$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json) Hash identifier: bHUCYgukhzbYmrNFE7+ohoqIIYICMAhwJkG4qz38KSE= Subject key identifier: 83:88:D2:35:6E:FF:D2:35:5F:50:A9:EB:A5:57:21:29:3A:33:35:0E Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F43285849BC74A895539C46027B102240 Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 46694 IP address blocks: 66.209.240.0/20 maxlen: 24 192.68.190.0/24 maxlen: 24 2607:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:a8:95:53:9c:46:02:7b:10:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=95d0e25c-86cd-4580-adcc-e8732b42aed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:47:5a:ea:95:e9:a8:3b:38:f8:8a:37:6c: 59:8e:05:81:ee:a4:1a:fa:7b:60:ec:f9:4d:aa:0c: 7a:5e:cf:3e:03:74:7a:84:d5:09:c2:68:81:e0:9b: 06:12:08:8a:ed:72:e5:65:33:01:ee:6f:f9:8d:67: 3e:4a:f4:b3:98:05:12:6d:35:59:af:23:5f:c6:35: 84:ba:14:15:6a:b8:87:ac:f9:63:91:7f:77:3f:21: 16:2b:d5:e9:95:26:c4:89:a3:44:9e:b3:5d:f0:05: 14:82:92:a1:a0:4b:ca:58:68:1a:f7:f3:e2:af:a6: 72:b4:a4:c2:20:ed:0d:bb:9e:24:b2:13:7f:f9:f7: d9:93:21:a8:61:e6:cf:07:94:e5:c7:42:65:79:12: 42:f7:0f:9b:58:28:f5:70:39:b2:be:a4:59:14:b9: cf:76:41:3f:c8:ce:e3:21:ab:7b:2c:e9:66:10:c3: 62:17:df:c6:6e:fe:82:18:73:bf:9b:e9:1d:6a:a0: 09:fd:86:1d:f0:8e:3a:e7:53:10:d9:23:e7:5a:c8: 66:37:92:90:d2:55:14:cc:81:71:61:29:63:79:3f: cb:bd:53:c2:92:57:e7:84:f9:11:bb:2e:62:1e:6e: 31:83:5d:50:a9:1b:a8:0e:06:ef:98:b3:1b:78:8c: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:D2:35:6E:FF:D2:35:5F:50:A9:EB:A5:57:21:29:3A:33:35:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 192.68.190.0/24 IPv6: 2607:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:85:c5:e6:25:f5:06:72:76:53:1e:a4:71:8f:ea:44:d2:1b: a7:71:6f:0e:f1:45:32:b5:da:46:ee:43:7a:d0:87:06:bc:e1: 4e:51:27:fa:13:80:42:a7:8c:5e:6d:d0:d4:2d:26:20:67:b6: a5:a3:0d:3f:1f:ec:d8:4c:f9:48:26:09:3c:87:94:fb:4c:2d: 67:e4:00:6b:d3:bb:db:29:79:af:08:f5:ec:cc:7f:74:f8:c5: 4a:34:81:36:f9:70:a6:5f:d3:ca:96:f2:e3:9a:fb:9a:6e:92: 96:a0:59:b4:5a:8d:c8:54:53:c9:60:20:d7:e5:5f:11:a5:73: 00:61:5f:c6:82:14:8e:54:12:46:90:87:84:e3:a4:c3:bc:7e: 2f:d3:51:55:13:76:9b:e1:82:63:9c:34:9c:a4:92:a9:8a:7e: 9f:7e:16:d0:1f:5f:e3:7d:2e:b1:6e:54:a7:97:ec:32:15:e9: 18:2e:59:a8:69:4e:ea:aa:10:9c:b0:d1:69:47:24:bb:48:e4: 57:89:f0:68:bf:60:e1:39:b7:70:b4:1d:71:64:b3:48:ce:b0: ff:98:3a:3a:bc:df:45:be:5f:53:3b:72:ac:6c:7c:78:2c:34: 26:5d:89:fc:ea:d6:7e:87:38:48:9a:f3:1f:3c:dc:ec:1d:c4: 2f:ee:de:3d -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEm8dKiVU5xGAnsQIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk OTVkMGUyNWMtODZjZC00NTgwLWFkY2MtZTg3MzJiNDJhZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupZHWuqV6ag7OPiKN2xZjgWB7qQa+ntg7PlN qgx6Xs8+A3R6hNUJwmiB4JsGEgiK7XLlZTMB7m/5jWc+SvSzmAUSbTVZryNfxjWE uhQVariHrPljkX93PyEWK9XplSbEiaNEnrNd8AUUgpKhoEvKWGga9/Pir6ZytKTC IO0Nu54kshN/+ffZkyGoYebPB5Tlx0JleRJC9w+bWCj1cDmyvqRZFLnPdkE/yM7j Iat7LOlmEMNiF9/Gbv6CGHO/m+kdaqAJ/YYd8I4651MQ2SPnWshmN5KQ0lUUzIFx YSljeT/LvVPCklfnhPkRuy5iHm4xg11QqRuoDgbvmLMbeIyctwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFIOI0jVu/9I1X1Cp66VXISk6MzUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjc3YzllOTQtYzQ1Yi0z NDVjLThhNDAtYTk3NWZhZDhjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQtHwAwQA wES+MA0EAgACMAcDBQAmB2KAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHuFxeYl9QZydlMepHGP6kTSG6dx bw7xRTK12kbuQ3rQhwa84U5RJ/oTgEKnjF5t0NQtJiBntqWjDT8f7NhM+UgmCTyH lPtMLWfkAGvTu9spea8I9ezMf3T4xUo0gTb5cKZf08qW8uOa+5pukpagWbRajchU U8lgINflXxGlcwBhX8aCFI5UEkaQh4TjpMO8fi/TUVUTdpvhgmOcNJykkqmKfp9+ FtAfX+N9LrFuVKeX7DIV6RguWahpTuqqEJyw0WlHJLtI5FeJ8Gi/YOE5t3C0HXFk s0jOsP+YOjq830W+X1M7cqxsfHgsNCZdifzq1n6HOEia8x883OwdxC/u3j0= -----END CERTIFICATE-----Generated at Fri May 9 02:38:34 2025 by rpki-client