$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa File: 4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa (raw, json) Hash identifier: 05Upu5yssYozG48MQW6aTR4VAxNhhyYhdBwbTxRkBwU= Subject key identifier: 45:D8:27:2F:24:5B:84:9F:CF:46:D2:E1:08:92:EC:5E:0C:3C:B1:37 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584A00DACDD1030A2E16A644EA40 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6597 IP address blocks: 66.163.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:cd:d1:03:0a:2e:16:a6:44:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=ee6764ff-aaf1-4936-a76e-51bc3fdd5f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:a0:61:c7:d9:9a:1a:46:20:e0:52:0a:73: ce:1b:a7:43:cd:7e:e4:85:2f:87:a9:4b:b6:3e:34: 28:f9:02:96:ea:a5:fe:9f:4d:bd:96:76:4e:92:e6: a1:4f:3d:89:a6:d3:98:13:bf:70:99:0b:cb:04:b4: 8d:91:96:0c:15:ef:cf:f7:fe:ee:de:21:c6:d3:eb: 0a:8c:80:11:ac:92:90:b5:c7:7a:fc:a9:9a:a8:f8: 5b:08:ee:a0:9b:f5:32:f1:72:da:6f:93:ee:fd:c7: 4b:20:98:0e:26:66:b0:ba:91:a0:37:db:f7:dc:cb: 7a:d6:26:ba:c4:31:54:6d:70:81:07:29:41:a0:26: d9:ae:5e:38:2c:75:2d:fe:35:f2:a3:86:3a:a7:3b: 4c:54:61:cb:f2:f4:f9:95:c3:b2:33:9a:5d:2e:80: 65:48:8d:60:72:81:d2:1a:70:c7:43:7f:e9:96:c5: 27:ab:cf:07:d5:45:95:f9:15:90:2f:24:6d:94:97: ab:ca:aa:ef:a2:70:bf:08:f2:43:b9:fb:e3:5f:01: ae:a8:d4:d9:0e:87:0c:7e:ca:9f:62:49:d6:0b:29: aa:c0:3d:21:cf:7a:53:69:42:9d:17:e5:1b:44:d5: fb:8f:01:e4:63:dd:f6:09:d7:67:ad:db:fa:5d:eb: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:27:2F:24:5B:84:9F:CF:46:D2:E1:08:92:EC:5E:0C:3C:B1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 66.163.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:35:11:1d:29:31:57:37:46:17:31:7b:b7:b6:12:f4:ed:c4: 5b:e6:91:f0:a5:d9:80:a5:80:1c:63:e6:d2:64:8b:76:ac:d5: 9f:e2:6b:ff:d2:b6:9a:4f:62:f0:f8:fc:0d:14:b1:3a:8e:00: de:bc:fa:45:db:d6:b2:19:47:b3:28:a6:75:c8:fc:1a:d9:af: 1a:83:e4:ea:fb:f1:5e:3a:08:cd:1f:67:56:b4:be:b6:ef:6a: e7:27:cf:8d:83:ac:bc:22:17:a0:47:d7:4a:10:d9:9e:6d:8f: 5a:bd:ee:21:a4:cb:49:25:46:c4:64:67:55:77:67:97:10:42: 0e:cb:77:12:34:56:57:6f:11:a8:d4:e0:8d:17:bf:57:a0:4e: 5f:20:5c:66:13:dd:29:25:bc:14:26:22:60:68:c8:1a:3d:74: 87:52:86:ea:b2:8f:06:60:99:21:52:ef:8f:ff:17:57:f6:54: 95:4c:01:c2:3e:38:74:8d:8b:03:b7:b8:22:01:09:d0:a8:66: 2b:11:58:2d:1e:d9:ef:9f:80:47:29:81:4b:4d:9d:44:d0:ce: 47:d3:ff:b8:d9:ca:01:cf:68:22:3e:31:ae:ac:d6:59:50:8b: 7e:86:3f:f9:48:b6:b8:e8:fd:dd:de:6d:22:83:28:61:1c:25: 26:d7:72:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2s3RAwouFqZE6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZWU2NzY0ZmYtYWFmMS00OTM2LWE3NmUtNTFiYzNmZGQ1ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+gYcfZmhpGIOBSCnPOG6dDzX7khS+HqUu2 PjQo+QKW6qX+n029lnZOkuahTz2JptOYE79wmQvLBLSNkZYMFe/P9/7u3iHG0+sK jIARrJKQtcd6/KmaqPhbCO6gm/Uy8XLab5Pu/cdLIJgOJmawupGgN9v33Mt61ia6 xDFUbXCBBylBoCbZrl44LHUt/jXyo4Y6pztMVGHL8vT5lcOyM5pdLoBlSI1gcoHS GnDHQ3/plsUnq88H1UWV+RWQLyRtlJeryqrvonC/CPJDufvjXwGuqNTZDocMfsqf YknWCymqwD0hz3pTaUKdF+UbRNX7jwHkY932Cddnrdv6XetrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXYJy8kW4Sfz0bS4QiS7F4MPLE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvNGUxNWYwNDctYzBhZS0z ZmU3LWEyNGItN2EyNjExNmFmMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo1ER0pMVc3Rhcxe7e2EvTtxFvmkfCl2YClgBxj5tJki3as1Z/ia//S tppPYvD4/A0UsTqOAN68+kXb1rIZR7MopnXI/BrZrxqD5Or78V46CM0fZ1a0vrbv aucnz42DrLwiF6BH10oQ2Z5tj1q97iGky0klRsRkZ1V3Z5cQQg7LdxI0VldvEajU 4I0Xv1egTl8gXGYT3SklvBQmImBoyBo9dIdShuqyjwZgmSFS74//F1f2VJVMAcI+ OHSNiwO3uCIBCdCoZisRWC0e2e+fgEcpgUtNnUTQzkfT/7jZygHPaCI+Ma6s1llQ i36GP/lItrjo/d3ebSKDKGEcJSbXcko= -----END CERTIFICATE-----Generated at Sun Jun 15 18:00:55 2025 by rpki-client