$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa File: a608f793-5bc4-3f6e-a460-f0e592ab913e.roa (raw, json) Hash identifier: XeNyW1Yc6/XKLmVm6D8Vs6S0kHha+DErb2rxYlxEHs0= Subject key identifier: F6:A4:85:22:2D:29:E8:6E:C3:5E:EC:06:20:B7:63:44:29:49:1C:80 Certificate issuer: /CN=6396ecb5-3b91-4d1e-b787-089230813a23 Certificate serial: 010D0C9F432858495C2436DDE7D66EEF58029880 Authority key identifier: EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 400777 IP address blocks: 66.59.204.0/24 maxlen: 24 66.59.205.0/24 maxlen: 24 66.59.206.0/24 maxlen: 24 66.59.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:36:dd:e7:d6:6e:ef:58:02:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6396ecb5-3b91-4d1e-b787-089230813a23 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b6911181-1404-4287-bed4-edad94a1fd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:98:00:4d:eb:3b:c3:87:db:79:8a:84:d8: 16:83:28:69:1c:ef:5c:63:48:51:49:e4:50:da:ba: b1:8c:12:26:b8:50:76:63:fb:4c:1e:14:06:68:75: 19:61:d1:4c:8b:7b:4e:0d:c8:7a:3e:69:39:d7:9b: 7d:f0:49:34:65:75:4c:1e:32:78:9a:19:75:b7:15: 50:bb:36:a8:92:07:88:f4:3e:93:24:13:85:6e:9e: 38:6b:cf:73:2d:95:ac:07:78:cb:75:1d:d7:ee:c8: 36:d8:9c:e6:62:2d:d2:a0:66:87:5d:2d:29:d3:05: 27:19:a7:42:83:5d:26:75:e2:ab:b6:eb:8b:79:d5: f0:67:3a:23:3c:de:49:66:55:0c:9e:00:36:34:cc: 62:ef:f7:c2:d6:38:e5:89:96:43:39:e0:3c:16:45: 25:09:cb:48:d3:0b:93:85:8f:20:6c:66:19:92:de: d2:7f:0b:b7:c4:b8:10:90:8b:8d:f5:78:9e:8c:c3: 5e:c7:af:41:c0:62:a8:c0:38:41:84:28:bd:f8:52: 11:87:0c:93:59:12:b8:12:78:86:a2:55:90:b8:14: e9:a8:82:84:cb:31:5f:34:4f:64:37:e1:24:28:82: 29:10:dd:e1:f5:fb:b9:a5:51:af:00:84:d2:8c:30: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A4:85:22:2D:29:E8:6E:C3:5E:EC:06:20:B7:63:44:29:49:1C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl X509v3 Authority Key Identifier: keyid:EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer sbgp-ipAddrBlock: critical IPv4: 66.59.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:77:d7:a8:04:fb:c7:dc:2f:af:57:64:ce:56:ff:2e:8f:b3: 93:b7:21:69:ac:56:92:09:a6:ae:b1:15:47:cf:85:00:8c:3c: 3d:54:b5:58:6e:d1:ae:ff:ce:e7:9e:f2:8c:d4:72:6a:a0:88: 17:5b:4c:61:6b:77:d6:6a:b2:e3:65:b1:4f:02:77:6e:f4:64: 3a:cc:68:fa:c2:ff:e1:dc:2e:7a:63:38:55:c6:b2:e9:d6:d3: db:6b:78:68:a9:d9:8b:e6:73:69:40:2d:8e:9e:09:19:d2:49: a5:e7:18:31:3d:3a:1e:94:1e:41:e2:6e:f3:27:26:39:6e:99: 3e:db:48:a1:8b:f6:05:8d:05:db:c0:56:8d:37:fd:90:57:91: 24:13:f9:99:c0:06:20:a0:a5:51:ac:a7:7c:50:5d:5a:fe:f8: 33:f4:28:7c:d5:0c:ba:30:a6:54:3c:00:f3:ef:c1:27:9e:06: 4f:ef:09:c5:af:2a:5d:02:22:5e:4c:24:0f:12:38:f4:09:12: 3c:1a:e3:ee:d1:74:00:2b:72:96:95:75:9b:8d:d4:26:f1:ed: 71:09:9b:67:45:19:ad:f8:7b:1c:7e:15:d4:f4:81:ab:17:04: 7e:3b:22:da:14:ac:27:5e:7f:d7:95:61:4e:f4:06:a6:04:ba: 95:1a:65:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDbd59Zu71gCmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM5NmVjYjUtM2I5MS00ZDFlLWI3ODctMDg5MjMwODEz YTIzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YjY5MTExODEtMTQwNC00Mjg3LWJlZDQtZWRhZDk0YTFmZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpKYAE3rO8OH23mKhNgWgyhpHO9cY0hRSeRQ 2rqxjBImuFB2Y/tMHhQGaHUZYdFMi3tODch6Pmk515t98Ek0ZXVMHjJ4mhl1txVQ uzaokgeI9D6TJBOFbp44a89zLZWsB3jLdR3X7sg22JzmYi3SoGaHXS0p0wUnGadC g10mdeKrtuuLedXwZzojPN5JZlUMngA2NMxi7/fC1jjliZZDOeA8FkUlCctI0wuT hY8gbGYZkt7Sfwu3xLgQkIuN9XiejMNex69BwGKowDhBhCi9+FIRhwyTWRK4EniG olWQuBTpqIKEyzFfNE9kN+EkKIIpEN3h9fu5pVGvAITSjDABuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPakhSItKehuw17sBiC3Y0QpSRyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2 ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODkyMzA4MTNhMjMvYTYwOGY3OTMtNWJjNC0z ZjZlLWE0NjAtZjBlNTkyYWI5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjM5NmVjYjUtM2I5MS00ZDFlLWI3 ODctMDg5MjMwODEzYTIzLzYzOTZlY2I1LTNiOTEtNGQxZS1iNzg3LTA4OTIzMDgx M2EyMy5jcmwwHwYDVR0jBBgwFoAU6llvlg/jYCQAKaKkS4JQIwBrFSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODky MzA4MTNhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5316gE+8fcL69XZM5W/y6Ps5O3IWmsVpIJpq6xFUfPhQCMPD1UtVhu 0a7/zuee8ozUcmqgiBdbTGFrd9ZqsuNlsU8Cd270ZDrMaPrC/+HcLnpjOFXGsunW 09treGip2Yvmc2lALY6eCRnSSaXnGDE9Oh6UHkHibvMnJjlumT7bSKGL9gWNBdvA Vo03/ZBXkSQT+ZnABiCgpVGsp3xQXVr++DP0KHzVDLowplQ8APPvwSeeBk/vCcWv Kl0CIl5MJA8SOPQJEjwa4+7RdAArcpaVdZuN1Cbx7XEJm2dFGa34exx+FdT0gasX BH47ItoUrCdef9eVYU70BqYEupUaZV4= -----END CERTIFICATE-----Generated at Mon May 12 11:08:49 2025 by rpki-client