$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa File: 3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json) Hash identifier: FSpmo2DKq8lv5O5vQcNjS0LMhA0mFg/wZVz6sQTnK4Y= Subject key identifier: 2F:22:BF:76:DC:14:2D:AD:31:A6:13:C8:11:49:7E:6E:47:54:D2:31 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F432858499829C1E374F595EA17B9C500 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 1403 IP address blocks: 66.158.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c1:e3:74:f5:95:ea:17:b9:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=0fba4784-160b-4319-b699-1305c120250f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:fe:31:9d:ca:a3:c8:5a:46:83:c5:ec:ac: 1c:59:c0:ce:6d:e6:a5:f7:42:21:fd:c3:c2:47:df: 90:a0:52:cd:62:dd:2d:ba:de:49:82:da:d2:28:27: 26:66:58:02:17:b3:88:69:d7:dd:ee:63:28:fa:9a: c1:05:a1:3c:af:3d:a2:0b:e1:cc:95:35:3e:28:a4: 12:33:c9:6b:3f:a8:2d:20:d0:0c:71:1b:29:9d:37: 89:37:bf:cc:02:65:bc:c6:24:45:17:48:d5:84:85: f3:f8:71:46:da:bf:77:22:83:71:e7:73:1f:29:cb: d3:3a:37:c1:b8:94:32:7d:80:12:61:c2:43:b9:8f: 98:4d:f6:2f:3d:2c:fa:f7:ff:e5:51:30:f1:14:ab: 9d:96:02:bf:1f:0b:67:70:c1:78:bf:0a:96:2b:ac: b6:d2:fd:34:f0:a0:8c:9b:8e:74:ab:1f:11:83:50: c2:b9:97:94:d5:7e:95:7d:76:d5:05:c3:49:c8:fe: 02:17:19:42:dd:e9:3f:96:40:b0:d2:24:57:0e:1f: 64:f4:2a:40:61:49:ec:14:a9:22:5c:b6:5a:ec:0c: db:ea:6b:2f:69:94:0a:72:1d:7c:1f:95:55:a5:47: 0c:21:7b:eb:de:5d:b3:9b:92:3e:29:16:ec:02:24: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:BF:76:DC:14:2D:AD:31:A6:13:C8:11:49:7E:6E:47:54:D2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0f:3b:2f:f6:6f:6f:54:13:af:ad:f1:8a:05:7c:b1:9f:66: d4:55:c3:fd:fc:c1:5d:94:38:eb:78:5e:15:44:4e:6b:40:09: 84:01:46:95:35:fd:17:71:e0:e4:95:67:78:4b:47:ca:9c:ab: 07:fa:28:45:f9:9d:66:fe:6a:70:2d:9d:62:b6:b6:28:1a:1e: 98:f5:4b:0e:ac:fc:c2:49:29:41:a2:e4:13:b0:06:30:6d:eb: 0c:ea:54:c3:b6:ab:20:0f:1e:c6:46:7b:97:1c:1a:db:6c:2d: 9d:90:b7:38:44:8a:28:cd:94:9b:a2:11:a1:06:e9:23:fd:55: 17:4a:67:3d:b8:3b:f2:67:b0:14:11:4c:d9:c0:02:86:a5:7e: 92:04:9a:7a:f9:c6:64:3c:96:79:58:d2:cd:ce:07:a9:1e:8c: db:9e:2e:e9:b7:27:ee:cd:43:54:65:60:e8:17:ad:17:3b:96: da:66:ca:a5:78:60:c3:3f:8f:b0:71:fc:6d:68:4e:d6:18:9d: fb:8c:84:ed:e0:18:6e:75:62:eb:93:92:c7:e0:0c:89:c2:07: cc:d6:32:25:33:97:f3:ea:57:66:13:a3:b3:b2:e4:19:a7:ed: 99:1f:bf:f9:ff:5a:86:7e:bd:7d:01:fa:a7:81:90:2a:9b:72: 94:91:bd:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcHjdPWV6he5xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MGZiYTQ3ODQtMTYwYi00MzE5LWI2OTktMTMwNWMxMjAyNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY/+MZ3Ko8haRoPF7KwcWcDObeal90Ih/cPC R9+QoFLNYt0tut5JgtrSKCcmZlgCF7OIadfd7mMo+prBBaE8rz2iC+HMlTU+KKQS M8lrP6gtINAMcRspnTeJN7/MAmW8xiRFF0jVhIXz+HFG2r93IoNx53MfKcvTOjfB uJQyfYASYcJDuY+YTfYvPSz69//lUTDxFKudlgK/HwtncMF4vwqWK6y20v008KCM m450qx8Rg1DCuZeU1X6VfXbVBcNJyP4CFxlC3ek/lkCw0iRXDh9k9CpAYUnsFKki XLZa7Azb6msvaZQKch18H5VVpUcMIXvr3l2zm5I+KRbsAiR+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8iv3bcFC2tMaYTyBFJfm5HVNIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvM2IwYWM4ZGQtMDQyNC0z MGIwLWIwZDUtN2ZjZDI4YjE1MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcPOy/2b29UE6+t8YoFfLGfZtRVw/38wV2UOOt4XhVETmtACYQBRpU1 /Rdx4OSVZ3hLR8qcqwf6KEX5nWb+anAtnWK2tigaHpj1Sw6s/MJJKUGi5BOwBjBt 6wzqVMO2qyAPHsZGe5ccGttsLZ2QtzhEiijNlJuiEaEG6SP9VRdKZz24O/JnsBQR TNnAAoalfpIEmnr5xmQ8lnlY0s3OB6kejNueLum3J+7NQ1RlYOgXrRc7ltpmyqV4 YMM/j7Bx/G1oTtYYnfuMhO3gGG51YuuTksfgDInCB8zWMiUzl/PqV2YTo7Oy5Bmn 7Zkfv/n/WoZ+vX0B+qeBkCqbcpSRveo= -----END CERTIFICATE-----Generated at Sun Jun 15 12:00:28 2025 by rpki-client