$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/b5cd3131-83e9-3692-8091-5903443094cd.roa File: b5cd3131-83e9-3692-8091-5903443094cd.roa (raw, json) Hash identifier: L4yFDzk89+X8daa76Da8oG0kdcpR+QsqdKdrlol6L/A= Subject key identifier: 7D:5E:E6:53:7E:03:C8:F0:14:24:5B:86:ED:58:80:14:1F:81:82:6F Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584A15CA8E7E6CFA87C5911E8700 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/b5cd3131-83e9-3692-8091-5903443094cd.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 22351 IP address blocks: 66.36.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:8e:7e:6c:fa:87:c5:91:1e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=3cd83e8e-aa77-4db2-9f98-11b81fa83664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:e8:2c:60:bc:bd:6e:da:6c:1a:cf:80:20: 79:56:4d:c5:21:34:c2:86:23:a0:29:33:aa:21:47: 6d:d2:27:61:fb:2a:bd:63:41:ca:3d:96:df:ff:50: e0:bb:ea:6a:f7:16:12:70:db:68:32:1d:e2:5e:31: 97:f3:d1:e2:c7:96:c4:83:a0:4e:a7:df:72:02:7d: 1a:ac:d2:1c:10:66:e6:7c:71:7b:c5:84:df:08:09: 4d:d9:ce:03:65:0a:cb:9e:2f:f3:b4:5c:92:82:6d: ae:c5:56:96:55:f3:98:79:30:9c:25:3d:e5:1e:58: 91:63:10:33:62:44:67:d2:7b:c2:b5:8f:0c:0c:83: 50:ae:c2:46:7c:48:af:b9:3a:be:aa:94:94:c2:ad: 1e:7b:fd:1d:0f:a3:d0:0e:b8:71:8e:12:1c:a2:15: 9a:ae:22:02:1c:6a:d4:82:d6:10:de:d1:4f:f2:2c: 30:97:17:ef:ac:1a:69:a1:ae:e3:60:47:40:e8:00: 3e:9a:ad:cd:cb:3a:0b:ca:06:6d:e0:b0:f1:d3:8e: f7:bc:0c:e9:b3:08:8e:3c:8d:05:80:07:26:84:f6: d1:bd:c1:fe:37:67:b3:9d:06:85:b4:7c:4c:97:98: 4b:cf:b4:17:fb:99:e4:85:70:ac:1a:df:e2:f3:69: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5E:E6:53:7E:03:C8:F0:14:24:5B:86:ED:58:80:14:1F:81:82:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/b5cd3131-83e9-3692-8091-5903443094cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.36.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:15:70:3a:82:62:e6:58:96:96:7c:71:82:6e:91:4a:db:4a: 0c:ac:54:97:37:27:1d:b0:e0:8e:8a:28:0a:f0:fd:87:f9:74: d2:89:18:87:7d:2b:41:c1:1a:e1:02:36:4d:80:6b:09:77:8f: 9b:3e:9b:01:59:82:83:8d:e7:59:5d:ae:26:97:1d:f3:0f:cc: 0a:89:35:52:52:be:26:dd:f7:16:72:6d:97:c9:2f:b1:21:49: 13:25:ba:50:0f:35:2b:83:af:3e:e3:6c:c5:9d:ff:7e:d6:e0: 80:66:09:71:b2:ee:37:9f:5a:3a:e1:6f:fb:60:9a:54:76:9f: 59:95:00:a5:9f:0e:d8:c7:30:1f:71:f2:82:1d:80:c1:0e:86: 0a:d8:9c:7b:e1:4e:d8:18:4f:0d:4c:14:f4:88:b8:3b:13:ff: dc:28:0a:bc:a8:5b:89:32:88:21:40:5d:6b:2c:ec:bd:e6:a1: fe:b6:0d:c0:5a:e2:8d:89:f2:db:c5:d3:f6:1c:e1:a7:6a:44: 20:b2:cb:28:12:99:ea:95:98:59:a8:86:4c:0b:08:6b:55:f6: 60:21:1c:2a:97:e2:ba:df:54:4f:cf:4c:55:43:c2:87:7b:a6: 47:96:ec:76:30:58:b6:0f:dd:06:f5:c7:df:47:4d:1d:62:1d: ae:90:bf:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVyo5+bPqHxZEehwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk M2NkODNlOGUtYWE3Ny00ZGIyLTlmOTgtMTFiODFmYTgzNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzjoLGC8vW7abBrPgCB5Vk3FITTChiOgKTOq IUdt0idh+yq9Y0HKPZbf/1Dgu+pq9xYScNtoMh3iXjGX89Hix5bEg6BOp99yAn0a rNIcEGbmfHF7xYTfCAlN2c4DZQrLni/ztFySgm2uxVaWVfOYeTCcJT3lHliRYxAz YkRn0nvCtY8MDINQrsJGfEivuTq+qpSUwq0ee/0dD6PQDrhxjhIcohWariICHGrU gtYQ3tFP8iwwlxfvrBppoa7jYEdA6AA+mq3NyzoLygZt4LDx0473vAzpswiOPI0F gAcmhPbRvcH+N2eznQaFtHxMl5hLz7QX+5nkhXCsGt/i82ny+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1e5lN+A8jwFCRbhu1YgBQfgYJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvYjVjZDMxMzEtODNlOS0z NjkyLTgwOTEtNTkwMzQ0MzA5NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQiTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwVcDqCYuZYlpZ8cYJukUrbSgysVJc3Jx2w4I6KKArw/Yf5dNKJGId9 K0HBGuECNk2Aawl3j5s+mwFZgoON51ldriaXHfMPzAqJNVJSvibd9xZybZfJL7Eh SRMlulAPNSuDrz7jbMWd/37W4IBmCXGy7jefWjrhb/tgmlR2n1mVAKWfDtjHMB9x 8oIdgMEOhgrYnHvhTtgYTw1MFPSIuDsT/9woCryoW4kyiCFAXWss7L3mof62DcBa 4o2J8tvF0/Yc4adqRCCyyygSmeqVmFmohkwLCGtV9mAhHCqX4rrfVE/PTFVDwod7 pkeW7HYwWLYP3Qb1x99HTR1iHa6Qv+I= -----END CERTIFICATE-----Generated at Tue Jun 17 16:38:19 2025 by rpki-client