$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa File: 9b36560a-9f38-3318-a869-aa0d360ca5c4.roa (raw, json) Hash identifier: +yuNYDU9PTqk6ostaFtm/ynGPvH//uYlVyHHNOx95tI= Subject key identifier: D8:A4:9F:71:01:F1:73:03:49:3C:9B:93:46:16:8E:B4:3E:18:AC:BC Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F4328584A23C004D24D9D251AB6894E80 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 955 IP address blocks: 66.118.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:04:d2:4d:9d:25:1a:b6:89:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=294a78c0-0436-4e06-b389-34a5fd9f5630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:67:b0:62:d5:e7:26:32:f3:db:10:16:fa: 85:87:ca:f4:3d:e0:59:d9:ba:cc:02:14:b8:15:8b: 3d:0e:72:d0:c8:2c:21:ef:98:c3:65:24:47:a5:2c: f0:7c:62:96:ad:ec:41:60:83:b6:39:38:61:5c:7f: 32:40:44:18:7e:aa:0e:0e:73:fe:ef:d3:af:e4:5e: ec:21:88:8f:2a:9a:13:ca:3f:df:c8:d0:00:41:6f: 8e:b0:67:52:e9:34:55:3e:1a:79:99:7e:25:1e:05: a7:e1:25:85:72:f6:5c:b7:e1:b0:63:f6:48:1c:2c: a9:fd:fb:c6:0b:ed:cc:a5:45:c6:da:ee:fa:13:88: fd:a7:38:94:5c:25:98:8c:c6:ca:93:c5:5f:ab:d5: 36:ef:63:fa:f2:72:11:2c:c1:77:b2:53:b5:19:5e: 4e:4d:d8:28:8b:66:be:dc:e0:01:30:7b:47:24:9c: 50:f4:81:d6:9b:35:68:43:7c:54:0c:70:6d:1f:1c: 1a:c4:1e:0c:0f:8b:1c:a8:61:8b:0d:13:0e:76:37: 11:81:d0:b1:5f:21:af:90:ea:49:0f:6d:94:1e:35: a5:07:35:04:25:a5:a3:45:84:91:c3:d3:9a:93:48: ad:2c:86:0e:db:2c:72:c6:cc:03:7c:cd:9d:ca:b6: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A4:9F:71:01:F1:73:03:49:3C:9B:93:46:16:8E:B4:3E:18:AC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv4: 66.118.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:06:00:39:66:b5:26:aa:e4:cf:32:88:ef:20:5d:1b:2b:1f: 30:fd:a8:12:90:1c:45:bf:8d:96:8b:b9:4d:21:85:53:ab:1a: f3:f2:36:ca:10:fe:c7:cf:7d:66:88:a3:36:f5:05:7e:8b:70: 6d:ea:51:46:5f:67:bd:b2:28:6f:f3:b5:9f:89:76:bc:7d:e7: 2f:6f:34:d7:f8:7d:18:88:11:0a:0e:d7:13:fa:bb:57:be:c2: 19:07:17:9a:5c:19:82:51:7a:97:79:c2:76:15:6e:87:74:9f: 23:e8:ad:2f:71:1d:43:8f:78:a9:dd:24:d8:ff:bd:45:00:c0: cd:41:e8:1c:e5:b0:f7:bf:96:b6:ac:67:36:18:63:a8:d1:c7: d2:c3:f8:8b:c7:2b:c7:c2:bd:2b:6c:f4:fd:45:84:b4:4f:c9: 98:55:b8:ff:a3:a9:82:69:57:3b:7e:f3:bd:9f:b2:79:b4:1c: b0:41:f8:51:74:c7:22:58:6d:c1:ab:01:f6:d4:78:3f:2b:06: be:a3:e7:a8:f8:83:a7:e1:cc:38:5f:ee:85:41:49:49:b8:02: f6:57:20:14:a7:13:49:86:b3:82:c9:33:1b:4e:88:18:3e:c8: 6b:fe:6f:a0:8b:d3:1d:20:42:a3:e0:fa:9d:9f:54:d8:7a:dd: 9d:96:69:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwATSTZ0lGraJToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk Mjk0YTc4YzAtMDQzNi00ZTA2LWIzODktMzRhNWZkOWY1NjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRnsGLV5yYy89sQFvqFh8r0PeBZ2brMAhS4 FYs9DnLQyCwh75jDZSRHpSzwfGKWrexBYIO2OThhXH8yQEQYfqoODnP+79Ov5F7s IYiPKpoTyj/fyNAAQW+OsGdS6TRVPhp5mX4lHgWn4SWFcvZct+GwY/ZIHCyp/fvG C+3MpUXG2u76E4j9pziUXCWYjMbKk8Vfq9U272P68nIRLMF3slO1GV5OTdgoi2a+ 3OABMHtHJJxQ9IHWmzVoQ3xUDHBtHxwaxB4MD4scqGGLDRMOdjcRgdCxXyGvkOpJ D22UHjWlBzUEJaWjRYSRw9Oak0itLIYO2yxyxswDfM2dyrbz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNikn3EB8XMDSTybk0YWjrQ+GKy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvOWIzNjU2MGEtOWYzOC0z MzE4LWE4NjktYWEwZDM2MGNhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoGADlmtSaq5M8yiO8gXRsrHzD9qBKQHEW/jZaLuU0hhVOrGvPyNsoQ /sfPfWaIozb1BX6LcG3qUUZfZ72yKG/ztZ+Jdrx95y9vNNf4fRiIEQoO1xP6u1e+ whkHF5pcGYJRepd5wnYVbod0nyPorS9xHUOPeKndJNj/vUUAwM1B6BzlsPe/lras ZzYYY6jRx9LD+IvHK8fCvSts9P1FhLRPyZhVuP+jqYJpVzt+872fsnm0HLBB+FF0 xyJYbcGrAfbUeD8rBr6j56j4g6fhzDhf7oVBSUm4AvZXIBSnE0mGs4LJMxtOiBg+ yGv+b6CL0x0gQqPg+p2fVNh63Z2WaSc= -----END CERTIFICATE-----Generated at Tue Jun 17 11:11:43 2025 by rpki-client