$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa File: 8ee2a08b-770e-3be0-b580-1401678ad4a4.roa (raw, json) Hash identifier: g0fo0++Pc+C8YCL+KFiF+zKj5gePzu3c19Q9hTgwXpM= Subject key identifier: 12:FB:D3:EF:95:6C:57:0B:3F:D6:E8:1A:D2:6B:74:67:06:D6:67:2C Certificate issuer: /CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Certificate serial: 010D0C9F43285849ED4FBFFF056A7EBDD691BF00 Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 1299 IP address blocks: 66.187.0.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:bf:ff:05:6a:7e:bd:d6:91:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=befc1be6-2100-43ad-8786-16ca1ef567f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:24:c3:7c:a7:24:f3:da:0d:b4:d5:b6:93: e6:3a:cc:e2:37:22:ff:74:52:70:09:8c:df:77:d8: e1:fc:a3:2e:50:b5:1b:5f:36:11:70:f5:bf:5d:95: 11:7c:25:09:16:b8:49:9c:da:d2:29:ca:a4:f7:44: 5d:4e:5e:11:55:86:dd:17:df:ef:77:86:ae:25:59: 0d:b9:58:6d:f6:6e:31:d3:d6:75:6e:c3:30:e6:b6: 18:81:91:f0:99:e1:a7:6f:d0:33:fe:fd:5b:97:a6: 25:8f:80:2e:33:d2:37:02:05:f4:30:ea:ed:64:3d: 31:bd:3a:f6:4b:28:6e:64:9f:f0:7a:81:9b:fc:bd: db:fb:78:8f:40:16:32:31:c9:ca:89:d7:8e:8b:2f: bd:b2:84:6c:90:60:3d:78:57:75:33:60:1f:01:46: 4b:be:5f:d7:e6:b7:12:37:52:33:f8:30:0c:df:8a: 23:b3:99:22:fd:25:ff:83:33:9a:f0:4f:79:08:62: b4:c9:79:3b:0f:af:34:d5:00:08:9e:0c:0f:38:2b: a0:7d:3b:92:a2:51:63:3e:00:27:12:22:60:f1:75: 70:33:19:2b:49:c8:ca:a6:a7:32:78:56:85:6a:6b: 12:b9:d9:69:d7:f9:df:93:79:81:13:d3:06:9b:84: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FB:D3:EF:95:6C:57:0B:3F:D6:E8:1A:D2:6B:74:67:06:D6:67:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl X509v3 Authority Key Identifier: keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer sbgp-ipAddrBlock: critical IPv4: 66.187.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ac:cc:14:e3:12:c9:9b:8c:29:fc:fc:18:7b:5d:8a:5d:67: 7a:33:65:22:3f:f5:99:74:64:a9:90:e7:f2:dc:53:9b:e8:b0: 9e:96:5b:66:98:1d:57:47:86:99:78:8c:38:e6:76:b9:b9:df: 2b:32:2e:9a:84:06:c0:52:01:d6:99:95:8a:6d:c8:51:a3:04: 96:24:7e:57:bf:5f:4b:92:93:67:ad:90:55:b0:3d:60:a4:a1: 1d:75:97:8d:fa:0b:5f:ab:a2:60:91:6b:f6:76:b0:74:b3:cb: 55:03:8b:37:29:64:14:fb:d9:60:f4:8f:f6:6f:18:13:16:7a: ba:43:85:7d:ea:6f:0c:f2:2a:cc:80:ea:95:21:86:63:79:22: 9c:b9:60:b4:85:c6:e5:18:ce:22:29:0c:e2:83:a6:22:90:e2: fb:c7:e4:54:58:52:ec:a7:c0:b3:91:18:c1:b9:39:40:59:5b: 78:4f:00:cd:fe:85:a1:0b:67:b1:d4:ef:30:0a:42:69:c6:a9: 61:d6:47:7e:8b:5a:f0:b6:79:e9:5c:f8:64:1f:5d:e9:ef:cb: a8:64:59:57:da:7e:ba:43:0c:e8:19:a3:2a:6f:a5:eb:20:78: 32:44:92:36:ec:02:a4:52:cb:a8:2a:8b:bb:ed:38:09:42:74: 28:b4:d8:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT7//BWp+vdaRvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw NzY1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk YmVmYzFiZTYtMjEwMC00M2FkLTg3ODYtMTZjYTFlZjU2N2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrYkw3ynJPPaDbTVtpPmOsziNyL/dFJwCYzf d9jh/KMuULUbXzYRcPW/XZURfCUJFrhJnNrSKcqk90RdTl4RVYbdF9/vd4auJVkN uVht9m4x09Z1bsMw5rYYgZHwmeGnb9Az/v1bl6Ylj4AuM9I3AgX0MOrtZD0xvTr2 SyhuZJ/weoGb/L3b+3iPQBYyMcnKideOiy+9soRskGA9eFd1M2AfAUZLvl/X5rcS N1Iz+DAM34ojs5ki/SX/gzOa8E95CGK0yXk7D6801QAIngwPOCugfTuSolFjPgAn EiJg8XVwMxkrScjKpqcyeFaFamsSudlp1/nfk3mBE9MGm4QEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL70++VbFcLP9boGtJrdGcG1mcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvOGVlMmEwOGItNzcwZS0z YmUwLWI1ODAtMTQwMTY3OGFkNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0 OTIxZDA3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaszBTjEsmbjCn8/Bh7XYpdZ3ozZSI/9Zl0ZKmQ5/LcU5vosJ6WW2aY HVdHhpl4jDjmdrm53ysyLpqEBsBSAdaZlYptyFGjBJYkfle/X0uSk2etkFWwPWCk oR11l436C1+romCRa/Z2sHSzy1UDizcpZBT72WD0j/ZvGBMWerpDhX3qbwzyKsyA 6pUhhmN5Ipy5YLSFxuUYziIpDOKDpiKQ4vvH5FRYUuynwLORGMG5OUBZW3hPAM3+ haELZ7HU7zAKQmnGqWHWR36LWvC2eelc+GQfXenvy6hkWVfafrpDDOgZoypvpesg eDJEkjbsAqRSy6gqi7vtOAlCdCi02JY= -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:11 2025 by rpki-client