$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f24c1e84-7667-30cc-923e-0b3f35bf808a.roa File: f24c1e84-7667-30cc-923e-0b3f35bf808a.roa (raw, json) Hash identifier: NUwbNzdDSvm4Jg859tKlx2L81uebGn8VObz2gLqIgak= Subject key identifier: F8:A3:5C:CA:BE:F5:0C:0C:33:11:18:A8:69:AA:D4:7C:BA:CD:E8:E3 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584A4C3B0AE7D31BD8F101556280 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f24c1e84-7667-30cc-923e-0b3f35bf808a.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 209 IP address blocks: 66.211.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0a:e7:d3:1b:d8:f1:01:55:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=08c7c7f1-7318-4ac4-8d42-df797998090c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:7b:af:b6:12:ad:86:16:11:95:b1:9f:a0: 60:b5:6f:97:4d:3a:2f:c4:3c:7f:04:67:c4:04:ae: 12:65:8b:ad:59:23:81:c5:4c:3e:41:9f:a0:b9:01: a7:53:05:44:67:c3:44:a1:97:2b:3f:d8:2e:e7:b3: 3c:57:92:66:f4:96:79:7f:94:50:f0:84:7c:43:8c: 4b:01:94:6b:ed:47:78:bc:cf:f6:f8:39:77:d3:8d: fd:59:7d:58:18:37:2b:1c:9e:71:7b:5d:23:e7:90: de:12:71:8e:30:9a:54:4b:b4:6e:1a:71:8a:04:8e: 42:6e:87:0d:9f:f0:96:20:82:82:33:84:ec:57:e9: 62:2e:ce:df:30:06:a0:45:ef:0f:6c:c6:44:4e:46: 43:ec:03:f9:fc:5c:c4:db:7e:d4:b8:5d:03:50:58: dc:26:1f:a0:65:1b:57:ba:27:7a:23:90:a9:c6:74: 40:76:bd:70:45:b3:20:45:f0:f0:14:75:7b:cb:ed: 0c:39:14:8b:72:8c:c1:d3:5d:44:3b:84:d2:6d:93: b3:2b:e9:e5:1e:de:94:6f:71:54:b3:09:62:47:da: 68:7a:dd:5a:41:44:82:94:f3:6f:bf:73:0d:4d:30: d9:81:85:29:89:8f:0e:5a:81:b1:b1:2d:da:bb:49: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:5C:CA:BE:F5:0C:0C:33:11:18:A8:69:AA:D4:7C:BA:CD:E8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f24c1e84-7667-30cc-923e-0b3f35bf808a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 66.211.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3b:a4:04:73:e9:e1:08:64:c6:99:af:af:67:f9:1b:6e:97: 64:c0:5d:84:03:76:8b:59:4c:f5:b4:d3:3a:f4:c0:0a:ac:33: 5c:48:62:10:3e:f3:60:94:a2:15:51:cd:46:53:06:98:97:d0: 1b:d3:35:14:f2:ff:ab:e6:bf:fd:1d:a9:c4:dd:25:2d:3a:db: ac:8d:08:c9:68:c9:f7:31:87:e7:24:00:3e:39:9b:ad:4f:9c: 21:10:32:ff:8c:dd:c7:32:c2:a1:cb:ff:1f:e5:f4:80:10:bf: 52:f9:60:bb:dc:5f:63:6a:17:a8:f4:b1:bd:14:d9:23:68:92: a5:d5:7a:f4:5f:16:94:a0:27:87:18:00:1c:0a:88:ca:b3:27: f5:64:a0:3f:c6:97:28:df:64:8d:42:1b:c5:4f:b6:db:e4:70: 56:fc:7a:3f:94:bb:3f:38:a3:5a:a5:95:fd:11:75:04:aa:25: 76:a6:94:f0:36:a5:51:7d:86:7a:12:0c:74:4e:00:94:b5:e2: 1d:82:a5:e0:28:10:59:ce:73:de:68:38:df:b5:83:0e:5c:4f: c2:c8:5f:1e:60:54:8b:c3:a4:82:ff:76:a6:d0:4f:58:24:87: c7:13:01:f9:95:83:8f:0c:9a:7e:fc:4f:56:87:ab:7d:64:ee: 8c:48:0b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwrn0xvY8QFVYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MDhjN2M3ZjEtNzMxOC00YWM0LThkNDItZGY3OTc5OTgwOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGV7r7YSrYYWEZWxn6BgtW+XTTovxDx/BGfE BK4SZYutWSOBxUw+QZ+guQGnUwVEZ8NEoZcrP9gu57M8V5Jm9JZ5f5RQ8IR8Q4xL AZRr7Ud4vM/2+Dl30439WX1YGDcrHJ5xe10j55DeEnGOMJpUS7RuGnGKBI5CbocN n/CWIIKCM4TsV+liLs7fMAagRe8PbMZETkZD7AP5/FzE237UuF0DUFjcJh+gZRtX uid6I5CpxnRAdr1wRbMgRfDwFHV7y+0MORSLcozB011EO4TSbZOzK+nlHt6Ub3FU swliR9poet1aQUSClPNvv3MNTTDZgYUpiY8OWoGxsS3au0mbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPijXMq+9QwMMxEYqGmq1Hy6zejjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZjI0YzFlODQtNzY2Ny0z MGNjLTkyM2UtMGIzZjM1YmY4MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI7pARz6eEIZMaZr69n+Rtul2TAXYQDdotZTPW00zr0wAqsM1xIYhA+ 82CUohVRzUZTBpiX0BvTNRTy/6vmv/0dqcTdJS0626yNCMloyfcxh+ckAD45m61P nCEQMv+M3ccywqHL/x/l9IAQv1L5YLvcX2NqF6j0sb0U2SNokqXVevRfFpSgJ4cY ABwKiMqzJ/VkoD/GlyjfZI1CG8VPttvkcFb8ej+Uuz84o1qllf0RdQSqJXamlPA2 pVF9hnoSDHROAJS14h2CpeAoEFnOc95oON+1gw5cT8LIXx5gVIvDpIL/dqbQT1gk h8cTAfmVg48Mmn78T1aHq31k7oxICwU= -----END CERTIFICATE-----Generated at Tue Jul 1 18:23:55 2025 by rpki-client