$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa File: e170db98-dbc5-34bf-81ac-0ddf841100e7.roa (raw, json) Hash identifier: VWFKwEfOPMwVKLSKD6PKkVEwvjoJ+tOv4ZkUjfeAXWQ= Subject key identifier: 18:15:E1:38:92:A9:4D:44:D6:6F:32:65:DA:0D:4C:98:00:00:BE:28 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285849E7BA86252D841AD04BFE4780 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 11693 IP address blocks: 66.216.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:86:25:2d:84:1a:d0:4b:fe:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=a8affd4f-1588-40ba-8f6d-9e72539c917c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:56:89:31:89:d9:f5:3a:1a:23:0e:8d:c2: 67:a0:bd:bd:23:ff:47:2f:df:40:5b:65:81:36:71: a5:c0:de:1a:d2:f7:91:59:c7:ad:ae:f6:bb:b6:12: 4b:37:b9:84:f5:4e:00:64:2c:49:60:ff:7e:0b:6e: 0f:9d:6d:5d:e6:b1:f5:4b:75:e5:e3:70:a7:71:dd: 28:64:4e:50:84:74:85:b7:f2:a4:0c:e5:33:33:e6: 91:5f:aa:ef:84:d1:43:80:c4:69:63:41:b6:8f:cc: 95:64:02:88:31:f7:60:4d:a1:3e:21:d6:10:b7:49: 07:60:dc:17:a9:09:a1:81:e3:1b:ba:08:0d:95:02: c0:bf:46:69:4d:81:0d:2f:52:d6:40:36:9d:49:a4: 1f:99:c9:70:b6:9d:6c:c8:15:95:70:a6:aa:84:6c: 2d:b5:24:bc:92:d1:8f:e3:51:4d:37:a0:5f:48:a7: c6:c5:48:d0:ab:4b:38:e1:64:f5:aa:b2:c3:e2:74: 25:7d:2f:08:32:fe:26:ca:8c:77:3b:0a:29:0e:74: 76:64:e0:c8:d5:f0:dc:b2:e2:e8:6c:e9:50:53:22: 59:c8:e3:02:d5:9f:e7:6b:e4:0d:a9:38:50:a4:f5: 8e:cf:07:a0:d3:e5:7c:5d:c2:03:95:33:a8:2e:17: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:15:E1:38:92:A9:4D:44:D6:6F:32:65:DA:0D:4C:98:00:00:BE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 66.216.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dc:5c:c7:7a:f5:84:3b:aa:06:85:87:1d:d1:e3:27:6c:77: 90:93:cf:87:95:64:30:4a:f7:e0:19:97:fd:66:31:eb:70:21: 56:18:ca:7a:6a:7a:6c:31:49:c8:e4:24:f3:f3:09:8d:fb:b8: 87:00:11:21:ae:f4:91:5b:28:80:13:0e:f9:34:13:fc:e4:96: 6e:59:21:25:cf:fc:a7:c7:2d:1e:a1:eb:7b:f2:a1:06:34:05: 23:71:1c:bf:0b:38:62:f3:68:64:96:a6:96:3b:45:4b:e5:28: e6:93:16:42:47:9f:17:c7:01:fe:bc:21:a6:ce:cc:a4:52:c9: db:72:6e:52:84:44:d8:33:0f:fa:42:76:c1:f6:ba:1b:99:35: 58:23:ed:32:43:31:55:5f:11:90:38:b5:5b:76:92:c6:4d:f3: f0:a0:28:e8:85:51:86:de:e3:b0:24:96:ea:06:88:d6:c3:4d: 2a:dc:37:9f:eb:da:0f:17:c6:57:74:6a:60:e1:26:fb:57:16: 88:20:16:7d:a9:a4:fc:ad:4e:9b:8d:e5:11:7c:2f:e5:9f:76: 65:dc:6c:de:dd:59:f7:d7:1c:7c:eb:db:b0:5a:20:ed:11:c8: aa:ef:07:80:24:1b:31:fc:30:4e:3e:5f:e1:2f:c1:c9:99:59: 43:09:f1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoYlLYQa0Ev+R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YThhZmZkNGYtMTU4OC00MGJhLThmNmQtOWU3MjUzOWM5MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbxWiTGJ2fU6GiMOjcJnoL29I/9HL99AW2WB NnGlwN4a0veRWcetrva7thJLN7mE9U4AZCxJYP9+C24PnW1d5rH1S3Xl43Cncd0o ZE5QhHSFt/KkDOUzM+aRX6rvhNFDgMRpY0G2j8yVZAKIMfdgTaE+IdYQt0kHYNwX qQmhgeMbuggNlQLAv0ZpTYENL1LWQDadSaQfmclwtp1syBWVcKaqhGwttSS8ktGP 41FNN6BfSKfGxUjQq0s44WT1qrLD4nQlfS8IMv4myox3OwopDnR2ZODI1fDcsuLo bOlQUyJZyOMC1Z/na+QNqThQpPWOzweg0+V8XcIDlTOoLhcqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgV4TiSqU1E1m8yZdoNTJgAAL4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZTE3MGRiOTgtZGJjNS0z NGJmLTgxYWMtMGRkZjg0MTEwMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/cXMd69YQ7qgaFhx3R4ydsd5CTz4eVZDBK9+AZl/1mMetwIVYYynpq emwxScjkJPPzCY37uIcAESGu9JFbKIATDvk0E/zklm5ZISXP/KfHLR6h63vyoQY0 BSNxHL8LOGLzaGSWppY7RUvlKOaTFkJHnxfHAf68IabOzKRSydtyblKERNgzD/pC dsH2uhuZNVgj7TJDMVVfEZA4tVt2ksZN8/CgKOiFUYbe47AkluoGiNbDTSrcN5/r 2g8Xxld0amDhJvtXFoggFn2ppPytTpuN5RF8L+WfdmXcbN7dWffXHHzr27BaIO0R yKrvB4AkGzH8ME4+X+EvwcmZWUMJ8a0= -----END CERTIFICATE-----Generated at Mon Jun 30 01:01:05 2025 by rpki-client