AY86NbQpKQcxBWEUAwJxtsrF0ddrwWvRKV0vM1inO30S342opyA9l 1CSnmzYp7FAf2q90NNOc3RnhDfItpQ8Bmezwbsj9cZIxKdIlCHkCHL2k99Hc49sE srVBc2iAIdTEyzU69oTaWZKpmtJdfqWIH1WX9LQD6zvOXdeleRIDY+I1P/zU1xTf t/BCNaIaL5sziIvii0amAjygXpycsmU= -----END CERTIFICATE-----Generated at Sat Apr 12 12:42:21 2025 by rpki-client