$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0d248661-3701-312c-ab98-1a0848201b0a.roa File: 0d248661-3701-312c-ab98-1a0848201b0a.roa (raw, json) Hash identifier: no6xLERRob5cIKCrUeH8x1ASWBWZod03ECSOPdUk0F0= Subject key identifier: 39:02:24:F9:46:BC:2D:99:1F:19:B9:53:62:A6:3F:56:74:64:97:E7 Certificate issuer: /CN=766eb068-340f-4e16-9d08-04181e100ca2 Certificate serial: 010D0C9F43285849C0A4D59FE844E77EC11BBA00 Authority key identifier: 09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0d248661-3701-312c-ab98-1a0848201b0a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 63278 IP address blocks: 192.64.30.0/23 maxlen: 23 192.64.30.0/24 maxlen: 24 192.64.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d5:9f:e8:44:e7:7e:c1:1b:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=766eb068-340f-4e16-9d08-04181e100ca2 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=4a702bb1-3edd-4f29-bef3-6c81e63a20cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:6c:90:63:52:2a:38:0b:3b:73:63:86:9b: 4e:df:a3:c8:b9:be:92:ff:00:02:87:7c:f2:ef:fd: ef:d9:e8:00:58:54:6a:d2:a7:29:cd:eb:16:1b:18: 55:dc:5f:be:01:30:a6:89:1d:72:10:52:71:16:49: ac:e4:42:af:1b:3f:8d:cb:9e:87:1f:9d:cd:07:fc: 29:96:ab:06:67:c3:5a:d9:8e:e4:cb:30:ce:86:01: 14:cf:4f:fa:d9:80:95:27:e2:84:ab:9f:8a:cd:10: d2:4a:95:e1:11:24:5d:7f:b1:9a:58:d3:c6:91:a8: 4e:ab:d7:c3:c4:44:6e:7d:30:41:46:19:b7:db:44: c0:cc:32:50:60:ce:3f:34:f4:49:86:e0:0d:3e:2c: 43:33:56:69:bf:9b:0d:dd:3f:c5:f3:71:7f:a8:65: 1d:a8:32:3b:fa:72:67:9f:03:36:55:77:0b:09:17: 4c:10:e3:48:f1:77:44:5d:ac:57:07:e6:9c:39:62: 36:b6:f1:e7:1d:d5:2b:00:59:50:37:6d:6e:4a:1e: 21:23:a5:21:2c:97:2d:6d:c0:6a:ee:30:6b:bb:52: 07:8e:45:4f:10:9d:68:3f:66:90:6f:8c:92:9c:a2: f8:68:da:d8:54:e5:ed:38:37:c3:bf:99:89:fb:e7: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:24:F9:46:BC:2D:99:1F:19:B9:53:62:A6:3F:56:74:64:97:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0d248661-3701-312c-ab98-1a0848201b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl X509v3 Authority Key Identifier: keyid:09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:cf:db:83:db:17:e8:46:45:83:65:2a:fe:ec:6f:ba:49:64: b1:50:08:b6:bd:89:5e:75:43:c5:ed:9a:56:54:83:3a:46:71: a4:45:66:4e:93:1f:86:be:ac:0c:17:6d:43:ae:0f:7e:23:c7: 2d:62:21:7f:ae:9f:84:d2:05:c2:8e:cf:14:12:da:24:fb:6b: 58:8a:53:7a:dd:85:37:93:93:94:fd:ec:5e:a8:7c:94:c0:1c: bd:b1:2e:fc:04:47:2e:ff:4c:a5:65:58:3a:be:df:43:8f:72: d7:10:20:47:7a:61:42:0d:b1:c1:16:3e:00:db:70:35:57:06: 0e:a2:84:db:fa:49:3e:7b:4d:89:2b:52:59:23:59:e5:06:39: 8c:15:61:29:dd:a0:ca:3e:31:b3:49:d6:f8:c7:30:9e:0b:ba: f9:1c:a0:ca:34:a6:47:3a:2c:d4:99:1a:25:34:2e:ec:c3:39: 9d:fd:a8:9a:86:0e:d5:f8:40:70:ff:6b:25:b6:88:b3:b4:b8: fe:c3:c8:4a:54:95:b0:bc:0d:6a:60:89:03:2a:ae:3b:59:cc: cd:50:4a:00:87:3e:77:18:19:0a:8a:54:f2:b8:b7:5d:1d:98: 25:d7:d7:da:02:d2:f5:ce:84:8a:98:0f:29:36:c1:e8:7c:44: ba:30:b8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNWf6ETnfsEbugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY2ZWIwNjgtMzQwZi00ZTE2LTlkMDgtMDQxODFlMTAw Y2EyMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NGE3MDJiYjEtM2VkZC00ZjI5LWJlZjMtNmM4MWU2M2EyMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC9skGNSKjgLO3NjhptO36PIub6S/wACh3zy 7/3v2egAWFRq0qcpzesWGxhV3F++ATCmiR1yEFJxFkms5EKvGz+Ny56HH53NB/wp lqsGZ8Na2Y7kyzDOhgEUz0/62YCVJ+KEq5+KzRDSSpXhESRdf7GaWNPGkahOq9fD xERufTBBRhm320TAzDJQYM4/NPRJhuANPixDM1Zpv5sN3T/F83F/qGUdqDI7+nJn nwM2VXcLCRdMEONI8XdEXaxXB+acOWI2tvHnHdUrAFlQN21uSh4hI6UhLJctbcBq 7jBru1IHjkVPEJ1oP2aQb4ySnKL4aNrYVOXtODfDv5mJ++eNaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkCJPlGvC2ZHxm5U2KmP1Z0ZJfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NjZl YjA2OC0zNDBmLTRlMTYtOWQwOC0wNDE4MWUxMDBjYTIvMGQyNDg2NjEtMzcwMS0z MTJjLWFiOTgtMWEwODQ4MjAxYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzY2ZWIwNjgtMzQwZi00ZTE2LTlk MDgtMDQxODFlMTAwY2EyLzc2NmViMDY4LTM0MGYtNGUxNi05ZDA4LTA0MTgxZTEw MGNhMi5jcmwwHwYDVR0jBBgwFoAUCV+qqsovgr2vGSs6e9y1/ERpxywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NjZlYjA2OC0zNDBmLTRlMTYtOWQwOC0wNDE4 MWUxMDBjYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwEAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILP24PbF+hGRYNlKv7sb7pJZLFQCLa9iV51Q8XtmlZUgzpGcaRFZk6T H4a+rAwXbUOuD34jxy1iIX+un4TSBcKOzxQS2iT7a1iKU3rdhTeTk5T97F6ofJTA HL2xLvwERy7/TKVlWDq+30OPctcQIEd6YUINscEWPgDbcDVXBg6ihNv6ST57TYkr UlkjWeUGOYwVYSndoMo+MbNJ1vjHMJ4LuvkcoMo0pkc6LNSZGiU0LuzDOZ39qJqG DtX4QHD/ayW2iLO0uP7DyEpUlbC8DWpgiQMqrjtZzM1QSgCHPncYGQqKVPK4t10d mCXX19oC0vXOhIqYDyk2weh8RLowuEk= -----END CERTIFICATE-----Generated at Sun Jun 15 23:52:46 2025 by rpki-client