$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa File: 7a842816-3127-38d1-9d65-422d4458e42b.roa (raw, json) Hash identifier: 1SKHdoAsRNy56xp+wL7ziv4o0N1t8HgW7TP1VQ+OX1s= Subject key identifier: 90:DE:8C:D6:EF:90:70:D8:49:79:2A:9E:D4:02:2C:51:1C:FA:11:C6 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285849AA4F6A2372EE7B47E23CEA80 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 55293 IP address blocks: 68.66.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6a:23:72:ee:7b:47:e2:3c:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=14fdd6fa-0c8f-4a39-a990-42779f713c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:b4:91:62:37:e0:63:b6:e3:48:a6:24:0d: 78:8f:a9:11:5d:92:f0:1a:a9:27:6b:f8:6b:b2:13: 85:fc:36:6d:27:2e:00:d9:59:fc:9b:14:b4:8f:79: 3a:13:7d:5f:e6:11:c8:10:9f:0d:6f:53:00:58:14: 22:a2:ee:ce:0c:a7:c2:39:4f:fc:50:e0:a1:96:57: 9e:74:c9:1b:4f:06:7e:0e:ae:f8:25:5f:ad:4d:f0: c2:93:93:19:b2:00:80:11:b3:d6:63:b8:81:cd:4c: b8:29:34:af:5a:eb:16:ca:f6:e2:49:00:53:12:dd: 74:55:b0:22:cd:be:db:0e:62:a7:35:3e:8f:6a:23: 37:5e:96:41:29:99:1d:81:43:61:eb:f0:93:f5:52: 7e:78:dc:6b:b6:2e:33:83:bb:89:2c:0b:5e:6b:d8: 36:8c:ef:09:ec:8f:20:e9:30:72:18:e4:39:fd:26: 2e:e2:7a:b3:a6:0e:4a:8d:a3:85:71:79:0e:0e:c0: 4e:78:f1:61:f8:75:7c:66:8c:09:55:3b:c0:95:86: 81:84:c8:b3:d0:54:75:a1:27:f1:64:bb:3f:73:de: 1a:88:7b:c2:c6:49:b8:44:5c:03:a5:cb:e6:7f:b0: 5b:c2:24:16:6a:00:94:5d:c3:ae:7f:a9:08:82:17: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DE:8C:D6:EF:90:70:D8:49:79:2A:9E:D4:02:2C:51:1C:FA:11:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0d:8c:fa:ae:12:93:9c:ec:d0:e0:e1:68:dc:f4:3f:ae:4d: 99:02:65:90:49:55:d9:fb:cc:b8:95:c3:6e:2d:ae:ae:47:f2: cd:96:cb:61:c2:f8:6f:7b:7c:28:ec:ac:03:6a:45:04:d4:cd: 6c:bd:4a:42:2d:96:b8:47:6f:c4:eb:38:f4:18:e5:94:7a:2a: a2:58:65:2d:5d:60:22:c2:fb:29:32:ad:c2:b2:5e:28:df:12: 40:8f:63:c0:82:dc:82:22:47:41:ae:44:14:70:b5:93:e5:63: af:af:47:ff:c7:64:a9:dd:6a:62:ef:4d:26:fb:76:d9:b8:5f: 1f:99:73:bf:2d:63:8f:93:2e:ff:2b:80:b9:b2:cf:14:d6:5a: 51:57:72:92:97:e9:82:4d:da:45:42:e9:8b:e2:93:70:b9:e2: 18:97:9d:6e:9f:4e:f2:89:55:16:78:4d:04:48:a2:10:fa:f6: a9:81:ef:56:4b:5f:74:04:ff:64:ed:ea:3d:4c:f8:32:96:fb: 1d:b5:3a:fe:6e:3a:db:9d:28:95:1e:5a:29:30:02:45:cd:d5: b4:42:1f:f2:59:0b:f0:7e:71:09:e8:8c:1e:d7:71:81:21:fd: a3:97:7d:95:a8:ad:03:b6:b5:83:2d:3c:71:9f:5c:40:f4:9a: 05:59:35:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2ojcu57R+I86oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MTRmZGQ2ZmEtMGM4Zi00YTM5LWE5OTAtNDI3NzlmNzEzYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/y0kWI34GO240imJA14j6kRXZLwGqkna/hr shOF/DZtJy4A2Vn8mxS0j3k6E31f5hHIEJ8Nb1MAWBQiou7ODKfCOU/8UOChllee dMkbTwZ+Dq74JV+tTfDCk5MZsgCAEbPWY7iBzUy4KTSvWusWyvbiSQBTEt10VbAi zb7bDmKnNT6PaiM3XpZBKZkdgUNh6/CT9VJ+eNxrti4zg7uJLAtea9g2jO8J7I8g 6TByGOQ5/SYu4nqzpg5KjaOFcXkODsBOePFh+HV8ZowJVTvAlYaBhMiz0FR1oSfx ZLs/c94aiHvCxkm4RFwDpcvmf7BbwiQWagCUXcOuf6kIghcIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDejNbvkHDYSXkqntQCLFEc+hHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvN2E4NDI4MTYtMzEyNy0z OGQxLTlkNjUtNDIyZDQ0NThlNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACANjPquEpOc7NDg4Wjc9D+uTZkCZZBJVdn7zLiVw24trq5H8s2Wy2HC +G97fCjsrANqRQTUzWy9SkItlrhHb8TrOPQY5ZR6KqJYZS1dYCLC+ykyrcKyXijf EkCPY8CC3IIiR0GuRBRwtZPlY6+vR//HZKndamLvTSb7dtm4Xx+Zc78tY4+TLv8r gLmyzxTWWlFXcpKX6YJN2kVC6Yvik3C54hiXnW6fTvKJVRZ4TQRIohD69qmB71ZL X3QE/2Tt6j1M+DKW+x21Ov5uOtudKJUeWikwAkXN1bRCH/JZC/B+cQnojB7XcYEh /aOXfZWorQO2tYMtPHGfXED0mgVZNZ8= -----END CERTIFICATE-----Generated at Fri May 9 06:59:56 2025 by rpki-client