$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/24ed5071-e536-3813-a276-a681610c03d8.roa File: 24ed5071-e536-3813-a276-a681610c03d8.roa (raw, json) Hash identifier: ST/ZHMj4tPSgLJ4H+ETGir/QSMbGxVSruMt/zTe7dcc= Subject key identifier: 0D:E0:34:6A:2F:3A:3B:42:98:8A:56:4A:64:27:47:7D:A0:45:C9:98 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F43285849FF751886877138BE502B00C0 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/24ed5071-e536-3813-a276-a681610c03d8.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 66.114.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:18:86:87:71:38:be:50:2b:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=c498e459-1f19-4004-95e9-30adbcad3fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:ae:a8:ef:21:df:c4:42:e0:bf:d6:ba:9b: c7:c0:a3:a7:a5:62:7e:20:0d:fa:46:5d:44:01:41: 64:1a:0b:ff:0a:ad:f4:84:26:4a:a5:46:34:c8:de: 8a:1c:b5:d6:9e:8d:f2:c6:29:e6:f5:ce:b8:69:75: 8a:a3:b0:47:f9:55:d6:55:67:9e:9c:80:ef:f6:8d: 58:c2:46:c9:de:60:1e:12:c0:0a:26:38:60:07:bb: ec:ba:66:95:d3:8e:55:7b:39:9a:e7:6d:9e:08:26: 7e:91:b3:a3:05:39:df:ce:52:3c:89:aa:36:1d:fc: 6d:9c:51:b4:1e:71:ca:69:23:f9:fc:52:ec:be:ce: f3:c4:de:25:2b:e2:7f:08:b7:53:ef:eb:62:7d:76: 28:a7:76:c0:cd:12:5e:ef:70:32:b9:e8:01:c8:ae: 7b:b2:2b:06:1b:1d:54:c8:86:44:90:62:50:2c:6c: 02:2b:9f:42:47:cb:d5:31:29:aa:5d:cd:56:40:56: 14:fc:52:8e:23:c6:80:15:8b:df:1e:f2:a5:df:e7: 1c:52:b9:1c:42:ed:93:e7:d4:3b:a3:09:5d:f2:fe: b4:cd:60:10:8a:56:39:6b:ba:6f:21:40:fb:e1:84: ec:7a:6e:d2:44:ab:c4:fc:8a:30:c3:8f:b3:ad:64: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E0:34:6A:2F:3A:3B:42:98:8A:56:4A:64:27:47:7D:A0:45:C9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/24ed5071-e536-3813-a276-a681610c03d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 66.114.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:80:52:e1:ad:60:10:11:3a:ba:d2:d7:c5:3f:80:ce:29:2a: b4:82:bb:07:2a:46:51:b0:2f:ef:81:16:ad:2f:fb:2d:d7:c5: d5:99:98:e7:66:06:59:76:d9:e8:52:ab:92:f4:9a:ae:07:39: b3:56:ee:f3:95:de:b7:d4:84:99:01:93:53:b0:fa:56:77:a4: 29:e2:1c:86:43:c7:e7:b2:b8:2f:9b:db:6a:20:9f:e8:c8:d4: f0:cb:41:9b:6a:5c:1e:84:07:92:d9:20:9e:a8:91:37:cd:83: 89:d1:75:15:d5:60:da:bd:54:a6:8f:3a:0a:9e:24:83:6e:88: e6:e2:1d:c1:dd:2b:e8:61:4f:55:59:ff:11:b2:76:df:91:dd: 26:1d:a5:86:80:ce:16:db:a6:81:28:8e:92:04:b1:aa:38:a0: 6f:04:db:67:2d:84:e4:13:29:f2:3e:ea:3a:7f:34:6a:ae:a3: c1:98:49:58:f3:1e:46:1a:59:46:7c:75:8a:73:f6:9f:3d:03: fc:ee:c0:a1:0a:23:86:5b:ea:8f:5d:82:7a:de:b5:e8:91:69: d4:ee:cb:6e:5f:b7:35:13:8f:df:90:2c:e0:8c:35:cf:92:a6: 2f:f5:15:db:fa:12:30:f4:cc:5b:ea:52:0b:a0:38:a9:29:49: 18:7f:fc:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRiGh3E4vlArAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YzQ5OGU0NTktMWYxOS00MDA0LTk1ZTktMzBhZGJjYWQzZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6muqO8h38RC4L/WupvHwKOnpWJ+IA36Rl1E AUFkGgv/Cq30hCZKpUY0yN6KHLXWno3yxinm9c64aXWKo7BH+VXWVWeenIDv9o1Y wkbJ3mAeEsAKJjhgB7vsumaV045Vezma522eCCZ+kbOjBTnfzlI8iao2HfxtnFG0 HnHKaSP5/FLsvs7zxN4lK+J/CLdT7+tifXYop3bAzRJe73AyuegByK57sisGGx1U yIZEkGJQLGwCK59CR8vVMSmqXc1WQFYU/FKOI8aAFYvfHvKl3+ccUrkcQu2T59Q7 owld8v60zWAQilY5a7pvIUD74YTsem7SRKvE/Ioww4+zrWSONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3gNGovOjtCmIpWSmQnR32gRcmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvMjRlZDUwNzEtZTUzNi0z ODEzLWEyNzYtYTY4MTYxMGMwM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+AUuGtYBAROrrS18U/gM4pKrSCuwcqRlGwL++BFq0v+y3XxdWZmOdm Bll22ehSq5L0mq4HObNW7vOV3rfUhJkBk1Ow+lZ3pCniHIZDx+eyuC+b22ogn+jI 1PDLQZtqXB6EB5LZIJ6okTfNg4nRdRXVYNq9VKaPOgqeJINuiObiHcHdK+hhT1VZ /xGydt+R3SYdpYaAzhbbpoEojpIEsao4oG8E22cthOQTKfI+6jp/NGquo8GYSVjz HkYaWUZ8dYpz9p89A/zuwKEKI4Zb6o9dgnreteiRadTuy25ftzUTj9+QLOCMNc+S pi/1Fdv6EjD0zFvqUgugOKkpSRh//Mc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:42:30 2025 by rpki-client