$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa File: ecff82b6-556f-3ccc-8045-cd50558517e5.roa (raw, json) Hash identifier: fA9oN1xnH5cl8+r0VVm48AWe+ns6R7MFvC1s6fkq4IQ= Subject key identifier: 45:86:FA:86:54:67:68:E8:3F:1E:13:2E:6C:26:F5:49:62:1D:68:0D Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584A2EEABBCDA1B3D858C22964C0 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 14618 IP address blocks: 199.66.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:bb:cd:a1:b3:d8:58:c2:29:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=22dbc927-4660-4e98-9bbb-dd074c1e7c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:6e:f5:c8:55:6a:d8:51:07:1a:03:1b:70: e4:42:cd:62:ed:72:0b:7d:9a:ba:d7:2e:e2:5e:d6: 62:1f:48:b4:7a:f1:01:ec:e2:5e:3b:bf:5a:c2:26: 3c:f2:91:63:3d:51:d7:7b:bc:f6:56:a4:fa:af:54: 39:82:3f:ff:f1:a7:b1:0b:aa:57:72:43:02:4b:63: 67:8c:c5:45:e3:b1:98:73:0c:3e:03:50:52:e0:af: 1b:1d:df:ec:d2:2d:70:64:d9:ab:d0:a6:fa:fa:2f: a9:bd:8b:98:4f:2f:fd:fc:61:e2:1e:b4:72:67:9c: 6d:61:6a:6c:18:1d:f6:6f:e4:80:81:82:34:7f:5e: bb:b6:46:7e:af:7d:74:48:01:6c:03:a9:4d:a3:a8: 2c:eb:26:55:4b:59:7e:37:83:74:6b:92:68:78:83: 2e:2c:f8:98:af:9a:6c:c7:fd:b2:43:6c:56:a5:9b: 72:8a:76:9e:3f:be:23:94:57:fe:7b:df:8f:9a:e9: ca:35:be:9f:28:84:be:28:1f:65:78:8b:4d:27:61: e2:ae:7f:66:44:fc:28:9c:92:34:30:54:d7:6c:4e: 65:27:56:fb:c2:f2:9c:26:95:92:e4:20:09:b0:ef: 36:3e:e9:07:06:94:2a:d1:f2:6f:b4:4a:f5:d6:af: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:86:FA:86:54:67:68:E8:3F:1E:13:2E:6C:26:F5:49:62:1D:68:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:71:e8:7d:bd:c0:42:7c:4e:a1:a1:c6:d1:ae:1c:fb:11:63: 49:f3:62:00:de:1e:48:71:b7:72:d5:c8:a1:c4:ca:3a:80:ff: 98:fc:aa:f0:d7:55:d7:da:87:7b:d9:a8:82:55:e8:97:21:d9: ee:f9:c3:96:a6:14:85:77:8f:4c:6b:57:f6:d6:77:0a:70:a1: 91:69:90:79:d9:c0:2e:5b:53:35:b4:f5:04:38:99:b7:4a:38: 87:9c:9a:23:d7:2f:55:1e:55:c0:1f:a0:60:16:0b:ce:90:6b: 13:f3:5f:dc:e7:eb:6d:06:e6:03:d5:be:ff:97:27:e8:2d:1c: fe:b9:a4:75:da:6d:fb:67:89:b2:99:c2:66:0b:0a:e6:b3:e0: 51:5c:c5:2b:c2:77:cd:ff:8a:dd:82:0b:dd:1a:07:16:18:ed: fd:aa:73:1f:d2:59:f4:fe:d2:9e:6f:c4:95:4b:ca:49:58:67: 18:31:dd:4a:fc:d5:4e:db:6e:c7:5a:2c:bc:2d:ac:16:f6:b6: 98:25:20:27:0a:99:78:a9:13:af:d5:45:bc:db:a5:41:4a:97: df:a3:0d:3e:1f:50:6b:f9:1e:81:b7:54:75:11:e1:ac:dd:d9: 34:e4:f3:94:a8:3d:c7:0e:5a:97:d8:70:f6:9a:76:6e:5e:66: e9:14:8e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6rvNobPYWMIpZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk MjJkYmM5MjctNDY2MC00ZTk4LTliYmItZGQwNzRjMWU3YzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku5u9chVathRBxoDG3DkQs1i7XILfZq61y7i XtZiH0i0evEB7OJeO79awiY88pFjPVHXe7z2VqT6r1Q5gj//8aexC6pXckMCS2Nn jMVF47GYcww+A1BS4K8bHd/s0i1wZNmr0Kb6+i+pvYuYTy/9/GHiHrRyZ5xtYWps GB32b+SAgYI0f167tkZ+r310SAFsA6lNo6gs6yZVS1l+N4N0a5JoeIMuLPiYr5ps x/2yQ2xWpZtyinaeP74jlFf+e9+PmunKNb6fKIS+KB9leItNJ2Hirn9mRPwonJI0 MFTXbE5lJ1b7wvKcJpWS5CAJsO82PukHBpQq0fJvtEr11q8tlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWG+oZUZ2joPx4TLmwm9UliHWgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZWNmZjgyYjYtNTU2Zi0z Y2NjLTgwNDUtY2Q1MDU1ODUxN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxx6H29wEJ8TqGhxtGuHPsRY0nzYgDeHkhxt3LVyKHEyjqA/5j8qvDX Vdfah3vZqIJV6Jch2e75w5amFIV3j0xrV/bWdwpwoZFpkHnZwC5bUzW09QQ4mbdK OIecmiPXL1UeVcAfoGAWC86QaxPzX9zn620G5gPVvv+XJ+gtHP65pHXabftnibKZ wmYLCuaz4FFcxSvCd83/it2CC90aBxYY7f2qcx/SWfT+0p5vxJVLyklYZxgx3Ur8 1U7bbsdaLLwtrBb2tpglICcKmXipE6/VRbzbpUFKl9+jDT4fUGv5HoG3VHUR4azd 2TTk85SoPccOWpfYcPaadm5eZukUjiQ= -----END CERTIFICATE-----Generated at Sat Jun 14 23:49:41 2025 by rpki-client