$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/8b93b86c-a38d-34d9-a165-f26a6919889e.roa File: 8b93b86c-a38d-34d9-a165-f26a6919889e.roa (raw, json) Hash identifier: /LZ0fU/URr83+64T3PZtUWRQ2hUV+mKAW7lcI2gBwQc= Subject key identifier: 91:0C:8E:C1:4D:5C:FD:F8:FB:C1:DF:CD:C0:3B:EB:54:F8:A5:11:A8 Certificate issuer: /CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Certificate serial: 010D0C9F43285849A35480B40FB677041B9DC680 Authority key identifier: 29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/8b93b86c-a38d-34d9-a165-f26a6919889e.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 63302 IP address blocks: 66.97.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:b4:0f:b6:77:04:1b:9d:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=fca1d6d7-c15d-49d1-8980-8c6d57a755fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:b2:6f:84:12:ff:0e:01:f0:af:3c:89:5f: fb:88:d9:6e:0c:1f:18:c4:0a:73:8a:b5:90:23:ee: 5a:fe:d6:ac:ff:8e:fb:44:72:ee:41:cd:f9:9f:15: c2:3b:66:c8:64:d7:f5:e7:e1:85:1c:35:26:e9:90: b1:b1:49:31:bf:eb:c0:b9:ae:46:c0:3b:ae:bc:3e: 20:f6:d0:3c:dc:ae:9f:35:77:f2:69:c9:88:52:83: 30:25:4a:6f:c5:9d:dd:5c:ed:09:30:46:c6:a6:27: cb:8a:0e:9e:ee:d2:61:61:3b:06:6e:53:ab:e3:54: 91:8c:1b:61:c0:8f:e2:98:2b:eb:8e:26:6c:c7:77: a8:5c:5f:30:05:06:7c:c3:68:2f:c0:0d:e1:9b:28: 45:b9:84:62:11:c5:65:64:02:77:49:19:19:c4:91: 0d:bd:c9:c4:5a:3b:8a:59:c8:05:0e:16:3f:90:b4: 4d:60:15:d4:95:68:95:1b:45:d3:64:8f:11:8e:6f: 29:83:dd:ec:c2:f6:be:37:e1:31:22:39:dc:5f:40: 39:fc:8b:82:e9:c5:73:35:ce:72:58:8e:ff:0c:aa: 22:95:6c:48:e4:c5:33:48:3e:9e:4c:2d:d7:0a:af: b0:9a:55:64:66:2d:83:83:c3:bd:8e:3c:67:07:39: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0C:8E:C1:4D:5C:FD:F8:FB:C1:DF:CD:C0:3B:EB:54:F8:A5:11:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/8b93b86c-a38d-34d9-a165-f26a6919889e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl X509v3 Authority Key Identifier: keyid:29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer sbgp-ipAddrBlock: critical IPv4: 66.97.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:bf:bb:25:80:76:b6:aa:5e:1a:84:38:20:84:91:72:c2:53: 3a:67:20:31:f2:b4:5f:e6:5e:0f:af:92:31:c3:73:cd:d3:b8: 6a:c5:52:64:b1:92:d9:f6:84:e2:35:7e:bb:9a:9c:11:01:f5: fc:b4:8f:5b:cc:85:24:51:4d:54:20:75:c6:ca:97:ff:96:fc: 28:c3:f2:09:d8:33:1a:6d:de:22:b2:4d:b2:9c:cb:0c:d3:cc: d2:c7:b9:b7:8a:87:0e:2a:63:62:e1:fb:ef:b4:b4:e0:49:ef: 37:9e:b6:88:f1:a4:3c:00:6d:e5:4d:62:f1:88:00:61:ff:bd: 10:ea:97:1d:2d:fb:4f:f2:42:32:77:20:51:c2:63:96:ca:cf: 06:67:6f:4c:d5:50:7e:20:cf:35:e1:7e:61:2e:74:6f:10:a8: 80:6d:0b:c8:6b:fb:b9:5b:37:5d:89:ba:0d:fa:92:0d:c9:6e: b1:25:ee:e3:01:1e:19:46:ec:b9:7d:91:28:3d:53:30:7d:5a: db:40:1b:0f:f8:4e:81:8f:cd:7c:52:cd:4e:61:f6:91:1a:4e: a8:06:cc:11:61:eb:82:a8:dd:b6:89:e7:70:bf:f5:43:d4:dd: 56:76:ff:23:7c:45:d0:7a:92:34:19:a1:c5:66:c9:39:fd:30: 75:33:9b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIC0D7Z3BBudxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MDJmYjMtZTBhNC00MzE1LTk2ZTMtNTJiMTM1OWM5 ZDEwMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk ZmNhMWQ2ZDctYzE1ZC00OWQxLTg5ODAtOGM2ZDU3YTc1NWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Wyb4QS/w4B8K88iV/7iNluDB8YxApzirWQ I+5a/tas/477RHLuQc35nxXCO2bIZNf15+GFHDUm6ZCxsUkxv+vAua5GwDuuvD4g 9tA83K6fNXfyacmIUoMwJUpvxZ3dXO0JMEbGpifLig6e7tJhYTsGblOr41SRjBth wI/imCvrjiZsx3eoXF8wBQZ8w2gvwA3hmyhFuYRiEcVlZAJ3SRkZxJENvcnEWjuK WcgFDhY/kLRNYBXUlWiVG0XTZI8Rjm8pg93swva+N+ExIjncX0A5/IuC6cVzNc5y WI7/DKoilWxI5MUzSD6eTC3XCq+wmlVkZi2Dg8O9jjxnBzn5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEMjsFNXP34+8HfzcA761T4pRGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYw MmZiMy1lMGE0LTQzMTUtOTZlMy01MmIxMzU5YzlkMTAvOGI5M2I4NmMtYTM4ZC0z NGQ5LWExNjUtZjI2YTY5MTk4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y2MDJmYjMtZTBhNC00MzE1LTk2 ZTMtNTJiMTM1OWM5ZDEwL2NmNjAyZmIzLWUwYTQtNDMxNS05NmUzLTUyYjEzNTlj OWQxMC5jcmwwHwYDVR0jBBgwFoAUKXL7a7GekXOUVcGorgVmc9VSVSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYwMmZiMy1lMGE0LTQzMTUtOTZlMy01MmIx MzU5YzlkMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW/uyWAdraqXhqEOCCEkXLCUzpnIDHytF/mXg+vkjHDc83TuGrFUmSx ktn2hOI1fruanBEB9fy0j1vMhSRRTVQgdcbKl/+W/CjD8gnYMxpt3iKyTbKcywzT zNLHubeKhw4qY2Lh+++0tOBJ7zeetojxpDwAbeVNYvGIAGH/vRDqlx0t+0/yQjJ3 IFHCY5bKzwZnb0zVUH4gzzXhfmEudG8QqIBtC8hr+7lbN12Jug36kg3JbrEl7uMB HhlG7Ll9kSg9UzB9WttAGw/4ToGPzXxSzU5h9pEaTqgGzBFh64Ko3baJ53C/9UPU 3VZ2/yN8RdB6kjQZocVmyTn9MHUzm7g= -----END CERTIFICATE-----Generated at Tue Apr 29 09:27:01 2025 by rpki-client