$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa File: afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa (raw, json) Hash identifier: gU4/5WOJ+BjN0EmUC9zL9XQ8kPtuBiJ7lHe1Bi//dXg= Subject key identifier: E5:E8:A0:C1:35:C6:65:D4:41:52:99:63:6F:4D:C8:B6:A2:A0:B9:1A Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584A0C054F145A6944BA747886C0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 398351 IP address blocks: 66.51.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4f:14:5a:69:44:ba:74:78:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=04ca369c-0370-4a9f-aab7-f735bd0e0c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:65:51:36:a9:b9:30:91:75:bf:93:c4:2a: 56:77:a9:84:e9:78:73:3b:77:4f:a4:14:a7:8e:d1: 3f:84:ac:fb:e8:61:93:81:99:a4:01:50:0f:83:7c: 28:d5:f4:d9:08:55:83:54:b7:a8:66:55:86:ca:af: 72:58:e8:f4:f0:7d:0d:cd:68:37:c8:fe:1e:88:20: ca:cf:ab:f3:ba:1f:a2:07:af:a4:29:82:81:af:e0: 5f:78:b4:26:77:fa:2a:8c:3b:d3:3d:e0:60:40:0d: 04:24:16:e1:3f:85:32:da:fd:97:52:ca:c6:22:3a: 46:2c:bc:ec:e4:ef:1a:08:cb:b1:0f:bd:f5:ad:f0: 80:2e:4a:c9:0b:2b:d1:51:ac:03:04:ff:8b:36:c8: c3:d0:3d:c7:2b:c2:60:9f:09:90:81:d1:77:06:4e: 9a:f1:40:64:bd:15:89:43:e1:e3:dc:3a:b1:01:91: f0:dc:40:f9:9b:a7:ae:22:86:a5:d2:d4:82:a9:01: 83:f9:b2:e2:d9:24:0f:18:71:ba:23:a3:f4:86:db: 1f:c5:99:24:2a:d5:43:d7:e9:93:b2:b9:48:d9:72: 56:d8:11:b9:0c:a1:0e:02:27:25:63:f3:d5:f0:79: 70:14:b3:f8:ad:53:90:7b:20:e4:ac:5c:2f:a9:31: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:A0:C1:35:C6:65:D4:41:52:99:63:6F:4D:C8:B6:A2:A0:B9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.51.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d6:b7:1d:37:ab:5e:56:d2:af:2f:32:2d:99:1d:6a:11:92: e8:a3:f9:1a:de:37:19:7d:25:d3:68:86:0c:94:95:e0:53:e6: 7a:cc:82:89:eb:f8:45:77:48:40:3d:89:49:13:81:c2:e8:74: 84:5a:f8:41:9d:9f:9a:aa:9d:0a:b2:51:90:b1:7f:9a:d2:af: b5:05:ef:dc:50:81:3a:4e:7f:4e:cd:75:d4:3a:e0:93:97:f7: 11:91:72:7f:8e:58:7c:ff:3b:c7:3b:6f:dc:dd:99:e5:d0:d4: 5b:6d:d2:02:ec:50:38:f3:f3:a6:63:16:f1:cd:4f:5d:e5:62: d5:10:88:17:d8:99:e8:c4:42:7d:1f:23:51:f8:6f:b6:4c:9b: 0c:b4:dc:f6:6e:d8:b0:0d:4e:6a:6a:66:86:1b:25:02:d8:70: 32:26:6c:81:2b:04:ea:6e:e7:b8:73:dc:2b:85:c9:1f:18:0c: b8:bc:d5:1e:51:8e:d4:51:0d:d0:fe:70:20:27:41:e8:07:40: 40:b2:1d:a4:d1:70:a7:e4:59:d9:ef:45:fa:91:68:e3:73:26: fd:24:b8:35:f4:5d:cc:96:bf:67:1b:c6:ab:3f:df:7a:95:e0: c2:c6:b0:7f:4f:c6:73:2e:c7:5b:fb:99:fe:06:43:0e:6b:ec: 97:9e:ce:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBU8UWmlEunR4hsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MDRjYTM2OWMtMDM3MC00YTlmLWFhYjctZjczNWJkMGUwYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn01lUTapuTCRdb+TxCpWd6mE6XhzO3dPpBSn jtE/hKz76GGTgZmkAVAPg3wo1fTZCFWDVLeoZlWGyq9yWOj08H0NzWg3yP4eiCDK z6vzuh+iB6+kKYKBr+BfeLQmd/oqjDvTPeBgQA0EJBbhP4Uy2v2XUsrGIjpGLLzs 5O8aCMuxD731rfCALkrJCyvRUawDBP+LNsjD0D3HK8JgnwmQgdF3Bk6a8UBkvRWJ Q+Hj3DqxAZHw3ED5m6euIoal0tSCqQGD+bLi2SQPGHG6I6P0htsfxZkkKtVD1+mT srlI2XJW2BG5DKEOAiclY/PV8HlwFLP4rVOQeyDkrFwvqTHn4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXooME1xmXUQVKZY29NyLaioLkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYWZjYzE5NjMtMGI1Yi0z NjY5LThkNWQtNDg1Yjc3YWEzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLWtx03q15W0q8vMi2ZHWoRkuij+RreNxl9JdNohgyUleBT5nrMgonr +EV3SEA9iUkTgcLodIRa+EGdn5qqnQqyUZCxf5rSr7UF79xQgTpOf07NddQ64JOX 9xGRcn+OWHz/O8c7b9zdmeXQ1Ftt0gLsUDjz86ZjFvHNT13lYtUQiBfYmejEQn0f I1H4b7ZMmwy03PZu2LANTmpqZoYbJQLYcDImbIErBOpu57hz3CuFyR8YDLi81R5R jtRRDdD+cCAnQegHQECyHaTRcKfkWdnvRfqRaONzJv0kuDX0XcyWv2cbxqs/33qV 4MLGsH9PxnMux1v7mf4GQw5r7JeezmU= -----END CERTIFICATE-----Generated at Mon Jun 30 19:37:11 2025 by rpki-client