$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa File: 2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa (raw, json) Hash identifier: 00PKmtvRwHucoiUmxPVPzEHWVXgGXTxTNKaqmJtB9Mc= Subject key identifier: EC:7D:6E:44:45:22:72:54:EA:E8:4A:FD:92:0C:D4:8A:52:4A:42:35 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858499C78FC0F0A67DA2D4E67D780 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa Signing time: Tue 22 Apr 2025 14:03:42 +0000 ROA not before: Tue 22 Apr 2025 14:03:42 +0000 ROA not after: Mon 21 Jul 2025 14:03:42 +0000 asID: 18785 IP address blocks: 66.115.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:78:fc:0f:0a:67:da:2d:4e:67:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 22 14:03:42 2025 GMT Not After : Jul 21 14:03:42 2025 GMT Subject: CN=cd6000b3-1294-4230-b015-a36787d8fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5d:ff:bd:4c:9b:31:9a:6d:13:23:e0:b0:a0: 4c:85:68:68:08:80:e4:62:70:05:1d:b1:25:30:49: 6d:3c:1d:79:2f:c5:cd:70:89:5d:ca:73:60:dd:96: ac:f3:38:e0:fb:b6:bc:ff:17:ef:2e:7b:12:d7:7d: 3c:6d:9a:69:d8:11:7a:e8:7d:67:17:5e:74:23:1d: 2b:9b:06:c8:1d:8d:10:00:5c:fc:b3:d6:a2:7f:13: be:f7:b5:c1:a6:05:91:f0:3b:b2:96:27:91:42:ff: 9c:91:f9:9a:21:a4:dd:53:8b:4a:70:f6:22:9d:26: 5a:d0:1d:8e:7c:ad:54:f6:01:4e:d2:77:46:20:ae: d3:c6:d6:be:fd:65:13:21:d9:11:b8:92:34:29:fb: 0a:fd:6b:bb:4d:3e:43:1f:f8:37:72:90:e1:f2:e1: e1:46:70:64:91:0e:fd:65:ed:ee:97:c2:e0:91:ca: d7:31:75:dd:61:37:2d:af:09:e9:cd:e7:b9:91:ad: 77:b3:38:1f:28:fe:c5:85:6d:04:ce:3b:9d:63:27: 55:be:0b:1f:42:ff:bb:ac:91:ef:b6:41:48:4f:4a: 3c:44:fd:1d:d6:da:02:27:df:08:1a:00:a8:67:f2: 91:de:ab:d6:35:0a:60:ab:ce:19:0d:d2:91:45:05: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7D:6E:44:45:22:72:54:EA:E8:4A:FD:92:0C:D4:8A:52:4A:42:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b3:14:5a:97:12:5b:3a:41:ec:bb:95:cf:24:1a:b2:bb:02: 72:a6:9d:54:69:a7:f8:4e:46:96:76:95:d5:c8:2a:f2:13:52: 52:71:d9:c5:5d:0e:35:c9:b2:64:9a:1c:30:88:41:74:bd:f2: 10:ec:3f:ac:b6:92:73:64:c1:06:f5:98:c6:4c:0e:c1:48:c2: f0:6b:67:1e:c8:c9:df:f8:e1:36:85:18:d5:46:7d:90:aa:ec: 9c:79:3f:3f:74:d8:8d:2a:7e:ff:ba:e7:f8:95:fa:97:bd:49: d3:64:2f:aa:4c:20:81:ef:ca:18:f9:47:99:a4:ce:c3:f5:a0: 80:9c:56:0d:45:4a:1a:2c:5e:ac:b5:c2:c7:c7:f0:3b:5f:2a: 88:85:58:5f:21:74:2f:aa:7c:6a:94:3c:ef:ee:d0:34:11:3b: 02:15:6c:e4:5f:f2:4e:40:0f:aa:6a:1e:08:66:81:85:48:2d: a3:dd:04:36:46:4b:19:b2:fe:17:8f:85:83:1a:17:ec:0f:c6: 8b:cd:be:fb:a2:83:85:7b:be:3b:f8:80:bc:9b:48:15:60:65: a3:a4:9f:71:51:ed:df:52:2a:e6:6d:79:af:6a:47:59:43:a0: 76:cc:42:84:d3:7d:fc:dd:77:96:cf:c9:94:8e:8c:68:ef:9b: c2:89:de:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcePwPCmfaLU5n14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQyMjE0MDM0MloXDTI1MDcyMTE0MDM0MlowLzEtMCsGA1UEAxMk Y2Q2MDAwYjMtMTI5NC00MjMwLWIwMTUtYTM2Nzg3ZDhmYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+V3/vUybMZptEyPgsKBMhWhoCIDkYnAFHbEl MEltPB15L8XNcIldynNg3Zas8zjg+7a8/xfvLnsS1308bZpp2BF66H1nF150Ix0r mwbIHY0QAFz8s9aifxO+97XBpgWR8DuylieRQv+ckfmaIaTdU4tKcPYinSZa0B2O fK1U9gFO0ndGIK7Txta+/WUTIdkRuJI0KfsK/Wu7TT5DH/g3cpDh8uHhRnBkkQ79 Ze3ul8LgkcrXMXXdYTctrwnpzee5ka13szgfKP7FhW0EzjudYydVvgsfQv+7rJHv tkFIT0o8RP0d1toCJ98IGgCoZ/KR3qvWNQpgq84ZDdKRRQUjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx9bkRFInJU6uhK/ZIM1IpSSkI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmNhNWJjNGQtOWMyZi0z MGZmLTliNzctMmJhNjhjNGRlMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2zFFqXEls6Qey7lc8kGrK7AnKmnVRpp/hORpZ2ldXIKvITUlJx2cVd DjXJsmSaHDCIQXS98hDsP6y2knNkwQb1mMZMDsFIwvBrZx7Iyd/44TaFGNVGfZCq 7Jx5Pz902I0qfv+65/iV+pe9SdNkL6pMIIHvyhj5R5mkzsP1oICcVg1FShosXqy1 wsfH8DtfKoiFWF8hdC+qfGqUPO/u0DQROwIVbORf8k5AD6pqHghmgYVILaPdBDZG Sxmy/hePhYMaF+wPxovNvvuig4V7vjv4gLybSBVgZaOkn3FR7d9SKuZtea9qR1lD oHbMQoTTffzdd5bPyZSOjGjvm8KJ3nM= -----END CERTIFICATE-----Generated at Tue Apr 29 06:29:50 2025 by rpki-client