$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa File: 66d28256-cbf5-3b31-910e-e10623aa8600.roa (raw, json) Hash identifier: nD4wgi0GEjr6O8cZiSEIQ3mcqH+bS6Ia1QNRN30gMkM= Subject key identifier: 03:C4:47:F9:EE:AE:46:FA:EB:AA:D1:B2:28:AE:76:7F:1B:80:C0:30 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584A252570D4D3292BB0BF8FF800 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa Signing time: Tue 10 Jun 2025 13:01:03 +0000 ROA not before: Tue 10 Jun 2025 13:01:03 +0000 ROA not after: Mon 08 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:25:70:d4:d3:29:2b:b0:bf:8f:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Jun 10 13:01:03 2025 GMT Not After : Sep 8 13:01:03 2025 GMT Subject: CN=4c69f185-4675-4f3f-a7a2-98c6f75f93e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:85:d7:7e:fd:85:c9:61:83:45:7c:e0:38: 86:d2:ad:d9:d9:93:6c:60:5d:f7:56:ea:17:09:dc: 40:f8:25:c2:ed:aa:b9:b5:a2:1e:c4:b6:38:7f:88: 2e:d2:77:17:c5:86:f4:12:fe:12:5b:97:1a:ab:1d: 0f:12:57:ac:98:8d:c6:69:3a:ea:77:7c:83:f5:d6: 1b:a1:8d:76:d4:22:b7:1f:7d:c3:b8:7c:23:84:5d: 62:1d:88:15:0f:b5:b4:08:da:b0:42:ad:e6:91:99: 86:2f:a7:dd:9d:35:d6:fc:5c:30:91:13:13:2e:2c: b0:63:5a:d2:2d:bb:a7:88:b9:64:33:17:f3:55:2c: de:4a:4f:c7:0f:b4:34:d1:bb:6a:cc:6d:14:96:9d: b2:28:22:ca:db:69:5e:6e:2f:56:5c:8d:80:5b:68: be:05:8f:d2:65:cc:cc:a8:26:63:c0:ca:cc:9e:2b: e0:a8:8a:b0:f8:2f:68:80:46:2d:46:fe:89:fe:71: 0c:df:a8:77:a5:6f:7f:76:9d:52:e3:97:be:d9:6f: 36:a1:be:a1:d6:39:15:63:47:7a:29:e1:f7:56:92: 58:68:08:0a:c5:dc:33:30:77:1a:88:bf:39:8b:4c: 75:0b:35:a6:a5:5a:e2:50:f9:f7:a6:ac:64:86:42: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C4:47:F9:EE:AE:46:FA:EB:AA:D1:B2:28:AE:76:7F:1B:80:C0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:04:71:b2:57:28:f0:94:17:02:3a:94:37:69:ea:1c:9f:a7: 83:86:38:82:ac:49:0f:0d:52:88:ae:59:a3:72:76:1c:fc:45: 6a:bf:f7:45:33:9d:0b:0b:13:57:e7:a4:72:3e:18:d2:1c:d8: f0:04:93:87:f4:62:d1:04:43:a3:c1:0c:81:99:68:08:13:fa: cc:8e:cf:9c:ec:e9:3d:1f:fb:a0:b6:58:de:16:82:06:49:11: 5d:cd:f5:01:40:0a:1c:83:ae:92:e0:04:d5:75:70:ce:01:6d: 5b:45:ed:26:c2:9f:6d:21:06:37:53:fc:9d:ef:97:bc:8b:62: e5:af:99:df:37:56:b0:6f:ac:ed:c1:c2:97:f8:a9:2d:17:a0: d5:14:4f:b0:47:c8:1c:58:2c:7a:c0:92:2d:95:58:51:7c:72: 7d:23:10:83:17:40:89:d4:1d:7e:53:7d:fc:1a:8c:fd:d5:3f: 66:56:8b:cb:f1:b6:49:39:21:fb:e5:da:1d:52:b5:2a:e0:1d: b3:26:b1:d7:0d:b5:74:57:ce:f8:9b:9c:a0:3f:60:fc:a7:91: ac:2d:53:af:d1:3f:46:01:4b:2f:93:49:99:85:aa:dd:d4:25: d5:d2:94:91:d2:76:74:8c:57:e1:68:b6:e9:33:c2:93:82:3b: f4:4b:dd:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolJXDU0ykrsL+P+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDYxMDEzMDEwM1oXDTI1MDkwODEzMDEwM1owLzEtMCsGA1UEAxMk NGM2OWYxODUtNDY3NS00ZjNmLWE3YTItOThjNmY3NWY5M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8CF1379hclhg0V84DiG0q3Z2ZNsYF33VuoX CdxA+CXC7aq5taIexLY4f4gu0ncXxYb0Ev4SW5caqx0PElesmI3GaTrqd3yD9dYb oY121CK3H33DuHwjhF1iHYgVD7W0CNqwQq3mkZmGL6fdnTXW/FwwkRMTLiywY1rS LbuniLlkMxfzVSzeSk/HD7Q00btqzG0Ulp2yKCLK22lebi9WXI2AW2i+BY/SZczM qCZjwMrMnivgqIqw+C9ogEYtRv6J/nEM36h3pW9/dp1S45e+2W82ob6h1jkVY0d6 KeH3VpJYaAgKxdwzMHcaiL85i0x1CzWmpVriUPn3pqxkhkLp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPER/nurkb666rRsiiudn8bgMAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjZkMjgyNTYtY2JmNS0z YjMxLTkxMGUtZTEwNjIzYWE4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoEcbJXKPCUFwI6lDdp6hyfp4OGOIKsSQ8NUoiuWaNydhz8RWq/90Uz nQsLE1fnpHI+GNIc2PAEk4f0YtEEQ6PBDIGZaAgT+syOz5zs6T0f+6C2WN4WggZJ EV3N9QFAChyDrpLgBNV1cM4BbVtF7SbCn20hBjdT/J3vl7yLYuWvmd83VrBvrO3B wpf4qS0XoNUUT7BHyBxYLHrAki2VWFF8cn0jEIMXQInUHX5TffwajP3VP2ZWi8vx tkk5Ifvl2h1StSrgHbMmsdcNtXRXzvibnKA/YPynkawtU6/RP0YBSy+TSZmFqt3U JdXSlJHSdnSMV+FotukzwpOCO/RL3W4= -----END CERTIFICATE-----Generated at Sun Jun 15 11:45:27 2025 by rpki-client