$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa File: b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa (raw, json) Hash identifier: dA+9fBeG9lhjUX2VRCr+k2Ek2LAEEaHoveOb5M9wtug= Subject key identifier: 23:CE:2B:67:85:6B:74:1D:67:23:CF:12:50:A0:78:1E:1C:0A:12:62 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285849DF5A6F85BB4918AA8EB95460 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 7018 IP address blocks: 208.66.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6f:85:bb:49:18:aa:8e:b9:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=3a2cdd06-7695-40ad-a913-fbd13ee93aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:88:c6:c7:1b:71:0c:23:32:d8:21:5f:6c: 05:53:ec:5c:92:f1:36:bd:6e:25:de:1a:e1:14:96: cc:5f:9d:6c:a4:fc:cb:5a:eb:bb:e3:bd:2e:1a:c1: b8:61:82:c0:59:65:da:9b:14:81:cc:78:81:cd:3e: 86:34:c1:e1:16:5d:e3:3b:ac:dc:86:ac:0c:16:b8: db:bd:38:b6:3f:96:8d:32:97:f5:5a:d0:2a:91:dc: bc:58:0a:a7:c2:bf:ed:42:23:38:35:7b:fa:9a:c1: 35:75:98:c2:b1:46:50:14:b0:46:2a:00:62:c3:dc: 36:fc:4d:92:ae:65:1e:aa:ba:7e:87:0b:6a:15:c1: e3:f8:03:97:55:81:7d:74:b2:76:65:69:8e:f8:fa: 6f:68:6c:4b:b4:d4:f0:5c:2a:19:aa:7a:1c:32:ce: 13:55:24:c9:b6:46:00:08:8d:0b:d3:57:37:bf:27: 8f:e1:cf:f2:34:6d:e5:6d:a5:7d:06:3a:c2:9b:ae: 74:ed:a6:38:fc:3a:84:1c:8f:f0:d7:c3:4a:8b:46: a8:80:8e:96:c4:0f:59:bf:44:39:a7:1d:e5:77:23: e4:63:ac:ef:a0:3c:eb:47:4f:18:19:b1:a0:8d:40: 70:73:1a:7b:cf:a0:5b:fa:a6:65:33:e8:3f:94:a0: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:2B:67:85:6B:74:1D:67:23:CF:12:50:A0:78:1E:1C:0A:12:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 208.66.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:b1:d7:2c:c9:e1:dd:58:5a:33:a2:27:5e:47:71:34:ae:44: fc:f0:e1:0a:7c:ae:7e:78:ed:22:a0:fd:6f:08:69:34:c4:88: ff:f5:aa:de:7e:88:ed:54:27:02:c4:e0:55:2b:a1:89:71:90: 8e:a5:bf:dd:8a:3b:40:e4:bb:fb:47:ac:ed:01:d8:03:f5:df: 91:a8:80:97:1a:6c:cd:fd:d0:97:17:9b:5b:65:44:24:e8:f3: cc:36:b7:3a:18:f5:be:73:43:f9:d7:19:27:db:a8:6b:03:79: df:ea:ab:43:5f:ff:58:3e:ee:67:00:db:ec:11:87:71:ef:a4: 0b:5d:fb:02:1a:d1:59:8e:61:d9:7b:7a:ee:19:67:11:a1:e6: 26:f8:0a:ba:50:af:ca:69:45:5e:b7:cc:f5:73:de:f8:4a:06: de:a5:e9:22:e4:9f:18:62:ca:6c:97:c2:33:47:5f:fc:c7:3d: 68:d9:6e:b0:6c:f2:b7:e7:d2:ac:85:f1:6d:3d:6b:a6:b3:c9: cd:66:6d:36:56:cc:6d:1e:9a:7c:06:bf:39:30:68:04:ef:51: fc:17:b3:9b:06:8c:19:8f:f3:b4:85:34:8c:42:f1:d3:50:c4: 9a:dd:80:95:d9:9d:ab:24:1b:40:99:af:64:69:64:29:59:d8: 58:a2:7d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWm+Fu0kYqo65VGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk M2EyY2RkMDYtNzY5NS00MGFkLWE5MTMtZmJkMTNlZTkzYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTWIxscbcQwjMtghX2wFU+xckvE2vW4l3hrh FJbMX51spPzLWuu7470uGsG4YYLAWWXamxSBzHiBzT6GNMHhFl3jO6zchqwMFrjb vTi2P5aNMpf1WtAqkdy8WAqnwr/tQiM4NXv6msE1dZjCsUZQFLBGKgBiw9w2/E2S rmUeqrp+hwtqFcHj+AOXVYF9dLJ2ZWmO+PpvaGxLtNTwXCoZqnocMs4TVSTJtkYA CI0L01c3vyeP4c/yNG3lbaV9BjrCm6507aY4/DqEHI/w18NKi0aogI6WxA9Zv0Q5 px3ldyPkY6zvoDzrR08YGbGgjUBwcxp7z6Bb+qZlM+g/lKAhJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPOK2eFa3QdZyPPElCgeB4cChJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYjQ5NDdmYWEtYzhhOS0z YzRhLWE3MTItYTczMjFlYTE1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMax1yzJ4d1YWjOiJ15HcTSuRPzw4Qp8rn547SKg/W8IaTTEiP/1qt5+ iO1UJwLE4FUroYlxkI6lv92KO0Dku/tHrO0B2AP135GogJcabM390JcXm1tlRCTo 88w2tzoY9b5zQ/nXGSfbqGsDed/qq0Nf/1g+7mcA2+wRh3HvpAtd+wIa0VmOYdl7 eu4ZZxGh5ib4CrpQr8ppRV63zPVz3vhKBt6l6SLknxhiymyXwjNHX/zHPWjZbrBs 8rfn0qyF8W09a6azyc1mbTZWzG0emnwGvzkwaATvUfwXs5sGjBmP87SFNIxC8dNQ xJrdgJXZnaskG0CZr2RpZClZ2FiifU0= -----END CERTIFICATE-----Generated at Sun Jun 15 13:01:07 2025 by rpki-client