$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa File: d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa (raw, json) Hash identifier: kYX5lhELLG7ma2YkDX1C8fGIkYRmvbecBc3ZUKdWeVs= Subject key identifier: 91:30:CD:89:3A:BB:83:F1:3E:8F:DF:2D:CD:B2:30:D0:C0:A4:10:7C Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858495C24465BDE9B23B8C6A1B8A0 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14511 IP address blocks: 66.231.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:46:5b:de:9b:23:b8:c6:a1:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=74cf8a39-d370-4f19-b6bc-d620a082b7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:c7:b1:e3:25:60:69:5f:16:41:74:e5:30: 44:2f:7e:eb:38:b4:a7:58:52:6c:da:be:c5:54:d5: ce:fc:c6:9d:9b:3c:1d:3d:6b:02:9e:3d:f0:8b:be: 99:68:a4:92:8c:fa:95:a9:41:da:5a:29:98:15:74: 3c:76:a5:1b:3d:59:be:4b:c3:e8:23:33:f6:f0:24: eb:58:15:be:ac:12:26:e3:be:3d:99:d5:cf:40:a4: 75:b1:62:b7:32:a0:98:25:b4:b4:cf:18:f2:e5:4c: 26:8e:17:36:79:09:27:71:a9:9b:9d:81:ef:f4:a3: cd:4c:86:57:e5:2f:57:df:c0:ca:28:c3:de:3c:bf: c7:5b:51:29:7f:7f:ec:97:b3:08:4a:c3:c9:c7:95: 2e:45:2e:10:36:fb:eb:97:91:87:7a:33:bc:91:5f: 91:65:8a:7e:5b:8f:3e:95:0b:58:1d:69:72:ef:f3: 35:2f:54:5e:eb:4f:ab:02:9a:0c:5b:28:80:8a:b9: f0:7b:ee:3a:d8:73:ca:5c:99:fe:a2:58:c4:87:4f: 0b:59:e6:47:b0:b2:f2:53:79:28:3d:1f:5c:27:cc: ce:89:fe:33:8a:45:1b:47:3c:cb:06:54:3e:2f:2f: af:a1:8e:57:b2:4f:9a:4d:b9:3b:b8:18:94:9f:b0: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:30:CD:89:3A:BB:83:F1:3E:8F:DF:2D:CD:B2:30:D0:C0:A4:10:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ef:87:97:20:e3:4d:23:9f:1f:d8:47:95:1a:02:b8:df:c9: 55:7d:54:33:b2:60:ea:50:fe:86:0c:c6:56:4a:e1:fe:13:ba: 1e:a3:df:04:1d:cf:ff:83:fd:1f:b8:55:4d:71:e2:9a:2e:65: 4f:d5:a0:c9:c8:3c:06:df:91:ba:e1:42:a9:97:62:9b:4b:dc: c3:1f:06:c4:ac:45:66:01:96:76:79:47:38:ff:cb:59:2b:fd: 2e:27:22:ed:9f:b3:dd:9d:01:dc:e2:50:9e:08:51:44:71:e5: ca:74:aa:72:63:aa:d9:63:54:e9:fc:bb:36:ab:27:25:95:7c: b9:84:63:46:65:4a:18:cd:8e:a4:b1:d9:60:6f:e4:5f:3b:b5: be:cf:46:f5:13:93:c9:5e:0b:54:6f:55:50:a8:06:40:ce:5e: 9e:29:68:2a:e7:23:07:e2:a5:9f:a3:7a:28:d6:72:92:4e:80: fd:94:43:eb:a9:98:02:f9:22:f8:39:7d:26:c0:56:46:35:97: ef:c5:07:d7:17:90:d0:88:2b:4b:86:f6:0a:88:9d:c2:a5:02: 5e:ea:af:b6:01:a7:4a:0a:6b:a2:8b:4d:c4:ee:62:8b:7a:d7: 44:86:e1:65:38:dd:42:5d:c4:c9:7a:42:99:44:10:7d:8d:e3: 25:05:e2:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEZb3psjuMahuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NzRjZjhhMzktZDM3MC00ZjE5LWI2YmMtZDYyMGEwODJiN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKzHseMlYGlfFkF05TBEL37rOLSnWFJs2r7F VNXO/MadmzwdPWsCnj3wi76ZaKSSjPqVqUHaWimYFXQ8dqUbPVm+S8PoIzP28CTr WBW+rBIm4749mdXPQKR1sWK3MqCYJbS0zxjy5Uwmjhc2eQkncambnYHv9KPNTIZX 5S9X38DKKMPePL/HW1Epf3/sl7MISsPJx5UuRS4QNvvrl5GHejO8kV+RZYp+W48+ lQtYHWly7/M1L1Re60+rApoMWyiAirnwe+462HPKXJn+oljEh08LWeZHsLLyU3ko PR9cJ8zOif4zikUbRzzLBlQ+Ly+voY5Xsk+aTbk7uBiUn7DE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEwzYk6u4PxPo/fLc2yMNDApBB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvZDIzODBlMWMtNDU4NC0z ZmJlLTlhYzctYzAwZmM1MTk5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQudgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjvh5cg400jnx/YR5UaArjfyVV9VDOyYOpQ/oYMxlZK4f4Tuh6j3wQd z/+D/R+4VU1x4pouZU/VoMnIPAbfkbrhQqmXYptL3MMfBsSsRWYBlnZ5Rzj/y1kr /S4nIu2fs92dAdziUJ4IUURx5cp0qnJjqtljVOn8uzarJyWVfLmEY0ZlShjNjqSx 2WBv5F87tb7PRvUTk8leC1RvVVCoBkDOXp4paCrnIwfipZ+jeijWcpJOgP2UQ+up mAL5Ivg5fSbAVkY1l+/FB9cXkNCIK0uG9gqIncKlAl7qr7YBp0oKa6KLTcTuYot6 10SG4WU43UJdxMl6QplEEH2N4yUF4ok= -----END CERTIFICATE-----Generated at Mon Apr 28 15:39:21 2025 by rpki-client