$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa File: cfe1da32-8410-369b-8311-ea32b3bd8657.roa (raw, json) Hash identifier: M9gC5fuWI5HgCf5/3XgHf0ogeFci5sG9wl68NhSx72I= Subject key identifier: B8:DC:54:E9:4F:78:99:45:77:17:78:9E:5D:0E:A9:47:93:15:C0:B6 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584A4C3B0F3D7B858A63353DFAC0 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 559 IP address blocks: 66.180.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0f:3d:7b:85:8a:63:35:3d:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=7ed1cc6e-51bb-4920-a7e6-50f25b340a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:7e:39:dd:49:7e:87:c8:91:bc:be:31:2e: 18:dc:90:f5:3f:fd:19:7f:55:9d:33:cb:94:26:8e: f4:c6:de:e2:66:e7:f8:0f:24:71:d5:15:a6:53:73: 93:d1:26:93:27:e9:75:a8:d1:2e:d1:23:87:8d:e7: fb:c5:ec:87:5e:29:3d:e8:76:cf:a6:f9:09:d7:0c: f6:a5:43:e5:d3:07:83:62:4c:cc:c4:a2:80:9a:22: 4f:21:4f:f6:da:59:69:47:04:f6:ee:86:79:35:b9: 51:91:c3:f4:e2:69:6d:66:7d:ec:7f:02:54:1a:29: 49:db:75:11:b6:53:be:a2:59:5c:5b:ee:ad:f2:26: ce:bd:8d:3f:02:d2:8d:2c:18:a8:38:b0:99:4c:7f: 64:4d:8a:ed:af:d6:25:8d:49:9b:dc:8c:52:10:3d: 40:83:17:b4:6f:95:9c:05:ac:74:12:6c:64:2a:da: 1b:ff:1e:5d:07:a2:12:96:d0:35:d3:54:78:6b:a3: 1a:66:8e:e9:f8:f5:70:3f:26:b8:51:91:cb:7f:8e: 15:f9:c6:74:74:f9:bf:af:5b:82:3c:7d:39:33:9c: 9b:11:33:1c:7e:61:98:b7:c3:47:0c:d5:17:81:b0: 04:53:c9:5e:04:6a:a8:58:f1:fd:65:a9:67:33:52: ed:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DC:54:E9:4F:78:99:45:77:17:78:9E:5D:0E:A9:47:93:15:C0:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv4: 66.180.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:73:e5:92:f4:ae:78:97:69:1c:e6:e7:5c:e0:76:7a:18:5a: 1d:4c:1b:66:f4:72:49:51:82:92:ba:02:89:82:1c:ff:90:bd: 10:00:f8:70:3e:2d:ca:66:9b:7a:71:bd:fe:71:64:67:53:a4: 6d:6f:a2:43:74:d1:77:7c:1f:5a:c3:5b:26:b4:d3:44:b7:64: 52:89:30:d8:06:7f:cf:71:99:49:36:24:62:f6:23:86:21:c9: 02:a3:64:99:46:98:e1:50:e0:de:0d:ab:2a:34:6d:3b:f4:88: b6:44:cd:39:23:1b:75:ae:58:9c:54:51:63:bd:5d:3a:b1:ff: fa:85:c1:e0:a3:61:3a:7c:1d:b4:0c:7e:28:a5:a9:77:95:d5: 51:c1:e2:6f:e0:1a:b3:b6:98:0b:34:4d:2e:88:27:a1:f4:42: 33:9a:fa:b5:fe:05:9d:e9:dc:7d:f4:23:62:5e:70:96:a3:26: c6:83:a4:b5:f3:93:23:7e:f8:1e:e9:d4:1f:2e:08:60:d2:89: 06:89:38:c9:eb:03:5f:4d:fa:ea:39:5c:72:1a:9f:6f:3d:d5: d6:fb:f3:f2:66:43:d8:00:b8:c4:ec:50:d4:b8:cd:98:f7:80: 77:1c:99:76:3c:73:d3:b8:e3:23:9e:fc:18:74:21:e2:90:54: 85:e9:07:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOw89e4WKYzU9+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk N2VkMWNjNmUtNTFiYi00OTIwLWE3ZTYtNTBmMjViMzQwYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Z+Od1JfofIkby+MS4Y3JD1P/0Zf1WdM8uU Jo70xt7iZuf4DyRx1RWmU3OT0SaTJ+l1qNEu0SOHjef7xeyHXik96HbPpvkJ1wz2 pUPl0weDYkzMxKKAmiJPIU/22llpRwT27oZ5NblRkcP04mltZn3sfwJUGilJ23UR tlO+ollcW+6t8ibOvY0/AtKNLBioOLCZTH9kTYrtr9YljUmb3IxSED1Agxe0b5Wc Bax0EmxkKtob/x5dB6ISltA101R4a6MaZo7p+PVwPya4UZHLf44V+cZ0dPm/r1uC PH05M5ybETMcfmGYt8NHDNUXgbAEU8leBGqoWPH9ZalnM1LtTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjcVOlPeJlFdxd4nl0OqUeTFcC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvY2ZlMWRhMzItODQxMC0z NjliLTgzMTEtZWEzMmIzYmQ4NjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVz5ZL0rniXaRzm51zgdnoYWh1MG2b0cklRgpK6AomCHP+QvRAA+HA+ Lcpmm3pxvf5xZGdTpG1vokN00Xd8H1rDWya000S3ZFKJMNgGf89xmUk2JGL2I4Yh yQKjZJlGmOFQ4N4Nqyo0bTv0iLZEzTkjG3WuWJxUUWO9XTqx//qFweCjYTp8HbQM fiilqXeV1VHB4m/gGrO2mAs0TS6IJ6H0QjOa+rX+BZ3p3H30I2JecJajJsaDpLXz kyN++B7p1B8uCGDSiQaJOMnrA19N+uo5XHIan2891db78/JmQ9gAuMTsUNS4zZj3 gHccmXY8c9O44yOe/Bh0IeKQVIXpB1k= -----END CERTIFICATE-----Generated at Sun Jun 29 16:45:20 2025 by rpki-client