$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa File: 3950370e-8c40-395e-afe3-17d64fefd85e.roa (raw, json) Hash identifier: M9iF66fE2cJIFNQaz09BZGI1p8pw5LwzWg9wU9iIu1Q= Subject key identifier: 32:A4:06:DD:D3:25:54:81:41:85:A6:11:D8:F4:9E:8F:48:93:41:DB Certificate issuer: /CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb Certificate serial: 010D0C9F4328584A19FABB84A7C9BC42F325AE00 Authority key identifier: D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 54262 IP address blocks: 66.51.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bb:84:a7:c9:bc:42:f3:25:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=3e3c19ff-9a1d-400b-ae66-c2a36cb37201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:1c:ef:cf:7e:e9:ab:f3:95:34:47:53:1a: 32:8c:37:2c:e0:1b:90:d6:47:7a:26:1b:8b:51:3a: f5:ef:b9:63:d4:1d:3a:1b:70:91:a6:70:d2:62:70: 6a:2e:c5:9e:8b:b0:4d:70:80:fe:e7:c7:bb:a9:d2: 52:a8:16:b4:35:d6:d0:d1:a3:b3:f1:86:77:91:04: 77:1e:6b:47:37:c3:79:f4:0c:f8:71:9d:90:36:ea: f2:14:0e:14:40:79:c9:4f:89:18:68:d8:e7:06:6e: 56:c2:05:b6:44:1c:23:83:e5:36:70:18:f0:1d:e2: 4a:34:cf:01:ea:fe:4d:60:fc:84:13:38:1a:20:3c: e7:7e:5e:3b:3a:c1:ac:7c:c7:d7:24:b9:51:b0:e9: 76:6c:c6:4c:46:34:0a:43:11:64:d0:19:a2:58:be: 1d:36:29:8e:ad:94:7b:91:65:fb:28:90:64:29:a6: 27:ab:5d:6a:db:6e:b7:fe:5f:c9:8b:03:e2:06:ff: 61:f6:82:76:4b:0d:5c:b2:53:29:a9:9a:9a:16:81: a6:b2:49:d1:cd:54:d7:0a:d3:63:db:10:43:40:6e: fb:8b:5b:33:a7:f4:21:59:99:aa:5c:97:57:8a:94: de:a2:49:56:ae:3f:c9:1e:f9:e2:71:b1:78:bd:e2: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:06:DD:D3:25:54:81:41:85:A6:11:D8:F4:9E:8F:48:93:41:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl X509v3 Authority Key Identifier: keyid:D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer sbgp-ipAddrBlock: critical IPv4: 66.51.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e7:8e:07:0a:b4:d3:66:38:fe:92:bd:51:6d:ce:48:d8:75: c9:0e:cb:99:61:f2:88:77:66:2a:42:6e:16:96:8a:da:62:8c: 2d:bb:3d:df:82:e8:c1:00:3b:56:64:d3:0f:52:c1:9a:9a:27: 84:b9:b0:c9:49:e7:fa:56:e4:4f:e5:3e:fe:a4:6d:14:6b:1a: 37:1d:b2:b6:32:69:77:1c:5f:18:ff:bd:68:ea:ff:35:42:3c: 81:03:a4:4f:e5:c8:bf:fc:85:73:33:15:9d:6d:0d:37:85:07: 77:a2:d9:7f:a8:3f:eb:36:1a:db:04:dd:7f:6b:36:f7:a5:27: 29:39:86:8f:d3:d8:af:cf:df:89:2d:4d:5a:98:49:79:ea:c7: 5d:56:7c:2a:d2:3d:9d:58:05:67:44:29:a2:ad:53:70:8a:06: fd:43:12:fa:de:9f:99:0d:89:5a:08:e3:5d:63:cf:39:e0:cf: 26:5f:4a:1d:aa:d8:eb:ad:88:c7:0c:81:b2:99:7b:96:43:74: ac:8e:86:56:7c:77:36:67:c2:18:b4:0d:63:f9:9a:98:72:02: ec:36:c4:bd:bc:27:91:19:ad:9b:aa:12:a6:8d:a5:74:50:98: e5:24:c8:9b:be:21:06:86:00:ca:88:e6:2b:2f:fc:75:6f:ca: 2f:92:2d:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+ruEp8m8QvMlrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllYzIzMDItYzllNy00OWQ4LThmYzgtZGEyNzIxZmZl MmJiMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk M2UzYzE5ZmYtOWExZC00MDBiLWFlNjYtYzJhMzZjYjM3MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/oc789+6avzlTRHUxoyjDcs4BuQ1kd6JhuL UTr177lj1B06G3CRpnDSYnBqLsWei7BNcID+58e7qdJSqBa0NdbQ0aOz8YZ3kQR3 HmtHN8N59Az4cZ2QNuryFA4UQHnJT4kYaNjnBm5WwgW2RBwjg+U2cBjwHeJKNM8B 6v5NYPyEEzgaIDznfl47OsGsfMfXJLlRsOl2bMZMRjQKQxFk0BmiWL4dNimOrZR7 kWX7KJBkKaYnq11q2263/l/JiwPiBv9h9oJ2Sw1cslMpqZqaFoGmsknRzVTXCtNj 2xBDQG77i1szp/QhWZmqXJdXipTeoklWrj/JHvnicbF4veKgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKkBt3TJVSBQYWmEdj0no9Ik0HbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWVj MjMwMi1jOWU3LTQ5ZDgtOGZjOC1kYTI3MjFmZmUyYmIvMzk1MDM3MGUtOGM0MC0z OTVlLWFmZTMtMTdkNjRmZWZkODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDllYzIzMDItYzllNy00OWQ4LThm YzgtZGEyNzIxZmZlMmJiL2Q5ZWMyMzAyLWM5ZTctNDlkOC04ZmM4LWRhMjcyMWZm ZTJiYi5jcmwwHwYDVR0jBBgwFoAU0/PWhM+bD52imKEdmJlh/rvtXRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOWVjMjMwMi1jOWU3LTQ5ZDgtOGZjOC1kYTI3 MjFmZmUyYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfnjgcKtNNmOP6SvVFtzkjYdckOy5lh8oh3ZipCbhaWitpijC27Pd+C 6MEAO1Zk0w9SwZqaJ4S5sMlJ5/pW5E/lPv6kbRRrGjcdsrYyaXccXxj/vWjq/zVC PIEDpE/lyL/8hXMzFZ1tDTeFB3ei2X+oP+s2GtsE3X9rNvelJyk5ho/T2K/P34kt TVqYSXnqx11WfCrSPZ1YBWdEKaKtU3CKBv1DEvren5kNiVoI411jzzngzyZfSh2q 2OutiMcMgbKZe5ZDdKyOhlZ8dzZnwhi0DWP5mphyAuw2xL28J5EZrZuqEqaNpXRQ mOUkyJu+IQaGAMqI5isv/HVvyi+SLek= -----END CERTIFICATE-----Generated at Sun Jun 15 23:08:09 2025 by rpki-client