$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa File: 76fd5146-0a4e-316b-9c51-a775978d68a4.roa (raw, json) Hash identifier: cGm01I51kANbSuAFIo8lCD37xIQ6YlzwzaKcB/f7a0U= Subject key identifier: A9:8F:18:A2:03:13:21:9F:5E:19:69:65:CC:94:34:3C:71:C2:32:E5 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADB49C44DCAFC4565A700 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 66.171.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:db:49:c4:4d:ca:fc:45:65:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=967545ea-77f4-4c13-a5a3-ab755698fe82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:58:bb:61:4d:a5:45:07:0c:89:8f:74:c2: d7:ba:5e:11:ef:33:d9:8d:3f:f3:15:fb:5b:79:7f: 2d:a9:5b:fd:32:c6:73:13:09:6d:93:1b:19:5e:f7: 2c:a9:02:0d:29:17:0e:d1:f0:20:54:d5:9a:eb:de: df:7f:ee:69:8b:53:1a:d6:30:89:ec:c5:3d:37:92: fe:54:60:39:e3:4a:d6:6f:e9:59:5d:5a:0f:82:98: 0d:a2:cb:bc:5e:2e:aa:57:e8:d1:58:c9:a0:ec:49: 22:85:50:29:9d:eb:f5:0d:6e:45:77:99:a2:46:ad: 5b:a0:61:71:fa:74:f1:9e:3d:1a:13:bf:c6:9d:7e: 47:41:27:13:02:2b:8c:9e:95:e4:1b:bc:39:2b:8a: 07:e4:64:4d:c7:11:09:4e:5a:a8:32:d0:97:79:08: 5b:ba:f1:9d:00:b0:76:8d:84:ed:d5:60:43:05:56: 49:c1:26:40:3a:5b:99:e3:d4:20:c9:28:1f:e5:a8: bf:da:4e:89:33:3b:87:c5:e3:19:d8:66:8e:f3:99: c1:78:e4:a3:6e:bc:7e:f7:dc:c3:0f:32:2c:bb:4d: 33:d9:5e:0d:07:e3:62:ee:83:d5:67:91:3d:27:c4: 15:c5:e8:3a:98:53:7b:29:c1:33:82:be:0c:0d:2b: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8F:18:A2:03:13:21:9F:5E:19:69:65:CC:94:34:3C:71:C2:32:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 66.171.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b7:9f:86:a4:06:55:47:e9:f7:59:07:54:b3:6c:07:7e:9d: f0:fe:d7:87:81:d9:77:0e:6b:ac:5b:1e:6f:f6:60:82:52:93: 17:8f:ee:a6:88:e8:9f:4d:42:a4:ff:73:1b:c7:8f:8b:36:63: 37:63:91:45:da:c8:a0:ca:68:f4:0a:c0:41:55:e0:a6:1d:21: de:df:7e:02:6f:b0:c1:4d:48:90:09:5a:56:59:1b:f0:e7:22: 8c:ce:5b:f9:88:f6:ea:49:04:49:d1:f3:76:e5:27:12:3d:e2: a1:e5:50:ad:b1:f3:bd:33:55:c2:67:21:9c:ac:cd:52:7e:e6: ff:1f:bd:a3:59:78:ee:d8:97:4f:ce:39:9d:58:0d:21:a8:ab: e1:0a:72:99:6c:5c:08:d5:a6:98:1c:c9:55:15:90:1f:b5:ef: 6d:1f:7d:6e:0a:16:75:6c:e6:79:be:6b:40:58:d8:19:f3:8e: 75:e9:50:b2:37:7f:b0:b4:57:41:f9:1e:55:42:ed:f6:bb:b6: af:fc:66:3d:fd:3c:96:02:2c:21:67:11:ad:ec:48:9f:f5:aa: c5:5d:b8:70:fa:e7:57:fa:44:95:dc:f6:8a:7a:ac:8d:d5:a5: b7:05:70:ad:25:19:73:07:26:ce:7d:89:16:be:0b:4a:b8:ff: e0:2d:27:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SttJxE3K/EVlpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk OTY3NTQ1ZWEtNzdmNC00YzEzLWE1YTMtYWI3NTU2OThmZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18lYu2FNpUUHDImPdMLXul4R7zPZjT/zFftb eX8tqVv9MsZzEwltkxsZXvcsqQINKRcO0fAgVNWa697ff+5pi1Ma1jCJ7MU9N5L+ VGA540rWb+lZXVoPgpgNosu8Xi6qV+jRWMmg7EkihVApnev1DW5Fd5miRq1boGFx +nTxnj0aE7/GnX5HQScTAiuMnpXkG7w5K4oH5GRNxxEJTlqoMtCXeQhbuvGdALB2 jYTt1WBDBVZJwSZAOluZ49QgySgf5ai/2k6JMzuHxeMZ2GaO85nBeOSjbrx+99zD DzIsu00z2V4NB+Ni7oPVZ5E9J8QVxeg6mFN7KcEzgr4MDSvQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmPGKIDEyGfXhlpZcyUNDxxwjLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNzZmZDUxNDYtMGE0ZS0z MTZiLTljNTEtYTc3NTk3OGQ2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa3n4akBlVH6fdZB1SzbAd+nfD+14eB2XcOa6xbHm/2YIJSkxeP7qaI 6J9NQqT/cxvHj4s2YzdjkUXayKDKaPQKwEFV4KYdId7ffgJvsMFNSJAJWlZZG/Dn IozOW/mI9upJBEnR83blJxI94qHlUK2x870zVcJnIZyszVJ+5v8fvaNZeO7Yl0/O OZ1YDSGoq+EKcplsXAjVppgcyVUVkB+1720ffW4KFnVs5nm+a0BY2BnzjnXpULI3 f7C0V0H5HlVC7fa7tq/8Zj39PJYCLCFnEa3sSJ/1qsVduHD651f6RJXc9op6rI3V pbcFcK0lGXMHJs59iRa+C0q4/+AtJ98= -----END CERTIFICATE-----Generated at Thu Jun 19 17:32:06 2025 by rpki-client