$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa File: 2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa (raw, json) Hash identifier: EJeiHWOh0tYGEa9vB3qzi1kJQZiCg1MsJl0lhTs7YHM= Subject key identifier: 75:CD:6E:9E:79:0F:3A:B1:01:D3:1C:67:58:49:1C:15:B8:AB:D6:A7 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849DC8FB164F7644E794DF6C580 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 66.22.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b1:64:f7:64:4e:79:4d:f6:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=34c9c21a-4dfb-43b3-a8f1-abd37ad7c2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:8c:d7:93:fb:ee:33:ad:33:20:c4:3e:e1: 8b:0e:4e:70:ec:73:ab:03:42:4f:18:9e:58:37:ec: 61:10:c9:9f:a1:e9:a8:88:3d:ae:e8:ab:7f:39:2a: a0:48:0d:02:6c:44:72:0f:d1:43:2e:36:15:79:42: d5:b7:fc:37:16:2a:86:77:75:88:f6:db:e5:b4:7b: c8:ee:6b:8e:b3:7f:a4:d3:6a:b2:1d:14:e3:87:90: 1e:5d:79:b0:4a:7d:c7:6b:21:80:60:86:80:fc:c1: ec:2c:2c:e8:cf:c2:7b:6a:37:86:92:1d:ae:bb:fa: ff:e9:82:2e:7a:b3:ab:23:9e:e4:a1:0d:5c:4f:64: f3:11:15:ad:1a:5d:c8:36:93:88:53:7b:89:c1:8c: ec:11:3e:ac:c3:3a:40:36:24:3e:9c:ce:dd:5e:f4: 76:e6:a1:a8:46:24:72:24:3b:82:67:c6:e4:0f:9e: 8c:49:61:2e:97:0b:dc:cd:38:1c:05:b4:8a:10:97: 67:94:27:97:c8:dc:c5:e9:a0:b6:1d:37:a1:0d:8f: e4:10:3a:93:f2:4a:24:1b:17:a2:f5:ff:ac:d4:76: 98:3a:03:99:e0:f3:34:07:7c:a1:f6:8b:8d:1a:09: a3:6d:da:d7:2f:d8:bd:9d:cc:92:e9:b0:0d:9e:a6: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CD:6E:9E:79:0F:3A:B1:01:D3:1C:67:58:49:1C:15:B8:AB:D6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 66.22.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a8:1e:45:0c:f4:b0:cd:17:ad:d5:5a:d3:d5:ea:a2:8e:84: 88:4c:a1:1e:0b:21:52:80:d3:96:a1:f8:b8:ed:9e:b0:b8:72: 09:67:ef:fc:80:36:1c:e0:45:cb:ed:25:38:5d:c4:b3:2d:07: 5a:e0:e4:cf:c3:66:70:3b:64:65:a3:58:68:f2:18:91:53:29: 6d:4e:d8:c1:03:9b:7e:1b:f8:d5:75:4d:e9:9a:b0:47:f8:70: 25:91:ba:f1:c0:1e:11:ce:95:94:ec:15:da:93:cb:0d:69:7d: 2c:83:9f:24:f8:a9:b9:18:63:fd:c6:07:3c:4c:cd:81:64:db: 7e:ad:02:51:8f:f1:af:a5:2d:91:d2:38:05:59:95:dc:10:c1: 5e:83:78:d5:e4:6f:40:ce:d7:8b:c9:a1:39:8a:c0:30:d3:4f: 2e:84:5b:0b:98:8e:7c:92:9e:6f:05:de:e7:57:54:de:b9:0a: fa:24:a5:cf:21:21:b4:6a:82:02:ea:ce:f7:7d:f7:8d:9c:22: eb:11:b9:d9:55:2b:d9:d9:a3:25:19:ec:75:74:55:7f:66:92: d5:2a:28:7b:cf:8c:1f:77:3b:3e:5e:82:6c:61:36:32:8c:45: a1:5c:a5:15:df:1a:45:38:0a:c9:6e:e6:4d:66:be:98:58:5b: 3a:8d:ab:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7Fk92ROeU32xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MzRjOWMyMWEtNGRmYi00M2IzLWE4ZjEtYWJkMzdhZDdjMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6eM15P77jOtMyDEPuGLDk5w7HOrA0JPGJ5Y N+xhEMmfoemoiD2u6Kt/OSqgSA0CbERyD9FDLjYVeULVt/w3FiqGd3WI9tvltHvI 7muOs3+k02qyHRTjh5AeXXmwSn3HayGAYIaA/MHsLCzoz8J7ajeGkh2uu/r/6YIu erOrI57koQ1cT2TzERWtGl3INpOIU3uJwYzsET6swzpANiQ+nM7dXvR25qGoRiRy JDuCZ8bkD56MSWEulwvczTgcBbSKEJdnlCeXyNzF6aC2HTehDY/kEDqT8kokGxei 9f+s1HaYOgOZ4PM0B3yh9ouNGgmjbdrXL9i9ncyS6bANnqYcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXNbp55DzqxAdMcZ1hJHBW4q9anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMmNmYjBjZTktYWYwMS0z MWFlLThlZDYtZTZhNGY0NTdiNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuoHkUM9LDNF63VWtPV6qKOhIhMoR4LIVKA05ah+LjtnrC4cgln7/yA NhzgRcvtJThdxLMtB1rg5M/DZnA7ZGWjWGjyGJFTKW1O2MEDm34b+NV1TemasEf4 cCWRuvHAHhHOlZTsFdqTyw1pfSyDnyT4qbkYY/3GBzxMzYFk236tAlGP8a+lLZHS OAVZldwQwV6DeNXkb0DO14vJoTmKwDDTTy6EWwuYjnySnm8F3udXVN65Cvokpc8h IbRqggLqzvd9942cIusRudlVK9nZoyUZ7HV0VX9mktUqKHvPjB93Oz5egmxhNjKM RaFcpRXfGkU4Cslu5k1mvphYWzqNq4A= -----END CERTIFICATE-----Generated at Sun Jun 15 09:11:46 2025 by rpki-client