$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0fa1f3d2-af30-3ee3-8e3e-20df2246c11e.roa File: 0fa1f3d2-af30-3ee3-8e3e-20df2246c11e.roa (raw, json) Hash identifier: ei8VT6oyhRq3WaFhzerLw21qJoRUWYRcBEJkhnMaN5k= Subject key identifier: EE:0A:08:8E:53:F2:71:B6:48:61:8D:47:57:08:F4:58:69:3D:64:AA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A619B88C9D7907CA00A5FF680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0fa1f3d2-af30-3ee3-8e3e-20df2246c11e.roa Signing time: Wed 02 Jul 2025 04:47:33 +0000 ROA not before: Wed 02 Jul 2025 04:47:33 +0000 ROA not after: Tue 30 Sep 2025 04:47:33 +0000 asID: 6079 IP address blocks: 66.227.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:9b:88:c9:d7:90:7c:a0:0a:5f:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 2 04:47:33 2025 GMT Not After : Sep 30 04:47:33 2025 GMT Subject: CN=b6de46cf-2990-49cb-9cda-64ff08680c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:5e:45:87:5f:73:d1:11:71:ea:02:0c:e1: cd:08:83:55:38:e0:7a:41:9d:d2:e8:74:82:a1:e0: d2:1e:c5:af:8c:70:e0:06:e5:f0:51:9e:7f:ca:b3: 85:c2:2c:c2:78:1d:1b:1f:c0:a8:cb:da:09:e1:15: df:39:01:c9:c5:e8:2c:a9:e4:22:e1:3c:d6:70:70: c6:68:81:dd:d2:a5:19:b2:4a:95:6d:fb:e8:22:fe: b8:23:57:f8:29:e8:43:ca:32:88:9b:87:c4:e5:5b: ff:0c:29:bc:77:67:52:53:fc:48:46:03:b0:b2:04: ea:61:a0:38:d7:04:6c:28:2f:d3:98:1e:36:9a:09: 28:90:bc:4c:f9:04:ad:2f:7c:3e:ae:3f:3b:e2:fe: 5d:b1:d1:d8:09:d8:35:11:82:da:c7:82:f1:28:0e: ca:e3:c4:0d:89:e6:43:51:3a:09:58:44:c9:fe:d7: f2:42:5c:d1:89:49:7f:3f:b7:7a:9f:98:20:42:a5: ef:a2:c4:5b:22:f9:d7:5b:84:64:eb:ab:6f:28:16: 5a:68:16:c6:e6:fb:0f:bc:a1:9a:62:1d:a0:e2:32: d2:f5:86:45:e0:de:16:bc:d1:c0:64:a1:23:48:36: 9e:ac:3c:3e:8b:1f:2a:be:21:00:60:1c:e1:d9:e8: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:08:8E:53:F2:71:B6:48:61:8D:47:57:08:F4:58:69:3D:64:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0fa1f3d2-af30-3ee3-8e3e-20df2246c11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:51:47:aa:be:ba:3a:d8:8a:56:d5:b5:da:28:b0:89:1d:52: b9:77:c4:11:16:92:5d:e7:d4:32:c5:41:c6:9f:bf:d2:13:0f: ed:bf:c9:43:9c:ef:8d:b1:8a:55:47:27:f3:43:84:1b:f6:1f: 10:af:8b:18:e5:c4:91:c3:42:19:76:f8:b5:87:17:67:7f:35: 26:cd:f3:ab:db:2c:39:73:ae:f4:e4:ce:67:08:ec:6a:3d:ce: 7a:49:a4:54:e1:bf:77:c0:70:81:cf:6e:c6:49:8c:1f:fd:49: f5:cf:73:aa:a7:4b:b2:4b:87:43:3c:0c:3a:6f:1c:09:3e:0c: 54:9b:24:28:7e:6d:1f:1e:1e:22:82:31:0d:ba:9e:90:3c:7e: 4f:21:a8:27:f5:a2:85:20:e3:f2:13:78:55:6e:c7:e6:25:be: 87:7a:ed:32:91:19:35:4a:5c:91:67:ea:fc:0e:6f:0f:38:42: 89:59:b5:68:37:4b:49:26:48:02:48:52:46:1f:af:a4:7e:c0: fc:97:f0:88:ac:ee:eb:68:b6:be:e5:9f:17:64:92:87:23:3a: 8f:51:a9:10:c1:cb:0d:f1:3b:d5:09:10:28:99:32:63:8c:1a: 49:f9:ed:59:41:8d:c6:c5:9c:af:a6:83:d3:c5:fa:03:7b:a6: bb:57:52:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphm4jJ15B8oApf9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcwMjA0NDczM1oXDTI1MDkzMDA0NDczM1owLzEtMCsGA1UEAxMk YjZkZTQ2Y2YtMjk5MC00OWNiLTljZGEtNjRmZjA4NjgwYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhZeRYdfc9ERceoCDOHNCINVOOB6QZ3S6HSC oeDSHsWvjHDgBuXwUZ5/yrOFwizCeB0bH8Coy9oJ4RXfOQHJxegsqeQi4TzWcHDG aIHd0qUZskqVbfvoIv64I1f4KehDyjKIm4fE5Vv/DCm8d2dSU/xIRgOwsgTqYaA4 1wRsKC/TmB42mgkokLxM+QStL3w+rj874v5dsdHYCdg1EYLax4LxKA7K48QNieZD UToJWETJ/tfyQlzRiUl/P7d6n5ggQqXvosRbIvnXW4Rk66tvKBZaaBbG5vsPvKGa Yh2g4jLS9YZF4N4WvNHAZKEjSDaerDw+ix8qviEAYBzh2eg0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4KCI5T8nG2SGGNR1cI9FhpPWSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGZhMWYzZDItYWYzMC0z ZWUzLThlM2UtMjBkZjIyNDZjMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVRR6q+ujrYilbVtdoosIkdUrl3xBEWkl3n1DLFQcafv9ITD+2/yUOc 742xilVHJ/NDhBv2HxCvixjlxJHDQhl2+LWHF2d/NSbN86vbLDlzrvTkzmcI7Go9 znpJpFThv3fAcIHPbsZJjB/9SfXPc6qnS7JLh0M8DDpvHAk+DFSbJCh+bR8eHiKC MQ26npA8fk8hqCf1ooUg4/ITeFVux+Ylvod67TKRGTVKXJFn6vwObw84QolZtWg3 S0kmSAJIUkYfr6R+wPyX8Iis7utotr7lnxdkkocjOo9RqRDByw3xO9UJECiZMmOM Gkn57VlBjcbFnK+mg9PF+gN7prtXUvY= -----END CERTIFICATE-----Generated at Fri Jul 4 17:43:55 2025 by rpki-client