$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa File: 87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa (raw, json) Hash identifier: 34LalHoA5lG0nIKRVEJS3KnL/lwKrJ4Psvm6uMk976Q= Subject key identifier: 64:EB:09:79:0A:59:EA:AD:A9:35:3E:87:F4:C4:2E:6E:C1:DE:9A:F1 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFD8527EEADF5E901B000 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 66.109.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fd:85:27:ee:ad:f5:e9:01:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=bd1d2060-8eef-406a-942f-c22dfd065eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:6d:be:55:b6:63:e1:0b:94:e6:91:db:6b: f8:45:12:7f:da:43:2d:26:4c:97:66:81:7d:cf:26: 75:67:13:f1:21:cd:8b:cd:02:0e:04:79:87:5b:bc: c0:72:2b:36:c0:9c:16:f8:39:ba:da:ae:13:92:b3: b9:74:8e:60:0f:a2:3f:01:c6:82:20:9a:44:c5:fd: e7:dd:0c:e3:99:b3:58:f0:db:99:4c:a8:98:4c:09: 83:18:d9:60:31:64:e8:7a:fb:83:ab:e8:79:0f:55: ba:eb:75:99:2b:eb:1b:fb:02:4e:ad:66:b5:f5:7d: c1:48:91:05:42:a7:8c:ed:dc:6c:82:25:67:be:39: 2c:5d:74:e3:87:14:27:89:ab:3d:c7:90:df:25:33: d8:71:c5:bb:50:ae:12:6e:d3:26:63:44:50:cf:3d: 4b:02:a6:b0:7f:ec:27:23:01:5f:32:f9:84:10:d1: 08:0f:1c:70:7b:91:61:4f:df:e4:b6:a0:f3:40:70: 4b:f8:0d:1d:be:3a:72:fd:c2:4a:83:05:3e:47:c9: a7:e2:d4:5b:40:72:56:6f:c2:6d:ba:00:08:78:97: 7d:37:81:11:50:46:24:f0:cb:1d:c1:96:20:ee:2e: 3f:20:86:67:c2:fe:b9:5f:21:c0:b5:11:72:1e:25: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:09:79:0A:59:EA:AD:A9:35:3E:87:F4:C4:2E:6E:C1:DE:9A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 66.109.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4f:29:f1:c6:54:b1:33:aa:de:c3:cc:54:e6:97:b0:60:6d: c2:39:36:ab:b5:dd:44:d6:13:51:48:d2:98:d3:51:50:97:e5: d8:0a:4a:ed:62:79:73:b0:f5:ab:a2:d4:20:df:83:59:8e:04: 4d:6d:77:59:60:ce:d1:2c:fb:c5:fc:10:c9:f2:f5:8c:fb:42: 03:15:17:36:78:a1:05:c9:5b:06:71:9b:f4:0c:5f:31:79:c2: aa:b4:02:ac:8f:a3:a7:d5:5c:8a:d3:8e:3a:91:b2:db:5f:e6: 74:d5:b7:90:95:8b:13:fe:96:f8:2c:3b:27:f5:e5:29:7a:22: 86:49:b3:d8:2b:b8:fb:2a:4e:39:7b:bc:19:ad:ad:eb:4d:8b: df:f4:b7:eb:fb:fa:b7:f8:59:c0:59:7a:48:7b:5d:d3:65:10: 93:0a:a0:db:13:59:8a:3e:7b:74:0c:e1:f2:b2:ed:06:68:7f: 4b:d2:5f:68:0e:ff:01:1a:53:05:4a:0c:78:8f:f1:65:fc:b6: c2:3e:4d:6e:84:8c:3a:ff:7b:51:14:9a:cb:24:49:b5:ac:bb: 30:3e:ed:ce:2e:f9:2a:a0:59:a0:c4:a7:11:95:fe:99:fa:fe: 38:30:b4:20:8b:b3:a0:c5:ad:f6:9d:8b:aa:76:d3:f4:38:2a: b7:a1:bc:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv2FJ+6t9ekBsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YmQxZDIwNjAtOGVlZi00MDZhLTk0MmYtYzIyZGZkMDY1ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ltvlW2Y+ELlOaR22v4RRJ/2kMtJkyXZoF9 zyZ1ZxPxIc2LzQIOBHmHW7zAcis2wJwW+Dm62q4TkrO5dI5gD6I/AcaCIJpExf3n 3QzjmbNY8NuZTKiYTAmDGNlgMWToevuDq+h5D1W663WZK+sb+wJOrWa19X3BSJEF QqeM7dxsgiVnvjksXXTjhxQnias9x5DfJTPYccW7UK4SbtMmY0RQzz1LAqawf+wn IwFfMvmEENEIDxxwe5FhT9/ktqDzQHBL+A0dvjpy/cJKgwU+R8mn4tRbQHJWb8Jt ugAIeJd9N4ERUEYk8MsdwZYg7i4/IIZnwv65XyHAtRFyHiURUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTrCXkKWeqtqTU+h/TELm7B3prxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODdhYTg4NDEtNDhhMS0z ODE2LWJmNDktYmI3Y2I2ODliMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1PKfHGVLEzqt7DzFTml7BgbcI5Nqu13UTWE1FI0pjTUVCX5dgKSu1i eXOw9aui1CDfg1mOBE1td1lgztEs+8X8EMny9Yz7QgMVFzZ4oQXJWwZxm/QMXzF5 wqq0AqyPo6fVXIrTjjqRsttf5nTVt5CVixP+lvgsOyf15Sl6IoZJs9gruPsqTjl7 vBmtretNi9/0t+v7+rf4WcBZekh7XdNlEJMKoNsTWYo+e3QM4fKy7QZof0vSX2gO /wEaUwVKDHiP8WX8tsI+TW6EjDr/e1EUmsskSbWsuzA+7c4u+SqgWaDEpxGV/pn6 /jgwtCCLs6DFrfadi6p20/Q4KrehvHg= -----END CERTIFICATE-----Generated at Mon Jun 16 05:05:08 2025 by rpki-client