$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3fa23ab4-145d-3e7b-afd6-df95d163136f.roa File: 3fa23ab4-145d-3e7b-afd6-df95d163136f.roa (raw, json) Hash identifier: lIIt9/jopjtLASXntnrEO46P0V60vmllvmVWKC2GOlM= Subject key identifier: C8:26:16:40:77:68:76:AC:4B:BF:DD:A9:90:0F:42:F5:9A:18:DD:1C Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584A58CAFFAE5C77DFBC166AD800 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3fa23ab4-145d-3e7b-afd6-df95d163136f.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 52129 IP address blocks: 66.159.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:ff:ae:5c:77:df:bc:16:6a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=2b9e1bba-ce78-4c4f-8a39-2853750129d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:33:97:15:5f:2b:65:b9:61:cd:0c:63:75: d5:41:57:8d:78:a3:0e:43:27:3f:3b:7f:cf:29:29: b0:8d:45:89:3a:ea:ca:0e:4a:71:68:9c:33:fd:60: a0:aa:d2:d1:ed:6c:97:8b:9c:b1:83:a9:0e:d1:3b: 94:fe:52:19:01:61:fd:fe:16:30:8b:ba:d7:38:59: 8a:12:ca:67:25:ef:91:90:4f:24:b2:d4:c5:39:a4: 1a:c9:fe:81:bc:0e:b2:55:33:aa:fa:75:4f:2d:ce: 89:24:f5:02:a0:e8:59:c4:20:8d:df:27:ea:37:cd: 47:3b:5c:d6:bb:2e:8f:37:24:42:64:61:66:bf:a4: 97:3b:36:db:77:b9:8b:36:32:79:58:78:79:9f:7f: 1f:9a:ac:47:9f:a5:c2:d7:6c:af:66:b7:93:67:0d: 0a:3e:24:12:07:10:ee:ee:10:08:d8:fe:ef:75:da: 93:ab:70:e8:68:7b:a5:21:ff:cd:98:fd:cf:01:b7: d0:31:f0:eb:ad:df:bd:05:b3:c0:4a:9a:ee:6c:ce: 87:da:a9:67:17:46:c8:4f:ca:eb:80:a2:f7:94:fa: cf:0f:fa:3c:19:d1:8c:79:ec:a4:a7:37:06:a2:cf: 21:12:bb:9c:da:b6:a9:90:cd:fa:75:9c:fc:69:59: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:26:16:40:77:68:76:AC:4B:BF:DD:A9:90:0F:42:F5:9A:18:DD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3fa23ab4-145d-3e7b-afd6-df95d163136f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 66.159.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:16:04:12:74:06:33:8b:83:05:e2:a9:1a:1d:96:42:3d:1d: 9e:07:10:36:0c:d7:3d:33:cb:01:46:c6:c9:f4:24:2e:45:58: f6:44:63:2b:72:7e:7d:d2:1d:42:4d:8c:7a:4d:1d:a1:a3:9d: af:93:a4:56:22:ca:57:77:a7:2d:3d:55:bf:ac:0c:41:79:34: 9c:ad:fa:76:5f:f3:2d:10:c9:e8:36:cb:3b:32:03:a7:7c:88: 7b:e6:46:2e:91:f8:e2:1f:eb:5d:74:d3:ef:c5:d0:2a:9a:7a: 84:cc:90:a3:4b:49:65:4b:3f:24:06:2d:c8:ee:e2:64:0e:b2: 19:3a:32:34:ce:b2:1d:07:10:ca:99:a6:73:c6:7f:53:9e:25: fc:fa:fc:b9:fe:af:df:8f:48:44:be:fc:23:20:90:c9:55:d5: 2a:b3:ff:be:19:95:01:ad:82:2a:2e:ec:8f:4c:df:69:f4:f0: d4:47:22:d6:2f:2b:37:42:b1:49:59:72:16:8b:3f:ad:a6:4e: 4b:ac:f7:2a:d0:d6:e8:ce:49:c0:e1:d2:32:71:6b:82:98:50: 7a:ff:0c:63:62:a8:24:0d:16:cd:a3:c1:42:84:3a:99:ab:c5: 66:dc:76:2d:b3:0b:67:5b:26:8d:fc:8c:ec:77:b0:f5:6f:98: f6:c9:78:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyv+uXHffvBZq2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MmI5ZTFiYmEtY2U3OC00YzRmLThhMzktMjg1Mzc1MDEyOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7szlxVfK2W5Yc0MY3XVQVeNeKMOQyc/O3/P KSmwjUWJOurKDkpxaJwz/WCgqtLR7WyXi5yxg6kO0TuU/lIZAWH9/hYwi7rXOFmK EspnJe+RkE8kstTFOaQayf6BvA6yVTOq+nVPLc6JJPUCoOhZxCCN3yfqN81HO1zW uy6PNyRCZGFmv6SXOzbbd7mLNjJ5WHh5n38fmqxHn6XC12yvZreTZw0KPiQSBxDu 7hAI2P7vddqTq3DoaHulIf/NmP3PAbfQMfDrrd+9BbPASprubM6H2qlnF0bIT8rr gKL3lPrPD/o8GdGMeeykpzcGos8hEruc2rapkM36dZz8aVmmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgmFkB3aHasS7/dqZAPQvWaGN0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvM2ZhMjNhYjQtMTQ1ZC0z ZTdiLWFmZDYtZGY5NWQxNjMxMzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAWBBJ0BjOLgwXiqRodlkI9HZ4HEDYM1z0zywFGxsn0JC5FWPZEYyty fn3SHUJNjHpNHaGjna+TpFYiyld3py09Vb+sDEF5NJyt+nZf8y0Qyeg2yzsyA6d8 iHvmRi6R+OIf61100+/F0CqaeoTMkKNLSWVLPyQGLcju4mQOshk6MjTOsh0HEMqZ pnPGf1OeJfz6/Ln+r9+PSES+/CMgkMlV1Sqz/74ZlQGtgiou7I9M32n08NRHItYv KzdCsUlZchaLP62mTkus9yrQ1ujOScDh0jJxa4KYUHr/DGNiqCQNFs2jwUKEOpmr xWbcdi2zC2dbJo38jOx3sPVvmPbJeO0= -----END CERTIFICATE-----Generated at Sun Jun 29 23:27:10 2025 by rpki-client