$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa File: a8735f80-d635-36e0-a042-89c554b7b169.roa (raw, json) Hash identifier: eWqlo7T1zJzPGQ7LrxFAQqXPj5r8gqUQZQ+SH6O6yDc= Subject key identifier: 87:E8:F6:BF:EC:5B:D1:BF:68:CF:5F:D1:A4:54:A2:55:73:9A:6A:7B Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584A23C005C98044866174F8E200 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 22808 IP address blocks: 66.112.128.16/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:05:c9:80:44:86:61:74:f8:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=26b7681e-fbe0-4080-83cc-d8e6a24dda6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:93:e5:c9:19:c2:91:aa:3f:d4:f7:6c:d0: 9e:3f:48:92:c7:f7:c3:4a:81:57:bd:fb:4b:67:1f: 79:ac:bd:2e:aa:49:f9:b8:dd:0f:9d:04:21:65:c6: 5c:c6:bb:43:f0:78:41:0a:83:14:8a:0d:02:62:46: bd:20:2f:f1:04:0f:90:ad:a0:df:83:a6:7f:07:ff: e8:14:5c:7d:9f:14:b1:b1:9f:0f:e9:92:94:64:7b: d0:8c:41:b9:45:3a:62:5d:d2:31:b1:6b:35:12:20: a7:65:cd:5b:b0:5c:be:df:a8:b3:b2:e8:9c:22:d9: f6:5d:5d:44:06:5a:3b:a3:37:c1:05:5f:07:87:9b: 3a:3b:19:99:9e:5e:40:c2:62:ad:83:68:64:b9:09: bf:28:a3:0f:c8:06:7c:64:56:eb:89:97:cd:dc:64: 56:5f:45:21:47:34:1f:4b:b5:30:73:e8:bb:af:a9: 98:22:4b:b4:39:8e:24:76:bc:fb:61:b8:78:32:01: b8:e2:25:c6:64:4a:7f:ad:41:80:1f:22:4c:04:60: fb:86:4d:12:30:ea:96:f0:d3:72:95:f4:cb:9f:95: 08:85:7c:76:56:fd:34:24:40:6f:10:a9:c8:77:da: 00:9d:76:5a:28:c9:86:d8:94:54:15:86:3a:0a:af: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:F6:BF:EC:5B:D1:BF:68:CF:5F:D1:A4:54:A2:55:73:9A:6A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.16/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:5c:93:11:dd:62:02:d8:dc:64:ac:a1:76:3c:dc:c9:ae:5b: 17:d7:e7:42:b9:1a:e8:90:3c:b5:8e:82:df:54:67:ac:53:49: 7b:87:10:f7:05:1e:9c:34:5a:ae:0c:58:36:2a:b1:f6:8b:41: 86:c1:4d:ac:71:d6:9e:e8:de:ec:19:92:1c:a0:cc:80:44:d0: 25:80:ff:97:31:1f:40:8d:4b:2e:87:51:39:c2:70:ad:ae:90: 14:82:8d:27:30:6f:e8:8f:6a:9d:a6:1c:74:c3:b0:ac:72:9a: 7b:db:8a:a8:4f:ee:eb:9f:d9:53:9a:76:00:39:ed:68:2f:2f: 57:66:32:ca:f7:12:75:8d:7d:43:cd:77:da:8d:61:8e:5b:d7: 5f:cd:df:a9:55:07:6b:76:70:b4:db:e4:be:f3:5f:04:35:71: 46:87:ba:db:81:a6:68:7f:25:3e:1a:64:71:27:e1:b9:1c:e6: b9:0c:15:40:dd:41:58:ec:43:d0:f4:6a:2e:e3:93:09:33:6d: c8:2f:85:c0:6c:1c:d7:7e:52:ff:b0:9f:53:0a:63:28:c4:cc: 99:0a:2f:a8:b9:f1:fd:8a:b6:d5:89:57:3d:12:22:25:8e:e5: 12:19:3f:28:80:33:ce:7f:a7:24:bb:58:40:14:15:ef:38:b4: ef:55:61:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEojwAXJgESGYXT44gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MjZiNzY4MWUtZmJlMC00MDgwLTgzY2MtZDhlNmEyNGRkYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP+T5ckZwpGqP9T3bNCeP0iSx/fDSoFXvftL Zx95rL0uqkn5uN0PnQQhZcZcxrtD8HhBCoMUig0CYka9IC/xBA+QraDfg6Z/B//o FFx9nxSxsZ8P6ZKUZHvQjEG5RTpiXdIxsWs1EiCnZc1bsFy+36izsuicItn2XV1E Blo7ozfBBV8Hh5s6OxmZnl5AwmKtg2hkuQm/KKMPyAZ8ZFbriZfN3GRWX0UhRzQf S7Uwc+i7r6mYIku0OY4kdrz7Ybh4MgG44iXGZEp/rUGAHyJMBGD7hk0SMOqW8NNy lfTLn5UIhXx2Vv00JEBvEKnId9oAnXZaKMmG2JRUFYY6Cq/Q8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIfo9r/sW9G/aM9f0aRUolVzmmp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYTg3MzVmODAtZDYzNS0z NmUwLWEwNDItODljNTU0YjdiMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCAEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDZXJMR3WIC2NxkrKF2PNzJrlsX1+dCuRrokDy1joLfVGesU0l7hxD3 BR6cNFquDFg2KrH2i0GGwU2scdae6N7sGZIcoMyARNAlgP+XMR9AjUsuh1E5wnCt rpAUgo0nMG/oj2qdphx0w7Cscpp724qoT+7rn9lTmnYAOe1oLy9XZjLK9xJ1jX1D zXfajWGOW9dfzd+pVQdrdnC02+S+818ENXFGh7rbgaZofyU+GmRxJ+G5HOa5DBVA 3UFY7EPQ9Gou45MJM23IL4XAbBzXflL/sJ9TCmMoxMyZCi+oufH9irbViVc9EiIl juUSGT8ogDPOf6cku1hAFBXvOLTvVWFt -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:59 2025 by rpki-client