$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa File: 2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa (raw, json) Hash identifier: 1xX28LuB3zLGGa5a6tKAGci80E/wylVqbfKunsmLepA= Subject key identifier: 9A:10:90:87:F8:66:9D:CE:1E:80:DF:8F:69:C2:E4:B2:F1:92:71:AA Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285849E7BA85C16B9C209D960CCE80 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 11693 IP address blocks: 66.216.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:85:c1:6b:9c:20:9d:96:0c:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=e0aa86f7-bfdb-49a0-968e-e82b50c5759c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:00:25:04:bf:0a:72:d1:8b:17:26:9a:a8: 49:92:11:88:89:82:25:9e:38:69:5a:c8:3a:9a:b0: 8f:72:2c:d5:18:4d:73:eb:b6:3a:75:1f:0f:ca:f7: 0c:5b:2b:fc:0d:bc:df:ed:cb:72:c4:6a:ac:0c:eb: b5:dd:93:b8:55:f2:21:25:e5:e7:c7:b4:5e:b3:84: 89:f6:4e:34:b4:0f:cd:28:10:81:17:84:fc:9f:23: fe:0c:b3:81:97:1c:87:c4:2c:69:a1:fa:21:ce:f1: f8:9a:4c:d4:35:9e:d0:a0:aa:ff:7e:cc:48:fa:81: 9d:26:16:3f:d3:cc:47:06:11:1b:3b:19:cd:10:cf: 67:c8:06:21:d4:40:b9:4d:ca:6e:0a:b4:73:fd:b4: e9:ea:46:2a:3e:0c:37:de:01:6c:be:3b:c6:72:22: 04:e8:1a:fd:ed:88:ee:25:60:28:35:46:39:37:4c: c6:21:5d:36:b9:3a:1e:00:7e:a1:36:3c:d3:aa:e7: f1:c7:fb:9e:dc:59:a0:4e:ed:ab:a1:c5:d1:9b:30: b9:b7:d8:0e:e5:7e:58:c0:08:8b:98:1c:16:29:a4: 5a:47:51:01:a5:90:bf:f5:60:23:df:15:35:81:f5: df:17:b5:70:37:ac:4e:d5:2a:a7:23:fd:c4:ab:ca: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:10:90:87:F8:66:9D:CE:1E:80:DF:8F:69:C2:E4:B2:F1:92:71:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 66.216.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:30:74:5b:86:a9:76:87:09:6f:ad:87:10:74:44:f5:d2:f7: ae:f6:7f:18:01:42:37:cd:b3:26:48:b1:0f:bb:80:a7:d9:53: a2:40:72:51:4c:5f:cc:d6:09:37:1c:a0:a1:68:7f:16:8b:7f: 57:fe:8e:63:07:2c:f8:da:b1:87:92:03:da:90:99:64:3e:a6: 8e:1c:04:1c:30:7e:ff:bb:74:f0:86:cb:df:58:2a:49:07:72: 5b:77:00:33:99:92:6f:79:13:53:09:c6:39:ee:ee:a5:bd:ef: 64:8f:c6:43:a8:34:92:72:6f:71:3c:26:55:34:44:c8:42:02: 8f:e2:38:33:21:b9:56:b4:f7:94:81:6f:84:4e:28:5c:63:78: 35:92:e2:48:bc:83:3a:4e:3c:cf:c6:d6:18:95:26:c1:32:48: 57:07:7e:d4:a6:e3:57:d2:d9:df:b9:5b:f9:c6:f8:80:ae:a0: 0c:a7:db:69:d6:d9:5e:3a:59:33:68:30:82:fc:98:39:e7:eb: 65:ae:24:92:2a:30:9f:62:28:8a:77:29:1c:49:79:1d:2c:41: fb:72:3d:bf:a4:f9:46:36:0d:fc:db:71:b1:11:0b:3e:f7:76: e0:cb:f3:99:b8:b4:47:7a:42:66:b0:90:a7:52:b3:88:dc:7a: b9:8a:92:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoXBa5wgnZYMzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZTBhYTg2ZjctYmZkYi00OWEwLTk2OGUtZTgyYjUwYzU3NTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxwAJQS/CnLRixcmmqhJkhGIiYIlnjhpWsg6 mrCPcizVGE1z67Y6dR8PyvcMWyv8Dbzf7ctyxGqsDOu13ZO4VfIhJeXnx7Res4SJ 9k40tA/NKBCBF4T8nyP+DLOBlxyHxCxpofohzvH4mkzUNZ7QoKr/fsxI+oGdJhY/ 08xHBhEbOxnNEM9nyAYh1EC5TcpuCrRz/bTp6kYqPgw33gFsvjvGciIE6Br97Yju JWAoNUY5N0zGIV02uToeAH6hNjzTqufxx/ue3FmgTu2rocXRmzC5t9gO5X5YwAiL mBwWKaRaR1EBpZC/9WAj3xU1gfXfF7VwN6xO1SqnI/3Eq8q2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoQkIf4Zp3OHoDfj2nC5LLxknGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMmZlNDljZmEtZjZhYy0z YWY4LTliNmMtMTBkMzc5M2YwOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQwdFuGqXaHCW+thxB0RPXS9672fxgBQjfNsyZIsQ+7gKfZU6JAclFM X8zWCTccoKFofxaLf1f+jmMHLPjasYeSA9qQmWQ+po4cBBwwfv+7dPCGy99YKkkH clt3ADOZkm95E1MJxjnu7qW972SPxkOoNJJyb3E8JlU0RMhCAo/iODMhuVa095SB b4ROKFxjeDWS4ki8gzpOPM/G1hiVJsEySFcHftSm41fS2d+5W/nG+ICuoAyn22nW 2V46WTNoMIL8mDnn62WuJJIqMJ9iKIp3KRxJeR0sQftyPb+k+UY2DfzbcbERCz73 duDL85m4tEd6QmawkKdSs4jcermKkuI= -----END CERTIFICATE-----Generated at Mon Jun 30 00:42:15 2025 by rpki-client