$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json) Hash identifier: k1QrBQIBKwux6JAADvWW/XYmtFyJGlUtrKg99TRPxUs= Subject key identifier: F8:5F:93:91:7B:C9:95:F8:BA:24:96:70:BB:4C:30:1A:AC:CE:F9:C6 Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Certificate serial: 010D0C9F4328584A5765C82F64139084B432BD00 Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 30528 IP address blocks: 66.96.16.0/20 maxlen: 20 72.0.64.0/20 maxlen: 20 2001:1928::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:c8:2f:64:13:90:84:b4:32:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=ed3a7890-5eb9-400e-8fe1-058a9fde3c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:a4:0d:d4:5b:bc:e5:39:9e:18:4c:91:57: 71:cf:03:74:c0:bb:3f:1d:c9:c0:32:be:ae:ac:9f: 74:8c:20:aa:6a:53:06:00:f9:90:35:11:04:eb:40: 6c:44:88:af:67:92:1e:39:14:9b:7d:a0:10:f9:48: 6f:e8:71:93:bd:16:09:fe:12:d9:61:31:bc:c5:c5: 6a:e1:c1:54:32:b2:cb:c7:b7:ee:a0:3e:e4:3f:e0: e6:b3:00:59:f8:96:1f:ce:14:a7:92:a8:d3:fd:5c: 2e:d2:54:99:f7:7e:62:75:2c:95:ca:ea:07:b3:7f: ef:a9:3e:4c:be:e8:19:d2:f0:ea:0e:b5:f9:8c:ed: 37:57:e8:76:72:c9:f9:cd:1e:70:3c:34:05:9f:d9: cd:a2:df:9f:57:8e:5c:28:34:1e:1b:eb:f9:04:8d: 72:dd:bf:d1:a7:2a:89:53:0f:e9:d0:8f:d6:d2:48: e8:0c:51:99:79:e1:f5:16:58:2d:a1:4d:f1:23:b1: b7:a8:32:df:f3:ae:ae:92:d7:d9:1f:c0:1e:1a:24: 82:0f:5c:49:0a:36:2d:19:fb:06:fd:da:1e:9a:64: d5:9c:26:f3:bf:b9:63:45:29:c3:5d:dd:70:14:4b: 72:1c:03:cd:15:c2:9b:1a:1b:53:9c:9d:d2:ad:d2: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5F:93:91:7B:C9:95:F8:BA:24:96:70:BB:4C:30:1A:AC:CE:F9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl X509v3 Authority Key Identifier: keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer sbgp-ipAddrBlock: critical IPv4: 66.96.16.0/20 72.0.64.0/20 IPv6: 2001:1928::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ea:9e:ee:cc:ce:e7:22:4f:a2:49:e2:29:55:22:5b:2c:e9: ad:bc:67:bf:a7:a5:4b:ff:d6:c2:7d:11:19:19:48:5f:ee:e7: 1c:c7:1f:2f:45:6b:35:c8:c7:8c:16:db:f0:3a:eb:1c:d2:06: 0c:6b:fa:04:39:2b:aa:ea:81:65:ac:f7:10:95:f6:b0:32:30: 1a:c3:97:b5:b1:52:b2:95:16:27:8b:d6:0c:b8:ff:c4:cd:d7: 11:73:bf:61:99:a0:b9:bf:e9:8e:03:34:41:f8:16:b6:2c:7f: 29:64:bc:4a:e6:b5:c3:b0:2e:1e:1f:37:34:e9:c6:2c:44:58: 45:60:e9:7d:57:ea:9d:5c:de:2f:02:96:43:8d:d9:3a:54:9d: 52:8a:3d:dc:16:fd:4e:f3:da:67:8f:6b:f4:6a:df:cc:9e:d0: 73:53:01:3e:03:ce:58:7f:b5:34:49:94:49:8d:80:f2:09:48: 89:1e:6b:06:28:48:29:b0:60:1a:4e:f4:7f:43:fa:d4:c7:11: a4:6d:dd:9a:7a:81:0a:a7:a2:15:1b:fa:b0:ef:f1:47:7a:2b: a6:54:39:c7:47:dc:9b:57:95:91:d6:21:c9:aa:fc:3f:88:f7: 31:9a:ce:7d:36:57:e5:70:42:98:8b:1a:b3:b5:44:8f:42:74: 9f:dc:c2:f9 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEpXZcgvZBOQhLQyvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyN2NmMWYtYzdjNi00MzVjLWEzMTMtOTkyY2M2MzEw NGY5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk ZWQzYTc4OTAtNWViOS00MDBlLThmZTEtMDU4YTlmZGUzYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGGkDdRbvOU5nhhMkVdxzwN0wLs/HcnAMr6u rJ90jCCqalMGAPmQNREE60BsRIivZ5IeORSbfaAQ+Uhv6HGTvRYJ/hLZYTG8xcVq 4cFUMrLLx7fuoD7kP+DmswBZ+JYfzhSnkqjT/Vwu0lSZ935idSyVyuoHs3/vqT5M vugZ0vDqDrX5jO03V+h2csn5zR5wPDQFn9nNot+fV45cKDQeG+v5BI1y3b/RpyqJ Uw/p0I/W0kjoDFGZeeH1FlgtoU3xI7G3qDLf866uktfZH8AeGiSCD1xJCjYtGfsG /doemmTVnCbzv7ljRSnDXd1wFEtyHAPNFcKbGhtTnJ3SrdJ3ewIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPhfk5F7yZX4uiSWcLtMMBqszvnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3 Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJjYzYzMTA0ZjkvZmI1NjlkNDktYTNkNS0z NmI3LTlkNWEtMzkwMGNhOWYwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGYyN2NmMWYtYzdjNi00MzVjLWEz MTMtOTkyY2M2MzEwNGY5LzBmMjdjZjFmLWM3YzYtNDM1Yy1hMzEzLTk5MmNjNjMx MDRmOS5jcmwwHwYDVR0jBBgwFoAUo152Mp1514H4Ylc1CoZ/eeY9K4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJj YzYzMTA0ZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmAQAwQE SABAMA0EAgACMAcDBQAgARkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHzqnu7MzuciT6JJ4ilVIlss6a28 Z7+npUv/1sJ9ERkZSF/u5xzHHy9FazXIx4wW2/A66xzSBgxr+gQ5K6rqgWWs9xCV 9rAyMBrDl7WxUrKVFieL1gy4/8TN1xFzv2GZoLm/6Y4DNEH4FrYsfylkvErmtcOw Lh4fNzTpxixEWEVg6X1X6p1c3i8ClkON2TpUnVKKPdwW/U7z2mePa/Rq38ye0HNT AT4Dzlh/tTRJlEmNgPIJSIkeawYoSCmwYBpO9H9D+tTHEaRt3Zp6gQqnohUb+rDv 8Ud6K6ZUOcdH3JtXlZHWIcmq/D+I9zGazn02V+VwQpiLGrO1RI9CdJ/cwvk= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:48 2025 by rpki-client