$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa File: 039bc77e-6087-3093-9191-6772277f3e24.roa (raw, json) Hash identifier: v8mNT1WHioRYtzK+U2G6oJRRO/ZHSu0zQC6SnrO6Frc= Subject key identifier: 91:0F:59:5D:4B:78:6C:44:D2:86:70:C7:58:29:39:46:51:04:7A:E7 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F4328584A43DB096A8F725EB8466C7AC0 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 33115 IP address blocks: 66.223.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:09:6a:8f:72:5e:b8:46:6c:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=86beaed2-0eb6-4b81-9960-948bd8cd6e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:16:80:71:e9:e3:5d:97:d4:20:bd:30:cf: ad:40:61:1b:f0:d2:cf:ee:4a:87:e3:f7:0d:02:78: a5:68:90:33:b5:76:5e:7a:22:aa:90:8f:cb:c7:c7: 1d:eb:37:3a:70:a3:b2:4c:ed:88:a5:c2:97:45:80: d7:a3:16:cb:b1:4c:ba:8f:ae:89:74:4e:4c:eb:45: 80:81:e1:4d:17:b5:69:85:1a:e1:5b:ba:b7:92:db: 81:a5:61:f6:05:cd:65:cf:29:7e:81:b8:57:57:01: 41:3e:a0:e8:f6:49:dc:b0:e4:bf:5d:07:17:b7:22: 7d:7c:2a:4f:3f:0a:13:89:41:7d:c4:9b:ea:73:82: 24:e5:48:b3:dc:c5:c5:a7:08:15:ed:dc:a5:44:5b: 55:6d:a6:55:4f:33:25:d5:1e:81:b1:7c:aa:ec:5b: 27:c2:c0:05:77:70:3b:cc:a2:21:84:6c:c1:45:50: 2f:75:b6:94:a8:01:db:23:32:9d:0d:2b:b7:0b:d9: 83:53:7c:0c:c2:8f:45:b4:aa:2f:3f:de:6d:30:57: 9d:b1:0a:1c:90:3e:1e:aa:d0:18:a8:ab:d5:9e:2d: 4f:c3:d1:ee:e7:33:19:94:9a:bb:cc:91:be:a0:bf: 97:e7:8d:52:d3:a3:31:d0:c1:41:f3:92:82:70:dd: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0F:59:5D:4B:78:6C:44:D2:86:70:C7:58:29:39:46:51:04:7A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: 66.223.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:78:12:c2:77:4e:1d:9b:90:a7:8d:ea:a6:4a:41:84:ca:d3: 46:99:1c:4a:25:08:04:31:86:d6:a3:4c:34:50:58:76:1d:70: a5:5c:5f:ac:c7:6e:15:4d:9e:3a:3c:b3:59:01:d4:14:e1:fd: 72:de:da:ff:d3:8a:db:f3:f6:17:1a:d4:6d:cb:1d:b6:46:fd: 80:82:73:c4:96:fd:26:f9:69:8d:1d:a5:d0:76:77:6f:ba:e4: 8b:b4:05:d2:b7:03:6c:90:8c:e0:e8:3e:9a:b9:54:8a:c0:7a: 0a:52:c1:6c:ec:87:a9:18:a0:56:36:b7:86:44:e1:ad:dc:8c: 5f:1f:e3:bd:e8:fb:29:dd:c3:33:5b:0e:48:e1:65:e7:02:82: 12:a1:e5:43:ff:40:2c:c2:e4:e5:46:d6:2e:3d:4c:a4:65:6c: dc:52:7a:2f:17:cf:22:a0:48:23:57:3b:60:ac:48:b4:09:23: 65:84:76:72:d3:4a:f0:5d:95:8e:b5:ba:e0:c3:ce:9f:66:7e: d2:25:bc:49:63:27:de:8a:63:e8:ab:db:3c:7d:66:4d:c7:65: 23:c3:7d:c7:62:d6:9a:0c:de:a4:97:8f:7d:18:a2:a9:04:ac: bc:7e:fa:10:1d:c4:b4:da:23:41:b2:8d:43:51:6d:02:53:01: 38:2b:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wlqj3JeuEZsesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ODZiZWFlZDItMGViNi00YjgxLTk5NjAtOTQ4YmQ4Y2Q2ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndoWgHHp412X1CC9MM+tQGEb8NLP7kqH4/cN AnilaJAztXZeeiKqkI/Lx8cd6zc6cKOyTO2IpcKXRYDXoxbLsUy6j66JdE5M60WA geFNF7VphRrhW7q3ktuBpWH2Bc1lzyl+gbhXVwFBPqDo9kncsOS/XQcXtyJ9fCpP PwoTiUF9xJvqc4Ik5Uiz3MXFpwgV7dylRFtVbaZVTzMl1R6BsXyq7FsnwsAFd3A7 zKIhhGzBRVAvdbaUqAHbIzKdDSu3C9mDU3wMwo9FtKovP95tMFedsQockD4eqtAY qKvVni1Pw9Hu5zMZlJq7zJG+oL+X541S06Mx0MFB85KCcN1YxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEPWV1LeGxE0oZwx1gpOUZRBHrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMDM5YmM3N2UtNjA4Ny0z MDkzLTkxOTEtNjc3MjI3N2YzZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQt9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMd4EsJ3Th2bkKeN6qZKQYTK00aZHEolCAQxhtajTDRQWHYdcKVcX6zH bhVNnjo8s1kB1BTh/XLe2v/Titvz9hca1G3LHbZG/YCCc8SW/Sb5aY0dpdB2d2+6 5Iu0BdK3A2yQjODoPpq5VIrAegpSwWzsh6kYoFY2t4ZE4a3cjF8f473o+yndwzNb DkjhZecCghKh5UP/QCzC5OVG1i49TKRlbNxSei8XzyKgSCNXO2CsSLQJI2WEdnLT SvBdlY61uuDDzp9mftIlvEljJ96KY+ir2zx9Zk3HZSPDfcdi1poM3qSXj30YoqkE rLx++hAdxLTaI0GyjUNRbQJTATgrvmg= -----END CERTIFICATE-----Generated at Tue Jul 1 21:07:16 2025 by rpki-client