$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa File: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (raw, json) Hash identifier: 7BCNiBXH3snyZHF4vyrT+BDi7duKiW30+5+G4M71fsA= Subject key identifier: D4:98:20:F5:76:AE:95:93:0C:53:43:73:40:9B:B2:45:11:27:7A:DD Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584A34801E67B8072E023690A300 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 46962 IP address blocks: 66.118.224.0/22 maxlen: 24 104.255.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1e:67:b8:07:2e:02:36:90:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=2c1ff473-52da-4fa2-8db9-87377a2a5bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:2b:6e:1c:9a:ee:77:c2:93:4b:8e:cc:eb: 22:9c:41:b8:04:7b:1d:18:77:64:7a:bf:40:59:d5: f7:c6:38:7b:d1:db:13:86:64:34:87:c4:23:b8:35: ed:0e:0a:b7:45:13:49:80:74:75:31:49:9d:21:e7: 7b:8b:b7:98:76:9c:cf:21:88:49:77:8c:f2:4b:49: e9:59:71:10:2c:18:cf:08:dc:ec:88:ef:b3:4c:ad: 3e:d2:25:68:56:aa:85:48:18:25:7f:97:99:69:79: 45:9c:18:60:80:48:22:2c:ca:a1:09:0d:35:c9:f7: 8b:7e:ba:e8:d8:a9:e2:87:29:0d:3e:18:7f:0f:44: 77:93:12:f7:2f:f2:ba:09:37:ad:08:01:a7:c4:11: 8f:a5:76:85:7e:50:25:18:cb:77:f7:2d:82:85:63: f1:af:d8:72:84:22:e4:15:42:08:1e:d1:b3:2e:4b: b1:cc:d5:7e:8b:46:94:8f:09:3f:ec:e1:f2:b8:ab: ac:e1:a6:41:c0:f9:db:ed:d8:3d:b4:8e:96:82:12: 0d:5a:98:1d:3b:e0:ec:45:88:87:9c:29:d0:62:e6: 63:83:6e:9b:cb:ac:0c:b4:ad:51:98:8a:20:29:b2: 89:30:ab:a4:01:9b:01:ea:5e:1c:b3:2d:0a:d8:a9: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:20:F5:76:AE:95:93:0C:53:43:73:40:9B:B2:45:11:27:7A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 66.118.224.0/22 104.255.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5b:10:d2:13:d9:c1:b0:1a:0b:72:40:79:92:20:45:9d:25: 80:c5:5c:28:03:02:53:7c:a1:c9:66:b3:7b:f6:8a:c4:f6:5e: 5f:43:16:20:24:a9:80:59:eb:f2:13:45:62:2e:c9:62:c4:45: 7a:86:1f:6d:31:27:d1:64:1e:cb:3a:0d:ef:2a:07:95:ae:c5: 2a:cd:17:1a:e6:79:db:2e:af:68:6f:c5:1d:e7:37:ba:80:93: a5:12:89:b9:91:1d:c1:5b:b0:01:96:5d:db:71:82:19:20:47: 87:c4:ed:b4:b5:02:75:3f:8b:9d:c6:8f:36:f2:a7:19:83:30: 17:66:97:ac:3a:b9:93:9d:45:49:af:2e:1c:ea:00:b7:0b:e4: d2:4e:ee:2a:ad:1b:cc:21:39:da:b4:ad:ee:e2:88:6c:1f:29: 97:05:95:e4:3d:d8:69:6c:55:78:02:6b:77:dd:b5:0e:91:8c: c0:cb:28:2a:cb:1e:65:06:13:ab:e8:0e:8e:1f:0a:5b:e6:70: 7c:13:9b:9f:81:7f:84:34:b2:34:10:62:fc:6d:7a:76:f1:1e: 02:0a:ec:73:b9:c4:fa:f2:27:4d:e4:f5:b8:d4:f8:28:75:3c: 58:c2:d6:1d:d8:f4:cb:23:e5:7b:60:e6:41:e7:cf:db:f2:eb: 6e:c6:21:02 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo0gB5nuAcuAjaQowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MmMxZmY0NzMtNTJkYS00ZmEyLThkYjktODczNzdhMmE1YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGcrbhya7nfCk0uOzOsinEG4BHsdGHdker9A WdX3xjh70dsThmQ0h8QjuDXtDgq3RRNJgHR1MUmdIed7i7eYdpzPIYhJd4zyS0np WXEQLBjPCNzsiO+zTK0+0iVoVqqFSBglf5eZaXlFnBhggEgiLMqhCQ01yfeLfrro 2KnihykNPhh/D0R3kxL3L/K6CTetCAGnxBGPpXaFflAlGMt39y2ChWPxr9hyhCLk FUIIHtGzLkuxzNV+i0aUjwk/7OHyuKus4aZBwPnb7dg9tI6WghINWpgdO+DsRYiH nCnQYuZjg26by6wMtK1RmIogKbKJMKukAZsB6l4csy0K2KlQ3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNSYIPV2rpWTDFNDc0CbskURJ3rdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjMwM2Q1NjYtYzIxZi0z MjQ0LThkNGMtNmQ4ZDMxNGM3OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQnbgAwQC aP+0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH1bENIT2cGwGgtyQHmSIEWdJYDFXCgDAlN8oclms3v2isT2 Xl9DFiAkqYBZ6/ITRWIuyWLERXqGH20xJ9FkHss6De8qB5WuxSrNFxrmedsur2hv xR3nN7qAk6USibmRHcFbsAGWXdtxghkgR4fE7bS1AnU/i53GjzbypxmDMBdml6w6 uZOdRUmvLhzqALcL5NJO7iqtG8whOdq0re7iiGwfKZcFleQ92GlsVXgCa3fdtQ6R jMDLKCrLHmUGE6voDo4fClvmcHwTm5+Bf4Q0sjQQYvxtenbxHgIK7HO5xPryJ03k 9bjU+Ch1PFjC1h3Y9Msj5Xtg5kHnz9vy627GIQI= -----END CERTIFICATE-----Generated at Mon Jun 16 21:33:27 2025 by rpki-client