$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa File: f4eb3f45-23aa-397c-a750-8446a726a135.roa (raw, json) Hash identifier: uHf/aiAohtVvCl3x4gkb7jN7x0d7JJsju7FbMIivMBU= Subject key identifier: B5:08:83:D3:38:A5:5B:78:6A:24:E1:4C:9E:15:48:2F:43:9B:C4:FD Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A093AA2A6FC3B1ECB2CA1C700 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 4213 IP address blocks: 66.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a2:a6:fc:3b:1e:cb:2c:a1:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=6e516e96-9cde-4a41-acf3-326d84b95ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dd:d7:85:88:48:c6:a1:00:00:d4:bf:5a:47: 2d:46:c1:76:bf:de:b0:73:fd:ee:ce:31:ec:91:f9: cb:c1:e1:21:c8:e9:97:76:93:47:68:d1:e5:d5:e4: f3:21:d0:0a:a1:81:2b:c3:26:bf:52:44:dd:85:a2: 2a:9c:2a:12:f8:83:bb:fd:ad:5a:d5:cc:35:f0:14: 4f:e4:97:a0:46:ab:ac:b4:05:9e:b2:62:99:9f:aa: 44:4d:81:e4:3b:4a:34:b6:4a:a5:b4:65:c4:d0:ca: 17:74:1a:3f:df:27:de:5d:a1:e1:e9:0b:37:01:61: 0a:9b:9c:ad:07:0d:33:90:02:f9:bd:3f:ac:b6:96: 78:fc:85:38:bd:09:02:fb:ac:2b:e5:85:77:7a:60: a4:3f:e5:65:13:32:65:f3:89:84:7e:62:29:72:32: b8:f8:da:16:a6:7f:05:97:de:9c:bb:9f:94:74:6f: e4:f8:27:d4:a3:a1:c6:4e:9e:50:fa:e2:f0:80:f2: 88:fe:5b:cd:44:10:2c:f0:d8:2c:bc:7e:54:f0:a2: 82:bd:3e:b8:dc:dd:88:77:74:e5:e6:ab:f5:89:3a: 45:9d:de:1b:7f:b6:02:c7:c4:15:db:d1:a6:68:19: 74:eb:89:b5:f7:9f:1b:0a:ec:c5:bb:c4:c6:ea:57: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:08:83:D3:38:A5:5B:78:6A:24:E1:4C:9E:15:48:2F:43:9B:C4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:98:6c:b4:3c:3e:dc:16:ca:62:84:17:ed:aa:57:5b:94:e4: 99:5f:64:fc:f5:df:ac:5a:65:a3:da:26:63:55:c0:de:f9:a1: 17:63:f5:18:e1:53:34:92:24:48:bb:0e:5d:e1:ac:99:b8:85: e5:2e:36:c1:1a:68:e5:94:93:ab:11:31:af:7d:37:16:a1:e5: 1d:b8:49:3a:f8:05:dd:f3:d1:16:f9:89:08:74:1d:40:30:dd: 21:6c:4f:62:1a:19:0e:d8:a7:ff:49:ed:14:7c:26:0f:4c:96: 25:41:8d:12:c9:40:a8:59:e4:d6:03:f0:97:b0:b0:d8:6e:94: cb:04:c5:09:2c:f0:88:d1:61:76:36:00:51:76:8e:3e:85:9c: 74:51:f9:e0:71:89:b2:76:47:17:2d:8b:8f:d3:ac:07:10:ff: b3:73:d1:23:bb:7a:6b:63:db:1c:01:0a:92:cc:ba:99:3b:28: 18:8b:8f:a8:d4:48:71:52:d6:42:ca:ef:5c:2c:89:d0:39:a6: 64:ba:8d:d5:9c:c0:2e:1d:73:15:5a:3d:ed:05:9d:80:2a:31: a8:cd:36:65:18:20:3d:2f:69:cb:10:95:b5:45:4a:c5:60:45: 31:cf:cd:b8:59:6e:b6:38:17:80:3f:11:90:b3:49:f5:ca:89: 5e:44:73:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqKm/DseyyyhxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NmU1MTZlOTYtOWNkZS00YTQxLWFjZjMtMzI2ZDg0Yjk1YWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd3XhYhIxqEAANS/WkctRsF2v96wc/3uzjHs kfnLweEhyOmXdpNHaNHl1eTzIdAKoYErwya/UkTdhaIqnCoS+IO7/a1a1cw18BRP 5JegRqustAWesmKZn6pETYHkO0o0tkqltGXE0MoXdBo/3yfeXaHh6Qs3AWEKm5yt Bw0zkAL5vT+stpZ4/IU4vQkC+6wr5YV3emCkP+VlEzJl84mEfmIpcjK4+NoWpn8F l96cu5+UdG/k+CfUo6HGTp5Q+uLwgPKI/lvNRBAs8NgsvH5U8KKCvT643N2Id3Tl 5qv1iTpFnd4bf7YCx8QV29GmaBl064m1958bCuzFu8TG6ldJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUIg9M4pVt4aiThTJ4VSC9Dm8T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjRlYjNmNDUtMjNhYS0z OTdjLWE3NTAtODQ0NmE3MjZhMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyYbLQ8PtwWymKEF+2qV1uU5JlfZPz136xaZaPaJmNVwN75oRdj9Rjh UzSSJEi7Dl3hrJm4heUuNsEaaOWUk6sRMa99Nxah5R24STr4Bd3z0Rb5iQh0HUAw 3SFsT2IaGQ7Yp/9J7RR8Jg9MliVBjRLJQKhZ5NYD8JewsNhulMsExQks8IjRYXY2 AFF2jj6FnHRR+eBxibJ2Rxcti4/TrAcQ/7Nz0SO7emtj2xwBCpLMupk7KBiLj6jU SHFS1kLK71wsidA5pmS6jdWcwC4dcxVaPe0FnYAqMajNNmUYID0vacsQlbVFSsVg RTHPzbhZbrY4F4A/EZCzSfXKiV5Ec7o= -----END CERTIFICATE-----Generated at Sun Jun 15 15:58:39 2025 by rpki-client