$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa File: 66a0ccf2-be25-3812-acc8-c6922a2ae498.roa (raw, json) Hash identifier: fvTksh2/LVsMYyzfEweTAxTg5FuZss49zrEPq1IF4Hk= Subject key identifier: CB:8F:25:3E:E2:01:F2:6B:99:26:E7:5C:BD:59:64:C5:B2:7B:D5:1D Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFC568DED03EA5ACCB2500 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 66.209.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c5:68:de:d0:3e:a5:ac:cb:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=0ac74f91-5fc6-4678-9bd2-b599e5ed4711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:98:93:fe:96:ce:bd:05:6a:f5:50:28:f1:34: d3:b8:e3:ee:e2:27:26:8d:35:b5:83:58:6f:01:bd: e8:c5:ee:69:f3:ce:1d:60:98:c6:66:26:9d:c1:ed: fb:66:be:61:09:e1:18:e8:eb:20:fd:46:f1:c3:fe: a6:76:41:21:2a:23:ce:5c:39:1c:36:c2:c4:5d:2f: e8:d4:29:65:00:81:29:76:9b:35:da:fc:2a:48:f0: cc:3b:74:79:59:49:e3:a1:46:9e:21:be:c2:da:7e: 44:e9:16:a6:4c:43:73:64:06:67:3a:51:d0:cb:24: 2d:e9:c0:29:b7:6d:c1:88:e7:75:40:0e:b9:d6:91: 49:03:99:37:73:17:21:d7:95:8a:7f:25:f1:cf:9c: bd:17:1c:65:11:a8:aa:86:e7:a8:a2:91:94:5e:26: 9f:31:54:58:20:f7:fc:96:74:c6:37:1a:b0:fa:35: 14:3d:f4:ee:e4:27:0c:20:c5:e9:95:4f:36:b5:ee: f6:a6:47:9b:30:f2:fd:f8:da:29:32:63:16:63:df: df:72:e9:36:30:7b:1e:f1:46:3b:28:c6:52:51:7e: d5:25:3d:6e:a2:b8:57:35:be:f0:fa:45:d0:59:03: c5:35:cb:b8:03:a6:1d:06:4f:a7:ab:fd:07:23:c6: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:25:3E:E2:01:F2:6B:99:26:E7:5C:BD:59:64:C5:B2:7B:D5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:63:e6:dc:97:1f:fa:13:83:a8:ab:c3:e2:f7:a1:db:b0:2e: 04:69:7e:7b:d7:41:7f:cc:f7:d2:03:9b:f2:6e:03:69:94:51: a8:ad:09:59:0d:9a:37:b9:45:75:f0:d8:53:de:25:12:93:f8: d7:97:3f:7a:cc:7b:5d:76:c1:7d:69:41:98:7d:d9:8f:74:de: bb:47:c3:2f:99:75:f3:f3:ef:5e:8b:79:a9:a5:c1:43:0b:1b: 0f:f5:fc:a1:fe:cd:63:6c:5a:c4:8b:24:b7:d0:ec:f2:6e:ea: cc:9d:8c:c6:c6:6f:84:6e:84:fc:75:62:e4:ec:d7:0b:a1:16: ed:50:a4:6b:38:21:c7:85:df:fb:98:5b:16:7a:b2:e0:50:ac: b9:5d:46:5e:f6:1e:92:2c:1c:0b:bc:49:74:48:22:64:e5:6e: 30:28:59:46:c2:2b:b2:cb:f5:07:62:b0:64:47:5c:9a:5f:79: c6:2a:b1:39:63:51:1b:a3:2e:d9:60:40:2a:78:70:c4:18:ac: ab:01:db:69:ee:c8:96:4d:43:50:1e:d4:1d:b0:21:20:8a:a8: 65:82:38:cd:20:ac:cf:30:d5:9a:3e:18:8b:46:f6:99:a2:24: 23:5e:c2:96:ea:7a:9d:73:f1:d7:f1:99:2e:c3:fa:7b:e9:1b: 12:8b:a1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538Vo3tA+pazLJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MGFjNzRmOTEtNWZjNi00Njc4LTliZDItYjU5OWU1ZWQ0NzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55iT/pbOvQVq9VAo8TTTuOPu4icmjTW1g1hv Ab3oxe5p884dYJjGZiadwe37Zr5hCeEY6Osg/Ubxw/6mdkEhKiPOXDkcNsLEXS/o 1CllAIEpdps12vwqSPDMO3R5WUnjoUaeIb7C2n5E6RamTENzZAZnOlHQyyQt6cAp t23BiOd1QA651pFJA5k3cxch15WKfyXxz5y9FxxlEaiqhueoopGUXiafMVRYIPf8 lnTGNxqw+jUUPfTu5CcMIMXplU82te72pkebMPL9+NopMmMWY9/fcuk2MHse8UY7 KMZSUX7VJT1uorhXNb7w+kXQWQPFNcu4A6YdBk+nq/0HI8bBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuPJT7iAfJrmSbnXL1ZZMWye9UdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNjZhMGNjZjItYmUyNS0z ODEyLWFjYzgtYzY5MjJhMmFlNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtGHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNj5tyXH/oTg6irw+L3oduwLgRpfnvXQX/M99IDm/JuA2mUUaitCVkN mje5RXXw2FPeJRKT+NeXP3rMe112wX1pQZh92Y903rtHwy+ZdfPz716LeamlwUML Gw/1/KH+zWNsWsSLJLfQ7PJu6sydjMbGb4RuhPx1YuTs1wuhFu1QpGs4IceF3/uY WxZ6suBQrLldRl72HpIsHAu8SXRIImTlbjAoWUbCK7LL9QdisGRHXJpfecYqsTlj URujLtlgQCp4cMQYrKsB22nuyJZNQ1Ae1B2wISCKqGWCOM0grM8w1Zo+GItG9pmi JCNewpbqep1z8dfxmS7D+nvpGxKLoWU= -----END CERTIFICATE-----Generated at Tue Jul 1 07:14:52 2025 by rpki-client