$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa File: c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa (raw, json) Hash identifier: wG9+IEmC88VlvA5+dgbm3mZgnF77CcU25q84QYNokPI= Subject key identifier: BD:38:DB:3C:5D:03:E4:E1:01:FB:54:77:A4:08:C3:55:EE:EB:74:4D Certificate issuer: /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Certificate serial: 010D0C9F43285849FCAA7D284DED0AA1F4166980 Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 394310 IP address blocks: 66.179.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7d:28:4d:ed:0a:a1:f4:16:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=6dd8e0b9-a71c-43b4-8301-a0d4f2cbda5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:94:07:8a:1a:fc:f2:a9:df:76:1f:70:28: 0d:af:5b:37:c4:86:bd:03:fd:ec:f9:2a:dc:d5:c5: ef:5c:61:4d:3e:e3:b0:e8:01:e5:2b:06:c1:6a:01: 8a:f5:25:bb:5a:55:5a:a3:3c:8a:3c:e8:c7:8c:81: 4f:d7:0d:68:ba:bf:a8:00:5f:38:a5:87:d5:50:ff: 9d:aa:a7:4a:7b:7b:34:b1:53:9e:31:e2:c5:fa:24: 87:83:51:11:72:f5:4f:45:54:f3:83:1a:19:70:91: 38:a4:e6:9e:5b:fe:ab:73:b8:18:42:fd:6e:db:52: 36:9f:9d:8d:5e:36:74:7e:ad:51:b2:7f:0b:00:17: 2d:3f:c5:bb:6f:b3:07:e1:3e:d3:2d:8d:f2:b7:44: 4a:c8:6c:1f:30:e1:a4:53:19:97:e8:80:ee:67:26: 27:1c:d4:1a:61:4c:19:8d:32:1c:02:3f:b6:0e:4f: cd:4f:c5:d8:ff:1c:d0:32:e8:77:d7:20:a4:d5:79: a5:f8:2d:e3:9f:d7:4f:9a:b2:cb:a2:e2:a2:c9:66: 64:1a:8a:43:e7:93:b8:32:4e:ff:d2:f0:e0:b0:7d: 42:80:7c:72:02:b9:34:0a:a0:7a:33:2d:5a:c1:bc: 2c:14:1a:4e:73:a5:11:17:db:95:0d:68:84:ff:b8: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:38:DB:3C:5D:03:E4:E1:01:FB:54:77:A4:08:C3:55:EE:EB:74:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl X509v3 Authority Key Identifier: keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:02:f7:6e:e0:bb:9b:b3:2e:b5:b5:af:b8:c6:c6:c2:a3:00: 2f:af:c1:f0:07:a0:9d:5f:c3:0d:f6:6e:8d:5f:b8:57:63:c6: 0b:62:14:1c:67:e6:0e:35:59:cb:27:b3:5a:f4:68:ea:40:f8: 29:c7:fe:61:95:58:01:64:84:0a:73:33:c8:5d:c6:22:5d:e9: 61:29:6c:d1:7c:33:39:04:37:13:05:dc:84:df:20:ec:3b:eb: 27:fd:09:c2:17:a0:21:47:4a:7e:61:7b:48:45:ae:8d:75:74: 49:f7:87:b4:bf:4e:d8:72:52:62:d4:1e:40:89:a8:ec:c9:ea: 24:e5:23:88:c1:e2:ee:d0:b3:af:b1:3f:4d:b9:ee:9b:2d:10: b2:d8:43:e4:7d:bf:b5:e2:18:d8:f3:9a:a0:17:f7:60:50:a7: 11:dd:e8:fe:10:43:34:b1:5b:37:4f:59:1e:78:0f:1f:91:18: 5e:d4:11:fe:cd:61:13:9c:b2:aa:5e:34:e3:be:d9:e4:d6:6f: 06:1a:22:a5:14:6a:65:83:06:ab:6c:84:3d:32:5d:45:1c:62: f5:63:33:64:4f:e9:97:e1:9f:38:1a:54:b6:67:6c:7a:1b:5f: fd:8b:71:0f:75:8b:f7:e6:c9:ca:5e:b3:1e:ba:8b:dc:87:de: 87:8c:17:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn0oTe0KofQWaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5 ZTlhMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NmRkOGUwYjktYTcxYy00M2I0LTgzMDEtYTBkNGYyY2JkYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhaUB4oa/PKp33YfcCgNr1s3xIa9A/3s+Src 1cXvXGFNPuOw6AHlKwbBagGK9SW7WlVaozyKPOjHjIFP1w1our+oAF84pYfVUP+d qqdKe3s0sVOeMeLF+iSHg1ERcvVPRVTzgxoZcJE4pOaeW/6rc7gYQv1u21I2n52N XjZ0fq1Rsn8LABctP8W7b7MH4T7TLY3yt0RKyGwfMOGkUxmX6IDuZyYnHNQaYUwZ jTIcAj+2Dk/NT8XY/xzQMuh31yCk1Xml+C3jn9dPmrLLouKiyWZkGopD55O4Mk7/ 0vDgsH1CgHxyArk0CqB6My1awbwsFBpOc6URF9uVDWiE/7iTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL042zxdA+ThAftUd6QIw1Xu63RNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjlj MzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvYzk5MDRmNWYtNGM1Yi0z YzVlLWIyYjMtZjg3ZDdiZWNkNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI5YzM4YmUtZGI1MS00ZDkxLWEz NjEtOTRiYTNiZmQ5ZTlhLzQyOWMzOGJlLWRiNTEtNGQ5MS1hMzYxLTk0YmEzYmZk OWU5YS5jcmwwHwYDVR0jBBgwFoAUOwreAHVyImja/ScA8cgfi8oFlzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJh M2JmZDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMC927gu5uzLrW1r7jGxsKjAC+vwfAHoJ1fww32bo1fuFdjxgtiFBxn 5g41Wcsns1r0aOpA+CnH/mGVWAFkhApzM8hdxiJd6WEpbNF8MzkENxMF3ITfIOw7 6yf9CcIXoCFHSn5he0hFro11dEn3h7S/TthyUmLUHkCJqOzJ6iTlI4jB4u7Qs6+x P0257pstELLYQ+R9v7XiGNjzmqAX92BQpxHd6P4QQzSxWzdPWR54Dx+RGF7UEf7N YROcsqpeNOO+2eTWbwYaIqUUamWDBqtshD0yXUUcYvVjM2RP6ZfhnzgaVLZnbHob X/2LcQ91i/fmycpesx66i9yH3oeMF6E= -----END CERTIFICATE-----Generated at Mon Jun 16 11:02:08 2025 by rpki-client