$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa File: 70c8300b-3f8c-3cac-af15-749f60c97054.roa (raw, json) Hash identifier: G8q37uFKDylQjQTWDaYTd30ZMYiRzm2B52Lp1BmZ76Q= Subject key identifier: 32:00:64:31:3C:A0:7A:73:12:BE:77:83:EB:39:4F:A8:D4:E3:57:D6 Certificate issuer: /CN=b40428c0-ba21-44c7-86bd-39d34a17e438 Certificate serial: 010D0C9F4328584AB7B6245959A489191C0A0F00 Authority key identifier: 62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 16509 IP address blocks: 66.33.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:24:59:59:a4:89:19:1c:0a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40428c0-ba21-44c7-86bd-39d34a17e438 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=6623192a-92cf-40e2-af83-db69cb5ef20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:64:d1:37:a1:7c:aa:79:70:bb:b2:b2:62: d6:e4:7e:9c:23:d8:50:f6:f6:f0:e4:b2:19:ac:cf: ae:66:97:e6:ee:e3:1f:9d:25:6f:12:82:12:9b:db: 71:4e:0f:d0:0b:a3:92:8f:72:b6:70:64:13:f3:1e: 48:ff:d7:c9:08:3f:69:08:ec:cc:e4:ea:cc:12:28: 58:9f:f5:42:53:7b:17:d9:ab:e0:59:d1:bf:7e:6f: d4:62:42:f6:3f:16:58:f0:3c:a8:68:9c:ea:8e:8b: de:06:da:07:5f:34:69:72:34:b4:18:19:1a:e1:3c: fa:cf:67:b5:11:6a:12:74:76:d8:8f:63:3b:2c:ca: 72:23:8a:78:95:1c:ee:fc:1e:86:53:1d:ca:80:2d: 5f:e4:a3:8b:b8:3c:ea:eb:84:06:ed:5b:0a:cd:33: c3:4a:85:04:0f:4f:ae:90:10:a3:b8:08:1e:de:99: e5:87:8f:15:73:55:c0:0b:f4:a0:47:89:b0:c7:cf: ab:b1:55:8f:08:30:45:50:0f:3d:08:ad:db:bb:8a: f1:76:24:b5:6d:f8:e8:50:22:61:1e:cd:77:bd:49: 4b:42:00:f3:59:27:f4:89:6e:a1:54:0f:d2:7b:f9: 4b:ca:c5:3c:4c:9a:82:7b:f4:be:8b:77:61:61:44: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:64:31:3C:A0:7A:73:12:BE:77:83:EB:39:4F:A8:D4:E3:57:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl X509v3 Authority Key Identifier: keyid:62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer sbgp-ipAddrBlock: critical IPv4: 66.33.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f6:07:c7:93:16:05:aa:30:73:8f:65:e0:a6:c9:68:f4:57: 72:ba:07:e4:c4:1c:d3:d7:21:8f:e5:92:fa:e2:ac:5f:2d:3a: d5:a1:61:92:eb:9b:94:64:fe:a9:41:7e:a8:07:e1:be:5f:0e: 8f:37:d0:a3:b1:af:6d:5c:4f:8b:f7:72:6e:bf:2e:62:b6:6b: a9:a4:55:23:10:26:69:fe:16:bb:80:2e:5c:78:ef:d1:b4:9d: 50:7f:26:c2:5d:fa:d2:03:84:d9:92:8e:b9:58:99:22:13:9c: ad:ae:10:64:07:5b:49:fb:09:46:a8:a2:f4:72:e5:56:ba:f5: ae:8b:26:30:8a:ef:0c:47:f2:dc:91:a8:32:8d:51:86:83:18: 00:d8:c9:02:6a:65:ac:0e:d7:06:0f:af:f4:52:6e:a5:fd:b6: 21:26:b2:ed:61:01:a7:9d:54:12:32:60:fe:60:a9:a2:3a:99: ed:b5:e6:9c:f4:cd:bb:66:b7:62:d0:47:d2:86:8b:79:3b:53: ee:1b:53:e8:35:c6:b9:60:49:ca:54:07:61:e5:f8:42:df:a9: 08:12:3c:4d:ba:cb:ff:9f:5e:a6:85:da:f1:6b:ab:71:3a:d8: ff:fd:3f:7b:84:0c:7f:18:0e:fe:83:31:52:9d:05:23:30:11: d3:c7:91:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tiRZWaSJGRwKDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDI4YzAtYmEyMS00NGM3LTg2YmQtMzlkMzRhMTdl NDM4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NjYyMzE5MmEtOTJjZi00MGUyLWFmODMtZGI2OWNiNWVmMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPRk0TehfKp5cLuysmLW5H6cI9hQ9vbw5LIZ rM+uZpfm7uMfnSVvEoISm9txTg/QC6OSj3K2cGQT8x5I/9fJCD9pCOzM5OrMEihY n/VCU3sX2avgWdG/fm/UYkL2PxZY8DyoaJzqjoveBtoHXzRpcjS0GBka4Tz6z2e1 EWoSdHbYj2M7LMpyI4p4lRzu/B6GUx3KgC1f5KOLuDzq64QG7VsKzTPDSoUED0+u kBCjuAge3pnlh48Vc1XAC/SgR4mwx8+rsVWPCDBFUA89CK3bu4rxdiS1bfjoUCJh Hs13vUlLQgDzWSf0iW6hVA/Se/lLysU8TJqCe/S+i3dhYURzfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIAZDE8oHpzEr53g+s5T6jU41fWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNDA0 MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQzNGExN2U0MzgvNzBjODMwMGItM2Y4Yy0z Y2FjLWFmMTUtNzQ5ZjYwYzk3MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjQwNDI4YzAtYmEyMS00NGM3LTg2 YmQtMzlkMzRhMTdlNDM4L2I0MDQyOGMwLWJhMjEtNDRjNy04NmJkLTM5ZDM0YTE3 ZTQzOC5jcmwwHwYDVR0jBBgwFoAUYii1ecqVTkstiLpdYZmWySaiBK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNDA0MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQz NGExN2U0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr2B8eTFgWqMHOPZeCmyWj0V3K6B+TEHNPXIY/lkvrirF8tOtWhYZLr m5Rk/qlBfqgH4b5fDo830KOxr21cT4v3cm6/LmK2a6mkVSMQJmn+FruALlx479G0 nVB/JsJd+tIDhNmSjrlYmSITnK2uEGQHW0n7CUaoovRy5Va69a6LJjCK7wxH8tyR qDKNUYaDGADYyQJqZawO1wYPr/RSbqX9tiEmsu1hAaedVBIyYP5gqaI6me215pz0 zbtmt2LQR9KGi3k7U+4bU+g1xrlgScpUB2Hl+ELfqQgSPE26y/+fXqaF2vFrq3E6 2P/9P3uEDH8YDv6DMVKdBSMwEdPHkY8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:41 2025 by rpki-client