$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6698efa3-aa50-3916-a56e-51d386fa8e19.roa File: 6698efa3-aa50-3916-a56e-51d386fa8e19.roa (raw, json) Hash identifier: GaATXm4Yy6khENgnpxewbrf3/tUHIdyPGSTPoZxVHW0= Subject key identifier: 42:FB:0A:A7:7F:8C:69:E2:81:46:A3:B8:09:77:66:62:10:31:6C:88 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584A0C0556D2497E16E23B0BB140 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6698efa3-aa50-3916-a56e-51d386fa8e19.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 66.159.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:56:d2:49:7e:16:e2:3b:0b:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=050b1f81-a045-4a23-b2a9-072e763da039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:20:54:19:63:2b:cd:a3:18:1d:0b:2d:be: 33:55:ec:ac:21:8d:da:9a:47:6b:36:d9:bb:54:4f: 8b:b2:c5:2b:87:05:ac:96:f4:bd:73:a6:ea:d2:2c: 99:6a:05:47:25:b5:a1:ad:53:28:9e:26:87:f7:74: d0:02:8d:d5:03:9d:dc:c9:c9:54:0a:e1:a7:ac:e5: 24:db:79:fc:a7:57:94:04:2c:af:53:d8:59:b6:c4: 8d:66:3f:df:b5:f4:da:9f:fd:45:16:38:11:0d:95: 85:5e:13:85:8f:50:a3:a1:ed:3c:33:67:98:ec:78: 68:22:05:fc:0e:b7:7f:a6:f0:79:90:e1:92:a7:fe: ad:ce:17:0c:da:86:8f:1d:1e:db:df:62:ae:18:41: 78:24:bd:4f:5f:98:a7:fb:c5:1b:65:bd:1a:42:42: 09:48:60:63:05:be:8a:6d:a2:44:0c:05:8a:6d:b4: aa:25:cd:f8:92:33:53:1c:4d:66:6c:68:ad:12:04: 7c:bb:2f:31:b7:57:2b:80:7d:30:aa:c1:14:44:c9: 1e:36:16:a5:e7:72:3a:bf:84:8f:a9:db:64:67:78: 71:06:10:eb:90:1e:24:ea:98:ba:65:18:b2:1a:47: 05:3f:10:43:c2:dc:c1:be:7c:9c:3e:2c:bd:93:3d: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FB:0A:A7:7F:8C:69:E2:81:46:A3:B8:09:77:66:62:10:31:6C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6698efa3-aa50-3916-a56e-51d386fa8e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 66.159.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:eb:c3:27:a1:8c:ca:4c:04:98:6c:a7:4e:a6:f5:c1:9f:2a: 1a:67:98:df:43:b7:33:22:02:03:b8:a2:6b:f2:47:e8:13:57: d6:50:af:3d:9d:aa:9f:df:d4:08:b0:cb:12:6d:d6:d9:ee:44: df:11:40:4d:e5:79:94:fa:bc:e0:45:a4:d4:bc:20:c0:16:cd: 57:3a:d3:1b:bb:d1:fc:6a:15:89:87:a3:ed:54:d9:c8:32:84: 06:1b:b7:b4:2f:8d:c3:93:00:ea:2a:21:c3:84:fb:6b:97:9b: 0e:f3:27:6c:03:74:0e:2f:b3:e7:52:69:b4:74:dd:9f:1f:97: 69:0c:ad:d1:e6:b2:f9:45:79:de:9a:7a:5c:fe:6d:cb:7c:cf: 7d:e4:19:81:cd:41:68:04:eb:6a:e5:42:b0:ed:36:8d:0e:ad: f7:83:d5:a5:eb:8a:f0:e4:ca:ce:c2:42:f6:dc:3e:9b:74:43: 88:c9:6f:d7:9e:83:d4:d0:fe:b1:06:2c:de:6c:ec:b0:db:85: 87:6c:2d:ac:e3:5a:26:aa:79:27:72:cc:ce:8c:ba:32:42:63: c2:74:3e:90:fd:3b:e8:32:4f:2e:bb:d8:49:1e:63:26:d3:de: 88:5f:90:f8:ec:f1:c1:24:25:b9:3f:50:1d:5b:54:5f:62:10: 78:b2:07:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVbSSX4W4jsLsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MDUwYjFmODEtYTA0NS00YTIzLWIyYTktMDcyZTc2M2RhMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEogVBljK82jGB0LLb4zVeysIY3amkdrNtm7 VE+LssUrhwWslvS9c6bq0iyZagVHJbWhrVMoniaH93TQAo3VA53cyclUCuGnrOUk 23n8p1eUBCyvU9hZtsSNZj/ftfTan/1FFjgRDZWFXhOFj1Cjoe08M2eY7HhoIgX8 Drd/pvB5kOGSp/6tzhcM2oaPHR7b32KuGEF4JL1PX5in+8UbZb0aQkIJSGBjBb6K baJEDAWKbbSqJc34kjNTHE1mbGitEgR8uy8xt1crgH0wqsEURMkeNhal53I6v4SP qdtkZ3hxBhDrkB4k6pi6ZRiyGkcFPxBDwtzBvnycPiy9kz3FTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL7Cqd/jGnigUajuAl3ZmIQMWyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvNjY5OGVmYTMtYWE1MC0z OTE2LWE1NmUtNTFkMzg2ZmE4ZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp/iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjrwyehjMpMBJhsp06m9cGfKhpnmN9DtzMiAgO4omvyR+gTV9ZQrz2d qp/f1AiwyxJt1tnuRN8RQE3leZT6vOBFpNS8IMAWzVc60xu70fxqFYmHo+1U2cgy hAYbt7QvjcOTAOoqIcOE+2uXmw7zJ2wDdA4vs+dSabR03Z8fl2kMrdHmsvlFed6a elz+bct8z33kGYHNQWgE62rlQrDtNo0OrfeD1aXrivDkys7CQvbcPpt0Q4jJb9ee g9TQ/rEGLN5s7LDbhYdsLazjWiaqeSdyzM6MujJCY8J0PpD9O+gyTy672EkeYybT 3ohfkPjs8cEkJbk/UB1bVF9iEHiyBzI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:40:26 2025 by rpki-client