$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ab3a9cbf-0278-3a61-a621-acc668035343.roa File: ab3a9cbf-0278-3a61-a621-acc668035343.roa (raw, json) Hash identifier: TK6IB7tEtkPVBTVCcPuH/d/BXnu5fdkodGtdmFiXcdk= Subject key identifier: C3:CC:38:F6:A3:A4:8B:AD:0E:88:7A:9B:0A:94:44:9E:02:15:45:B0 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F43285849FCAA7C54EB033350ECE8CF00 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ab3a9cbf-0278-3a61-a621-acc668035343.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 19940 IP address blocks: 66.114.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7c:54:eb:03:33:50:ec:e8:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=812ca79e-b44c-4ff5-a8ec-8369230dfc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:40:40:c0:7b:6e:34:69:cc:07:c5:7a:24: c1:5d:4e:d0:12:a3:a4:8d:ea:5d:07:c0:54:87:ea: cd:27:60:80:2c:54:b4:a8:6c:5e:6f:c6:30:a5:69: 5b:65:f4:d7:ca:8f:dd:39:3a:91:2b:b1:03:bb:fd: 55:27:a8:72:25:d0:bf:37:33:52:e1:8c:ce:fa:e1: bf:c3:ec:28:c4:1f:dd:90:de:97:14:ee:d1:4c:f6: 3c:2e:21:f3:6f:e7:6f:08:75:45:77:a2:f3:0a:e3: 15:01:be:5b:38:2f:ab:42:a1:d6:63:4e:60:6c:ac: 1e:9d:1f:a9:37:b8:3b:a7:46:c7:7d:df:9d:3a:c0: fe:28:18:03:33:3d:d1:0d:f7:6b:2a:44:80:46:06: f6:da:f8:48:53:25:da:3f:47:b9:27:e8:4a:1c:14: 0d:40:24:01:f4:d6:a5:84:fc:2c:49:59:34:20:b3: 1c:6a:18:d6:e7:1e:ed:b3:23:e0:01:4b:e2:37:e7: f2:88:fa:98:b6:62:98:b3:5e:b4:ba:e4:be:ab:d0: ee:7e:99:66:4b:cc:fa:2f:f0:49:1b:d0:da:b1:22: 85:b4:92:a8:89:85:c2:44:1f:ec:4b:22:a3:9f:67: 64:7a:18:f5:c1:8b:59:a9:f7:98:b9:77:07:77:f7: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:38:F6:A3:A4:8B:AD:0E:88:7A:9B:0A:94:44:9E:02:15:45:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ab3a9cbf-0278-3a61-a621-acc668035343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 66.114.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:22:ba:0a:04:34:57:60:3b:ac:22:0f:23:da:2b:e0:fb:7b: 84:b1:a6:69:d9:ac:26:6b:d3:e0:02:2f:ae:ca:eb:a2:34:d5: 6f:27:98:2b:35:9a:7a:4b:94:c0:71:b2:40:ad:05:12:34:5e: a3:26:28:c6:e7:b6:fd:56:29:bb:a2:f5:47:38:36:65:8e:57: eb:c4:89:91:4e:bd:f6:25:19:bb:38:54:b0:2a:21:57:55:7b: 19:02:af:83:00:21:40:20:9b:26:9b:59:e3:a0:78:61:dd:5c: bc:69:f3:cb:5d:cc:52:89:64:db:db:3e:88:3a:ac:94:f8:2d: ad:10:16:60:fb:21:8b:f1:85:fd:43:ff:0e:e9:f6:34:b3:81: 0d:08:7d:d1:80:6c:59:5c:5b:23:c0:32:b7:25:22:78:d9:0c: 16:f7:14:55:a7:fe:3a:b9:d6:d2:aa:32:0e:0b:33:3d:f6:e6: ea:8d:91:14:49:4c:8b:7d:1e:48:e6:b9:45:e8:23:7b:69:17: da:83:7a:85:e6:3e:6a:eb:8b:4e:f7:a1:dd:af:89:4f:ca:24: c9:a7:ce:9d:0f:21:45:32:85:85:22:ff:34:05:2b:a8:70:5d: b9:05:eb:5a:70:7e:76:00:28:0f:d0:0e:80:01:90:2f:eb:78: 50:ce:d8:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnxU6wMzUOzozwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ODEyY2E3OWUtYjQ0Yy00ZmY1LWE4ZWMtODM2OTIzMGRmYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluBAQMB7bjRpzAfFeiTBXU7QEqOkjepdB8BU h+rNJ2CALFS0qGxeb8YwpWlbZfTXyo/dOTqRK7EDu/1VJ6hyJdC/NzNS4YzO+uG/ w+woxB/dkN6XFO7RTPY8LiHzb+dvCHVFd6LzCuMVAb5bOC+rQqHWY05gbKwenR+p N7g7p0bHfd+dOsD+KBgDMz3RDfdrKkSARgb22vhIUyXaP0e5J+hKHBQNQCQB9Nal hPwsSVk0ILMcahjW5x7tsyPgAUviN+fyiPqYtmKYs160uuS+q9DufplmS8z6L/BJ G9DasSKFtJKoiYXCRB/sSyKjn2dkehj1wYtZqfeYuXcHd/dErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPMOPajpIutDoh6mwqURJ4CFUWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvYWIzYTljYmYtMDI3OC0z YTYxLWE2MjEtYWNjNjY4MDM1MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQnJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwiugoENFdgO6wiDyPaK+D7e4SxpmnZrCZr0+ACL67K66I01W8nmCs1 mnpLlMBxskCtBRI0XqMmKMbntv1WKbui9Uc4NmWOV+vEiZFOvfYlGbs4VLAqIVdV exkCr4MAIUAgmyabWeOgeGHdXLxp88tdzFKJZNvbPog6rJT4La0QFmD7IYvxhf1D /w7p9jSzgQ0IfdGAbFlcWyPAMrclInjZDBb3FFWn/jq51tKqMg4LMz325uqNkRRJ TIt9HkjmuUXoI3tpF9qDeoXmPmrri073od2viU/KJMmnzp0PIUUyhYUi/zQFK6hw XbkF61pwfnYAKA/QDoABkC/reFDO2JM= -----END CERTIFICATE-----Generated at Mon Jun 30 21:30:29 2025 by rpki-client