$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa File: ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa (raw, json) Hash identifier: hWI/l7J64VxlVYAqZv1bpIG1QVIdvhlpx0PSU+vnEuk= Subject key identifier: 0C:56:9C:2D:9A:84:04:25:85:36:F5:39:09:40:35:86:50:12:BB:AF Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EA8518426B9C49695E52F080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 20454 IP address blocks: 66.85.128.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:18:42:6b:9c:49:69:5e:52:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=845ccd79-7f29-4083-909f-6f128df6e4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:67:47:08:2a:22:06:f6:c9:12:10:48:bb: 94:27:cd:d9:4a:4a:7b:3d:da:37:73:eb:4c:2b:fb: ce:5c:24:53:e0:c2:72:de:24:74:49:6a:0d:7d:10: 44:56:52:6f:82:97:c9:c5:41:dc:82:3a:80:c6:1e: dc:41:64:03:2b:c1:a5:63:24:61:ad:da:96:5e:c6: 0c:39:94:ef:2d:02:f2:17:68:40:ef:0f:01:9e:dd: 12:d8:9d:ee:6e:ba:aa:56:fd:bf:7c:25:9c:28:7f: 73:76:e4:ff:ca:90:56:fd:6a:46:9b:b3:07:3c:61: eb:43:f4:d8:b3:6b:09:78:53:2b:d3:60:80:03:dd: 4a:0a:dc:ed:bd:c2:e8:22:62:e5:20:ff:6a:fe:5f: cc:41:75:fb:0d:3c:ea:ae:af:15:a9:d7:0a:3f:ae: a9:77:8c:6a:5e:92:e9:6b:73:e5:b0:bd:1a:5b:12: 8c:dc:1f:92:df:3c:b5:b9:92:6d:d2:60:57:78:e2: cb:8f:2a:d2:76:25:d3:8d:04:dd:e0:9a:ac:6b:ff: df:64:88:12:4e:f4:cb:b7:10:3d:51:b0:aa:0c:e9: 8c:66:e4:8d:3f:95:1a:d6:e7:51:d7:7c:1c:da:42: 21:6f:74:7a:2f:d1:e4:b8:6a:50:af:78:06:b5:63: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:9C:2D:9A:84:04:25:85:36:F5:39:09:40:35:86:50:12:BB:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 66.85.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:78:98:ae:a9:d7:e0:58:8b:91:36:0f:42:04:81:a1:81:4e: 30:27:0f:a3:1c:4e:de:7c:2f:30:78:70:f8:8f:13:7b:6d:09: 82:14:f1:a5:2e:32:d9:f7:d9:f1:53:46:46:83:9e:2e:1a:4a: cf:33:a1:85:7a:96:93:18:4c:ab:49:c7:69:2b:e0:79:6a:a1: d1:15:56:77:7c:cd:a2:ea:9b:53:c7:b7:8a:45:e7:fe:e8:68: 3b:88:01:f8:30:dd:44:89:dc:ae:5e:eb:73:0a:74:93:62:d0: 39:71:9e:2b:b9:42:4e:e0:43:1a:d8:16:10:7a:3c:00:d1:21: 29:f1:b5:0e:a4:d6:7d:7b:93:e8:4b:16:a6:ed:b3:5c:1b:9b: 1a:6e:08:5f:46:ad:50:57:9c:e3:f8:2e:bc:ca:8f:7c:76:d2: 6b:ad:b7:cf:12:e3:96:3d:b1:50:83:30:08:70:1f:30:e1:a6: 0c:99:d8:84:d1:c2:23:bc:75:2b:cb:96:b1:75:bc:91:14:2b: 47:4d:11:86:e5:60:04:68:18:16:86:50:ed:6b:58:47:7c:bb: ca:39:22:f2:c0:40:ca:37:27:39:83:6d:a0:7d:94:cf:8f:02: 26:35:36:17:b7:75:a8:04:92:d4:27:57:e7:0a:ea:b3:32:ca: 0c:3c:12:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRhCa5xJaV5S8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ODQ1Y2NkNzktN2YyOS00MDgzLTkwOWYtNmYxMjhkZjZlNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNxnRwgqIgb2yRIQSLuUJ83ZSkp7Pdo3c+tM K/vOXCRT4MJy3iR0SWoNfRBEVlJvgpfJxUHcgjqAxh7cQWQDK8GlYyRhrdqWXsYM OZTvLQLyF2hA7w8Bnt0S2J3ubrqqVv2/fCWcKH9zduT/ypBW/WpGm7MHPGHrQ/TY s2sJeFMr02CAA91KCtztvcLoImLlIP9q/l/MQXX7DTzqrq8VqdcKP66pd4xqXpLp a3PlsL0aWxKM3B+S3zy1uZJt0mBXeOLLjyrSdiXTjQTd4Jqsa//fZIgSTvTLtxA9 UbCqDOmMZuSNP5Ua1udR13wc2kIhb3R6L9HkuGpQr3gGtWPwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxWnC2ahAQlhTb1OQlANYZQEruvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWMwN2YzMjYtNTJlYi0z NWJmLThjNzctY2FmZDFhMmU2YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF4mK6p1+BYi5E2D0IEgaGBTjAnD6McTt58LzB4cPiPE3ttCYIU8aUu Mtn32fFTRkaDni4aSs8zoYV6lpMYTKtJx2kr4HlqodEVVnd8zaLqm1PHt4pF5/7o aDuIAfgw3USJ3K5e63MKdJNi0Dlxniu5Qk7gQxrYFhB6PADRISnxtQ6k1n17k+hL Fqbts1wbmxpuCF9GrVBXnOP4LrzKj3x20mutt88S45Y9sVCDMAhwHzDhpgyZ2ITR wiO8dSvLlrF1vJEUK0dNEYblYARoGBaGUO1rWEd8u8o5IvLAQMo3JzmDbaB9lM+P AiY1Nhe3dagEktQnV+cK6rMyygw8EqY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:18:54 2025 by rpki-client