$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa File: 2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa (raw, json) Hash identifier: Jz/cv5NqJXVy0BwuwQWTkgWn/6KgyoZ/8UOXjDk14uo= Subject key identifier: 38:86:19:2A:00:CF:A9:0B:73:80:15:6E:EA:1F:3A:6C:47:28:29:93 Certificate issuer: /CN=670a3755-a570-42cf-846d-b0190d7ff61a Certificate serial: 010D0C9F43285849CD7B7A13D964EFE006DE3C80 Authority key identifier: E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa Signing time: Sat 10 May 2025 03:23:20 +0000 ROA not before: Sat 10 May 2025 03:23:20 +0000 ROA not after: Fri 08 Aug 2025 03:23:20 +0000 asID: 393887 IP address blocks: 66.179.200.0/24 maxlen: 24 66.179.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:7b:7a:13:d9:64:ef:e0:06:de:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670a3755-a570-42cf-846d-b0190d7ff61a Validity Not Before: May 10 03:23:20 2025 GMT Not After : Aug 8 03:23:20 2025 GMT Subject: CN=41b9dcee-d6fb-4ff3-903b-e8464caccda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:d5:0e:e6:03:f1:35:42:20:8f:0a:6f:07: ff:98:fc:34:10:3f:ca:65:43:42:d8:b1:90:97:5e: 42:6e:0f:1d:98:91:92:4f:78:a1:d5:d3:a2:b2:f3: 81:dc:da:1c:36:5f:50:1e:c3:e6:7f:3f:6a:58:43: b6:d9:e2:04:03:7c:b7:4b:f7:7e:a8:c9:79:84:64: f2:82:05:49:cc:da:62:84:de:16:56:ac:5e:02:08: 15:a1:0b:d3:4b:3b:f6:f7:f0:23:ec:78:d4:4b:2e: 31:1a:6c:b9:e6:5c:6a:cd:3c:4f:9e:7f:d4:b4:f7: b1:7f:a0:2d:91:15:06:7e:51:58:e8:e5:c2:23:e4: a1:79:86:80:7a:65:0c:28:f1:ad:00:aa:0e:3c:cd: d1:1f:4c:75:5b:3e:3f:3b:cd:e5:6f:e7:cb:c5:20: 25:37:bb:9d:e4:a8:f1:7e:52:2b:37:c2:a0:21:25: 37:83:3b:13:18:b2:cf:d8:67:61:0a:e1:b8:d4:3a: 64:ec:4a:d7:ea:9b:7a:03:c7:7a:d9:57:e4:d6:e3: 04:28:6a:34:1b:26:84:91:2c:68:01:62:16:86:47: 3d:82:0c:66:9c:7f:4a:dd:7f:8d:c2:c4:63:33:b0: 6d:3b:38:ee:77:ba:1b:0a:4e:bd:6b:1c:a5:c0:fd: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:19:2A:00:CF:A9:0B:73:80:15:6E:EA:1F:3A:6C:47:28:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl X509v3 Authority Key Identifier: keyid:E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:17:8b:1b:02:fd:61:b8:ef:74:32:c3:74:8b:54:a8:9a:88: 69:ec:70:c5:e7:73:94:aa:52:67:21:17:1a:be:f1:44:4e:cc: 0d:23:eb:92:36:ca:07:fa:3d:87:05:10:09:e2:2f:5d:9c:36: 05:a3:ea:76:44:34:30:c2:98:07:c4:9a:8e:8e:12:2b:41:57: d4:f5:a6:4c:4d:90:01:03:02:b0:f2:ee:34:68:54:b7:b8:29: 4e:e5:5f:88:99:f1:3f:b3:1e:15:75:37:9d:44:3a:42:be:7c: f6:1f:08:24:04:76:27:c9:94:12:16:fc:e7:ed:9d:89:9b:16: ea:8a:3c:3b:5c:74:ba:d4:26:84:eb:be:61:f5:83:6e:a6:a9: 3b:cc:b1:bc:d8:d4:d8:3d:a6:e0:5c:73:b5:e6:d5:1b:b5:dd: 38:fa:e4:e0:c3:5e:46:34:a0:3f:03:9b:c8:89:3a:44:fa:e6: d1:14:95:b9:05:84:b9:9f:1b:94:4b:c7:aa:32:3f:b7:34:68: 14:1d:ae:82:7c:74:bf:07:9f:5d:b0:40:ff:ca:76:b0:ab:7f: b4:8b:3a:42:c9:01:cb:b1:a8:f4:7d:2e:d9:6d:4e:f4:84:eb: 67:de:63:05:49:ec:1f:16:08:b4:8c:f0:e3:3e:c4:20:ee:f6: 7a:0a:f0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNe3oT2WTv4AbePIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYTM3NTUtYTU3MC00MmNmLTg0NmQtYjAxOTBkN2Zm NjFhMB4XDTI1MDUxMDAzMjMyMFoXDTI1MDgwODAzMjMyMFowLzEtMCsGA1UEAxMk NDFiOWRjZWUtZDZmYi00ZmYzLTkwM2ItZTg0NjRjYWNjZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9nVDuYD8TVCII8Kbwf/mPw0ED/KZUNC2LGQ l15Cbg8dmJGST3ih1dOisvOB3NocNl9QHsPmfz9qWEO22eIEA3y3S/d+qMl5hGTy ggVJzNpihN4WVqxeAggVoQvTSzv29/Aj7HjUSy4xGmy55lxqzTxPnn/UtPexf6At kRUGflFY6OXCI+SheYaAemUMKPGtAKoOPM3RH0x1Wz4/O83lb+fLxSAlN7ud5Kjx flIrN8KgISU3gzsTGLLP2GdhCuG41Dpk7ErX6pt6A8d62Vfk1uMEKGo0GyaEkSxo AWIWhkc9ggxmnH9K3X+NwsRjM7BtOzjud7obCk69axylwP1TGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiGGSoAz6kLc4AVbuofOmxHKCmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NzBh Mzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5MGQ3ZmY2MWEvMmIxMWQ3N2QtMzZiNC0z NmZhLWJkMjMtMDA4MGQ2YTZlNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjcwYTM3NTUtYTU3MC00MmNmLTg0 NmQtYjAxOTBkN2ZmNjFhLzY3MGEzNzU1LWE1NzAtNDJjZi04NDZkLWIwMTkwZDdm ZjYxYS5jcmwwHwYDVR0jBBgwFoAU4kOkH9AIRiHhlMQXHxjeP9tLKdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NzBhMzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5 MGQ3ZmY2MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8XixsC/WG473Qyw3SLVKiaiGnscMXnc5SqUmchFxq+8UROzA0j65I2 ygf6PYcFEAniL12cNgWj6nZENDDCmAfEmo6OEitBV9T1pkxNkAEDArDy7jRoVLe4 KU7lX4iZ8T+zHhV1N51EOkK+fPYfCCQEdifJlBIW/OftnYmbFuqKPDtcdLrUJoTr vmH1g26mqTvMsbzY1Ng9puBcc7Xm1Ru13Tj65ODDXkY0oD8Dm8iJOkT65tEUlbkF hLmfG5RLx6oyP7c0aBQdroJ8dL8Hn12wQP/KdrCrf7SLOkLJAcuxqPR9LtltTvSE 62feYwVJ7B8WCLSM8OM+xCDu9noK8A4= -----END CERTIFICATE-----Generated at Tue May 13 06:38:44 2025 by rpki-client