$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa File: 658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa (raw, json) Hash identifier: RCc8wGbdKMQjzE6A2IOdBZtIUW+yPlyqSECHDtQQ2Bs= Subject key identifier: 86:CB:0D:98:81:0D:CB:B7:09:A5:75:56:67:DD:87:4D:51:60:84:90 Certificate issuer: /CN=05a4c80a-51b6-487d-a927-afcc950c360c Certificate serial: 010D0C9F4328584A14655824B4ADE596C64B4FC0 Authority key identifier: A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 1239 IP address blocks: 74.117.114.0/23 maxlen: 23 74.117.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:58:24:b4:ad:e5:96:c6:4b:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a4c80a-51b6-487d-a927-afcc950c360c Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=c44602bf-390d-435b-ac48-952fd7d75faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:79:f9:59:b4:52:96:d0:b0:c3:78:6e:5a: 9c:55:36:e2:2d:96:ce:3f:64:0e:96:56:2e:b2:6e: 7f:0e:82:4b:de:db:13:d6:ed:78:d8:2c:1c:fa:c4: 02:26:96:77:49:f0:c4:f4:7d:58:09:00:4d:23:c5: 06:ae:5b:0e:0d:92:59:6b:a5:e5:ee:50:ff:c6:be: 8b:c6:ed:31:14:b6:f6:cc:b2:93:e2:d1:2d:ce:78: 0d:87:5c:7d:b4:b4:c1:3e:76:7e:97:23:b1:b2:2e: 7f:9f:fb:14:65:df:16:d7:da:9a:5b:d2:41:89:26: c6:7d:66:20:e9:9e:e9:2c:8e:52:5e:9a:30:0d:f7: 63:d5:83:b0:0c:ce:92:b9:92:75:69:2f:4d:d2:27: 5f:f4:09:73:fb:02:4b:21:e0:49:31:e3:9d:47:fe: 0e:89:d5:e0:6f:68:83:74:de:fa:0f:fc:5a:04:7e: ba:a5:df:ee:9d:15:f8:a8:88:6d:c5:75:e3:87:8a: 2c:9b:43:9a:10:d4:59:18:5e:76:20:85:f7:d8:48: c2:ed:48:d2:d0:5d:f0:f0:7a:bd:cd:c1:62:75:50: a9:6a:00:f1:b1:1d:11:ae:f1:6e:60:b0:f1:ca:1f: 82:1b:41:4d:9d:43:11:89:5c:bd:62:b1:a6:57:a6: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CB:0D:98:81:0D:CB:B7:09:A5:75:56:67:DD:87:4D:51:60:84:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl X509v3 Authority Key Identifier: keyid:A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer sbgp-ipAddrBlock: critical IPv4: 74.117.114.0-74.117.119.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8a:e6:ba:b7:80:66:46:c1:30:28:cf:2d:71:72:ba:6d:23: 66:6e:cd:2d:84:6b:97:8a:f7:45:e8:22:02:28:79:42:18:9a: 28:75:07:de:fa:92:43:8a:fd:da:67:fe:55:31:2c:63:92:12: 85:94:7e:5c:a5:ad:2e:3f:5f:76:08:47:3a:9c:24:46:05:a3: f1:40:99:72:3d:8d:aa:c4:37:8b:07:70:39:78:7a:02:7d:5c: bf:5b:bd:0f:51:f2:8e:27:6d:cb:a4:27:a6:01:8c:4f:7a:1e: 45:13:0d:06:33:7c:85:e4:1d:5c:0c:b9:f0:0e:06:cc:19:51: fc:10:59:3d:ce:d2:bb:1b:9e:ba:6b:75:69:63:7e:18:9c:6e: 29:04:d7:8b:fd:34:27:4e:d9:c7:ef:8f:bf:57:0f:1f:9b:07: fc:50:2f:43:e9:52:2b:17:1f:f5:2f:6f:33:ca:81:e4:dc:aa: c0:48:a2:f0:2b:25:30:0b:ea:85:d8:ae:56:c3:a3:ea:ca:bf: e2:28:f7:f2:49:68:76:52:e4:72:38:11:10:c3:76:6a:a9:22: e7:34:0a:7a:c6:95:9e:14:1f:e1:52:6b:00:cd:e5:50:38:39: be:10:37:d6:a5:1b:f4:f3:fa:85:24:3d:ba:5e:62:36:98:d5: 63:0e:93:62 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoUZVgktK3llsZLT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVhNGM4MGEtNTFiNi00ODdkLWE5MjctYWZjYzk1MGMz NjBjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YzQ0NjAyYmYtMzkwZC00MzViLWFjNDgtOTUyZmQ3ZDc1ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+l5+Vm0UpbQsMN4blqcVTbiLZbOP2QOllYu sm5/DoJL3tsT1u142Cwc+sQCJpZ3SfDE9H1YCQBNI8UGrlsODZJZa6Xl7lD/xr6L xu0xFLb2zLKT4tEtzngNh1x9tLTBPnZ+lyOxsi5/n/sUZd8W19qaW9JBiSbGfWYg 6Z7pLI5SXpowDfdj1YOwDM6SuZJ1aS9N0idf9Alz+wJLIeBJMeOdR/4OidXgb2iD dN76D/xaBH66pd/unRX4qIhtxXXjh4osm0OaENRZGF52IIX32EjC7UjS0F3w8Hq9 zcFidVCpagDxsR0RrvFuYLDxyh+CG0FNnUMRiVy9YrGmV6a8cwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIbLDZiBDcu3CaV1Vmfdh01RYISQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNWE0 YzgwYS01MWI2LTQ4N2QtYTkyNy1hZmNjOTUwYzM2MGMvNjU4YzBhOGMtYjUxYS0z NzIxLTliYTUtYmQwY2M4MDMyOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDVhNGM4MGEtNTFiNi00ODdkLWE5 MjctYWZjYzk1MGMzNjBjLzA1YTRjODBhLTUxYjYtNDg3ZC1hOTI3LWFmY2M5NTBj MzYwYy5jcmwwHwYDVR0jBBgwFoAUouVdg6vto/vRTb3MuLUNVx+XFLEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNWE0YzgwYS01MWI2LTQ4N2QtYTkyNy1hZmNj OTUwYzM2MGMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFKdXID BANKdXAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKIrmureAZkbBMCjPLXFyum0jZm7NLYRrl4r3RegiAih5 QhiaKHUH3vqSQ4r92mf+VTEsY5IShZR+XKWtLj9fdghHOpwkRgWj8UCZcj2NqsQ3 iwdwOXh6An1cv1u9D1Hyjidty6QnpgGMT3oeRRMNBjN8heQdXAy58A4GzBlR/BBZ Pc7Suxueumt1aWN+GJxuKQTXi/00J07Zx++Pv1cPH5sH/FAvQ+lSKxcf9S9vM8qB 5NyqwEii8CslMAvqhdiuVsOj6sq/4ij38klodlLkcjgREMN2aqki5zQKesaVnhQf 4VJrAM3lUDg5vhA31qUb9PP6hSQ9ul5iNpjVYw6TYg== -----END CERTIFICATE-----Generated at Sun Jun 15 19:25:10 2025 by rpki-client