$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa File: bc9c41e8-1663-357b-8245-e5f5e8b41114.roa (raw, json) Hash identifier: vwQ1l2N0DEi2cBUWWBRfC3mOd7LjCM4AXxqeBpf4m/c= Subject key identifier: D8:32:B6:1A:2A:27:1C:0C:4E:92:D8:EE:F1:4D:19:99:2A:C7:3A:31 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584A0D6A87BBDDDF8C6FA857CE00 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 21743 IP address blocks: 66.248.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:87:bb:dd:df:8c:6f:a8:57:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=b1122272-1dd4-498a-9e01-04ccb7cc2339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:a1:c4:43:41:7b:9e:92:44:2f:4d:09:af: 16:0c:23:82:ea:52:da:1e:29:07:48:e8:c8:dc:59: 22:18:99:66:d7:40:38:06:ee:f6:78:ee:69:10:51: 50:97:b7:96:4d:bf:f0:6d:86:73:5c:e3:e0:8b:42: e8:bc:1b:f5:4f:58:ce:20:59:b4:e1:71:04:f9:99: 2f:40:73:0e:69:5c:c1:7b:08:70:1b:56:84:4a:39: 8d:4d:a7:5c:3b:3e:9b:bb:b6:58:20:34:05:41:5e: 23:27:12:47:3f:ec:49:f5:f4:f1:12:96:60:b7:95: d1:e3:7f:f6:06:5d:0d:92:37:e1:f0:93:54:9f:44: dd:b2:d5:15:25:d4:24:1b:a7:20:23:4d:f0:ab:bc: 7e:1b:6d:6f:14:ce:bd:35:8b:8a:af:ef:dd:f1:8b: 6c:9e:42:b4:34:e8:cd:a8:fa:c9:c7:72:ed:2b:28: 42:00:16:20:14:fb:d2:72:88:72:a0:bc:8c:60:27: 8f:fd:f9:ef:be:36:5f:f2:b4:72:99:8c:17:a3:c2: e6:a4:7f:3f:f9:f0:4e:c1:c6:73:9d:8f:82:99:d6: 70:30:c0:5b:95:7b:da:56:73:bd:77:4f:2a:00:79: 82:cc:c6:01:3d:f5:5c:44:53:17:86:d8:a4:43:c2: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:B6:1A:2A:27:1C:0C:4E:92:D8:EE:F1:4D:19:99:2A:C7:3A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:17:06:4b:ab:5c:41:c0:af:10:ce:b8:17:83:07:4a:ef:5e: e4:9a:ef:08:03:be:2a:3a:17:4a:de:87:9f:63:73:e0:19:12: 77:6a:2a:95:db:41:e0:65:ed:6d:17:c1:25:df:9b:23:c6:4a: 9f:e0:f6:62:ca:79:f0:70:8f:1f:59:77:d1:fe:69:bb:73:71: d2:cd:f5:09:8f:4f:a5:84:0f:6a:d1:a6:25:60:be:98:58:56: 2e:04:77:e1:6f:4b:6c:67:23:07:40:09:9f:2d:f5:67:b1:7f: b3:9d:3b:c4:80:fe:49:9a:25:d0:92:96:de:81:54:29:48:60: 3c:7c:42:7a:2c:e3:b8:f0:f7:9f:12:5b:dd:89:56:42:ff:9a: 94:8c:b2:2f:bc:5f:32:97:cc:b1:1e:64:b0:b3:0c:b3:0f:2d: 60:3d:52:ac:12:1c:a8:be:ef:cb:fb:c4:c6:6a:bc:a6:d2:b9: 40:31:87:c2:8f:b4:8f:5b:24:06:ee:c9:aa:f2:1d:0f:ff:65: 49:3f:98:fa:6b:9d:ce:8a:6c:7a:28:08:2b:6f:47:0f:b5:c2: a6:ab:28:84:91:bd:fb:52:09:01:9f:a1:2f:20:9e:82:c2:1d: d3:42:5a:d4:7f:3e:fa:7a:29:98:56:5b:91:59:ef:4e:9b:de: e7:59:12:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoe73d+Mb6hXzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk YjExMjIyNzItMWRkNC00OThhLTllMDEtMDRjY2I3Y2MyMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX2hxENBe56SRC9NCa8WDCOC6lLaHikHSOjI 3FkiGJlm10A4Bu72eO5pEFFQl7eWTb/wbYZzXOPgi0LovBv1T1jOIFm04XEE+Zkv QHMOaVzBewhwG1aESjmNTadcOz6bu7ZYIDQFQV4jJxJHP+xJ9fTxEpZgt5XR43/2 Bl0Nkjfh8JNUn0TdstUVJdQkG6cgI03wq7x+G21vFM69NYuKr+/d8YtsnkK0NOjN qPrJx3LtKyhCABYgFPvScohyoLyMYCeP/fnvvjZf8rRymYwXo8LmpH8/+fBOwcZz nY+CmdZwMMBblXvaVnO9d08qAHmCzMYBPfVcRFMXhtikQ8JdNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgythoqJxwMTpLY7vFNGZkqxzoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvYmM5YzQxZTgtMTY2My0z NTdiLTgyNDUtZTVmNWU4YjQxMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIXBkurXEHArxDOuBeDB0rvXuSa7wgDvio6F0reh59jc+AZEndqKpXb QeBl7W0XwSXfmyPGSp/g9mLKefBwjx9Zd9H+abtzcdLN9QmPT6WED2rRpiVgvphY Vi4Ed+FvS2xnIwdACZ8t9Wexf7OdO8SA/kmaJdCSlt6BVClIYDx8Qnos47jw958S W92JVkL/mpSMsi+8XzKXzLEeZLCzDLMPLWA9UqwSHKi+78v7xMZqvKbSuUAxh8KP tI9bJAbuyaryHQ//ZUk/mPprnc6KbHooCCtvRw+1wqarKISRvftSCQGfoS8gnoLC HdNCWtR/Pvp6KZhWW5FZ706b3udZEvM= -----END CERTIFICATE-----Generated at Tue Jun 17 13:46:16 2025 by rpki-client