$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: VBZVS8sKdVKNqx+JSLo8L5z+FiafhmsSBeGC4lN1tPM= Subject key identifier: 64:2C:F4:ED:46:BC:C7:F6:68:E7:87:2B:BF:AF:CF:02:10:04:C9:FE Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584A43DAF9DCCDE807CD61BABDE8 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:f9:dc:cd:e8:07:cd:61:ba:bd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=1ee96097-8944-441c-9d2d-99ac36cdbbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:37:0a:fb:5b:e2:0d:9f:66:2b:f8:0a:d2: a4:52:e4:03:9b:02:b7:72:50:cf:c7:e8:e2:04:cf: a0:b5:8a:72:38:0f:26:78:3d:be:e5:11:fe:6b:86: 10:c3:b0:a0:a7:94:91:52:bd:df:be:95:05:39:cb: 17:2f:ff:50:73:e2:b7:c1:6c:86:d7:f7:09:b1:df: c4:70:12:3a:d1:c6:2e:65:e5:2c:2f:c1:57:43:89: aa:e8:d0:8e:f8:30:7d:3f:8e:06:04:b3:b3:19:a6: 18:63:86:f4:08:92:60:a0:b2:d8:be:46:db:21:07: 8c:b3:ae:b6:1e:1c:76:4e:d8:89:81:a8:3a:80:3d: dd:b1:c4:fc:3d:4b:4a:fc:59:fb:5a:2a:de:ef:2f: 2d:ae:da:9c:fb:5f:d9:01:05:e4:75:23:94:3e:d2: b3:8c:d4:fb:8c:4b:aa:91:8a:79:d6:0c:7f:fa:f7: 6d:c3:4d:10:9e:61:77:ae:4f:09:77:f6:b0:39:34: ce:ed:b3:c0:bc:7f:bd:cb:12:cd:4f:54:ff:91:dc: 89:e8:25:91:f4:15:12:5b:5b:e1:3a:88:8c:c1:01: d7:e6:7f:b4:e6:6e:60:67:63:33:3c:33:aa:05:cf: 1b:de:d5:15:10:fc:23:0a:b0:08:2b:86:cc:ac:b5: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:F4:ED:46:BC:C7:F6:68:E7:87:2B:BF:AF:CF:02:10:04:C9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4a:8a:4a:60:24:73:c4:d2:77:2d:9c:6c:93:57:c0:63:8a: 81:e3:73:1d:88:03:6f:cd:90:ee:b5:54:38:6b:7c:2f:a6:50: 1a:4f:3e:97:bb:e9:89:c9:c7:e4:ca:f4:64:85:66:ca:88:56: ce:25:62:ee:a3:4d:4b:a5:5c:36:79:a5:03:3f:06:78:5a:99: 2a:c0:b2:a3:e5:59:ba:8a:90:c4:83:28:b7:13:e5:36:9a:43: ad:11:c1:63:7b:28:8b:e3:a7:6a:aa:78:d7:0c:b3:c0:c2:10: ef:84:f1:fe:96:33:ef:cd:fc:bb:61:1b:16:06:7c:18:c2:b8: d5:ee:d4:1a:e1:b2:8c:45:a0:dc:59:6a:88:8d:56:cd:f7:ad: 92:46:36:71:87:ea:79:9f:5b:20:b3:f4:05:c6:d3:ed:b4:47: 2e:d2:0e:b2:37:4e:e6:3f:ef:44:7c:c7:31:e0:8f:7a:87:fb: c3:80:79:01:cd:06:e1:09:cd:91:e1:6c:2e:37:26:7e:47:9b: b2:a2:3f:ef:d6:cc:8d:a1:76:12:99:23:ef:d3:cb:fb:02:67: 7c:cb:d3:ea:7d:7a:0a:45:d2:61:f9:44:98:a7:53:a2:a7:72: a7:92:8e:cb:b2:01:22:1a:51:fd:51:eb:ed:42:c9:d7:af:94: 46:9d:17:28 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpD2vnczegHzWG6vegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MWVlOTYwOTctODk0NC00NDFjLTlkMmQtOTlhYzM2Y2RiYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO03Cvtb4g2fZiv4CtKkUuQDmwK3clDPx+ji BM+gtYpyOA8meD2+5RH+a4YQw7Cgp5SRUr3fvpUFOcsXL/9Qc+K3wWyG1/cJsd/E cBI60cYuZeUsL8FXQ4mq6NCO+DB9P44GBLOzGaYYY4b0CJJgoLLYvkbbIQeMs662 Hhx2TtiJgag6gD3dscT8PUtK/Fn7Wire7y8trtqc+1/ZAQXkdSOUPtKzjNT7jEuq kYp51gx/+vdtw00QnmF3rk8Jd/awOTTO7bPAvH+9yxLNT1T/kdyJ6CWR9BUSW1vh OoiMwQHX5n+05m5gZ2MzPDOqBc8b3tUVEPwjCrAIK4bMrLW/5wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGQs9O1GvMf2aOeHK7+vzwIQBMn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzSopKYCRzxNJ3LZxsk1fAY4qB43MdiANv zZDutVQ4a3wvplAaTz6Xu+mJycfkyvRkhWbKiFbOJWLuo01LpVw2eaUDPwZ4Wpkq wLKj5Vm6ipDEgyi3E+U2mkOtEcFjeyiL46dqqnjXDLPAwhDvhPH+ljPvzfy7YRsW BnwYwrjV7tQa4bKMRaDcWWqIjVbN962SRjZxh+p5n1sgs/QFxtPttEcu0g6yN07m P+9EfMcx4I96h/vDgHkBzQbhCc2R4WwuNyZ+R5uyoj/v1syNoXYSmSPv08v7Amd8 y9PqfXoKRdJh+USYp1Oip3Knko7LsgEiGlH9UevtQsnXr5RGnRco -----END CERTIFICATE-----Generated at Sun Jul 6 06:38:39 2025 by rpki-client