$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa File: 1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa (raw, json) Hash identifier: 9WUaNQHBrZ4UmcrSd+hAU8eV9FDVGVJJ1rO7ZT6Yf/E= Subject key identifier: 4E:83:2C:68:F4:7B:EE:9D:5A:69:91:C9:D2:7E:10:D5:00:5D:1D:AB Certificate issuer: /CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Certificate serial: 010D0C9F4328584A00DABFDC0C9B50F876BB0080 Authority key identifier: 7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 400191 IP address blocks: 66.59.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bf:dc:0c:9b:50:f8:76:bb:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=1ea871fe-b98e-4d39-99d6-b0806a97873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:a7:d1:77:1f:d4:87:13:35:b7:41:3f:11: 7d:82:fc:2b:b2:a6:26:60:22:07:c6:58:2a:e6:7f: 81:ad:06:9e:d6:00:4a:3e:60:cc:d9:1e:64:03:e6: 9c:96:97:f9:d0:d1:20:f2:25:0b:04:70:3b:3b:ad: 64:3a:0a:29:cb:4b:b3:e4:1f:64:d6:c2:12:93:3d: 67:e7:94:80:07:58:fc:54:fa:a1:59:0c:2c:f3:32: 78:70:d1:ac:70:fc:80:12:71:aa:f3:9f:aa:60:4f: a7:98:34:e7:cc:c4:13:84:ce:37:c3:c0:34:0d:27: 5b:2c:f7:1d:10:cf:3f:8a:65:8d:00:b0:de:0f:57: 61:10:20:92:02:b0:17:3d:6d:17:a5:83:16:da:5e: a9:4a:4d:c2:11:74:ba:31:73:fa:d9:b4:9f:bf:af: c2:83:c4:75:55:3c:56:81:c4:5b:48:0b:db:1c:e0: ee:b0:88:86:25:bf:0a:65:43:f0:2a:9d:b8:cf:38: da:91:25:21:0f:ca:6b:ab:f4:10:0b:dd:36:52:22: 62:f0:52:22:82:79:5c:d8:dd:a8:39:bb:05:14:a6: ad:01:1a:1f:78:8c:70:03:1a:e8:36:2b:0a:64:9a: 12:8a:fc:6a:3c:65:15:c2:2e:4c:f9:94:65:97:63: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:2C:68:F4:7B:EE:9D:5A:69:91:C9:D2:7E:10:D5:00:5D:1D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl X509v3 Authority Key Identifier: keyid:7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer sbgp-ipAddrBlock: critical IPv4: 66.59.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cb:64:35:c7:de:37:e6:32:b2:3e:ed:c3:36:fb:8e:f0:b6: 6b:c9:b4:f5:20:b8:bc:d2:a7:b7:d5:03:93:7c:fe:ca:f1:26: 48:70:5c:92:f5:2f:93:b8:f7:cb:b3:04:cf:5c:6f:39:21:a3: 3d:7e:0b:df:2b:eb:65:35:3f:30:33:86:46:4b:b8:10:3d:40: ba:60:b6:9e:03:8c:11:2e:23:a7:ba:6c:6d:52:eb:e3:8c:9d: 55:3f:2d:5a:19:86:e9:5d:ef:db:e4:ca:ee:2a:f3:50:2f:eb: 17:16:d6:de:8f:89:ab:0d:d0:f8:d5:8e:80:5b:d4:9d:e5:5f: 46:a0:9f:48:2d:2b:63:d7:66:6d:33:a3:11:6e:bf:e5:0c:85: 8e:a5:14:1e:91:47:77:dd:0d:62:3b:73:91:91:3a:8d:17:ee: c2:7f:b6:72:5a:17:3f:3a:15:59:14:b3:2b:d4:d3:f0:62:f4: 60:b7:b2:4e:0d:76:d8:dd:76:d0:31:d7:14:1d:03:00:c8:5b: f8:d4:96:a8:d1:bc:e8:bf:22:ed:07:14:fa:01:39:b9:6e:ad: 84:20:d2:d4:70:06:b8:50:7c:aa:d0:f9:22:47:61:bf:c7:ca: a8:6a:16:4d:01:96:66:0a:75:d8:c5:8e:2c:14:c6:c5:41:ec: b9:58:12:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2r/cDJtQ+Ha7AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkMTI5MGItZTA0NS00M2NhLTk2YjgtYTNkYTg3ZTcy YzRiMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MWVhODcxZmUtYjk4ZS00ZDM5LTk5ZDYtYjA4MDZhOTc4NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGCn0Xcf1IcTNbdBPxF9gvwrsqYmYCIHxlgq 5n+BrQae1gBKPmDM2R5kA+aclpf50NEg8iULBHA7O61kOgopy0uz5B9k1sISkz1n 55SAB1j8VPqhWQws8zJ4cNGscPyAEnGq85+qYE+nmDTnzMQThM43w8A0DSdbLPcd EM8/imWNALDeD1dhECCSArAXPW0XpYMW2l6pSk3CEXS6MXP62bSfv6/Cg8R1VTxW gcRbSAvbHODusIiGJb8KZUPwKp24zzjakSUhD8prq/QQC902UiJi8FIignlc2N2o ObsFFKatARofeIxwAxroNisKZJoSivxqPGUVwi5M+ZRll2OyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6DLGj0e+6dWmmRydJ+ENUAXR2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NmQx MjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2RhODdlNzJjNGIvMWZlZDZjM2MtMTdkOC0z ZjYwLWFjNGUtMDc1N2ZjZjA4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzZkMTI5MGItZTA0NS00M2NhLTk2 YjgtYTNkYTg3ZTcyYzRiLzc2ZDEyOTBiLWUwNDUtNDNjYS05NmI4LWEzZGE4N2U3 MmM0Yi5jcmwwHwYDVR0jBBgwFoAUf5bvygJ+DL7t4Wsxdw4p1Aq089IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NmQxMjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2Rh ODdlNzJjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/LZDXH3jfmMrI+7cM2+47wtmvJtPUguLzSp7fVA5N8/srxJkhwXJL1 L5O498uzBM9cbzkhoz1+C98r62U1PzAzhkZLuBA9QLpgtp4DjBEuI6e6bG1S6+OM nVU/LVoZhuld79vkyu4q81Av6xcW1t6PiasN0PjVjoBb1J3lX0agn0gtK2PXZm0z oxFuv+UMhY6lFB6RR3fdDWI7c5GROo0X7sJ/tnJaFz86FVkUsyvU0/Bi9GC3sk4N dtjddtAx1xQdAwDIW/jUlqjRvOi/Iu0HFPoBOblurYQg0tRwBrhQfKrQ+SJHYb/H yqhqFk0BlmYKddjFjiwUxsVB7LlYElE= -----END CERTIFICATE-----Generated at Sun Jun 15 20:44:49 2025 by rpki-client