$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa File: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (raw, json) Hash identifier: VuYEGWE9nnjYw2utiBzM5WCOey2/8V6ehN6RCUZS4Zw= Subject key identifier: 82:8A:B5:C6:B3:81:61:00:E8:32:DA:C0:2E:64:3B:2C:21:A2:59:83 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F43285849A61F419959F8DC0BEA0C5A20 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 399804 IP address blocks: 66.187.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:41:99:59:f8:dc:0b:ea:0c:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=f5e08d54-97d5-403a-9eb7-c5333af4c6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:c0:34:8e:28:06:57:22:0c:74:d7:4b:bf: 8d:6b:94:5c:69:3a:e1:7e:39:77:df:0c:6b:c4:e6: 24:2e:86:bb:86:da:8b:ba:a0:31:c0:3f:62:38:83: 6c:98:9c:33:09:23:d1:44:98:a1:01:f8:83:c5:84: 31:ae:68:14:09:07:81:99:04:2d:77:a9:7c:3e:12: 5e:40:11:a7:50:f2:18:25:22:1a:d1:bc:5f:c7:0e: 53:71:9e:d6:92:66:19:3e:ee:33:61:94:11:ad:33: 8e:dd:7e:19:28:44:99:26:04:0b:15:18:7f:4e:f9: 7b:85:09:f4:79:bc:e9:66:da:7d:bb:cb:92:80:9f: ff:a9:be:4d:06:9a:b3:53:2a:ed:d9:8c:bc:fd:38: 7c:70:d1:19:50:65:db:d6:9b:53:5a:d1:12:4a:5b: df:82:ac:ea:67:0c:0c:ce:93:a5:f5:a9:79:18:be: fb:6f:0a:f5:5d:9d:6c:1a:c7:16:cc:1c:3b:b5:29: 25:8c:0f:b3:f9:a1:88:44:b2:a0:a7:8b:ce:55:f0: a5:57:41:df:2b:4a:75:d3:de:fa:9c:16:cf:74:01: 6a:28:e2:17:a7:7e:dc:5e:cf:3e:6a:5d:49:5d:57: 4d:7f:62:f5:bc:b8:4b:68:29:c8:42:44:cf:c4:26: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:B5:C6:B3:81:61:00:E8:32:DA:C0:2E:64:3B:2C:21:A2:59:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:04:f8:1a:45:50:8f:a9:8a:0d:12:26:b9:97:32:9c:20:24: cf:eb:23:f3:d2:9f:d4:d4:fd:7c:8b:ac:4f:30:a9:a0:e4:51: cf:84:3a:64:30:e3:f9:81:9f:17:d0:91:d9:8d:79:ee:4b:dd: ef:40:64:2d:ae:2a:50:10:7d:fc:cf:9a:71:78:fd:f8:40:f5: 90:8d:c2:3b:b9:a1:f1:98:29:35:99:b7:e3:6e:52:d6:15:ee: 6a:57:34:c6:1d:08:dc:29:2d:1c:8f:e4:00:9a:b9:38:84:ce: f6:9d:ea:e3:ad:21:0a:e2:dd:f1:a9:59:dd:ec:a4:25:8d:27: 1f:7c:3b:96:a0:c1:97:a9:a4:67:cf:45:bf:4d:65:34:50:c7: af:bd:03:bc:5e:63:be:c2:67:65:46:8a:c8:10:62:ce:39:42: 3b:5f:bc:42:8c:02:8b:57:18:8d:7a:5a:83:b8:2b:7c:67:f3: f2:0b:23:e4:d7:0e:19:fd:91:9e:bf:98:03:03:d3:b9:5c:9a: 53:a6:b2:55:be:70:c9:9c:6e:98:e0:2f:c6:23:9b:4f:58:74: 77:dc:ec:c8:69:d0:a1:6e:00:e8:30:4e:18:fa:87:16:f0:ae: d5:6e:ae:43:a9:45:8b:55:3a:cd:fb:18:8a:72:69:b9:ca:b3: ba:7d:2a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0GZWfjcC+oMWiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZjVlMDhkNTQtOTdkNS00MDNhLTllYjctYzUzMzNhZjRjNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomzANI4oBlciDHTXS7+Na5RcaTrhfjl33wxr xOYkLoa7htqLuqAxwD9iOINsmJwzCSPRRJihAfiDxYQxrmgUCQeBmQQtd6l8PhJe QBGnUPIYJSIa0bxfxw5TcZ7WkmYZPu4zYZQRrTOO3X4ZKESZJgQLFRh/Tvl7hQn0 ebzpZtp9u8uSgJ//qb5NBpqzUyrt2Yy8/Th8cNEZUGXb1ptTWtESSlvfgqzqZwwM zpOl9al5GL77bwr1XZ1sGscWzBw7tSkljA+z+aGIRLKgp4vOVfClV0HfK0p10976 nBbPdAFqKOIXp37cXs8+al1JXVdNf2L1vLhLaCnIQkTPxCazbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKKtcazgWEA6DLawC5kOywholmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvZDU3YzM5MGMtOWYwYS0z ODVjLWEwNDQtNmFjNjBjMzUwMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoE+BpFUI+pig0SJrmXMpwgJM/rI/PSn9TU/XyLrE8wqaDkUc+EOmQw 4/mBnxfQkdmNee5L3e9AZC2uKlAQffzPmnF4/fhA9ZCNwju5ofGYKTWZt+NuUtYV 7mpXNMYdCNwpLRyP5ACauTiEzvad6uOtIQri3fGpWd3spCWNJx98O5agwZeppGfP Rb9NZTRQx6+9A7xeY77CZ2VGisgQYs45QjtfvEKMAotXGI16WoO4K3xn8/ILI+TX Dhn9kZ6/mAMD07lcmlOmslW+cMmcbpjgL8Yjm09YdHfc7Mhp0KFuAOgwThj6hxbw rtVurkOpRYtVOs37GIpyabnKs7p9Kig= -----END CERTIFICATE-----Generated at Mon May 5 06:06:39 2025 by rpki-client