$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa File: 0dfe2830-3978-3ff5-b745-9bca32c3f603.roa (raw, json) Hash identifier: loKDh0lY/rFQQsqhs0xGa01r4qhOebb9IWdyEFOS36M= Subject key identifier: 46:D5:38:BD:89:A3:13:5C:1D:BF:FD:4F:73:C6:43:14:CC:45:42:3B Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD60515BC58BDC4245360 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 7106 IP address blocks: 66.209.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d6:05:15:bc:58:bd:c4:24:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=b2747a98-f00b-4560-b787-7100d822f9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:ff:32:a3:2a:4a:53:f5:d1:f5:5d:57:38: fb:6c:85:39:b9:95:db:df:a0:3b:e5:9e:59:dc:38: ca:03:27:63:46:a9:88:ea:d1:ec:18:bd:dd:d6:51: 99:a7:dd:fd:eb:9e:81:56:2f:7c:02:f9:ce:76:0e: e4:ef:ce:b5:8c:d3:9b:0e:cb:1b:90:f3:b9:b3:68: 90:ed:37:ff:15:c2:c6:1d:22:2c:91:93:e1:f8:83: bb:fb:21:f5:c2:cc:c4:d5:b5:78:b6:99:2d:06:fc: f0:aa:a8:13:b2:4c:d8:52:86:8d:5a:98:ea:69:4f: c5:a0:2f:41:4b:56:3f:23:3d:8c:62:7e:48:68:7e: 64:de:21:7f:31:41:b1:ec:8f:f9:94:b5:16:74:74: 91:c5:95:da:aa:96:2a:b5:75:3c:35:7b:77:44:63: cf:ee:80:22:4b:10:30:29:b4:ab:cf:48:a0:bd:17: 14:2f:63:73:f2:19:4c:c2:d3:ab:4d:88:71:ec:4b: 44:9a:e9:85:30:4c:58:cb:04:fe:be:ec:72:55:91: 81:8d:50:90:bc:28:12:9e:1f:5b:7b:e9:52:3f:af: e1:7a:12:00:5a:24:0e:bc:0b:ff:9a:3a:c2:f5:f1: 12:58:06:2c:f1:5d:48:0a:10:f2:8b:07:a9:95:62: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:38:BD:89:A3:13:5C:1D:BF:FD:4F:73:C6:43:14:CC:45:42:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:8a:f3:56:ef:25:f9:66:46:b2:8c:b7:88:8b:c9:d4:b6:01: 4d:1c:bc:61:45:53:78:03:03:93:cd:a9:cd:05:98:84:3a:82: 0f:98:17:3e:59:30:9a:fb:04:2f:be:0c:82:f2:3e:80:5c:06: 06:42:88:28:12:99:88:1b:ee:65:18:0c:6f:0d:82:09:5c:39: 01:59:b5:bb:01:e2:b4:14:7f:f0:51:59:c0:79:37:e5:6e:ff: f7:ed:72:2b:db:e1:ce:dd:f8:4c:f6:4a:c5:42:71:a8:6e:b6: 18:ab:5f:24:de:7f:62:0f:a2:05:77:3e:dc:bc:3e:e6:bc:74: 70:9d:68:ac:6f:58:05:95:7d:0c:3f:20:e0:a7:82:fc:2a:5f: 70:64:87:d0:ca:7f:3d:28:5e:6b:98:25:36:6a:9e:74:5d:6e: 94:4d:0a:ac:18:25:47:3a:4d:37:8b:35:60:93:56:4c:d1:c0: fa:0e:04:df:20:3e:86:f2:14:79:44:bd:36:e4:df:fc:ba:35: 3b:47:93:dd:49:92:5c:fa:04:e6:b8:5f:5c:0a:63:80:e6:3b: f6:e0:6f:6a:02:b1:eb:75:7c:7e:96:a1:2d:51:e2:bb:26:26: 4b:b5:23:fd:fa:72:8d:4c:d6:9e:e4:8d:02:fa:ce:4e:70:cb: 69:b9:87:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539YFFbxYvcQkU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk YjI3NDdhOTgtZjAwYi00NTYwLWI3ODctNzEwMGQ4MjJmOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFv/MqMqSlP10fVdVzj7bIU5uZXb36A75Z5Z 3DjKAydjRqmI6tHsGL3d1lGZp939656BVi98AvnOdg7k7861jNObDssbkPO5s2iQ 7Tf/FcLGHSIskZPh+IO7+yH1wszE1bV4tpktBvzwqqgTskzYUoaNWpjqaU/FoC9B S1Y/Iz2MYn5IaH5k3iF/MUGx7I/5lLUWdHSRxZXaqpYqtXU8NXt3RGPP7oAiSxAw KbSrz0igvRcUL2Nz8hlMwtOrTYhx7EtEmumFMExYywT+vuxyVZGBjVCQvCgSnh9b e+lSP6/hehIAWiQOvAv/mjrC9fESWAYs8V1IChDyiweplWJY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbVOL2JoxNcHb/9T3PGQxTMRUI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMGRmZTI4MzAtMzk3OC0z ZmY1LWI3NDUtOWJjYTMyYzNmNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKK81bvJflmRrKMt4iLydS2AU0cvGFFU3gDA5PNqc0FmIQ6gg+YFz5Z MJr7BC++DILyPoBcBgZCiCgSmYgb7mUYDG8NgglcOQFZtbsB4rQUf/BRWcB5N+Vu //ftcivb4c7d+Ez2SsVCcahuthirXyTef2IPogV3Pty8Pua8dHCdaKxvWAWVfQw/ IOCngvwqX3Bkh9DKfz0oXmuYJTZqnnRdbpRNCqwYJUc6TTeLNWCTVkzRwPoOBN8g PobyFHlEvTbk3/y6NTtHk91Jklz6BOa4X1wKY4DmO/bgb2oCset1fH6WoS1R4rsm Jku1I/36co1M1p7kjQL6zk5wy2m5hy4= -----END CERTIFICATE-----Generated at Tue Jul 1 19:55:59 2025 by rpki-client