$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa File: ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa (raw, json) Hash identifier: k+8v+TAEUdI/GpliJx3rYGUadCDRHzVGLdB57+i1zdY= Subject key identifier: FC:25:9D:09:71:4D:9A:1B:A7:26:5C:45:EF:FC:D6:93:71:52:FB:D6 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A093AA29856E8BEF38F293100 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 35908 IP address blocks: 66.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a2:98:56:e8:be:f3:8f:29:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=d92f416a-00c9-4a0a-bca5-76be234446db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:c7:19:01:2f:9b:a8:4c:65:e0:3c:92:eb: 3c:3c:bb:ae:0d:e0:da:ea:e2:19:c6:04:d0:bd:44: ac:72:4d:90:ce:70:b6:80:15:ed:df:53:2a:b9:0b: 5f:f4:70:41:fb:45:df:11:8f:04:83:50:48:72:c3: 6d:78:b9:99:c1:a6:a5:40:12:d9:01:fb:0b:d2:d3: 75:30:02:89:a7:62:cd:00:27:64:9b:4d:42:9d:71: ea:ea:98:64:50:9f:45:26:c7:89:8e:d9:5c:90:04: c7:e5:13:39:33:32:1b:75:57:28:fd:4a:6b:b6:02: c8:a4:46:f1:e9:45:cd:ea:c2:56:65:45:ed:1e:af: 18:76:e0:5d:4d:7e:aa:74:48:5c:c5:b1:07:9a:c0: 5b:2b:06:df:7c:c0:65:d2:49:13:d8:4c:cb:a5:cc: 49:db:fa:e1:19:d2:bd:23:2a:ae:c0:cc:98:28:15: 7b:5d:a9:16:ff:70:6a:cd:95:72:69:b8:fd:0b:64: 9b:be:e8:d9:f5:52:50:ea:b8:af:21:e0:01:8d:b9: 1d:ae:40:d4:cb:75:5f:81:38:07:bc:c0:63:c7:9e: 0a:a1:63:5f:52:46:59:a5:df:b3:3f:3c:9d:c3:0b: 59:b9:a4:77:e2:e7:58:10:d8:f3:d1:b8:56:ef:10: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:9D:09:71:4D:9A:1B:A7:26:5C:45:EF:FC:D6:93:71:52:FB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:0b:0c:98:bb:d5:f8:16:ed:fc:d5:ec:1c:5e:d7:d9:df:59: 44:64:3b:9f:e1:cc:e0:48:68:dd:a6:34:a8:de:99:4b:01:2c: 94:d0:ed:94:34:95:14:90:b7:34:fa:84:d2:9b:28:18:cd:4b: eb:1a:ea:50:a1:4c:b1:b9:46:3a:c3:a1:6b:00:49:86:b0:6a: d5:47:b5:1e:7b:6c:4f:0e:51:e3:4f:d9:59:c4:23:dc:11:c9: 80:d9:f4:19:44:7a:2a:10:d6:be:5e:03:d5:21:06:b5:e3:89: eb:f8:44:c4:69:82:00:ca:a7:f1:ea:d4:5d:99:08:b0:a8:2f: 9b:d4:7a:f5:5d:30:48:2d:41:1f:cc:fc:0d:16:b3:19:02:1f: 87:1d:7e:e4:24:54:79:41:68:42:a4:ae:dc:69:03:b5:88:0c: 72:36:43:ea:1f:0a:4d:86:fa:16:64:c8:06:76:7f:29:da:bd: cf:72:c6:62:61:7d:b2:c4:ff:d8:25:f0:51:76:3a:51:c3:5b: 19:be:5c:cd:ab:24:46:17:28:47:bd:49:2e:c8:7f:f4:9e:ae: 77:79:96:9d:3b:a8:99:68:fe:bc:ff:6b:06:bc:06:e1:83:a9: 3b:13:4a:18:3e:09:18:ae:70:30:5d:db:96:1a:e5:d3:6d:d4: 52:d4:7d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqKYVui+848pMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZDkyZjQxNmEtMDBjOS00YTBhLWJjYTUtNzZiZTIzNDQ0NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqTHGQEvm6hMZeA8kus8PLuuDeDa6uIZxgTQ vUSsck2QznC2gBXt31MquQtf9HBB+0XfEY8Eg1BIcsNteLmZwaalQBLZAfsL0tN1 MAKJp2LNACdkm01CnXHq6phkUJ9FJseJjtlckATH5RM5MzIbdVco/UprtgLIpEbx 6UXN6sJWZUXtHq8YduBdTX6qdEhcxbEHmsBbKwbffMBl0kkT2EzLpcxJ2/rhGdK9 IyquwMyYKBV7XakW/3BqzZVyabj9C2SbvujZ9VJQ6rivIeABjbkdrkDUy3VfgTgH vMBjx54KoWNfUkZZpd+zPzydwwtZuaR34udYENjz0bhW7xApbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwlnQlxTZobpyZcRe/81pNxUvvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZWUyY2VlODAtNjY5Mi0z MDdmLWEwZWUtMzllZTNlNjFmZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANELDJi71fgW7fzV7Bxe19nfWURkO5/hzOBIaN2mNKjemUsBLJTQ7ZQ0 lRSQtzT6hNKbKBjNS+sa6lChTLG5RjrDoWsASYawatVHtR57bE8OUeNP2VnEI9wR yYDZ9BlEeioQ1r5eA9UhBrXjiev4RMRpggDKp/Hq1F2ZCLCoL5vUevVdMEgtQR/M /A0WsxkCH4cdfuQkVHlBaEKkrtxpA7WIDHI2Q+ofCk2G+hZkyAZ2fynavc9yxmJh fbLE/9gl8FF2OlHDWxm+XM2rJEYXKEe9SS7If/Sernd5lp07qJlo/rz/awa8BuGD qTsTShg+CRiucDBd25Ya5dNt1FLUfZY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:08:59 2025 by rpki-client