$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa File: 58025c98-ad3f-3b15-8090-1fa374b27453.roa (raw, json) Hash identifier: w5/YEgQRXKpYYpiNaQPf9yOkWSGOcFxsZvqKxU2L9e4= Subject key identifier: 4A:12:29:18:A0:CC:BC:78:6B:5C:F0:12:81:14:28:E6:C3:A6:D0:C3 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F43285849BC74AC12295470CE00306340 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 400610 IP address blocks: 66.219.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ac:12:29:54:70:ce:00:30:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=6292da1d-bbc1-4eab-809f-7adacccdc282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:f2:d1:64:64:e4:9f:e6:f1:33:1b:f1:40: fd:0a:91:bf:43:b9:72:ea:43:1f:a4:fc:9d:12:11: 1a:11:6c:94:04:16:2f:03:bb:29:61:7b:1b:f4:c3: ff:fd:67:8f:89:e4:f7:6d:bc:ab:1b:27:f5:4f:54: 86:5c:2a:74:0d:ff:85:13:53:5e:9a:3f:15:54:24: 64:16:56:2c:68:51:bf:20:d3:d0:d3:5d:6f:87:8d: fb:15:ce:a0:2c:c8:45:fc:4c:c6:53:dd:0c:d9:b9: 69:b8:a5:cc:3e:51:df:c3:9d:58:a2:f3:6a:46:8a: 34:f9:76:e8:a4:32:2e:2d:2e:23:21:68:3c:94:74: 1d:cb:dd:fa:58:e6:2a:68:b9:5e:bc:37:00:d1:8e: 45:14:5c:36:b0:e9:68:36:a3:54:73:0a:1c:8b:3b: 5c:ea:d6:ac:13:ad:03:45:d3:24:48:ee:d7:1e:7b: e3:3c:1d:74:3a:2d:e2:7b:f0:51:54:16:72:dd:08: f9:e9:14:41:c3:d8:5a:0d:5c:3b:9f:52:3c:e1:88: 6f:8c:73:5f:33:44:50:bb:33:ec:d1:aa:98:ba:76: d8:c5:4b:db:02:65:76:78:34:ec:e3:66:69:8c:b1: 3c:95:7b:27:7c:3b:9a:3e:77:c9:7a:30:ce:2a:ff: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:29:18:A0:CC:BC:78:6B:5C:F0:12:81:14:28:E6:C3:A6:D0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:75:ca:11:41:21:db:73:3b:8a:8f:49:94:dd:55:91:94:2b: 57:ef:08:b4:69:01:95:28:42:06:ec:f3:b6:b6:98:43:13:02: 94:c5:0a:1e:0f:e4:cd:af:7a:bf:f7:4a:30:5d:2b:02:e2:d7: 71:dd:91:ea:4d:6b:18:3c:f3:81:bf:2d:39:35:a1:7b:72:07: 8f:c8:90:3c:08:f7:3e:7f:da:d9:46:5a:fd:44:69:34:40:6e: 4b:26:02:33:53:b9:39:d1:c5:fa:26:2d:8d:e3:17:98:13:d6: 6b:f2:46:10:d2:b8:45:c3:86:f2:d2:12:16:4d:0b:b4:79:88: 22:70:4d:da:85:da:1e:08:9e:62:a7:73:e5:3f:8c:40:2f:7c: 3f:76:f7:9a:54:fa:de:c2:43:83:68:58:cb:60:ff:8d:08:ec: cd:60:4e:25:59:64:5a:79:54:76:32:1a:fc:24:4f:36:03:ad: a9:fd:5c:4b:cf:20:97:cf:c1:a6:92:12:61:91:33:86:6e:1a: 95:27:76:c9:bc:84:83:26:25:61:f5:8f:93:0e:d9:63:72:99: 51:87:63:3a:80:c1:63:e4:45:ab:74:0e:80:14:21:4c:f8:21: 8a:93:24:ea:2e:17:c4:95:46:8f:1e:63:79:8e:be:41:19:c8: b0:28:0c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKwSKVRwzgAwY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk NjI5MmRhMWQtYmJjMS00ZWFiLTgwOWYtN2FkYWNjY2RjMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Szy0WRk5J/m8TMb8UD9CpG/Q7ly6kMfpPyd EhEaEWyUBBYvA7spYXsb9MP//WePieT3bbyrGyf1T1SGXCp0Df+FE1Nemj8VVCRk FlYsaFG/INPQ011vh437Fc6gLMhF/EzGU90M2blpuKXMPlHfw51YovNqRoo0+Xbo pDIuLS4jIWg8lHQdy936WOYqaLlevDcA0Y5FFFw2sOloNqNUcwociztc6tasE60D RdMkSO7XHnvjPB10Oi3ie/BRVBZy3Qj56RRBw9haDVw7n1I84YhvjHNfM0RQuzPs 0aqYunbYxUvbAmV2eDTs42ZpjLE8lXsnfDuaPnfJejDOKv8s9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoSKRigzLx4a1zwEoEUKObDptDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvNTgwMjVjOTgtYWQzZi0z YjE1LTgwOTAtMWZhMzc0YjI3NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp1yhFBIdtzO4qPSZTdVZGUK1fvCLRpAZUoQgbs87a2mEMTApTFCh4P 5M2ver/3SjBdKwLi13HdkepNaxg884G/LTk1oXtyB4/IkDwI9z5/2tlGWv1EaTRA bksmAjNTuTnRxfomLY3jF5gT1mvyRhDSuEXDhvLSEhZNC7R5iCJwTdqF2h4InmKn c+U/jEAvfD9295pU+t7CQ4NoWMtg/40I7M1gTiVZZFp5VHYyGvwkTzYDran9XEvP IJfPwaaSEmGRM4ZuGpUndsm8hIMmJWH1j5MO2WNymVGHYzqAwWPkRat0DoAUIUz4 IYqTJOouF8SVRo8eY3mOvkEZyLAoDEo= -----END CERTIFICATE-----Generated at Fri May 9 02:45:05 2025 by rpki-client