$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa File: cfa20e25-bed2-3567-961a-5bbdbe881853.roa (raw, json) Hash identifier: CdyaIvgGRpBTNUGsUdw+zPKoYE7Sl5/hQXNurCrN4No= Subject key identifier: DE:7C:E9:AA:35:F8:19:BD:7B:FC:B9:FF:F3:53:C7:C0:55:A6:DF:A3 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F43285849AD1A089A387DC8B9E93F6A00 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 26703 IP address blocks: 66.102.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:08:9a:38:7d:c8:b9:e9:3f:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=4bea4fe8-f911-48ff-8eb2-83a66755a56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:65:55:82:d8:ff:04:93:e2:ac:b6:61:0c: 11:08:cb:59:f6:b5:49:19:49:70:58:34:71:74:bf: 19:73:45:c0:35:a8:6a:8d:fa:e3:24:42:a4:4a:74: 59:c4:8e:ce:ea:42:68:82:ce:82:10:e4:44:13:90: 73:31:5e:b1:e3:ac:1b:48:7f:79:b6:fa:bd:e6:22: 9b:92:3d:ff:90:38:37:24:4f:50:17:54:3b:86:ec: 09:e2:d6:75:4a:40:58:1c:19:1e:b5:2b:e6:48:d6: 8c:f9:c8:45:10:fd:69:77:28:37:e3:3a:22:38:b1: 91:ae:83:1f:ae:80:13:e3:27:2b:05:7d:1b:a0:ce: f5:d6:22:85:ca:3c:c0:c0:8e:7c:df:ce:97:e9:35: 85:d2:9f:85:75:79:5e:0e:8e:f8:5e:14:f7:b1:e0: 59:dc:d5:ab:a2:4f:b9:9a:1c:78:18:02:44:89:dd: c4:c5:f0:9e:9b:b7:67:af:47:30:a1:05:c9:ff:38: 41:bc:00:2c:a1:0d:d2:3a:d8:80:13:7d:c1:e6:91: 7d:72:8e:9d:4b:86:be:df:16:d6:3c:ae:14:63:f4: ba:8f:05:16:11:e8:13:78:09:d9:09:75:4c:6e:81: 6c:45:45:3f:13:7b:71:83:8c:54:43:3f:ce:42:e8: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:E9:AA:35:F8:19:BD:7B:FC:B9:FF:F3:53:C7:C0:55:A6:DF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dc:e7:7b:e3:2e:4e:d3:73:a9:2b:d6:18:10:45:a1:40:8f: 3b:99:9b:42:11:24:c9:ca:ac:5a:d3:8b:e4:08:5d:a2:8e:eb: d3:83:74:b7:39:6a:50:c2:be:62:1b:98:0b:34:f4:42:e5:63: 0f:99:1b:f1:f1:3d:21:6a:8b:a7:de:98:c8:bf:78:3a:49:e3: 9e:44:bc:87:dd:b2:27:2f:a5:3d:6c:41:f2:06:f7:7d:b5:ec: ea:6d:1f:c6:e0:32:60:be:64:d2:9a:3d:39:cc:5e:86:f9:f8: 6b:cb:c5:e2:58:01:68:a3:33:b6:14:54:5a:f5:24:75:15:1a: 75:24:38:90:2e:bd:ac:a0:2e:42:1b:93:c6:37:fd:97:db:a7: 31:e3:66:2c:10:75:0c:82:cb:d4:84:c2:a9:d8:f6:77:3f:6d: fc:62:76:ca:f6:48:b2:39:cf:e4:6b:aa:e8:d2:11:f0:ac:2f: 1d:34:f6:e9:35:34:2f:76:06:5b:74:6b:79:e4:2b:ff:52:03: 51:91:3a:1f:a0:52:6a:4f:d7:24:c9:a2:de:c2:2d:06:19:df: 2b:3d:3c:6b:37:ac:9d:91:67:93:a2:79:1a:33:00:ca:94:55: 3f:15:05:0c:0d:80:99:bf:5a:55:eb:6b:a3:bd:ec:cb:42:55: 49:00:66:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgiaOH3Iuek/agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NGJlYTRmZTgtZjkxMS00OGZmLThlYjItODNhNjY3NTVhNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTtlVYLY/wST4qy2YQwRCMtZ9rVJGUlwWDRx dL8Zc0XANahqjfrjJEKkSnRZxI7O6kJogs6CEOREE5BzMV6x46wbSH95tvq95iKb kj3/kDg3JE9QF1Q7huwJ4tZ1SkBYHBketSvmSNaM+chFEP1pdyg34zoiOLGRroMf roAT4ycrBX0boM711iKFyjzAwI58386X6TWF0p+FdXleDo74XhT3seBZ3NWrok+5 mhx4GAJEid3ExfCem7dnr0cwoQXJ/zhBvAAsoQ3SOtiAE33B5pF9co6dS4a+3xbW PK4UY/S6jwUWEegTeAnZCXVMboFsRUU/E3txg4xUQz/OQuigFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN586ao1+Bm9e/y5//NTx8BVpt+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvY2ZhMjBlMjUtYmVkMi0z NTY3LTk2MWEtNWJiZGJlODgxODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvc53vjLk7Tc6kr1hgQRaFAjzuZm0IRJMnKrFrTi+QIXaKO69ODdLc5 alDCvmIbmAs09ELlYw+ZG/HxPSFqi6femMi/eDpJ455EvIfdsicvpT1sQfIG9321 7OptH8bgMmC+ZNKaPTnMXob5+GvLxeJYAWijM7YUVFr1JHUVGnUkOJAuvaygLkIb k8Y3/ZfbpzHjZiwQdQyCy9SEwqnY9nc/bfxidsr2SLI5z+RrqujSEfCsLx009uk1 NC92Blt0a3nkK/9SA1GROh+gUmpP1yTJot7CLQYZ3ys9PGs3rJ2RZ5OieRozAMqU VT8VBQwNgJm/WlXra6O97MtCVUkAZv8= -----END CERTIFICATE-----Generated at Wed May 7 17:16:12 2025 by rpki-client