$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa File: a68ea5a3-4e54-3e21-b006-2030b235600f.roa (raw, json) Hash identifier: BWtZaPyI9wTAjuoXliJs7O3jtzpWTaMgJyqEwhxq1BY= Subject key identifier: FE:66:42:E0:9C:01:4C:27:CD:6A:40:ED:7F:7B:12:8C:8F:16:E2:51 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584A5CFDEC567A76AB20A5D32D80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 40509 IP address blocks: 137.66.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:ec:56:7a:76:ab:20:a5:d3:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=a79cb058-b06d-476c-9f6d-5151a71a0059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:83:05:f1:d5:33:7e:2b:b2:51:94:0d:07: 19:ad:31:9b:45:0b:8a:dd:4f:a8:0e:25:8f:50:b7: cb:dc:2c:c8:d1:2d:48:54:93:1e:1e:a8:cf:86:94: 9b:22:d4:d4:d2:04:08:5b:15:a2:56:e7:04:67:07: 92:b9:bc:50:17:ab:aa:33:30:15:08:b6:fb:92:4d: 7d:bf:9c:86:2e:c1:76:84:f9:30:a9:49:79:77:79: 81:fa:4b:61:d4:ca:3d:1b:27:e8:d9:f7:44:a2:29: 36:c1:48:f8:51:0a:5d:20:ac:2b:c9:e4:56:67:49: a8:c1:a5:e8:2b:c7:3e:8d:8b:f7:7d:36:91:ce:a5: 20:16:3e:61:84:97:95:1b:69:af:05:a2:7d:a3:e1: 6b:af:74:70:b3:29:23:ce:61:21:b7:05:99:ac:e2: f2:9f:36:cc:c9:92:e9:cf:d5:6e:f8:8c:d4:39:17: 49:92:1a:66:61:e3:02:16:d6:da:ea:e7:2d:d8:b0: 3d:db:ff:5a:c3:ae:e0:7a:ff:d8:5f:09:08:20:08: 72:a0:cc:4d:f8:37:ee:86:e9:ef:3e:fd:78:77:6f: 1b:73:13:9a:9e:40:f6:ce:56:b3:24:2c:ce:dd:a6: 8b:71:ff:7d:d4:3e:1b:6b:23:4c:91:64:e5:48:c2: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:42:E0:9C:01:4C:27:CD:6A:40:ED:7F:7B:12:8C:8F:16:E2:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 137.66.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:29:7d:cf:b0:c0:f8:ac:c4:e6:58:0f:c7:d1:ab:75:3f:1c: 02:00:2e:8f:9f:51:8f:7b:26:e0:8b:b3:25:bf:b7:3d:8d:30: be:06:60:20:20:5b:15:ca:2f:60:f9:4f:c5:e0:71:db:93:6d: 68:09:8b:51:4c:35:48:f1:8b:e1:65:42:76:88:65:a7:96:66: 27:6c:0e:4f:58:a8:61:0d:67:b3:26:4c:bc:a0:f1:78:de:d7: 72:fb:e0:68:ad:15:2d:74:35:e3:76:d0:8f:ff:ce:d3:c8:f7: 48:50:9a:3a:0b:04:3d:73:f0:13:bf:fa:e1:e8:f6:b2:67:11: a1:60:71:b0:fb:99:86:46:74:6c:1c:6a:66:bb:01:cf:5a:c7: 21:6a:74:3e:bb:30:d5:1c:58:c9:16:1e:61:b1:47:63:21:f8: 00:14:59:69:48:8f:0b:87:3d:67:c0:dc:dd:99:b4:29:29:ee: 1e:c1:e1:4e:5a:63:13:2e:d1:aa:3e:4d:b6:24:40:b6:5c:be: d4:90:5e:74:03:dd:95:23:4f:f6:51:77:ff:29:55:15:b1:51: 92:dc:cc:71:69:7a:bc:7c:fb:6e:ed:0d:cb:66:7f:ec:cf:d7: c3:96:60:91:6e:39:a5:83:ac:6c:75:4b:fa:4e:b2:5a:7b:a6: f6:c5:cc:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/exWenarIKXTLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YTc5Y2IwNTgtYjA2ZC00NzZjLTlmNmQtNTE1MWE3MWEwMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm62DBfHVM34rslGUDQcZrTGbRQuK3U+oDiWP ULfL3CzI0S1IVJMeHqjPhpSbItTU0gQIWxWiVucEZweSubxQF6uqMzAVCLb7kk19 v5yGLsF2hPkwqUl5d3mB+kth1Mo9Gyfo2fdEoik2wUj4UQpdIKwryeRWZ0mowaXo K8c+jYv3fTaRzqUgFj5hhJeVG2mvBaJ9o+Frr3RwsykjzmEhtwWZrOLynzbMyZLp z9Vu+IzUORdJkhpmYeMCFtba6uct2LA92/9aw67gev/YXwkIIAhyoMxN+Dfuhunv Pv14d28bcxOankD2zlazJCzO3aaLcf991D4bayNMkWTlSMJ5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5mQuCcAUwnzWpA7X97EoyPFuJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYTY4ZWE1YTMtNGU1NC0z ZTIxLWIwMDYtMjAzMGIyMzU2MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiUIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwpfc+wwPisxOZYD8fRq3U/HAIALo+fUY97JuCLsyW/tz2NML4GYCAg WxXKL2D5T8XgcduTbWgJi1FMNUjxi+FlQnaIZaeWZidsDk9YqGENZ7MmTLyg8Xje 13L74GitFS10NeN20I//ztPI90hQmjoLBD1z8BO/+uHo9rJnEaFgcbD7mYZGdGwc ama7Ac9axyFqdD67MNUcWMkWHmGxR2Mh+AAUWWlIjwuHPWfA3N2ZtCkp7h7B4U5a YxMu0ao+TbYkQLZcvtSQXnQD3ZUjT/ZRd/8pVRWxUZLczHFperx8+27tDctmf+zP 18OWYJFuOaWDrGx1S/pOslp7pvbFzC8= -----END CERTIFICATE-----Generated at Sat Jul 5 11:02:12 2025 by rpki-client