$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa File: 60adbf7d-4503-31a4-a156-6bae4b601738.roa (raw, json) Hash identifier: +RyxN3VHGIDfRB8p5ScC4LZnWrAgbaU8SrvTCuOynnY= Subject key identifier: E0:44:BC:0E:6A:69:D3:60:96:1C:DE:EF:D9:66:D7:25:F5:27:B6:43 Certificate issuer: /CN=c66b7cab-031d-4c4c-8595-19848efd3058 Certificate serial: 010D0C9F4328584A10353C598B1BDA8F3ACEBF80 Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 400339 IP address blocks: 147.136.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3c:59:8b:1b:da:8f:3a:ce:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=3a4d7147-eb0c-4d59-b9bc-99777efe3e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:b7:7c:8c:47:72:72:2e:f8:9b:bf:34:7d: 98:0d:62:e5:8d:59:d2:a6:9b:51:24:e9:ff:88:5a: 4a:37:41:f2:83:54:fc:11:5b:30:3f:c9:91:d4:9e: 62:2c:6d:be:c7:c0:dc:2d:80:6f:68:39:6d:c5:52: 93:fc:ca:51:d0:02:0f:fb:13:88:76:fa:07:28:e0: 9c:c8:83:eb:a1:01:4a:e7:d6:3c:a1:e8:af:3f:dd: 6a:64:c6:fe:be:0a:e1:97:ad:88:0b:ce:e4:d3:39: 1d:7e:e1:4f:20:da:3e:54:bc:64:7c:7d:cf:c2:d1: 22:ea:bb:2d:ec:53:23:43:c1:65:c9:f4:95:25:48: 00:99:31:98:13:fe:0a:a7:0f:f5:88:6d:5f:72:e1: 23:c7:e8:19:96:7f:7d:5a:39:95:98:65:1e:61:b0: 0b:2b:c4:9a:46:3c:6c:4b:43:57:4b:4b:27:6c:47: ea:8f:15:69:a2:c0:51:d1:f0:62:0f:df:05:ed:e1: 7a:a0:5c:6d:90:fd:c8:30:8e:84:09:df:c4:bb:93: 85:c7:02:f8:43:9b:de:8c:c9:d4:a9:4e:10:bf:dd: 68:47:e2:bb:67:24:93:10:52:3d:3d:e6:4d:38:95: df:18:3c:16:44:6f:f5:7a:6e:f6:0f:78:6c:53:5a: fe:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:44:BC:0E:6A:69:D3:60:96:1C:DE:EF:D9:66:D7:25:F5:27:B6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl X509v3 Authority Key Identifier: keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer sbgp-ipAddrBlock: critical IPv4: 147.136.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:af:5d:83:14:49:15:f7:98:e4:ff:75:d7:4c:5f:a6:32:c5: b9:31:96:38:05:40:7e:2b:04:e0:e7:0d:3b:82:93:06:fb:f8: 8e:d7:56:a8:f8:f2:77:4f:0a:d3:b6:d2:48:c3:7e:35:16:35: 45:44:35:bb:45:b2:9b:ed:15:8d:db:ce:e9:bd:ab:21:90:34: 83:16:b5:06:48:41:0d:b2:47:ec:95:51:02:59:e6:7c:d7:63: de:a8:d0:52:24:90:32:77:03:3a:6a:3e:0b:5f:34:7d:49:c2: 35:7d:d7:da:bc:b4:e5:d5:39:92:a3:cd:88:c1:42:80:5b:2a: b7:30:ee:b4:1b:42:80:c8:20:dc:5e:4a:b6:5a:c8:a0:c8:96: 5d:84:bc:e3:7f:97:70:dc:31:bc:a9:c4:c5:fa:9e:9a:4e:88: a0:ef:70:66:0a:fc:79:46:4e:2c:48:69:23:e1:55:39:ef:d4: 3a:09:93:e8:a0:1e:d4:14:b7:8e:b2:d8:89:5a:a4:a4:50:73: 04:e0:ed:27:10:1c:13:98:21:49:34:89:2c:76:c1:e0:5f:7b: 31:21:5f:fd:1c:47:4b:4b:41:1a:ea:b6:da:9e:27:ae:7a:28: fb:39:ad:8a:b5:95:ea:1c:ba:98:8e:91:7a:7a:4c:70:ff:8a: 7b:1e:2d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTxZixvajzrOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz MDU4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk M2E0ZDcxNDctZWIwYy00ZDU5LWI5YmMtOTk3NzdlZmUzZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7u3fIxHcnIu+Ju/NH2YDWLljVnSpptRJOn/ iFpKN0Hyg1T8EVswP8mR1J5iLG2+x8DcLYBvaDltxVKT/MpR0AIP+xOIdvoHKOCc yIProQFK59Y8oeivP91qZMb+vgrhl62IC87k0zkdfuFPINo+VLxkfH3PwtEi6rst 7FMjQ8FlyfSVJUgAmTGYE/4Kpw/1iG1fcuEjx+gZln99WjmVmGUeYbALK8SaRjxs S0NXS0snbEfqjxVposBR0fBiD98F7eF6oFxtkP3IMI6ECd/Eu5OFxwL4Q5vejMnU qU4Qv91oR+K7ZySTEFI9PeZNOJXfGDwWRG/1em72D3hsU1r+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBEvA5qadNglhze79lm1yX1J7ZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvNjBhZGJmN2QtNDUwMy0z MWE0LWExNTYtNmJhZTRiNjAxNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1 OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0 OGVmZDMwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk4jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyvXYMUSRX3mOT/dddMX6YyxbkxljgFQH4rBODnDTuCkwb7+I7XVqj4 8ndPCtO20kjDfjUWNUVENbtFspvtFY3bzum9qyGQNIMWtQZIQQ2yR+yVUQJZ5nzX Y96o0FIkkDJ3AzpqPgtfNH1JwjV919q8tOXVOZKjzYjBQoBbKrcw7rQbQoDIINxe SrZayKDIll2EvON/l3DcMbypxMX6nppOiKDvcGYK/HlGTixIaSPhVTnv1DoJk+ig HtQUt46y2IlapKRQcwTg7ScQHBOYIUk0iSx2weBfezEhX/0cR0tLQRrqttqeJ656 KPs5rYq1leocupiOkXp6THD/inseLVg= -----END CERTIFICATE-----Generated at Tue Jun 17 11:46:45 2025 by rpki-client