$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa File: b02d7254-2264-3097-86e7-bab31bccdf77.roa (raw, json) Hash identifier: zV1lEthOnq8NxdvPL4KCcMpNqaeX1tSvTolX0B8t5hc= Subject key identifier: 98:86:E7:5A:CB:5A:75:2A:8F:4B:FA:42:2C:60:6D:B6:07:E1:53:2A Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F4328584AA160D6B654EF2032AC5CF300 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 33717 IP address blocks: 66.171.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d6:b6:54:ef:20:32:ac:5c:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=c5d791f7-f001-4d87-ae14-d777e3e5259a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:ca:45:82:78:76:fa:64:b9:54:17:39:95: 03:7f:7e:18:f8:fe:0a:1d:0f:80:58:6f:b0:4f:1d: 77:a4:c8:82:07:63:62:3b:dc:d6:cf:3c:c6:ae:22: 85:8b:aa:20:fa:a3:41:ff:3c:8a:7d:11:91:85:a6: 51:9f:fa:2d:60:f1:3c:30:32:19:54:5c:18:be:da: 2c:68:e0:9e:80:42:61:d3:09:56:2e:eb:e5:9c:c7: 54:2e:32:44:30:5a:a7:26:95:9c:fd:0c:c1:9a:5e: f2:bb:7f:a9:5b:72:81:3a:d9:07:0d:f6:70:a5:2f: 4f:6e:8d:57:be:16:a7:a9:9d:7a:4e:02:fb:35:68: d4:fa:23:34:5f:0a:40:ca:22:2e:9a:30:0f:0c:a7: 03:d9:56:fd:ea:e6:5d:93:22:ea:e6:57:ad:6a:57: 82:23:a6:ac:97:b6:81:96:20:af:80:36:17:f9:63: cd:24:68:09:28:e9:14:f3:a3:39:87:45:1f:e3:a6: 49:aa:52:26:8e:6a:5b:55:d8:95:95:66:00:02:9b: a7:7c:6b:e1:9e:26:3b:67:51:8e:bb:a5:f8:ce:d6: 54:d1:92:0e:37:c9:b4:a1:b8:e1:75:7c:93:1a:f0: 48:c9:da:9c:0e:ae:02:8e:f4:99:68:86:c0:3c:c1: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:86:E7:5A:CB:5A:75:2A:8F:4B:FA:42:2C:60:6D:B6:07:E1:53:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 66.171.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:42:8a:46:35:a4:d7:6a:91:79:5d:6b:89:d0:31:13:b3:bc: a9:21:aa:7b:0c:09:cf:28:5a:79:86:67:13:62:ea:59:03:74: 88:81:ed:62:35:a7:02:fd:3c:03:de:28:7b:9a:8e:48:fc:0d: 1e:d4:e4:cd:fb:2c:90:ee:ae:84:30:ff:54:43:d0:a7:22:b2: f1:90:53:1c:d7:25:df:d0:24:7b:7a:32:10:d4:c9:31:ef:ed: 25:99:63:cf:52:79:ea:d7:db:27:82:de:c2:aa:d9:96:ca:03: 32:55:16:69:fc:c4:1d:bd:e0:6d:f4:5e:9f:e2:71:c0:29:c2: 02:dc:27:73:6c:8b:05:a3:43:07:1a:fb:2d:1d:87:ad:35:ad: 26:e5:d5:6b:aa:8b:19:ff:72:c0:52:0b:06:27:82:3f:f7:c7: ce:7c:31:06:62:c4:c6:09:e8:02:bd:1a:ac:36:c1:34:be:ce: ca:9e:ba:f2:cc:22:74:47:ab:38:2a:34:ed:a5:b2:a6:1f:ec: 4f:3f:9a:ee:5d:69:be:6c:d7:36:b1:6f:53:72:19:a8:89:65: bc:5f:1a:61:91:f5:7f:ae:ca:29:dc:30:bb:43:63:de:17:81: 14:a3:a5:43:1f:b5:0c:50:90:0f:a4:58:06:d4:d4:fc:3b:47: 9f:15:8c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNa2VO8gMqxc8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YzVkNzkxZjctZjAwMS00ZDg3LWFlMTQtZDc3N2UzZTUyNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFDKRYJ4dvpkuVQXOZUDf34Y+P4KHQ+AWG+w Tx13pMiCB2NiO9zWzzzGriKFi6og+qNB/zyKfRGRhaZRn/otYPE8MDIZVFwYvtos aOCegEJh0wlWLuvlnMdULjJEMFqnJpWc/QzBml7yu3+pW3KBOtkHDfZwpS9Pbo1X vhanqZ16TgL7NWjU+iM0XwpAyiIumjAPDKcD2Vb96uZdkyLq5letaleCI6asl7aB liCvgDYX+WPNJGgJKOkU86M5h0Uf46ZJqlImjmpbVdiVlWYAApunfGvhniY7Z1GO u6X4ztZU0ZION8m0objhdXyTGvBIydqcDq4CjvSZaIbAPMHa2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiG51rLWnUqj0v6QixgbbYH4VMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvYjAyZDcyNTQtMjI2NC0z MDk3LTg2ZTctYmFiMzFiY2NkZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBCikY1pNdqkXlda4nQMROzvKkhqnsMCc8oWnmGZxNi6lkDdIiB7WI1 pwL9PAPeKHuajkj8DR7U5M37LJDuroQw/1RD0KcisvGQUxzXJd/QJHt6MhDUyTHv 7SWZY89SeerX2yeC3sKq2ZbKAzJVFmn8xB294G30Xp/iccApwgLcJ3NsiwWjQwca +y0dh601rSbl1Wuqixn/csBSCwYngj/3x858MQZixMYJ6AK9Gqw2wTS+zsqeuvLM InRHqzgqNO2lsqYf7E8/mu5dab5s1zaxb1NyGaiJZbxfGmGR9X+uyincMLtDY94X gRSjpUMftQxQkA+kWAbU1Pw7R58VjAY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:15:09 2025 by rpki-client