$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/1aee9058-ce6b-3593-bcde-3623dcda05b4.roa File: 1aee9058-ce6b-3593-bcde-3623dcda05b4.roa (raw, json) Hash identifier: l8m4QaBBLUqjYf4nxkEoJYrGKFvHDqRFKgxy8OU4/Xo= Subject key identifier: 75:B7:BE:B4:09:B5:FC:23:FE:6A:B8:70:90:D7:61:79:2B:2D:88:70 Certificate issuer: /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605 Certificate serial: 010D0C9F4328584A0A9FD20B5804FB1E62821080 Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/1aee9058-ce6b-3593-bcde-3623dcda05b4.roa Signing time: Sun 01 Jun 2025 01:00:49 +0000 ROA not before: Sun 01 Jun 2025 01:00:49 +0000 ROA not after: Sat 30 Aug 2025 01:00:49 +0000 asID: 63264 IP address blocks: 66.158.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:9f:d2:0b:58:04:fb:1e:62:82:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605 Validity Not Before: Jun 1 01:00:49 2025 GMT Not After : Aug 30 01:00:49 2025 GMT Subject: CN=22ff30da-c8f0-4d94-a40c-c622f04222c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:f1:f6:5a:0f:5f:ad:fe:3f:7b:f7:cf:09: 73:a1:78:bd:ca:aa:da:cc:8f:ba:3f:67:02:0c:b8: fa:23:e9:3e:d2:2a:38:b6:68:32:ae:18:7d:e9:9c: d3:dd:b0:4b:51:65:13:cb:5c:dd:01:f7:8b:5e:7b: 58:22:ab:44:ae:2e:2a:3d:47:07:d4:d6:c2:88:ca: 5e:cb:3a:5e:47:59:54:a5:ec:50:70:d9:d4:27:6a: fe:2b:3b:c8:1e:9a:d8:ca:29:af:8c:91:60:31:c4: b8:e0:63:05:eb:7d:a9:46:0c:a2:ad:69:f4:d0:43: 02:f9:fb:c4:3d:40:73:85:93:5b:ce:4c:6b:62:c8: 04:ae:72:d7:9e:6d:23:46:2f:13:15:48:25:b0:96: 6f:10:1b:1e:f7:1f:8a:0d:f3:98:d1:70:b2:bb:df: a3:0e:c6:28:11:d3:7b:23:9a:26:1d:52:01:4c:28: 55:db:1c:fb:cb:19:04:a1:e3:2e:6d:9d:f4:c8:1c: 7e:a1:30:c3:cb:cc:7f:db:20:bd:7b:d6:fe:8e:af: 5e:9a:05:75:30:e5:ae:bd:01:72:74:14:64:d0:20: 5b:12:2f:14:2d:31:2c:81:85:c7:0b:40:95:9c:9e: 09:8e:0e:0c:1c:39:16:25:f9:8f:06:09:b6:c4:7d: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:BE:B4:09:B5:FC:23:FE:6A:B8:70:90:D7:61:79:2B:2D:88:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/1aee9058-ce6b-3593-bcde-3623dcda05b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl X509v3 Authority Key Identifier: keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer sbgp-ipAddrBlock: critical IPv4: 66.158.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a1:a4:34:d7:84:70:9f:9b:67:f3:62:52:24:96:02:b6:70: 30:2d:b4:63:95:d5:87:2e:9e:03:c2:c8:70:4c:6d:17:1d:79: e9:4d:8e:9f:e4:ca:be:a2:59:8a:51:63:d7:40:ee:7d:f3:09: 9f:6d:c1:d6:19:e6:dc:dc:82:e3:f6:61:75:a7:18:d9:12:62: a0:70:ed:8b:54:c8:78:5d:d6:02:3d:78:ea:53:45:42:90:ff: ad:b0:56:7b:a2:aa:73:c2:b7:05:68:ea:72:46:8f:50:70:bd: ac:2b:d0:d3:c6:00:35:ee:df:0f:4a:c8:69:c0:f8:d6:d0:7b: 8a:39:25:fd:15:ad:44:db:9e:d8:99:50:0a:f9:02:f4:e2:03: 3f:c2:e0:9d:08:93:15:15:9d:54:2d:73:94:fa:81:3d:d7:42: 33:2c:73:43:12:1f:35:9f:e2:15:37:11:f6:dd:55:4b:40:cd: 6c:bf:70:a7:be:02:22:19:4a:58:73:3c:6b:2f:f3:83:a4:7c: a4:66:3b:5f:cb:25:ac:6a:f2:b3:43:11:6a:e9:f4:24:ae:66: 7c:99:00:43:33:65:3d:ef:24:2d:ef:76:b5:d0:36:2f:d8:ab: 6c:ff:de:ce:41:81:a8:c1:c9:ee:47:ab:d3:8f:5c:3b:69:48: 4c:95:d4:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoKn9ILWAT7HmKCEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlkODJjNzEtMzY2YS00NjdmLTliNmMtMzY2N2QxYWU3 NjA1MB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk MjJmZjMwZGEtYzhmMC00ZDk0LWE0MGMtYzYyMmYwNDIyMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniXx9loPX63+P3v3zwlzoXi9yqrazI+6P2cC DLj6I+k+0io4tmgyrhh96ZzT3bBLUWUTy1zdAfeLXntYIqtEri4qPUcH1NbCiMpe yzpeR1lUpexQcNnUJ2r+KzvIHprYyimvjJFgMcS44GMF632pRgyirWn00EMC+fvE PUBzhZNbzkxrYsgErnLXnm0jRi8TFUglsJZvEBse9x+KDfOY0XCyu9+jDsYoEdN7 I5omHVIBTChV2xz7yxkEoeMubZ30yBx+oTDDy8x/2yC9e9b+jq9emgV1MOWuvQFy dBRk0CBbEi8ULTEsgYXHC0CVnJ4Jjg4MHDkWJfmPBgm2xH35rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW3vrQJtfwj/mq4cJDXYXkrLYhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4 MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3ZDFhZTc2MDUvMWFlZTkwNTgtY2U2Yi0z NTkzLWJjZGUtMzYyM2RjZGEwNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjlkODJjNzEtMzY2YS00NjdmLTli NmMtMzY2N2QxYWU3NjA1L2Y5ZDgyYzcxLTM2NmEtNDY3Zi05YjZjLTM2NjdkMWFl NzYwNS5jcmwwHwYDVR0jBBgwFoAUivmrnrZ2KLgxHuoH0zx32aUB93owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3 ZDFhZTc2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKehpDTXhHCfm2fzYlIklgK2cDAttGOV1YcungPCyHBMbRcdeelNjp/k yr6iWYpRY9dA7n3zCZ9twdYZ5tzcguP2YXWnGNkSYqBw7YtUyHhd1gI9eOpTRUKQ /62wVnuiqnPCtwVo6nJGj1Bwvawr0NPGADXu3w9KyGnA+NbQe4o5Jf0VrUTbntiZ UAr5AvTiAz/C4J0IkxUVnVQtc5T6gT3XQjMsc0MSHzWf4hU3EfbdVUtAzWy/cKe+ AiIZSlhzPGsv84OkfKRmO1/LJaxq8rNDEWrp9CSuZnyZAEMzZT3vJC3vdrXQNi/Y q2z/3s5BgajBye5Hq9OPXDtpSEyV1Dk= -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:15 2025 by rpki-client