$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json) Hash identifier: rkPYxLKNec96bsFJBDNJsn0BxUlLdfhaGusGx++0GLo= Subject key identifier: DD:E4:47:39:68:DC:B6:B6:7E:A9:A9:15:DD:FC:86:59:37:6E:60:71 Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468 Certificate serial: 010D0C9F4328584A3A157CAC9EDE915D3E8EBBC0 Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 66.22.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7c:ac:9e:de:91:5d:3e:8e:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=d4a29111-bd19-46ad-bc2f-2a42076a1412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:de:9e:f6:1c:3a:0f:11:3f:7d:12:b0:bf: 88:b5:2c:f4:f2:c9:b4:9c:69:00:8c:29:25:f6:25: 02:a0:7a:c0:de:ab:48:9b:4b:8c:fd:5d:23:40:5f: fd:14:6f:d8:17:db:8e:aa:44:bd:b0:35:03:e5:29: bf:c8:f2:fa:99:76:3b:57:3f:ca:3c:6c:fa:28:f0: 4a:19:cf:af:fe:2b:f1:2e:75:23:0d:69:7c:a6:7e: 1a:7e:5d:29:a2:b3:fd:3b:5f:dc:74:75:b7:2e:ab: f3:65:0f:06:d8:4f:87:b1:56:0e:30:a6:63:23:f7: 40:e5:09:b4:56:3f:d6:9f:d4:c9:0e:95:0c:2f:7b: 1d:ba:35:50:3f:e7:cf:ac:8b:97:c9:58:e2:5b:57: 9f:35:36:3f:b0:b4:14:01:e1:c0:cc:ad:9b:c4:77: ee:fb:f5:c0:9b:c6:b1:3b:82:b6:ae:b6:d2:30:bd: 06:41:a1:17:e2:46:b7:56:68:bf:b3:9f:b1:70:e4: fb:b7:2d:4d:41:eb:03:0d:4f:3c:64:19:93:45:e5: 00:c0:23:fd:24:89:c7:26:26:ff:d4:71:99:09:e5: 9f:f4:ba:98:1c:ac:76:2c:0d:db:db:f5:70:f4:9b: b7:98:36:25:7c:d2:0e:08:c2:68:16:15:22:f1:91: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:47:39:68:DC:B6:B6:7E:A9:A9:15:DD:FC:86:59:37:6E:60:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl X509v3 Authority Key Identifier: keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer sbgp-ipAddrBlock: critical IPv4: 66.22.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:12:a3:91:41:2f:bf:83:a4:d7:dd:7f:3d:05:ee:a6:32:cf: 35:c0:16:ee:5d:26:34:48:0d:81:f1:29:be:04:96:8d:ea:dd: b3:b6:54:30:82:53:fd:0a:eb:86:7c:6c:d2:4b:25:05:2a:c8: e1:cd:8b:bc:21:ff:41:3e:30:2d:6b:ce:a5:7c:d4:93:62:c9: 4a:35:af:b8:5c:06:40:ae:c7:9a:01:93:b3:fe:73:96:4b:e5: 0b:c5:45:a1:39:da:7c:ff:70:0c:af:e4:f8:43:be:7d:b3:63: 91:86:dc:e2:ea:49:26:17:f0:57:01:50:3a:d4:bc:18:37:b9: 00:32:65:40:e9:fe:ea:e9:51:cb:63:a8:63:98:b1:80:61:2f: 5a:bf:cf:5b:8c:c2:b6:e3:1f:32:4a:56:92:68:0d:18:37:1f: 48:6e:98:20:8f:7c:f6:9a:e5:22:04:bb:97:26:04:cc:57:0f: 69:95:c8:42:5d:62:93:72:a0:ae:a9:83:6f:56:32:03:fa:b4: 5b:2e:4f:07:77:be:53:ea:3c:a8:a2:01:66:b9:07:a2:89:d8: 0d:d0:f5:4b:ab:fb:3b:69:c2:23:5f:d9:b9:03:ea:60:ab:ed: 84:b6:e4:91:8e:97:4b:a3:f4:92:fc:69:3d:37:46:af:c6:8b: 0d:6a:88:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXysnt6RXT6Ou8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0MzQxZWEtNGEzMS00Njg0LWJmODktMjM3Nzc0ZjVh NDY4MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZDRhMjkxMTEtYmQxOS00NmFkLWJjMmYtMmE0MjA3NmExNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBjenvYcOg8RP30SsL+ItSz08sm0nGkAjCkl 9iUCoHrA3qtIm0uM/V0jQF/9FG/YF9uOqkS9sDUD5Sm/yPL6mXY7Vz/KPGz6KPBK Gc+v/ivxLnUjDWl8pn4afl0porP9O1/cdHW3LqvzZQ8G2E+HsVYOMKZjI/dA5Qm0 Vj/Wn9TJDpUML3sdujVQP+fPrIuXyVjiW1efNTY/sLQUAeHAzK2bxHfu+/XAm8ax O4K2rrbSML0GQaEX4ka3Vmi/s5+xcOT7ty1NQesDDU88ZBmTReUAwCP9JInHJib/ 1HGZCeWf9LqYHKx2LA3b2/Vw9Ju3mDYlfNIOCMJoFhUi8ZFZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3kRzlo3La2fqmpFd38hlk3bmBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjQz NDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRmNWE0NjgvYTY2MTUzOGYtNDEzNi0z MmI4LWE4OTktODgxMDQ4ODFlMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDY0MzQxZWEtNGEzMS00Njg0LWJm ODktMjM3Nzc0ZjVhNDY4L2Q2NDM0MWVhLTRhMzEtNDY4NC1iZjg5LTIzNzc3NGY1 YTQ2OC5jcmwwHwYDVR0jBBgwFoAUoO8vnwBda9ZyIfSWE7ac8RT9OlQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3 NzRmNWE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkSo5FBL7+DpNfdfz0F7qYyzzXAFu5dJjRIDYHxKb4Elo3q3bO2VDCC U/0K64Z8bNJLJQUqyOHNi7wh/0E+MC1rzqV81JNiyUo1r7hcBkCux5oBk7P+c5ZL 5QvFRaE52nz/cAyv5PhDvn2zY5GG3OLqSSYX8FcBUDrUvBg3uQAyZUDp/urpUctj qGOYsYBhL1q/z1uMwrbjHzJKVpJoDRg3H0humCCPfPaa5SIEu5cmBMxXD2mVyEJd YpNyoK6pg29WMgP6tFsuTwd3vlPqPKiiAWa5B6KJ2A3Q9Uur+ztpwiNf2bkD6mCr 7YS25JGOl0uj9JL8aT03Rq/Giw1qiLQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:49:10 2025 by rpki-client