$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa File: c899a622-f404-3044-83bc-25459ddb7206.roa (raw, json) Hash identifier: 5sjPUaxoYj3aY5SCPBUpNJ7AwKZkrta0Ndb0LYccn0Q= Subject key identifier: 15:F6:57:ED:5B:B6:2D:0F:9A:E1:66:EC:42:62:7D:A3:10:F2:3D:38 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584A411061E764E6BC5FC9D8C8C0 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 26703 IP address blocks: 66.102.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:61:e7:64:e6:bc:5f:c9:d8:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=75cbd108-86a2-47b4-8695-fbfce5ce256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:40:b1:68:bb:75:bc:0b:e5:95:88:d0:b0:1a: 36:91:c6:6b:94:3c:58:eb:71:a1:e6:3a:36:37:46: 50:04:a1:67:10:ab:97:3b:ac:04:44:10:d7:f2:58: d6:73:14:7e:1e:9b:cb:f9:66:3a:85:88:7a:0d:41: 26:cb:3a:2e:24:88:78:1e:b7:4f:e0:2e:48:d8:a2: dc:2a:29:f6:0d:79:96:7f:fd:da:ea:fe:6c:cb:25: 5c:ed:0d:34:7a:43:6e:3d:f6:42:63:5c:51:47:90: 80:23:5d:b1:f4:5c:7e:33:f2:52:4c:66:74:61:22: d7:0d:4b:25:e2:c6:51:ae:f6:bc:73:de:c2:a0:ba: 30:75:64:6f:e6:93:e2:97:94:18:36:ee:d8:58:ae: b8:31:bd:a1:95:76:1f:b6:ca:77:9a:e7:dc:3e:5e: ed:4d:4a:1a:e6:7b:b5:7b:c1:9a:43:c0:50:08:37: 2d:43:d9:e2:a4:0a:77:95:9f:ce:57:32:8f:a0:87: ed:56:33:d2:e6:8c:68:e4:e1:2f:0e:fa:99:fe:6e: 42:51:e7:23:37:9c:b0:47:a7:da:cf:53:fc:56:6f: 34:5b:64:ee:12:05:d0:9c:f8:2e:1b:7a:06:6f:6c: 36:b7:6f:90:55:48:ce:fa:dd:c9:56:cf:50:75:f1: fa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F6:57:ED:5B:B6:2D:0F:9A:E1:66:EC:42:62:7D:A3:10:F2:3D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d3:41:ef:0f:1f:41:1b:2a:41:29:06:4a:d7:53:e5:e5:31: cd:c0:e9:db:26:2c:1d:73:47:e3:f8:c5:88:29:af:6e:6b:d1: a5:c0:9b:fd:5b:9b:b5:7b:0a:3e:53:90:08:be:31:c2:83:36: c9:3f:cc:ad:00:15:cb:b8:db:8b:6d:66:6e:07:dd:a1:6a:bc: d4:a0:0d:18:e5:2e:51:dc:cd:38:ae:20:b9:92:cc:64:e4:f9: fc:49:21:df:c9:d6:d1:09:d2:b7:82:cd:fa:89:fe:5c:1d:9c: b4:e1:22:8c:79:81:f9:6b:d0:88:0e:36:4b:31:8f:fc:c4:57: 77:f8:36:20:11:39:f4:af:5a:01:b5:a4:4a:64:63:17:04:af: 8b:87:ac:5c:78:42:65:f9:e8:25:f6:2d:6e:bb:96:c1:bc:b3: ab:be:e0:34:fa:79:f8:a1:2d:37:5b:e7:98:95:28:34:a9:1a: 8a:63:a7:40:0a:cc:0a:c6:57:e8:e3:8d:30:57:fa:8c:c6:63: a0:a8:dd:29:57:fc:b0:cb:1e:a1:19:66:e9:d9:28:f5:74:9b: 2a:9b:81:fd:e1:83:63:65:13:e1:46:bd:6d:6a:7c:dd:d7:f0: 5f:a9:66:26:fc:80:9f:f3:9d:d6:e5:70:d4:0a:eb:8a:c9:78: c1:f1:ef:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEGHnZOa8X8nYyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NzVjYmQxMDgtODZhMi00N2I0LTg2OTUtZmJmY2U1Y2UyNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUCxaLt1vAvllYjQsBo2kcZrlDxY63Gh5jo2 N0ZQBKFnEKuXO6wERBDX8ljWcxR+HpvL+WY6hYh6DUEmyzouJIh4HrdP4C5I2KLc Kin2DXmWf/3a6v5syyVc7Q00ekNuPfZCY1xRR5CAI12x9Fx+M/JSTGZ0YSLXDUsl 4sZRrva8c97CoLowdWRv5pPil5QYNu7YWK64Mb2hlXYftsp3mufcPl7tTUoa5nu1 e8GaQ8BQCDctQ9nipAp3lZ/OVzKPoIftVjPS5oxo5OEvDvqZ/m5CUecjN5ywR6fa z1P8Vm80W2TuEgXQnPguG3oGb2w2t2+QVUjO+t3JVs9QdfH6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX2V+1bti0PmuFm7EJifaMQ8j04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvYzg5OWE2MjItZjQwNC0z MDQ0LTgzYmMtMjU0NTlkZGI3MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTTQe8PH0EbKkEpBkrXU+XlMc3A6dsmLB1zR+P4xYgpr25r0aXAm/1b m7V7Cj5TkAi+McKDNsk/zK0AFcu424ttZm4H3aFqvNSgDRjlLlHczTiuILmSzGTk +fxJId/J1tEJ0reCzfqJ/lwdnLThIox5gflr0IgONksxj/zEV3f4NiAROfSvWgG1 pEpkYxcEr4uHrFx4QmX56CX2LW67lsG8s6u+4DT6efihLTdb55iVKDSpGopjp0AK zArGV+jjjTBX+ozGY6Co3SlX/LDLHqEZZunZKPV0myqbgf3hg2NlE+FGvW1qfN3X 8F+pZib8gJ/zndblcNQK64rJeMHx79E= -----END CERTIFICATE-----Generated at Mon Jun 30 08:55:31 2025 by rpki-client