$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9455e783-265d-3279-a1fd-8b7fdf845801.roa File: 9455e783-265d-3279-a1fd-8b7fdf845801.roa (raw, json) Hash identifier: XkSZUXue5MRW29c9ytGfOBhCxTJOJITrmGs+iU2+8H8= Subject key identifier: 1E:FA:A5:43:74:96:30:06:F0:0B:DF:1A:31:15:03:00:FF:13:B9:71 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584A050A7035001EAB794399E300 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9455e783-265d-3279-a1fd-8b7fdf845801.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 21782 IP address blocks: 66.199.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:70:35:00:1e:ab:79:43:99:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=3eb665aa-4670-4449-9817-46c7bf6b2889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:82:3d:56:fd:9b:7c:9f:79:da:a5:96:3d: 41:de:fa:05:80:1b:3d:58:32:ef:59:d8:d3:f4:2e: 25:90:9e:c8:e0:09:0a:7b:e5:99:ad:05:81:e4:76: 11:a4:ca:b0:06:a6:d9:67:c0:9f:a4:e8:05:9f:d0: b9:80:02:fd:b2:a9:53:f3:fa:c7:37:29:c1:a9:fa: 25:62:ce:65:06:6d:4a:1a:01:20:96:58:f0:ce:a5: f1:f9:37:2e:53:ab:02:4f:81:e7:0c:9d:72:91:3a: d6:04:cb:1d:46:f8:36:51:21:c5:9e:e0:e4:f5:7c: b3:49:69:e5:e6:ad:38:7c:c9:ba:4f:14:30:1d:5e: 29:77:35:3e:87:4d:67:dd:4e:4a:69:fe:d4:b7:48: 4d:81:88:20:17:fa:41:21:88:9d:4c:cc:b4:28:14: b4:6a:0a:34:81:1c:41:58:96:9f:0e:9a:59:fd:b5: ad:6b:05:97:f1:56:5a:88:e9:ce:c0:cd:dc:ae:f5: fb:a6:20:24:1a:94:e4:bb:64:ee:4e:20:88:70:1a: be:f6:9d:a9:de:cd:a2:94:ff:ac:d0:41:04:7f:60: 47:8a:01:55:d1:d0:8d:ff:ea:63:5c:c1:1b:2e:1d: 15:56:d8:9a:2b:be:50:ab:86:cd:e9:cc:c9:33:33: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FA:A5:43:74:96:30:06:F0:0B:DF:1A:31:15:03:00:FF:13:B9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9455e783-265d-3279-a1fd-8b7fdf845801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 66.199.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:42:c7:c1:98:eb:66:8c:61:86:f1:ec:f2:be:ab:2f:2b:b2: 85:8c:64:d8:6e:6c:5e:d7:8f:47:54:9a:5c:39:55:e3:96:8a: f9:2a:6a:26:b6:cc:30:cb:37:00:c6:0f:15:5e:fe:91:39:68: c2:40:20:66:e5:f2:f2:b9:b9:cc:7c:4c:57:68:e7:de:ab:4f: da:a6:e4:d1:67:66:d2:b7:ac:44:eb:ad:81:70:9b:ba:e1:73: 18:e5:63:e3:ea:98:7c:63:91:27:fa:9e:16:04:cb:98:2b:13: ef:47:a1:ac:ba:54:c1:c5:cf:3b:24:71:6e:70:db:5a:b2:eb: 14:e2:a5:a0:6a:ca:d2:89:16:b2:4c:b5:28:4e:de:46:29:d4: 02:ac:bd:6a:48:84:c4:f1:e8:59:eb:99:6b:7e:71:70:c4:43: 50:1c:c3:16:20:c0:31:d7:60:9b:72:12:8a:08:8f:7e:e4:2a: 4b:4f:f3:28:59:48:b6:05:29:b5:aa:98:fe:9c:de:eb:fb:da: 77:95:fa:2a:58:d3:8a:07:0b:cc:66:c6:7e:31:4a:f8:d9:ac: be:e6:96:e1:97:85:de:f1:30:fc:9e:c6:b8:7b:0b:53:ce:32: a8:44:a9:7b:af:d1:ad:13:2b:a7:f0:f2:11:36:20:e5:e2:ef: 91:aa:57:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnA1AB6reUOZ4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk M2ViNjY1YWEtNDY3MC00NDQ5LTk4MTctNDZjN2JmNmIyODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaKCPVb9m3yfedqllj1B3voFgBs9WDLvWdjT 9C4lkJ7I4AkKe+WZrQWB5HYRpMqwBqbZZ8CfpOgFn9C5gAL9sqlT8/rHNynBqfol Ys5lBm1KGgEglljwzqXx+TcuU6sCT4HnDJ1ykTrWBMsdRvg2USHFnuDk9XyzSWnl 5q04fMm6TxQwHV4pdzU+h01n3U5Kaf7Ut0hNgYggF/pBIYidTMy0KBS0ago0gRxB WJafDppZ/bWtawWX8VZaiOnOwM3crvX7piAkGpTku2TuTiCIcBq+9p2p3s2ilP+s 0EEEf2BHigFV0dCN/+pjXMEbLh0VVtiaK75Qq4bN6czJMzNYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB76pUN0ljAG8AvfGjEVAwD/E7lxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvOTQ1NWU3ODMtMjY1ZC0z Mjc5LWExZmQtOGI3ZmRmODQ1ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQsfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlCx8GY62aMYYbx7PK+qy8rsoWMZNhubF7Xj0dUmlw5VeOWivkqaia2 zDDLNwDGDxVe/pE5aMJAIGbl8vK5ucx8TFdo596rT9qm5NFnZtK3rETrrYFwm7rh cxjlY+PqmHxjkSf6nhYEy5grE+9Hoay6VMHFzzskcW5w21qy6xTipaBqytKJFrJM tShO3kYp1AKsvWpIhMTx6FnrmWt+cXDEQ1AcwxYgwDHXYJtyEooIj37kKktP8yhZ SLYFKbWqmP6c3uv72neV+ipY04oHC8xmxn4xSvjZrL7mluGXhd7xMPyexrh7C1PO MqhEqXuv0a0TK6fw8hE2IOXi75GqVxc= -----END CERTIFICATE-----Generated at Mon Jun 30 20:37:46 2025 by rpki-client