$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa File: db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json) Hash identifier: qgP5L3grXUAZPVlPoqYVO7Pg30wcyixY2XYjHVEwxuU= Subject key identifier: 5F:4C:2E:3B:60:12:CB:55:57:4B:79:85:EA:22:F7:80:0A:01:79:F3 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584A23C0006D64D0D3C86231ED08 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 22808 IP address blocks: 66.112.128.8/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:00:6d:64:d0:d3:c8:62:31:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=d5e29b50-6ca1-4a63-8fba-7412cb0b27b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:fb:3c:ae:1f:35:bf:46:23:56:8d:60:b7: 48:cb:30:72:86:16:bc:0c:0e:b1:10:5c:4f:e1:c7: f9:d4:3b:a5:a1:a7:af:8b:35:cb:3a:38:92:b5:06: 82:b7:97:89:76:53:b7:22:96:70:96:ca:20:1d:ea: 1a:f5:a9:dd:bc:55:e3:63:cc:b1:c2:2c:fb:bc:0a: bb:65:52:34:4a:75:fa:ee:26:40:d1:7c:53:cc:32: f0:c6:54:db:49:95:7a:c2:1e:85:d1:cd:ac:8f:d8: 20:55:41:10:a4:33:1d:8c:39:3e:1c:65:3c:18:11: 3c:00:5d:f9:ff:62:f8:8c:0f:f2:ab:f1:a4:c8:a8: 61:33:5d:ab:9a:47:69:8c:ce:42:12:d1:0f:fd:19: 25:5e:d9:06:ca:cb:d9:bb:84:3d:a4:57:88:31:0e: b0:04:86:54:c7:16:da:d8:7a:a4:d9:cb:d8:cb:f6: 8d:44:5f:68:88:d0:59:22:86:c5:ed:b9:f3:5a:3f: e9:fe:77:19:06:db:e4:85:91:11:ea:75:a2:db:6b: 82:0e:40:5a:34:ac:3b:27:8d:ea:37:c2:8a:ab:87: 77:ed:a2:77:b6:42:7b:80:49:20:10:24:fa:d2:c7: 6b:ac:2b:db:3f:a7:43:b7:9b:00:5c:ca:3b:a6:99: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:2E:3B:60:12:CB:55:57:4B:79:85:EA:22:F7:80:0A:01:79:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.8/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:30:e3:e1:92:e7:47:cf:11:34:b5:20:65:7d:81:be:e5:1d: 77:d6:26:be:e6:3e:6a:a2:ed:e7:00:a1:08:af:8b:dc:f3:f5: d8:c5:51:bd:6e:0a:53:c5:a4:f3:f1:78:27:66:19:9c:d2:87: 90:23:ff:49:e3:8f:bc:87:1f:a2:c6:b8:d1:1d:92:17:d9:3c: a5:fb:a1:e7:1f:33:8b:2f:fb:4a:8f:b8:a1:2c:ec:01:e0:94: 36:a4:f8:69:a4:08:02:7b:ec:2a:58:ff:ea:1c:a7:43:2a:8e: 66:13:87:a4:4e:04:f6:22:c0:d7:bd:f8:b7:8b:b5:5f:0e:c4: 32:62:73:f7:24:ae:54:0f:e1:8b:48:53:f9:48:66:8e:06:34: d9:d4:6e:6d:aa:c1:6a:c3:b7:1d:95:32:25:4e:e3:c2:b2:c6: 52:2f:1a:f1:9e:c1:38:68:3a:b2:1a:7b:ec:45:2f:d5:f2:6f: 0b:4c:24:32:cf:56:7b:91:5b:71:4e:a9:f1:7a:15:cc:ab:b5: 29:c2:7a:da:19:d2:a7:c3:55:78:e4:c0:f9:35:14:4d:a2:71: 06:73:d4:84:b5:22:6d:c3:8c:61:1f:4b:17:db:0b:b3:ef:55: 2b:b5:1c:3e:10:8b:9e:c5:c1:69:a0:aa:3e:fb:bb:fc:4e:db: 87:cd:99:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEojwABtZNDTyGIx7QgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZDVlMjliNTAtNmNhMS00YTYzLThmYmEtNzQxMmNiMGIyN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke/7PK4fNb9GI1aNYLdIyzByhha8DA6xEFxP 4cf51DuloaevizXLOjiStQaCt5eJdlO3IpZwlsogHeoa9andvFXjY8yxwiz7vAq7 ZVI0SnX67iZA0XxTzDLwxlTbSZV6wh6F0c2sj9ggVUEQpDMdjDk+HGU8GBE8AF35 /2L4jA/yq/GkyKhhM12rmkdpjM5CEtEP/RklXtkGysvZu4Q9pFeIMQ6wBIZUxxba 2Hqk2cvYy/aNRF9oiNBZIobF7bnzWj/p/ncZBtvkhZER6nWi22uCDkBaNKw7J43q N8KKq4d37aJ3tkJ7gEkgECT60sdrrCvbP6dDt5sAXMo7ppnWJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF9MLjtgEstVV0t5heoi94AKAXnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1MOPhkudHzxE0tSBlfYG+5R131ia+5j5qou3nAKEIr4vc8/XYxVG9 bgpTxaTz8XgnZhmc0oeQI/9J44+8hx+ixrjRHZIX2Tyl+6HnHzOLL/tKj7ihLOwB 4JQ2pPhppAgCe+wqWP/qHKdDKo5mE4ekTgT2IsDXvfi3i7VfDsQyYnP3JK5UD+GL SFP5SGaOBjTZ1G5tqsFqw7cdlTIlTuPCssZSLxrxnsE4aDqyGnvsRS/V8m8LTCQy z1Z7kVtxTqnxehXMq7UpwnraGdKnw1V45MD5NRRNonEGc9SEtSJtw4xhH0sX2wuz 71UrtRw+EIuexcFpoKo++7v8TtuHzZkC -----END CERTIFICATE-----Generated at Sun Jun 15 20:40:13 2025 by rpki-client