$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa File: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (raw, json) Hash identifier: srsSkzYlcZVsJxYv2GV3DLruMx+wOztw3T8wEnJkdoA= Subject key identifier: 96:B4:1C:05:E9:8A:FF:42:15:C4:11:C8:EE:6C:A4:B9:23:0F:35:F6 Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F43285849ED4FD1F7522360DDFDDADF80 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 209242 IP address blocks: 66.118.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d1:f7:52:23:60:dd:fd:da:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=973750ea-223e-44d4-aee9-71271c68bbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:04:27:4b:bd:0c:4a:b4:4a:a5:e4:f5:75: fb:07:7b:2c:71:65:88:b3:9d:ef:74:f0:7a:30:8b: 72:34:b0:ff:fe:23:f3:2a:de:7a:ac:5d:af:d3:54: 99:84:84:b1:d4:c9:26:8b:a2:2f:bc:be:73:d0:c8: aa:d9:39:c7:7d:e6:94:76:39:77:49:65:8a:c1:0e: e2:b9:32:4e:8c:53:f1:90:15:4b:28:f2:b3:06:17: 9f:43:40:fc:04:80:26:57:6b:f1:70:68:08:67:4c: 98:05:48:ea:2e:eb:4d:27:86:21:f4:66:37:04:19: 63:99:5b:93:52:19:f5:77:2a:b0:15:f3:98:58:15: ea:d8:e0:82:49:3e:09:ee:96:11:e2:0a:ce:48:ff: 22:c4:0e:97:cb:49:96:e0:40:85:e2:8b:2d:e1:15: 28:a3:3d:03:48:8b:6f:d4:48:50:74:60:4e:c1:b7: 3b:d0:aa:7f:dc:5a:97:26:46:f7:99:f0:8c:f3:55: 46:f2:87:07:67:cf:fb:55:5d:22:0c:5a:eb:2e:cb: 16:a1:a6:f1:c1:79:b3:da:f2:57:27:a2:4d:89:7c: d9:e4:d7:fd:ec:c4:13:95:39:cc:ee:19:74:c2:7a: 63:8f:25:6a:c0:d5:ab:94:09:bc:ce:d7:98:a1:91: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:1C:05:E9:8A:FF:42:15:C4:11:C8:EE:6C:A4:B9:23:0F:35:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:77:62:94:ec:ed:24:24:f1:df:aa:e2:b2:0d:05:ba:9b:12: f5:3e:7f:3c:aa:ce:6c:92:b6:40:01:da:99:e3:7f:ae:ff:f9: 8e:76:73:f1:0e:5a:5b:48:46:41:4b:4b:2a:9b:45:41:36:1d: 4a:23:31:76:a4:04:ff:83:7c:b6:e1:23:2c:0e:26:1b:0e:ff: 8b:9e:26:88:6d:40:ec:a3:05:04:34:73:66:7d:c0:9a:58:14: 93:f3:18:f4:b5:f4:5d:90:47:cf:55:56:d6:dc:db:54:0a:5d: 5b:de:37:7b:f1:f9:ce:79:d2:f2:1c:d4:c0:cc:ca:84:bb:ed: c8:5f:96:6d:aa:53:18:b0:6b:06:a3:48:76:83:02:59:29:39: 9c:7a:39:55:82:2a:eb:a2:c1:7d:f3:7d:dc:5e:19:4d:4a:8d: ff:22:37:60:c2:1d:51:92:95:03:8b:c5:68:1e:64:c2:2a:7d: ac:90:2c:e4:f2:c6:6c:45:cd:3a:3b:b9:fb:4e:8c:4e:de:37: 88:f2:3b:5c:70:6f:1b:d1:b6:1f:bf:27:7e:6d:42:cd:75:32: f7:7b:bd:9c:aa:e7:26:62:55:82:b9:fe:15:f8:bb:a4:40:e5: 6e:90:2c:1b:12:57:db:39:eb:eb:57:7d:39:e1:51:2d:ae:f8: 54:ea:8c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9H3UiNg3f3a34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTczNzUwZWEtMjIzZS00NGQ0LWFlZTktNzEyNzFjNjhiYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzEEJ0u9DEq0SqXk9XX7B3sscWWIs53vdPB6 MItyNLD//iPzKt56rF2v01SZhISx1Mkmi6IvvL5z0Miq2TnHfeaUdjl3SWWKwQ7i uTJOjFPxkBVLKPKzBhefQ0D8BIAmV2vxcGgIZ0yYBUjqLutNJ4Yh9GY3BBljmVuT Uhn1dyqwFfOYWBXq2OCCST4J7pYR4grOSP8ixA6Xy0mW4ECF4ost4RUooz0DSItv 1EhQdGBOwbc70Kp/3FqXJkb3mfCM81VG8ocHZ8/7VV0iDFrrLssWoabxwXmz2vJX J6JNiXzZ5Nf97MQTlTnM7hl0wnpjjyVqwNWrlAm8zteYoZFBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa0HAXpiv9CFcQRyO5spLkjDzX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvMzQ4MDU1MmUtNzhkOC0z MzgwLTk5NmQtZGQzZjk0N2JiNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh3YpTs7SQk8d+q4rINBbqbEvU+fzyqzmyStkAB2pnjf67/+Y52c/EO WltIRkFLSyqbRUE2HUojMXakBP+DfLbhIywOJhsO/4ueJohtQOyjBQQ0c2Z9wJpY FJPzGPS19F2QR89VVtbc21QKXVveN3vx+c550vIc1MDMyoS77chflm2qUxiwawaj SHaDAlkpOZx6OVWCKuuiwX3zfdxeGU1Kjf8iN2DCHVGSlQOLxWgeZMIqfayQLOTy xmxFzTo7uftOjE7eN4jyO1xwbxvRth+/J35tQs11Mvd7vZyq5yZiVYK5/hX4u6RA 5W6QLBsSV9s56+tXfTnhUS2u+FTqjK4= -----END CERTIFICATE-----Generated at Tue Jul 1 13:15:53 2025 by rpki-client