$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4806b71e-5307-387a-be85-92d47e1d4728.roa File: 4806b71e-5307-387a-be85-92d47e1d4728.roa (raw, json) Hash identifier: np6hpqSqNm/sePq+tv8jp0haDXqizetNsn/mMglINvM= Subject key identifier: 15:4D:23:14:57:AA:F3:3E:EA:BD:D2:E3:49:1A:2F:30:DE:9E:60:CF Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584A411061F6940B7B8FA288C240 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4806b71e-5307-387a-be85-92d47e1d4728.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 26703 IP address blocks: 66.102.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:61:f6:94:0b:7b:8f:a2:88:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=84a97919-91bc-4326-945e-d5a94e124e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:c1:4a:fe:9f:52:dd:1f:b8:f7:03:3e:13: fd:a7:79:86:de:b5:22:03:19:f8:9a:c7:dc:88:10: 38:47:6f:ef:64:8a:05:8c:b4:97:f7:51:c5:a6:56: 06:c7:69:b5:9e:a8:c6:7b:e2:03:ea:d8:35:a2:e6: b3:02:2f:b9:f8:37:de:85:f6:25:1d:26:1d:d2:67: 6e:1e:4f:a6:e7:ed:92:97:e8:bd:db:01:3b:8d:1a: 25:0d:be:b8:ba:24:ab:1e:4c:be:ba:d6:03:06:42: 63:fb:92:26:59:6d:1d:3c:b8:f5:50:4f:b2:c8:16: 51:8e:5c:ea:83:3f:ba:21:4c:6c:df:75:4e:5d:0a: f1:ec:c7:ea:62:ac:ef:22:1d:cc:6f:3d:4a:48:d1: a9:c2:5b:f3:9e:49:bb:6c:bf:12:3e:42:98:2a:3f: aa:70:31:99:32:b9:a8:98:5b:f6:c0:65:46:f3:60: 5f:f8:49:01:62:c8:6b:22:c7:c0:93:92:21:3d:a7: 6f:e0:88:70:bd:4f:c1:47:16:e8:61:fb:c6:0e:4f: f9:75:0f:61:bf:ba:0a:f7:6d:73:af:55:3b:56:b3: 39:08:5d:4d:aa:e1:0f:79:02:16:23:d6:6b:46:8d: d5:0d:2a:22:02:0b:ce:9c:a8:c7:47:3c:60:be:53: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4D:23:14:57:AA:F3:3E:EA:BD:D2:E3:49:1A:2F:30:DE:9E:60:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4806b71e-5307-387a-be85-92d47e1d4728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:58:7c:8a:62:ef:dd:d0:c3:bc:90:b4:ac:94:9f:c4:bc:0d: 70:6a:fb:cf:03:c5:35:99:a9:73:e6:80:94:8e:6b:a1:e1:b6: 6b:3d:8e:5c:ab:82:46:60:d9:1b:0b:88:41:d0:fa:94:2d:2e: 98:7e:2f:7d:77:1f:d1:e1:56:b1:5c:30:eb:72:8e:e7:44:a7: ec:db:d8:24:8f:8e:9a:90:94:77:cc:62:de:1e:04:c5:57:fd: ee:a2:1c:5e:f7:63:b6:2f:49:18:d6:82:3b:59:84:20:af:d5: 0c:c5:b2:56:16:db:f6:c7:62:0f:25:dd:b9:7a:9e:94:8d:b2: 1a:0b:df:72:40:ed:d4:14:a4:08:c9:01:23:a2:83:52:1c:48: 54:1d:82:73:de:f6:35:53:07:9e:46:a5:42:b6:9c:52:ec:81: 56:6d:03:67:05:be:82:1e:42:8a:66:02:5c:31:5e:bf:c3:bb: 6a:8e:b4:f1:4a:88:48:99:5f:bd:96:5b:e0:ee:31:91:dd:39: 80:98:72:75:87:96:d7:ed:7b:3a:78:67:1e:19:37:73:7d:63: e4:20:6a:52:b0:d8:36:27:7c:9d:0e:1a:4b:16:94:50:a9:58: e5:d6:17:11:21:8f:5f:c2:4e:8d:d3:fb:c9:a3:b8:af:48:49: 85:a6:95:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEGH2lAt7j6KIwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ODRhOTc5MTktOTFiYy00MzI2LTk0NWUtZDVhOTRlMTI0ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUHBSv6fUt0fuPcDPhP9p3mG3rUiAxn4msfc iBA4R2/vZIoFjLSX91HFplYGx2m1nqjGe+ID6tg1ouazAi+5+DfehfYlHSYd0mdu Hk+m5+2Sl+i92wE7jRolDb64uiSrHky+utYDBkJj+5ImWW0dPLj1UE+yyBZRjlzq gz+6IUxs33VOXQrx7MfqYqzvIh3Mbz1KSNGpwlvznkm7bL8SPkKYKj+qcDGZMrmo mFv2wGVG82Bf+EkBYshrIsfAk5IhPadv4IhwvU/BRxboYfvGDk/5dQ9hv7oK921z r1U7VrM5CF1NquEPeQIWI9ZrRo3VDSoiAgvOnKjHRzxgvlNorwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVNIxRXqvM+6r3S40kaLzDenmDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvNDgwNmI3MWUtNTMwNy0z ODdhLWJlODUtOTJkNDdlMWQ0NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtYfIpi793Qw7yQtKyUn8S8DXBq+88DxTWZqXPmgJSOa6Hhtms9jlyr gkZg2RsLiEHQ+pQtLph+L313H9HhVrFcMOtyjudEp+zb2CSPjpqQlHfMYt4eBMVX /e6iHF73Y7YvSRjWgjtZhCCv1QzFslYW2/bHYg8l3bl6npSNshoL33JA7dQUpAjJ ASOig1IcSFQdgnPe9jVTB55GpUK2nFLsgVZtA2cFvoIeQopmAlwxXr/Du2qOtPFK iEiZX72WW+DuMZHdOYCYcnWHltftezp4Zx4ZN3N9Y+QgalKw2DYnfJ0OGksWlFCp WOXWFxEhj1/CTo3T+8mjuK9ISYWmlQE= -----END CERTIFICATE-----Generated at Mon Jun 30 14:32:39 2025 by rpki-client