$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/515b0e58-b3fc-33c2-acd3-df66d2e0a98a.roa File: 515b0e58-b3fc-33c2-acd3-df66d2e0a98a.roa (raw, json) Hash identifier: G0OKNbNDYW9bz4kFl/E6YIRQCvLL8bHq6FEnzJV+xHE= Subject key identifier: 8E:1A:D0:03:B2:2F:C9:BA:52:75:0C:9C:22:82:50:7D:4A:EE:AD:34 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F43285849F305CE9A86EB0C8D7E099480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/515b0e58-b3fc-33c2-acd3-df66d2e0a98a.roa Signing time: Fri 23 May 2025 14:06:57 +0000 ROA not before: Fri 23 May 2025 14:06:57 +0000 ROA not after: Thu 21 Aug 2025 14:06:57 +0000 asID: 23473 IP address blocks: 66.253.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f3:05:ce:9a:86:eb:0c:8d:7e:09:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 23 14:06:57 2025 GMT Not After : Aug 21 14:06:57 2025 GMT Subject: CN=74c7d30b-0ae9-4fdb-a3cf-aabb708b7499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:a2:94:df:5f:51:4c:db:81:25:ec:a5:a5: 07:87:35:25:c7:76:9d:35:ae:55:a8:9a:13:c9:ac: bf:ac:4f:e0:3d:c0:34:3e:b8:a2:b0:1f:c1:91:b6: ae:47:e3:ab:65:f2:2a:6f:7d:bf:e3:75:07:a6:e4: bb:e2:7d:3c:a8:83:db:27:46:a3:c5:6a:4e:19:c0: 4b:1d:18:60:b3:dc:79:5d:9a:4a:d4:fc:44:45:86: 1b:f1:63:2b:ca:ce:a7:32:97:1e:fe:b8:eb:cf:53: 08:86:a2:16:c3:31:c8:60:e2:0d:c9:c8:af:3c:e1: ea:6c:47:0d:e1:33:62:78:c3:8b:ac:3f:00:b1:35: f1:92:99:58:a1:8d:8f:ee:92:08:3c:5f:2e:5c:7f: 67:c2:4d:0f:72:30:70:08:7d:99:c1:11:4a:91:ff: 39:14:2c:e3:d8:d8:17:53:f5:57:b1:dc:4b:29:80: c0:7e:57:ae:05:75:0c:3b:51:39:6d:cf:a4:ce:14: 85:e0:fe:86:76:c0:da:1a:77:fe:80:63:49:da:88: 1d:66:23:91:3c:3e:d9:cf:e9:88:27:b5:4a:39:4d: 8c:fd:c1:49:43:ee:ab:ae:f6:72:ae:9e:a9:82:c5: e5:19:c1:6d:ba:a4:a0:d1:50:d4:ed:8b:d7:38:c9: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:D0:03:B2:2F:C9:BA:52:75:0C:9C:22:82:50:7D:4A:EE:AD:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/515b0e58-b3fc-33c2-acd3-df66d2e0a98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:30:81:e9:f0:59:17:01:31:29:24:84:8d:36:8f:09:fa:e5: e2:c1:5e:f3:d0:21:5d:e6:77:cc:83:f3:44:e8:53:f8:c1:72: 17:73:5f:2e:94:15:af:d7:fd:0b:e4:c5:8d:31:c6:96:b9:e2: 8e:d4:3a:18:8e:33:3b:39:ff:d8:99:7f:cd:d1:6b:1d:76:d9: eb:00:d1:2b:0a:25:5a:f4:50:89:c1:24:ef:36:ec:59:27:53: ff:94:ce:fd:99:1f:57:2f:65:db:7a:c8:9d:a8:16:f5:97:5e: ac:d2:ef:75:af:6a:a9:f7:6b:dc:12:68:ce:78:30:4b:bf:9d: 87:c4:59:80:53:96:26:a8:f3:38:1b:fb:2f:e4:96:51:9e:6e: b6:af:e1:ca:81:7f:0f:10:6a:a2:70:bd:a9:0a:1e:fe:d5:c2: dc:a8:09:59:a2:c8:dc:f5:5d:e4:ea:0b:d8:8b:80:8a:50:dd: 4e:64:ee:c4:84:69:1c:0a:32:ce:c6:f4:c3:4f:91:d1:ac:87: 81:97:e7:86:82:cf:92:78:78:4c:37:ee:62:f3:f3:03:d9:02: cc:24:c0:78:05:ca:b4:08:72:d2:97:f8:1a:03:4b:de:40:40: 43:ab:a4:37:05:e8:cc:32:d0:7c:45:d9:af:18:86:fc:ba:af: 3d:f9:fd:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnzBc6ahusMjX4JlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDUyMzE0MDY1N1oXDTI1MDgyMTE0MDY1N1owLzEtMCsGA1UEAxMk NzRjN2QzMGItMGFlOS00ZmRiLWEzY2YtYWFiYjcwOGI3NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuieilN9fUUzbgSXspaUHhzUlx3adNa5VqJoT yay/rE/gPcA0PriisB/BkbauR+OrZfIqb32/43UHpuS74n08qIPbJ0ajxWpOGcBL HRhgs9x5XZpK1PxERYYb8WMrys6nMpce/rjrz1MIhqIWwzHIYOINycivPOHqbEcN 4TNieMOLrD8AsTXxkplYoY2P7pIIPF8uXH9nwk0PcjBwCH2ZwRFKkf85FCzj2NgX U/VXsdxLKYDAfleuBXUMO1E5bc+kzhSF4P6GdsDaGnf+gGNJ2ogdZiORPD7Zz+mI J7VKOU2M/cFJQ+6rrvZyrp6pgsXlGcFtuqSg0VDU7YvXOMl5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4a0AOyL8m6UnUMnCKCUH1K7q00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNTE1YjBlNTgtYjNmYy0z M2MyLWFjZDMtZGY2NmQyZTBhOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEwgenwWRcBMSkkhI02jwn65eLBXvPQIV3md8yD80ToU/jBchdzXy6U Fa/X/QvkxY0xxpa54o7UOhiOMzs5/9iZf83Rax122esA0SsKJVr0UInBJO827Fkn U/+Uzv2ZH1cvZdt6yJ2oFvWXXqzS73Wvaqn3a9wSaM54MEu/nYfEWYBTliao8zgb +y/kllGebrav4cqBfw8QaqJwvakKHv7VwtyoCVmiyNz1XeTqC9iLgIpQ3U5k7sSE aRwKMs7G9MNPkdGsh4GX54aCz5J4eEw37mLz8wPZAswkwHgFyrQIctKX+BoDS95A QEOrpDcF6Mwy0HxF2a8Yhvy6rz35/Q4= -----END CERTIFICATE-----Generated at Mon Jun 16 18:14:52 2025 by rpki-client