$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa File: d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json) Hash identifier: 8JTQfY055UIS1p943gLhevANJ3gpHGlPVFQ4Ue+j8EU= Subject key identifier: CA:A5:B6:5E:A1:51:8F:B2:2D:2D:81:4E:DE:7D:6A:00:95:93:2E:8E Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285849C0A4D697195C0924471CDF80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 51964 IP address blocks: 66.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d6:97:19:5c:09:24:47:1c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=a9c2c6cc-b824-4b31-8ae6-b3835b56d409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a8:00:d0:20:ff:28:16:26:c4:39:8a:94:e8: 57:51:8e:00:3c:96:15:32:2d:2b:44:f3:ae:e6:e7: 69:2a:9d:1f:16:68:a3:77:b1:a6:12:09:68:10:ea: 0e:27:0a:13:6f:e2:a2:f2:36:14:39:91:2f:ca:76: 47:8e:4f:33:0e:ea:6a:42:eb:4f:7b:d4:39:0e:f6: 0e:0b:3b:9e:9e:49:cb:5f:fd:20:1d:9d:fd:dc:f5: 82:fd:ce:9f:37:c9:73:a2:5d:41:0c:1f:84:fa:48: 68:72:aa:7b:56:cc:8f:ed:fb:22:9d:36:e9:ef:9a: e9:0d:17:a4:73:c0:cb:f1:84:44:be:c0:e0:94:c1: 1b:40:1c:c2:63:f5:c3:d8:0b:6b:50:5d:9a:ba:7a: 4a:05:05:a3:b1:1c:9b:39:65:7a:47:dd:62:18:49: ff:f3:83:3a:8d:6c:4d:c7:14:82:e2:f6:06:24:96: 8f:1b:9c:93:65:63:5f:ee:51:38:c3:be:a0:27:75: c6:2d:f2:13:00:09:40:ca:60:b0:85:cd:fd:b0:5d: 07:77:ea:39:b6:ea:68:31:a1:8f:77:96:4e:91:da: 51:fe:d5:11:73:a7:ab:d2:9d:ad:91:c9:1a:5c:d1: 93:74:c9:d7:ca:24:57:42:c2:34:eb:a2:f9:4a:3d: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A5:B6:5E:A1:51:8F:B2:2D:2D:81:4E:DE:7D:6A:00:95:93:2E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:27:a2:f4:74:35:39:22:53:05:ae:68:f1:62:53:3a:a7:f5: 32:2d:6a:a0:9f:0f:5a:d6:c3:7f:e8:d0:c4:5a:30:e0:93:da: b9:40:e9:7a:d5:ad:51:36:85:43:25:db:37:77:06:aa:4a:4a: 04:03:08:9b:3c:b0:7e:33:7b:9f:6b:af:b5:cf:4f:0d:68:2f: 4d:de:4b:21:0c:ab:e8:92:6c:68:de:f9:62:6d:8d:6b:f4:0e: fa:95:eb:b4:69:99:d1:10:8a:fd:cc:d5:00:ef:14:4d:9e:aa: be:04:f3:a9:e3:43:05:66:4d:e2:5b:d4:81:f6:9b:10:8e:a5: 1b:a9:17:3c:68:f1:df:b9:19:36:84:68:8b:e3:e6:dd:36:99: 98:22:7a:0b:89:29:64:33:d8:e6:69:f9:55:c2:97:28:38:46: 5f:b6:02:64:0c:d9:83:ae:40:6c:d2:6f:2e:4f:44:77:f4:93: f2:f6:b4:63:57:16:e9:8a:7e:58:ca:ca:ac:d8:96:e0:ea:30: 5c:85:26:db:1e:68:f7:48:ec:7f:33:e4:5f:d8:43:83:a9:30: 91:18:47:45:5e:2a:c7:70:cc:41:59:bf:f6:66:55:4b:4e:10: 51:35:3c:36:9c:3a:a9:a1:fd:e6:52:72:e3:8f:ee:42:7a:c9: 74:f3:bc:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNaXGVwJJEcc34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YTljMmM2Y2MtYjgyNC00YjMxLThhZTYtYjM4MzViNTZkNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8agA0CD/KBYmxDmKlOhXUY4APJYVMi0rRPOu 5udpKp0fFmijd7GmEgloEOoOJwoTb+Ki8jYUOZEvynZHjk8zDupqQutPe9Q5DvYO CzuenknLX/0gHZ393PWC/c6fN8lzol1BDB+E+khocqp7VsyP7fsinTbp75rpDRek c8DL8YREvsDglMEbQBzCY/XD2AtrUF2aunpKBQWjsRybOWV6R91iGEn/84M6jWxN xxSC4vYGJJaPG5yTZWNf7lE4w76gJ3XGLfITAAlAymCwhc39sF0Hd+o5tupoMaGP d5ZOkdpR/tURc6er0p2tkckaXNGTdMnXyiRXQsI066L5Sj2VgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqltl6hUY+yLS2BTt59agCVky6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYnovR0NTkiUwWuaPFiUzqn9TItaqCfD1rWw3/o0MRaMOCT2rlA6XrV rVE2hUMl2zd3BqpKSgQDCJs8sH4ze59rr7XPTw1oL03eSyEMq+iSbGje+WJtjWv0 DvqV67RpmdEQiv3M1QDvFE2eqr4E86njQwVmTeJb1IH2mxCOpRupFzxo8d+5GTaE aIvj5t02mZgieguJKWQz2OZp+VXClyg4Rl+2AmQM2YOuQGzSby5PRHf0k/L2tGNX FumKfljKyqzYluDqMFyFJtseaPdI7H8z5F/YQ4OpMJEYR0VeKsdwzEFZv/ZmVUtO EFE1PDacOqmh/eZScuOP7kJ6yXTzvLg= -----END CERTIFICATE-----Generated at Sun May 11 05:29:34 2025 by rpki-client