$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa File: d88a912e-dbfe-3d36-b104-8cc39e60b039.roa (raw, json) Hash identifier: qg9YzCVovpVipUUqSdZbnqNsCGrI4DtBdYajfxwUIPQ= Subject key identifier: 85:1E:F2:B1:F2:E5:86:2E:CA:A3:D6:13:6C:FC:96:99:B8:EB:1A:78 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDDF4529813D267E29880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 22369 IP address blocks: 66.160.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:dd:f4:52:98:13:d2:67:e2:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=607b0c7d-202c-4633-ac0e-26d0ce575e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:5d:88:b3:fd:5b:a8:ee:77:14:f0:1d:1a: bf:59:47:de:71:2a:9a:12:85:10:c3:23:b4:2c:9d: ab:82:64:eb:60:d4:f2:5f:76:6d:b8:66:ac:52:6f: c5:3a:0d:d8:7e:79:f1:8f:26:6b:24:60:9e:05:47: 40:59:6f:f6:d0:2e:6a:b9:fa:1f:63:d4:3c:35:62: f4:3d:8a:d1:13:ce:83:ca:e3:88:43:ac:f5:e6:dd: 7d:10:5a:0f:ef:bf:ca:d9:54:47:bd:a8:bc:b2:14: d9:8a:ef:cf:d7:f7:f6:aa:46:d9:c3:2c:7b:1a:08: a5:d3:91:97:db:71:91:54:20:6e:f2:89:11:fa:1a: 28:57:a5:68:d1:4c:4c:c8:82:1d:9b:62:35:87:7c: 1a:20:11:6f:35:6c:5d:c5:42:20:21:e3:b6:07:75: ca:ec:ee:fe:26:c3:69:0d:0f:a7:db:12:4c:44:21: 32:46:1a:97:1c:65:57:87:69:a5:08:36:0d:1c:ff: 9f:61:09:be:a9:cc:0b:bf:5c:2f:9a:e5:83:e9:80: 3b:8c:86:ee:7b:7e:db:22:02:1d:22:59:da:d6:a6: 8f:5a:77:b1:21:db:53:f3:18:b7:44:f1:ca:6f:eb: a0:13:e6:03:09:c3:e2:16:6d:39:89:84:44:8f:20: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1E:F2:B1:F2:E5:86:2E:CA:A3:D6:13:6C:FC:96:99:B8:EB:1A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.160.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:8f:47:1e:66:af:fe:1f:34:68:dd:a3:6f:3c:89:16:83:15: 06:8b:49:42:06:72:60:bd:2b:62:e1:3d:2a:67:ea:ab:8e:bf: eb:fe:9b:0f:2f:8b:7c:10:71:7f:f2:57:84:5b:59:61:69:05: 76:71:f7:23:58:fe:22:e6:5a:42:1f:e6:e6:fb:bb:b1:f6:23: ac:62:b8:41:0c:96:fc:6a:86:41:53:e2:41:da:fb:10:01:ac: 83:69:50:92:96:8d:2c:b2:ad:0a:ed:33:42:bb:56:6b:04:25: 2e:f8:fa:0f:0f:0f:c8:02:85:4d:23:7a:d0:81:3f:d0:ce:8a: 58:03:2d:41:cf:33:9f:6f:34:9b:cf:6b:a9:b9:11:5f:a0:7d: c5:89:6f:84:94:e9:89:ad:fc:3b:c2:f1:74:e3:43:50:d9:fa: 00:9e:cd:26:66:cb:f9:d6:16:77:66:c8:8a:05:00:cf:d0:a7: 86:fd:46:a5:ed:06:38:51:b6:74:a0:a1:fe:03:99:1a:d3:17: b3:15:1c:89:e9:5b:00:f4:a8:d9:97:52:4e:91:63:54:6c:b5: 8d:50:0b:6f:62:1f:d7:ee:e5:e4:d4:97:bb:cc:62:8a:58:ff: 67:fc:7a:ec:74:18:bd:bb:d2:b8:c0:c4:81:79:31:98:49:f8: bc:8d:76:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX930UpgT0mfimIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NjA3YjBjN2QtMjAyYy00NjMzLWFjMGUtMjZkMGNlNTc1ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv35diLP9W6judxTwHRq/WUfecSqaEoUQwyO0 LJ2rgmTrYNTyX3ZtuGasUm/FOg3YfnnxjyZrJGCeBUdAWW/20C5qufofY9Q8NWL0 PYrRE86DyuOIQ6z15t19EFoP77/K2VRHvai8shTZiu/P1/f2qkbZwyx7Ggil05GX 23GRVCBu8okR+hooV6Vo0UxMyIIdm2I1h3waIBFvNWxdxUIgIeO2B3XK7O7+JsNp DQ+n2xJMRCEyRhqXHGVXh2mlCDYNHP+fYQm+qcwLv1wvmuWD6YA7jIbue37bIgId Ilna1qaPWnexIdtT8xi3RPHKb+ugE+YDCcPiFm05iYREjyBzsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUe8rHy5YYuyqPWE2z8lpm46xp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDg4YTkxMmUtZGJmZS0z ZDM2LWIxMDQtOGNjMzllNjBiMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+PRx5mr/4fNGjdo288iRaDFQaLSUIGcmC9K2LhPSpn6quOv+v+mw8v i3wQcX/yV4RbWWFpBXZx9yNY/iLmWkIf5ub7u7H2I6xiuEEMlvxqhkFT4kHa+xAB rINpUJKWjSyyrQrtM0K7VmsEJS74+g8PD8gChU0jetCBP9DOilgDLUHPM59vNJvP a6m5EV+gfcWJb4SU6Ymt/DvC8XTjQ1DZ+gCezSZmy/nWFndmyIoFAM/Qp4b9RqXt BjhRtnSgof4DmRrTF7MVHInpWwD0qNmXUk6RY1RstY1QC29iH9fu5eTUl7vMYopY /2f8eux0GL270rjAxIF5MZhJ+LyNdh4= -----END CERTIFICATE-----Generated at Sun Jun 29 12:20:30 2025 by rpki-client