$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d655bdb7-1926-3574-94c2-68cb87a81f8c.roa File: d655bdb7-1926-3574-94c2-68cb87a81f8c.roa (raw, json) Hash identifier: 2abFpkCQeobYemM8oqpIIZWyJrSItKvH6U3e8vOm0uU= Subject key identifier: B7:63:68:61:DD:85:4D:3C:81:7C:39:7F:48:C9:B9:A1:C2:8C:AE:21 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584A30502CB95122E834A07D3AC0 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d655bdb7-1926-3574-94c2-68cb87a81f8c.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 14090 IP address blocks: 66.163.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:2c:b9:51:22:e8:34:a0:7d:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=e28de216-3eb5-48f2-be31-b1c9e3cbdd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:b1:1b:28:e0:61:1c:70:7d:cf:10:e9:8d: 15:c5:08:45:ee:7b:d8:a7:6f:55:d5:16:77:d1:15: 0e:ba:a7:02:f7:0b:15:58:03:4c:9b:07:1e:30:3a: 3d:ec:23:b5:8f:87:66:d1:ef:93:20:28:f6:b9:f2: e2:72:46:44:b1:fd:c6:e6:20:98:ba:bb:13:b9:72: 44:b5:f6:29:09:8e:92:ac:7f:3f:bc:3f:1b:56:c2: f1:da:0c:ba:d9:ae:4a:69:f5:f6:ba:ba:f2:86:40: 0f:e4:ee:22:84:8a:19:09:bd:d4:88:5a:fd:1a:c8: 66:77:87:26:08:a7:8f:f2:0f:79:5f:d5:19:96:28: 05:3c:89:1e:7a:00:b8:cd:ba:25:ed:31:aa:27:64: aa:51:be:80:4a:e9:85:d9:0d:e8:b4:9c:34:ec:7a: be:2e:68:a0:26:84:a5:31:c8:61:b4:7d:36:8a:9f: 80:2f:73:be:c7:fa:25:77:23:fc:3c:4e:c2:0b:ca: fe:f5:c7:fc:8e:cf:24:49:28:f0:54:36:7f:52:c2: fe:73:6f:13:98:f8:90:85:92:4f:95:50:c5:52:05: 2d:12:20:93:7e:78:a5:80:bf:1d:48:d2:9f:d6:dc: 66:ab:9e:8e:ec:ad:e0:e6:e3:8b:e3:a1:48:81:f2: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:63:68:61:DD:85:4D:3C:81:7C:39:7F:48:C9:B9:A1:C2:8C:AE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d655bdb7-1926-3574-94c2-68cb87a81f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 66.163.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:62:48:f0:2c:fa:dc:27:d9:61:41:9b:9e:2b:46:bb:1e:45: f8:b5:9c:3f:25:42:3c:16:6a:f9:6b:1d:fe:ad:d0:a4:1e:80: 44:40:32:ed:14:d3:40:cd:00:35:e6:7f:c8:a6:06:53:70:40: de:c8:39:f9:65:f7:1d:8e:13:05:37:c3:2f:2a:17:e3:da:14: 20:eb:ac:43:a6:22:1e:bf:af:b0:fa:51:ad:3b:7b:93:0e:85: b4:ca:a4:4e:c3:d9:20:66:70:4e:28:45:d3:da:64:05:b8:8f: 98:4e:de:bd:e7:27:dd:5b:7c:0f:c8:47:21:e5:ca:94:d8:44: a4:e7:05:59:83:ba:1b:d2:7a:80:45:11:58:e1:fb:e8:c3:2f: fa:d0:a8:0f:23:39:53:b9:4d:0e:bd:20:e5:20:23:87:2a:30: b4:5d:3f:10:59:ad:74:fd:3a:cf:61:12:b9:39:55:4e:1e:e7: 98:47:e4:ee:ff:8e:f6:ab:c6:0d:60:5e:60:b8:41:be:f1:8f: d9:aa:4e:86:c6:14:ce:b2:63:5d:7c:d8:85:46:80:96:73:5e: f9:60:7a:f8:2e:f5:9a:00:b2:23:ad:5b:ab:31:cb:1e:48:6b: 44:1b:f4:ad:5a:fa:dc:d9:9e:7a:61:e7:84:6d:d7:19:43:55: 2a:24:1c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUCy5USLoNKB9OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTI4ZGUyMTYtM2ViNS00OGYyLWJlMzEtYjFjOWUzY2JkZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16+xGyjgYRxwfc8Q6Y0VxQhF7nvYp29V1RZ3 0RUOuqcC9wsVWANMmwceMDo97CO1j4dm0e+TICj2ufLickZEsf3G5iCYursTuXJE tfYpCY6SrH8/vD8bVsLx2gy62a5KafX2urryhkAP5O4ihIoZCb3UiFr9Gshmd4cm CKeP8g95X9UZligFPIkeegC4zbol7TGqJ2SqUb6ASumF2Q3otJw07Hq+LmigJoSl MchhtH02ip+AL3O+x/oldyP8PE7CC8r+9cf8js8kSSjwVDZ/UsL+c28TmPiQhZJP lVDFUgUtEiCTfnilgL8dSNKf1txmq56O7K3g5uOL46FIgfIqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdjaGHdhU08gXw5f0jJuaHCjK4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDY1NWJkYjctMTkyNi0z NTc0LTk0YzItNjhjYjg3YTgxZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5iSPAs+twn2WFBm54rRrseRfi1nD8lQjwWavlrHf6t0KQegERAMu0U 00DNADXmf8imBlNwQN7IOfll9x2OEwU3wy8qF+PaFCDrrEOmIh6/r7D6Ua07e5MO hbTKpE7D2SBmcE4oRdPaZAW4j5hO3r3nJ91bfA/IRyHlypTYRKTnBVmDuhvSeoBF EVjh++jDL/rQqA8jOVO5TQ69IOUgI4cqMLRdPxBZrXT9Os9hErk5VU4e55hH5O7/ jvarxg1gXmC4Qb7xj9mqTobGFM6yY1182IVGgJZzXvlgevgu9ZoAsiOtW6sxyx5I a0Qb9K1a+tzZnnph54Rt1xlDVSokHHI= -----END CERTIFICATE-----Generated at Mon Jun 16 02:41:36 2025 by rpki-client