$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa File: 5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa (raw, json) Hash identifier: D+Uf7U3UnMic30iGu28vB1TEJqTjmv446yZXAbrKeGk= Subject key identifier: 48:07:E2:6A:44:2C:8F:4C:74:CB:3D:9C:EC:21:70:E4:44:45:15:FB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A1B60083D15CD1A909DED2440 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 15204 IP address blocks: 66.128.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:08:3d:15:cd:1a:90:9d:ed:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=70c1c339-c190-4b75-869e-659fcb249187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:be:60:4c:be:47:2f:42:43:d9:cc:51:c3: 38:8d:9b:79:bf:23:d3:49:7d:0c:25:a1:af:3b:ab: 1a:0b:63:62:af:6e:e9:4b:73:23:07:50:8e:48:17: 59:55:11:21:f3:34:e8:9f:3b:3e:e6:73:27:9b:9c: 9e:64:19:41:5e:ce:d1:0e:d3:47:fb:94:65:77:a1: 07:52:e9:03:df:20:3a:88:60:da:02:c4:a8:8b:f3: 0c:74:3a:6b:2e:a2:6f:8c:c7:43:dd:f9:44:8e:88: 39:97:82:a5:d1:9c:69:e6:dc:f5:fd:e3:0f:f7:5e: 20:a8:a0:9e:c2:69:23:2e:a4:23:a2:c7:bc:1b:79: 86:ee:07:eb:59:6f:b4:30:b7:1b:a4:15:18:4a:60: b5:ba:53:a3:b8:98:bf:1f:3a:94:1c:e2:ac:57:4d: db:f7:63:1c:a0:b6:0b:5f:0d:55:1e:38:0c:b0:59: e9:45:9c:cd:9e:9e:72:64:d3:94:a6:3d:60:3a:db: 53:36:9c:56:c3:f7:d0:1c:33:f4:01:c9:7e:e9:7d: 0a:80:f7:83:a4:5a:fe:52:d6:07:1a:aa:2a:65:51: 53:50:84:91:e9:0a:50:d2:80:5c:a1:6f:ac:ce:d7: e0:36:75:ea:d7:5e:a8:57:80:2a:ce:68:3c:6a:c2: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:07:E2:6A:44:2C:8F:4C:74:CB:3D:9C:EC:21:70:E4:44:45:15:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:32:b6:c9:4e:cd:df:b1:ea:47:1e:69:72:e1:dd:b2:f1:e2: ed:ca:96:c1:ea:a7:bb:61:a5:0c:84:48:1c:a4:81:c6:4d:5d: 01:c3:7e:fc:08:89:90:b6:26:83:f4:5c:69:0f:70:6e:55:f6: 45:91:22:7d:b3:e8:f2:be:26:46:8c:97:83:fe:a6:3c:14:8c: 10:f7:f9:14:6d:a2:a7:0a:6a:2c:8b:af:74:e2:10:9a:23:1c: 3a:68:e1:75:94:d9:ed:43:04:55:a2:2d:f6:ae:5f:44:cb:69: 0f:e6:59:bd:69:0b:5c:89:71:48:0d:59:e2:ac:30:6e:17:60: c3:f1:1e:ed:6b:14:3c:6f:c5:59:df:28:c0:40:5a:b1:84:0a: cd:1d:a2:6a:b1:bd:5a:39:74:21:6f:f5:6a:bf:cf:78:d4:c7: 2a:39:fa:b8:c4:69:ad:28:68:83:1e:44:bc:c3:b7:7a:09:d0: 42:80:32:2a:42:a9:cb:39:14:f3:4f:a2:fc:b5:25:4a:64:5c: 7a:b8:d7:40:60:72:69:c6:93:ad:fc:9f:9e:e6:ed:31:a1:94: 88:74:6e:35:c4:ab:38:a8:46:c5:6d:14:fa:7a:20:22:4e:1a: b7:28:5a:17:53:54:91:1b:e4:be:63:f0:51:fc:1a:e6:69:d7: 3e:1f:7b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAg9Fc0akJ3tJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NzBjMWMzMzktYzE5MC00Yjc1LTg2OWUtNjU5ZmNiMjQ5MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPy+YEy+Ry9CQ9nMUcM4jZt5vyPTSX0MJaGv O6saC2Nir27pS3MjB1COSBdZVREh8zTonzs+5nMnm5yeZBlBXs7RDtNH+5Rld6EH UukD3yA6iGDaAsSoi/MMdDprLqJvjMdD3flEjog5l4Kl0Zxp5tz1/eMP914gqKCe wmkjLqQjose8G3mG7gfrWW+0MLcbpBUYSmC1ulOjuJi/HzqUHOKsV03b92McoLYL Xw1VHjgMsFnpRZzNnp5yZNOUpj1gOttTNpxWw/fQHDP0Acl+6X0KgPeDpFr+UtYH GqoqZVFTUISR6QpQ0oBcoW+sztfgNnXq116oV4Aqzmg8asJrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgH4mpELI9MdMs9nOwhcORERRX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNTM5MmI3Y2QtZGE4Ni0z MWNkLWE0YzEtYTBmODUxZjExYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAytslOzd+x6kceaXLh3bLx4u3KlsHqp7thpQyESBykgcZNXQHDfvwI iZC2JoP0XGkPcG5V9kWRIn2z6PK+JkaMl4P+pjwUjBD3+RRtoqcKaiyLr3TiEJoj HDpo4XWU2e1DBFWiLfauX0TLaQ/mWb1pC1yJcUgNWeKsMG4XYMPxHu1rFDxvxVnf KMBAWrGECs0domqxvVo5dCFv9Wq/z3jUxyo5+rjEaa0oaIMeRLzDt3oJ0EKAMipC qcs5FPNPovy1JUpkXHq410BgcmnGk638n57m7TGhlIh0bjXEqzioRsVtFPp6ICJO GrcoWhdTVJEb5L5j8FH8GuZp1z4fe34= -----END CERTIFICATE-----Generated at Sun Jun 15 19:33:46 2025 by rpki-client