$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa File: c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa (raw, json) Hash identifier: kh8Q5W32gQNvydycPIO9hP87kXtQ4Wq3xmj/2OFNSLw= Subject key identifier: 51:E4:05:7D:41:4E:64:F3:BE:A7:23:E0:DB:0F:7A:47:9B:E9:0B:38 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F43285849C402DDDBCDDB270307306780 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa Signing time: Tue 06 May 2025 17:58:02 +0000 ROA not before: Tue 06 May 2025 17:58:02 +0000 ROA not after: Mon 04 Aug 2025 17:58:02 +0000 asID: 174 IP address blocks: 63.171.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:02:dd:db:cd:db:27:03:07:30:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: May 6 17:58:02 2025 GMT Not After : Aug 4 17:58:02 2025 GMT Subject: CN=f151b880-dcb1-4631-a1e5-8d505d6c66f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:56:e3:c3:b4:22:16:e5:7c:65:aa:4e:d2:61: 53:9e:04:af:18:c2:54:45:19:22:94:25:58:78:ef: 29:0a:c6:6c:42:65:8f:83:4f:f4:ce:b4:32:29:8a: 95:2a:3f:51:07:79:7b:bb:92:f7:ff:73:6a:b9:81: 86:13:8e:13:3c:25:db:02:61:cb:80:6e:86:4c:8a: 66:9d:f0:5e:84:46:4a:ac:51:70:4c:f5:2b:db:59: 8d:7c:eb:57:a8:b5:53:f7:99:03:9d:f6:04:c2:76: 92:4f:cb:18:29:ab:52:fc:46:02:35:75:f8:d2:08: 1b:65:7e:5a:80:3f:bc:b5:5c:c5:2f:35:85:9d:69: 93:b9:0a:d4:0e:65:5a:29:c2:8f:8b:3f:8f:15:01: 6f:73:70:1b:6c:3d:9e:7a:99:c6:26:c3:e3:b1:cf: 97:42:dd:c3:d2:62:58:78:87:20:05:38:78:dd:de: 2a:84:38:8d:75:e7:56:52:99:79:1c:fe:64:35:b3: 1e:a9:31:b1:e6:88:a2:2a:6a:78:f9:cb:cf:77:ef: a6:fc:3a:a8:e1:1b:3c:5b:ce:cf:3a:58:d7:3e:db: 8f:c4:09:e9:a8:17:12:19:df:c0:a2:c9:d1:7a:21: e9:41:34:5d:35:07:0b:b3:5d:6f:17:53:7c:d4:67: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:05:7D:41:4E:64:F3:BE:A7:23:E0:DB:0F:7A:47:9B:E9:0B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.171.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e3:33:e4:55:09:e6:39:e4:d9:71:c9:36:f5:81:7f:f1:40: 5f:eb:3f:eb:9a:67:f2:91:1e:c7:a0:73:a5:3a:21:e3:18:f4: 66:cb:fa:f8:1f:fa:25:d3:36:30:33:e1:52:b0:9a:6b:f9:6b: c8:bc:64:4a:23:18:be:30:87:8c:40:31:77:5e:45:c1:77:91: 44:e1:6d:4a:8b:8c:bd:21:43:bb:95:3a:3c:bf:df:59:b4:c4: 86:80:e6:e6:4e:f8:3d:90:90:c5:bd:57:1e:b7:b8:9e:7f:3c: 05:82:6b:a1:d4:66:16:ee:9f:e1:a0:db:81:c9:ed:83:50:33: e6:f0:7d:cb:cb:f9:ab:9b:53:c3:b4:ad:75:4c:7d:3c:98:ca: 2c:58:e7:8e:87:9a:80:a6:77:4e:16:88:87:4a:3d:75:ad:59: 4c:90:5c:e8:9b:cd:78:6b:f0:3d:4a:88:46:62:e9:ee:d9:b4: 98:fb:c1:7e:62:d1:14:32:70:1d:2e:4b:55:a7:1a:19:e5:44: a4:05:e2:59:01:40:db:67:f2:aa:f5:59:81:20:aa:9c:9e:f9: 4a:06:7e:3d:e9:62:8e:ef:4c:fb:02:ed:c3:94:40:43:09:cd: c5:9d:ab:5a:60:90:2c:c4:c3:a8:5e:71:a7:9a:42:bf:d1:69: ca:6f:1d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnEAt3bzdsnAwcwZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDUwNjE3NTgwMloXDTI1MDgwNDE3NTgwMlowLzEtMCsGA1UEAxMk ZjE1MWI4ODAtZGNiMS00NjMxLWExZTUtOGQ1MDVkNmM2NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFbjw7QiFuV8ZapO0mFTngSvGMJURRkilCVY eO8pCsZsQmWPg0/0zrQyKYqVKj9RB3l7u5L3/3NquYGGE44TPCXbAmHLgG6GTIpm nfBehEZKrFFwTPUr21mNfOtXqLVT95kDnfYEwnaST8sYKatS/EYCNXX40ggbZX5a gD+8tVzFLzWFnWmTuQrUDmVaKcKPiz+PFQFvc3AbbD2eepnGJsPjsc+XQt3D0mJY eIcgBTh43d4qhDiNdedWUpl5HP5kNbMeqTGx5oiiKmp4+cvPd++m/Dqo4Rs8W87P OljXPtuPxAnpqBcSGd/AosnReiHpQTRdNQcLs11vF1N81Ge/zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHkBX1BTmTzvqcj4NsPekeb6Qs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYzY1YWMwZDUtOWM5Mi0z MDc0LTgzYjMtNGNhYzRkZmVlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6tCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrjM+RVCeY55NlxyTb1gX/xQF/rP+uaZ/KRHsegc6U6IeMY9GbL+vgf +iXTNjAz4VKwmmv5a8i8ZEojGL4wh4xAMXdeRcF3kUThbUqLjL0hQ7uVOjy/31m0 xIaA5uZO+D2QkMW9Vx63uJ5/PAWCa6HUZhbun+Gg24HJ7YNQM+bwfcvL+aubU8O0 rXVMfTyYyixY546HmoCmd04WiIdKPXWtWUyQXOibzXhr8D1KiEZi6e7ZtJj7wX5i 0RQycB0uS1WnGhnlRKQF4lkBQNtn8qr1WYEgqpye+UoGfj3pYo7vTPsC7cOUQEMJ zcWdq1pgkCzEw6hecaeaQr/RacpvHSc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:26:50 2025 by rpki-client