$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae7888c7-c9a8-30a0-a91a-c23081b03093.roa File: ae7888c7-c9a8-30a0-a91a-c23081b03093.roa (raw, json) Hash identifier: DKkE683HKPig+t+v0zBYtbPy3P2ikABD58NRJiJx+jI= Subject key identifier: 0A:5E:94:5E:70:6D:46:5F:46:EE:17:20:2A:35:49:2C:BB:76:62:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584A151537E195D5670E83FFFA00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae7888c7-c9a8-30a0-a91a-c23081b03093.roa Signing time: Wed 04 Jun 2025 18:55:29 +0000 ROA not before: Wed 04 Jun 2025 18:55:29 +0000 ROA not after: Tue 02 Sep 2025 18:55:29 +0000 asID: 149280 IP address blocks: 66.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:15:37:e1:95:d5:67:0e:83:ff:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 4 18:55:29 2025 GMT Not After : Sep 2 18:55:29 2025 GMT Subject: CN=d786a304-9f43-4c70-836e-65f0c49c552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0f:df:7d:26:14:4d:58:84:47:fb:93:21:c8: 69:69:ca:8d:01:4f:de:87:16:54:fa:34:1e:0e:39: a4:c9:17:b7:04:37:50:d5:89:43:8d:06:0d:15:7d: 74:fc:cb:15:6c:d8:2b:a8:65:fb:4e:6c:db:05:1d: 0b:7c:3c:6b:89:ca:15:a7:b1:c7:1d:5e:90:f9:a7: c0:62:7b:51:d5:6e:c7:7a:c1:be:17:0f:79:bf:fa: d6:c3:91:a0:1c:8f:ff:0f:8b:32:96:bc:2a:04:1f: 18:d5:99:22:25:b6:66:36:c3:af:2f:f2:b2:9a:58: d7:4f:a1:a1:15:44:42:34:a3:71:09:68:fa:a9:99: 6d:ea:9a:3a:ff:09:3a:76:33:79:da:b8:c7:2c:37: f2:79:6b:14:90:13:c4:cd:a0:29:28:6b:7e:15:61: c1:5e:8a:d7:d5:47:d9:f0:33:47:f7:66:fa:33:5f: fd:8f:24:87:c3:0c:aa:36:49:e1:17:9a:82:86:6e: bb:93:32:7f:1c:35:c5:8c:0e:81:7a:82:21:51:7e: 61:76:87:30:a2:5e:9f:e7:4b:5c:6b:ed:a3:1d:a3: d5:b6:8b:66:c6:b6:46:00:c8:0f:29:79:2e:9e:c2: 08:06:3e:33:25:3c:ba:fb:cc:e9:23:61:e7:e7:47: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:94:5E:70:6D:46:5F:46:EE:17:20:2A:35:49:2C:BB:76:62:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae7888c7-c9a8-30a0-a91a-c23081b03093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 66.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:45:3a:89:60:0e:6d:bc:97:78:ba:91:90:17:28:9e:b2:d4: f2:07:56:a4:cb:37:a3:73:87:e1:42:21:3b:0e:70:7f:1d:64: f2:0e:f5:6f:28:04:f0:77:57:4e:b8:c4:af:86:fd:b0:9b:10: ac:a8:a0:1f:5b:1a:61:fc:8a:1c:88:e3:32:aa:4b:66:2e:da: 2f:db:7b:fe:78:19:f8:52:57:6e:1a:06:b0:f7:82:3f:05:c0: 21:1b:9c:c8:ca:75:c5:4e:e8:21:59:12:9b:aa:2d:73:a5:b5: 04:b6:36:d6:b7:50:87:b0:a9:01:8f:3a:9e:e9:e1:84:63:18: c1:44:9f:07:fa:58:42:bb:01:c8:62:6c:3b:ad:66:4f:9d:41: e9:73:bb:1e:56:ff:f7:bd:90:9b:e6:cb:82:e1:45:a5:e6:c0: e7:35:43:80:44:70:2b:6a:0d:45:d3:b5:73:6e:ad:53:30:0a: 20:b6:48:70:63:35:10:9c:70:d6:6e:bb:4f:2d:c0:59:91:08: 46:7c:0e:19:60:f0:3a:5e:65:ba:0e:f9:bf:20:e5:37:5e:76: e9:d5:a3:33:95:03:35:69:f7:61:58:5a:40:05:7e:56:f5:3b: 87:5f:75:c1:b5:fa:97:7a:6d:89:3c:6a:71:60:f4:a5:27:d0: a9:26:c9:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVFTfhldVnDoP/+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDYwNDE4NTUyOVoXDTI1MDkwMjE4NTUyOVowLzEtMCsGA1UEAxMk ZDc4NmEzMDQtOWY0My00YzcwLTgzNmUtNjVmMGM0OWM1NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA/ffSYUTViER/uTIchpacqNAU/ehxZU+jQe DjmkyRe3BDdQ1YlDjQYNFX10/MsVbNgrqGX7TmzbBR0LfDxricoVp7HHHV6Q+afA YntR1W7HesG+Fw95v/rWw5GgHI//D4sylrwqBB8Y1ZkiJbZmNsOvL/KymljXT6Gh FURCNKNxCWj6qZlt6po6/wk6djN52rjHLDfyeWsUkBPEzaApKGt+FWHBXorX1UfZ 8DNH92b6M1/9jySHwwyqNknhF5qChm67kzJ/HDXFjA6BeoIhUX5hdocwol6f50tc a+2jHaPVtotmxrZGAMgPKXkunsIIBj4zJTy6+8zpI2Hn50c9NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApelF5wbUZfRu4XICo1SSy7dmKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWU3ODg4YzctYzlhOC0z MGEwLWE5MWEtYzIzMDgxYjAzMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdFOolgDm28l3i6kZAXKJ6y1PIHVqTLN6Nzh+FCITsOcH8dZPIO9W8o BPB3V064xK+G/bCbEKyooB9bGmH8ihyI4zKqS2Yu2i/be/54GfhSV24aBrD3gj8F wCEbnMjKdcVO6CFZEpuqLXOltQS2Nta3UIewqQGPOp7p4YRjGMFEnwf6WEK7Achi bDutZk+dQelzux5W//e9kJvmy4LhRaXmwOc1Q4BEcCtqDUXTtXNurVMwCiC2SHBj NRCccNZuu08twFmRCEZ8Dhlg8DpeZboO+b8g5TdedunVozOVAzVp92FYWkAFflb1 O4dfdcG1+pd6bYk8anFg9KUn0KkmyUk= -----END CERTIFICATE-----Generated at Sun Jun 29 15:03:54 2025 by rpki-client