$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa File: b0d64248-0620-3fb2-b31b-e4ff4326842d.roa (raw, json) Hash identifier: lclPQ1Flb+l8KhZ6SFFyXxrPL5TSKxdq9DdZooq0e4k= Subject key identifier: 23:20:55:61:A8:DC:35:29:2C:7E:81:F3:7A:64:3C:2D:A0:86:2C:48 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A31B562D04EC970A62F43D310 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 66.109.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:62:d0:4e:c9:70:a6:2f:43:d3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=d4060719-e808-49c2-ac33-b54b2e6a7430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:20:52:1c:1e:9e:c6:99:ac:06:53:0f:9b: df:5c:e2:1e:37:23:eb:56:92:85:a1:e9:f3:8d:29: 68:c7:a5:47:a8:a9:5d:02:05:2f:cb:ae:08:9f:3b: a4:b9:a3:bb:d1:3d:ad:66:dc:d1:f7:e0:7d:23:42: dc:d3:34:72:87:d5:9e:a7:ef:81:9b:41:a3:3f:93: 1d:4b:8e:63:33:34:5e:52:02:4b:f3:ad:ac:08:42: b2:d6:20:b3:12:4f:80:a6:63:96:6a:2c:d7:1f:ac: 8a:54:4d:79:0f:32:94:f6:a8:56:2e:1c:90:9b:27: c5:a3:51:19:ec:3a:02:da:36:ea:07:d1:c0:9d:ed: 42:c9:7f:72:dd:b3:5b:0c:68:6f:db:bc:90:ea:57: aa:b5:0e:03:a2:d5:17:ad:a3:65:a3:b5:e8:88:be: 3f:bf:36:21:a6:7e:fb:84:71:ea:4d:6b:d8:03:1f: 9c:4f:e7:22:17:a5:b7:e0:1f:69:77:8f:1d:5c:69: 88:b7:44:42:a3:4d:6f:5d:55:96:d7:0b:7d:74:08: 5a:2a:3e:cf:65:54:4a:45:f8:cd:a7:b6:cb:17:cf: 98:2a:7f:83:4d:cc:53:bd:1b:e6:e8:c3:4f:83:c0: 4b:e9:9b:c9:aa:60:b6:e2:2f:d3:01:8a:d6:0d:27: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:55:61:A8:DC:35:29:2C:7E:81:F3:7A:64:3C:2D:A0:86:2C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:cb:ce:c7:df:75:b6:fd:3a:f4:03:99:67:1a:41:ce:59:36: 8a:e0:65:32:4e:88:cb:77:83:1f:d5:a8:47:1b:20:55:70:b7: af:da:4d:95:79:f6:c6:eb:27:75:12:1e:00:1f:28:00:bd:19: 2a:11:2a:35:19:eb:b8:ce:fc:53:52:fc:2c:99:07:91:68:18: 48:97:de:19:57:2c:80:23:51:bb:c7:63:62:08:6b:7c:40:55: 46:ae:94:ed:14:04:43:10:da:30:39:2d:0f:2f:1c:50:4b:bc: 5c:7f:ed:31:22:54:d2:06:7e:53:27:38:1b:2a:4a:16:4e:f9: a0:b5:9b:fe:e1:75:96:43:e0:c5:28:20:e3:a3:5f:a1:60:7c: 84:be:ba:4d:47:36:28:1d:d3:e1:39:14:9c:a7:7e:53:70:25: 36:28:a0:5f:23:5f:b3:0b:6f:85:e0:6e:54:37:68:85:76:d2: ee:c5:a1:56:7e:a9:04:a6:ab:ca:07:d8:19:dc:8f:c5:1c:6b: de:56:88:6d:fb:e8:73:48:c1:72:b5:05:05:83:38:c1:b6:fb: 47:a8:97:dd:e0:59:eb:f6:a1:11:d7:5a:64:17:10:69:44:d1: ed:64:17:b3:72:a6:51:33:9b:25:52:70:f2:d7:02:65:be:25: c7:cc:58:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWLQTslwpi9D0xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDQwNjA3MTktZTgwOC00OWMyLWFjMzMtYjU0YjJlNmE3NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fggUhwensaZrAZTD5vfXOIeNyPrVpKFoenz jSlox6VHqKldAgUvy64InzukuaO70T2tZtzR9+B9I0Lc0zRyh9Wep++Bm0GjP5Md S45jMzReUgJL862sCEKy1iCzEk+ApmOWaizXH6yKVE15DzKU9qhWLhyQmyfFo1EZ 7DoC2jbqB9HAne1CyX9y3bNbDGhv27yQ6leqtQ4DotUXraNlo7XoiL4/vzYhpn77 hHHqTWvYAx+cT+ciF6W34B9pd48dXGmIt0RCo01vXVWW1wt9dAhaKj7PZVRKRfjN p7bLF8+YKn+DTcxTvRvm6MNPg8BL6ZvJqmC24i/TAYrWDSdp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMgVWGo3DUpLH6B83pkPC2ghixIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjBkNjQyNDgtMDYyMC0z ZmIyLWIzMWItZTRmZjQzMjY4NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQm2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHLzsffdbb9OvQDmWcaQc5ZNorgZTJOiMt3gx/VqEcbIFVwt6/aTZV5 9sbrJ3USHgAfKAC9GSoRKjUZ67jO/FNS/CyZB5FoGEiX3hlXLIAjUbvHY2IIa3xA VUaulO0UBEMQ2jA5LQ8vHFBLvFx/7TEiVNIGflMnOBsqShZO+aC1m/7hdZZD4MUo IOOjX6FgfIS+uk1HNigd0+E5FJynflNwJTYooF8jX7MLb4XgblQ3aIV20u7FoVZ+ qQSmq8oH2Bncj8Uca95WiG376HNIwXK1BQWDOMG2+0eol93gWev2oRHXWmQXEGlE 0e1kF7NyplEzmyVScPLXAmW+JcfMWGU= -----END CERTIFICATE-----Generated at Mon Jun 16 13:33:36 2025 by rpki-client