$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/0b63bbd5-1511-3b21-8888-112ea9015d1d.roa File: 0b63bbd5-1511-3b21-8888-112ea9015d1d.roa (raw, json) Hash identifier: DTjaYL4RKuOka8YgqUwMgHqoM4bRu61+E0e+Pn7itJU= Subject key identifier: AB:19:AB:FB:FD:9B:3D:DD:6F:99:B4:88:53:C4:53:7B:77:12:06:0A Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584A0ECFF3C2C139871C9F887F80 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/0b63bbd5-1511-3b21-8888-112ea9015d1d.roa Signing time: Mon 02 Jun 2025 13:01:03 +0000 ROA not before: Mon 02 Jun 2025 13:01:03 +0000 ROA not after: Sun 31 Aug 2025 13:01:03 +0000 asID: 22351 IP address blocks: 66.205.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:cf:f3:c2:c1:39:87:1c:9f:88:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Jun 2 13:01:03 2025 GMT Not After : Aug 31 13:01:03 2025 GMT Subject: CN=c0bf2d73-a24a-4183-85ce-ea45982f8ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:94:42:81:bd:37:e8:6b:1a:7c:48:b7:0d: 6a:4a:51:ef:a1:33:5d:74:ae:45:36:81:31:47:d5: f9:7d:65:24:50:74:19:c3:e0:82:fc:eb:c4:ef:45: e8:3f:ed:dd:60:a1:53:a0:98:ea:80:ed:62:bd:eb: b0:d1:50:a4:02:99:98:29:03:78:30:dd:af:4b:9b: 6d:7c:6a:23:31:cd:26:f1:ae:ae:34:c5:2d:49:50: 50:ca:3f:79:6b:0c:ab:bd:9b:ee:30:3c:69:41:7b: 2f:41:ba:f7:0d:9f:32:d5:5e:88:bc:ca:62:24:f0: 2d:77:6d:38:dd:f9:93:f4:ab:61:f0:0c:19:af:f4: f3:4b:e8:85:e1:33:85:32:31:a1:b4:91:d1:e2:5b: 7f:a1:ae:49:f8:7a:85:41:fd:cc:80:c0:6c:c9:b4: d6:e3:a1:34:75:ef:d7:f5:2e:4d:51:52:ca:f1:11: 0e:04:df:84:44:05:48:bc:6a:51:60:a1:0d:de:52: ff:42:19:d2:ec:bc:9f:0c:19:16:b6:c8:7d:c6:be: 21:1e:1d:8c:50:0e:55:74:78:0a:dc:ba:a7:d4:dc: 12:0d:30:fb:00:cf:d3:b3:ba:3c:71:53:82:f9:88: ab:86:06:3f:e4:98:6a:83:a6:93:14:93:ab:a8:90: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:19:AB:FB:FD:9B:3D:DD:6F:99:B4:88:53:C4:53:7B:77:12:06:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/0b63bbd5-1511-3b21-8888-112ea9015d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.205.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1e:9a:09:74:e4:3e:a1:ba:df:6f:bc:e2:49:5b:ad:b7:3c: f4:52:be:e8:95:80:64:0c:6a:7d:70:b1:fc:fe:ae:9c:06:b2: 25:f8:93:fd:60:fe:e0:22:4c:e5:9a:f1:11:89:5c:6a:d3:be: 99:24:89:ad:eb:14:ce:a4:4b:05:61:26:8c:23:37:c0:3a:3e: ca:8f:a4:2f:a3:af:c2:ef:93:d0:e7:e3:9c:07:9f:6d:1a:b0: 83:bb:e0:4d:39:26:60:8c:77:39:69:bb:d5:4d:49:e0:0b:54: 2c:aa:69:76:34:5f:bc:40:72:aa:58:4b:0b:58:4c:61:96:99: 49:ad:15:a6:a8:b6:b8:06:d1:5f:49:66:9a:91:47:45:db:1f: 70:74:06:1e:aa:79:30:d9:f1:09:b9:0b:da:70:dd:3a:86:75: cd:04:63:54:d9:3e:06:7e:3a:84:e6:b3:80:fb:a1:f8:68:23: 22:5e:1d:94:c6:24:1f:c9:3f:66:90:01:12:67:ee:26:d0:95: b1:fb:89:7b:40:81:8a:6d:89:55:ab:aa:2b:90:f6:66:75:4c: 81:dd:9f:51:d9:a1:c2:d5:ae:7a:1c:5f:98:d3:f8:84:06:0d: 65:4a:c2:9e:b4:e0:96:0e:92:2d:37:c0:4f:11:db:eb:2c:c7: f6:8d:49:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoOz/PCwTmHHJ+If4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI1MDYwMjEzMDEwM1oXDTI1MDgzMTEzMDEwM1owLzEtMCsGA1UEAxMk YzBiZjJkNzMtYTI0YS00MTgzLTg1Y2UtZWE0NTk4MmY4ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1CUQoG9N+hrGnxItw1qSlHvoTNddK5FNoEx R9X5fWUkUHQZw+CC/OvE70XoP+3dYKFToJjqgO1iveuw0VCkApmYKQN4MN2vS5tt fGojMc0m8a6uNMUtSVBQyj95awyrvZvuMDxpQXsvQbr3DZ8y1V6IvMpiJPAtd204 3fmT9Kth8AwZr/TzS+iF4TOFMjGhtJHR4lt/oa5J+HqFQf3MgMBsybTW46E0de/X 9S5NUVLK8REOBN+ERAVIvGpRYKEN3lL/QhnS7LyfDBkWtsh9xr4hHh2MUA5VdHgK 3Lqn1NwSDTD7AM/Ts7o8cVOC+YirhgY/5Jhqg6aTFJOrqJDDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsZq/v9mz3db5m0iFPEU3t3EgYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvMGI2M2JiZDUtMTUxMS0z YjIxLTg4ODgtMTEyZWE5MDE1ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs0rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsemgl05D6hut9vvOJJW623PPRSvuiVgGQMan1wsfz+rpwGsiX4k/1g /uAiTOWa8RGJXGrTvpkkia3rFM6kSwVhJowjN8A6PsqPpC+jr8Lvk9Dn45wHn20a sIO74E05JmCMdzlpu9VNSeALVCyqaXY0X7xAcqpYSwtYTGGWmUmtFaaotrgG0V9J ZpqRR0XbH3B0Bh6qeTDZ8Qm5C9pw3TqGdc0EY1TZPgZ+OoTms4D7ofhoIyJeHZTG JB/JP2aQARJn7ibQlbH7iXtAgYptiVWrqiuQ9mZ1TIHdn1HZocLVrnocX5jT+IQG DWVKwp604JYOki03wE8R2+ssx/aNSYY= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:41 2025 by rpki-client