$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa File: 25e93338-0441-3306-b1a8-28fe60a47de0.roa (raw, json) Hash identifier: niS8WttzQI5CcuNF7f6pfQ9xDS0IMhD5H4zW2RUQmxo= Subject key identifier: 43:52:68:21:CF:01:B2:21:AE:2C:5B:8B:24:A8:8A:48:D1:C7:28:48 Certificate issuer: /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Certificate serial: 010D0C9F4328584A3E45AA0C516A14CD769CFA00 Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 33125 IP address blocks: 66.97.96.0/20 maxlen: 24 204.9.152.0/21 maxlen: 24 204.11.128.0/21 maxlen: 24 204.15.24.0/21 maxlen: 24 204.15.104.0/21 maxlen: 24 207.200.224.0/19 maxlen: 24 2604:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:aa:0c:51:6a:14:cd:76:9c:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=3221f8f5-eefd-4996-ab47-38527068b23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:b3:ea:20:14:0e:ca:ea:94:d0:ab:86:e1: bc:1c:4e:20:18:78:4b:05:31:f9:e9:cb:60:1c:6b: 10:0d:8d:b3:39:e8:93:99:7b:49:3f:ad:86:dc:f0: aa:ee:4f:41:6e:e0:74:77:a0:2b:01:cc:4e:24:33: d9:c9:00:fb:f7:8d:59:79:bc:8e:26:45:2e:e4:ff: dd:3a:0b:32:3b:13:7a:30:49:8e:22:b1:67:30:5f: ba:42:76:f0:4d:5a:5c:f1:7a:8c:95:35:83:eb:bc: c8:8a:3f:41:9c:4e:6b:11:57:ef:b9:25:db:4d:e9: 81:1b:31:ad:e2:b6:32:ea:d3:84:42:65:b2:f1:3d: 49:ad:3d:d1:45:a6:6e:66:89:bf:5d:d9:cd:14:e7: 21:4a:26:cb:c9:93:71:b0:9a:af:46:4c:e6:ae:f8: e1:d5:76:be:f4:9c:10:05:1e:b6:cf:89:bb:07:85: 83:52:7e:4e:03:2e:ec:19:c3:0a:c2:0b:6c:57:2c: e7:01:bb:6a:62:c3:36:69:85:08:3e:00:d9:87:77: c9:55:db:c2:ec:1b:6e:45:0c:b4:6a:b4:1e:3e:88: 5b:55:55:00:24:67:0a:3d:99:7c:93:83:63:c1:89: ff:b5:82:11:91:76:7b:d7:7b:1c:0d:73:5c:be:0d: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:68:21:CF:01:B2:21:AE:2C:5B:8B:24:A8:8A:48:D1:C7:28:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl X509v3 Authority Key Identifier: keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer sbgp-ipAddrBlock: critical IPv4: 66.97.96.0/20 204.9.152.0/21 204.11.128.0/21 204.15.24.0/21 204.15.104.0/21 207.200.224.0/19 IPv6: 2604:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fc:75:0c:06:6e:df:ce:44:ab:bc:07:54:c0:79:20:f9:23: 47:e2:86:48:75:4b:3c:7d:3f:96:ab:7b:55:4b:ab:eb:26:cd: 63:84:d4:34:a4:80:25:f5:fe:07:01:89:4e:75:17:1a:b5:34: 3f:71:73:77:74:13:ee:6b:6c:dd:c5:dd:bd:f4:2d:a9:5b:15: dc:8c:5d:96:32:f4:30:2b:9d:53:0c:96:6d:b6:2f:16:b9:2a: c5:13:2f:73:8d:c4:74:5d:82:88:aa:b1:4a:c9:cc:e5:43:7e: 08:bd:16:40:71:4f:0e:e4:c0:5e:4c:75:49:a8:19:a4:de:62: 9b:ec:0d:c0:be:c5:7e:96:4d:a4:49:e1:80:08:0a:f2:de:d2: 3f:15:30:b8:1e:47:60:9e:16:5f:5f:bd:6e:a0:d5:bf:40:57: 21:35:8b:67:af:33:be:c7:b2:ae:98:e0:ea:1c:2a:c2:7f:db: 2a:83:2c:04:55:39:58:d5:1e:92:d6:de:67:47:61:74:e0:54: 8b:16:73:b0:b0:05:7d:71:d7:42:07:d8:4f:9d:09:36:93:cc: fb:54:9a:14:11:65:f4:c6:d4:62:7c:4d:68:d4:6b:72:78:0d: e8:8b:41:17:f4:ca:55:d8:32:17:06:a6:21:18:34:74:09:70: ad:c5:6d:e6 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEo+RaoMUWoUzXac+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YzM1M2QtMmFlNC00YTI4LThkZjctMGE5MDZiN2M2 OTYzMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MzIyMWY4ZjUtZWVmZC00OTk2LWFiNDctMzg1MjcwNjhiMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLez6iAUDsrqlNCrhuG8HE4gGHhLBTH56ctg HGsQDY2zOeiTmXtJP62G3PCq7k9BbuB0d6ArAcxOJDPZyQD7941ZebyOJkUu5P/d OgsyOxN6MEmOIrFnMF+6QnbwTVpc8XqMlTWD67zIij9BnE5rEVfvuSXbTemBGzGt 4rYy6tOEQmWy8T1JrT3RRaZuZom/XdnNFOchSibLyZNxsJqvRkzmrvjh1Xa+9JwQ BR62z4m7B4WDUn5OAy7sGcMKwgtsVyznAbtqYsM2aYUIPgDZh3fJVdvC7BtuRQy0 arQePohbVVUAJGcKPZl8k4NjwYn/tYIRkXZ713scDXNcvg2WxwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFENSaCHPAbIhrixbiySoikjRxyhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jODZj MzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3YzY5NjMvMjVlOTMzMzgtMDQ0MS0z MzA2LWIxYTgtMjhmZTYwYTQ3ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzg2YzM1M2QtMmFlNC00YTI4LThk ZjctMGE5MDZiN2M2OTYzL2M4NmMzNTNkLTJhZTQtNGEyOC04ZGY3LTBhOTA2Yjdj Njk2My5jcmwwHwYDVR0jBBgwFoAU49nhggrznCVs6xuwMmm+fyT9fvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkw NmI3YzY5NjMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEQmFgAwQD zAmYAwQDzAuAAwQDzA8YAwQDzA9oAwQFz8jgMA0EAgACMAcDBQAmBJVAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAA/8dQwGbt/ORKu8B1TAeSD5I0fihkh1Szx9P5are1VLq+smzWOE1DSkgCX1 /gcBiU51Fxq1ND9xc3d0E+5rbN3F3b30LalbFdyMXZYy9DArnVMMlm22Lxa5KsUT L3ONxHRdgoiqsUrJzOVDfgi9FkBxTw7kwF5MdUmoGaTeYpvsDcC+xX6WTaRJ4YAI CvLe0j8VMLgeR2CeFl9fvW6g1b9AVyE1i2evM77Hsq6Y4OocKsJ/2yqDLARVOVjV HpLW3mdHYXTgVIsWc7CwBX1x10IH2E+dCTaTzPtUmhQRZfTG1GJ8TWjUa3J4DeiL QRf0ylXYMhcGpiEYNHQJcK3FbeY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:49:52 2025 by rpki-client