$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json) Hash identifier: BknRYING505k4yUwP8gfn3uXEUSBnh7B7vfHL/vY2hI= Subject key identifier: 87:E8:3F:4B:34:8D:32:BE:EF:48:19:0D:82:E2:DB:BC:7F:7E:99:34 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F43285849CE9A4C60B7E32CDCCE87EE50 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 30148 IP address blocks: 66.248.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4c:60:b7:e3:2c:dc:ce:87:ee:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=de270324-860b-49d7-b60b-94df047f781e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:17:5b:59:22:96:e2:4d:42:52:94:27:9f: d8:c2:04:a3:66:8b:c3:ab:bb:c2:3e:a0:42:fe:c1: 54:73:1d:0a:60:ef:63:4e:8e:31:44:b2:67:46:3e: 10:7f:86:99:32:4d:55:74:3c:47:a0:c6:ce:86:98: 4e:96:59:12:89:1e:48:39:b0:1f:5d:27:37:c8:d9: e0:d6:ba:b6:5e:d3:4c:d4:7e:2f:30:9d:63:fc:21: c9:88:d0:4b:aa:60:00:8c:cc:be:e1:d3:ad:be:54: 76:e0:7d:8b:31:7e:2b:20:a0:5e:a5:31:8e:0f:a3: 60:aa:75:82:15:df:92:49:9a:e4:fc:97:00:27:97: 8f:fc:03:37:61:cc:6b:c2:6f:18:99:55:69:f1:15: c3:a3:4c:12:dd:91:35:c7:e4:3c:09:77:31:cd:f1: df:14:12:92:94:6c:a2:26:24:7e:6b:ed:ca:5c:b5: d5:13:42:42:3d:d5:b4:8a:7c:9e:eb:7d:67:ae:f9: 4a:0a:00:3e:9d:ea:b6:b7:bc:57:45:2e:c4:e6:89: 77:a7:d0:44:f8:b8:e6:8e:a7:35:13:a0:1d:1d:c7: f1:ae:b5:52:1f:b1:78:8b:e5:17:b7:42:e0:c3:70: 74:7e:5d:b4:a0:d5:2f:a0:86:ab:a8:38:80:44:e8: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:3F:4B:34:8D:32:BE:EF:48:19:0D:82:E2:DB:BC:7F:7E:99:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:19:00:24:7c:8b:fe:7f:a5:88:31:88:2e:b4:05:bd:23:b1: fc:4e:dd:a3:c1:fb:cc:a6:46:0c:9f:a1:20:5f:97:4f:6c:48: db:ae:c1:fc:84:4b:7d:ec:7f:d7:f9:8d:9b:cb:55:35:f0:5f: 89:02:31:e2:72:cd:d0:fd:a0:3a:e2:9d:66:61:c5:32:02:4f: 4b:da:ac:f7:70:cc:a4:23:98:9e:00:e3:b2:73:4d:14:e6:5f: b1:d3:52:f2:e1:20:7c:6f:45:4d:51:eb:70:05:e8:a1:9f:52: fa:b4:28:4d:ce:aa:a6:64:28:d9:2d:6a:cf:e2:eb:94:12:69: ff:d8:55:03:51:72:39:21:31:30:52:3c:c7:31:0b:2f:80:04: 11:6d:fc:5b:6b:a7:d2:93:03:e3:a3:7c:66:dd:e2:b8:be:a1: 28:34:f2:16:5a:67:d9:65:fc:a4:76:96:9b:66:d0:8b:75:0b: 56:ec:7f:e8:a1:c3:52:fb:31:f0:a6:cc:96:4e:04:af:19:cb: a6:4d:8b:fe:60:9f:b5:12:cf:b8:c5:da:be:cd:e1:0f:e2:6b: d4:27:65:61:68:bb:7a:33:42:1c:16:61:ef:ac:49:10:89:90: eb:38:a0:7e:76:3c:d8:a5:46:01:3b:55:12:7b:38:30:e4:7c: 34:18:0e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkxgt+Ms3M6H7lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGUyNzAzMjQtODYwYi00OWQ3LWI2MGItOTRkZjA0N2Y3ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl14XW1kiluJNQlKUJ5/YwgSjZovDq7vCPqBC /sFUcx0KYO9jTo4xRLJnRj4Qf4aZMk1VdDxHoMbOhphOllkSiR5IObAfXSc3yNng 1rq2XtNM1H4vMJ1j/CHJiNBLqmAAjMy+4dOtvlR24H2LMX4rIKBepTGOD6NgqnWC Fd+SSZrk/JcAJ5eP/AM3Ycxrwm8YmVVp8RXDo0wS3ZE1x+Q8CXcxzfHfFBKSlGyi JiR+a+3KXLXVE0JCPdW0inye631nrvlKCgA+neq2t7xXRS7E5ol3p9BE+Ljmjqc1 E6AdHcfxrrVSH7F4i+UXt0Lgw3B0fl20oNUvoIarqDiAROjSGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfoP0s0jTK+70gZDYLi27x/fpk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMGRlMDgwNzAtOTkyZS0z MzRmLTgwOTAtYTRjM2E4ODY3N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8ZACR8i/5/pYgxiC60Bb0jsfxO3aPB+8ymRgyfoSBfl09sSNuuwfyE S33sf9f5jZvLVTXwX4kCMeJyzdD9oDrinWZhxTICT0varPdwzKQjmJ4A47JzTRTm X7HTUvLhIHxvRU1R63AF6KGfUvq0KE3OqqZkKNktas/i65QSaf/YVQNRcjkhMTBS PMcxCy+ABBFt/Ftrp9KTA+OjfGbd4ri+oSg08hZaZ9ll/KR2lptm0It1C1bsf+ih w1L7MfCmzJZOBK8Zy6ZNi/5gn7USz7jF2r7N4Q/ia9QnZWFou3ozQhwWYe+sSRCJ kOs4oH52PNilRgE7VRJ7ODDkfDQYDqU= -----END CERTIFICATE-----Generated at Sun Jun 15 04:51:17 2025 by rpki-client