$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa File: 8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json) Hash identifier: Gv0B4mIVhUJlDVhDCg4S/VBE2t/vPz75A81LSr6jr6Y= Subject key identifier: 11:CA:C2:33:98:1C:41:C6:21:21:72:CD:8E:81:EB:B5:16:BE:DB:E8 Certificate issuer: /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Certificate serial: 010D0C9F4328584A2955681E2789150420D40B80 Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 30255 IP address blocks: 66.205.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:68:1e:27:89:15:04:20:d4:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=c49c1ee3-4177-413e-a9cf-8670dce25b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:b6:58:cf:fb:b3:db:f3:ff:a7:8b:88:46: ee:d2:c9:c6:1e:ae:99:6d:e3:f6:c4:88:f9:84:1f: 6a:0b:8e:5c:1e:3b:63:cc:30:ac:85:37:5e:bb:c5: b6:93:8c:1c:a8:cb:59:d6:a8:38:04:76:9f:cc:9e: 0c:a6:c2:fd:c0:32:2f:92:43:04:07:d0:23:42:d6: 7f:79:86:5e:9c:ed:68:16:33:ff:54:59:6e:a5:61: 1f:a3:70:99:9f:d8:a9:ee:e0:ff:03:c2:8a:67:6b: 0a:ae:a6:3d:fc:1d:3d:dc:bf:c1:dc:91:6a:93:fa: 30:94:58:cc:f9:04:14:96:4e:24:b8:38:7a:1a:64: 5f:59:fa:8b:4f:12:45:cb:db:8a:04:95:32:fd:2f: 31:d2:52:dc:91:b8:d7:5e:21:5e:12:b2:a5:b7:7f: dc:79:85:fe:70:ef:e4:b4:e3:28:81:c5:b9:b6:53: 80:13:07:7c:fb:46:98:08:da:25:70:5e:a3:2d:67: 0a:45:5d:58:7c:fa:70:22:6b:da:e0:d0:17:1a:1b: 42:b5:8d:d2:99:88:84:85:45:bb:b9:0f:30:a7:70: b9:02:15:17:93:3a:90:da:78:26:5d:52:91:04:33: 68:ff:bf:0c:be:d0:c5:cd:cf:72:cf:59:fb:66:ee: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CA:C2:33:98:1C:41:C6:21:21:72:CD:8E:81:EB:B5:16:BE:DB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl X509v3 Authority Key Identifier: keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer sbgp-ipAddrBlock: critical IPv4: 66.205.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b3:f7:b0:22:54:13:dd:06:64:52:06:56:8b:e4:3e:41:47: 23:6c:f2:23:53:36:87:4b:d4:a3:f3:fb:92:df:6c:48:7e:0b: 1e:a2:1b:96:fd:86:19:2b:ef:4d:61:7b:d3:4c:3d:64:d9:43: c4:71:a5:08:4e:06:0e:35:63:17:b8:b1:9b:71:a8:d7:60:f3: 9a:de:18:14:17:39:d5:d6:50:13:0d:60:2c:e0:f1:6d:c8:eb: 11:b5:1a:9e:6a:4a:24:ef:0e:00:ce:73:7b:5e:1d:0a:2b:3b: ed:8c:7d:a2:44:e4:6e:12:53:ab:c1:5b:52:01:7e:13:76:6a: ca:c6:f7:c9:5e:8c:a0:e9:17:ef:ca:aa:fc:1d:43:91:81:c9: c6:bd:7b:9b:3b:f0:0f:41:07:75:9e:f4:72:30:a7:32:b7:11: 23:7f:00:38:84:52:b7:0c:9d:9c:9f:7a:3a:8b:90:f1:ca:76: 35:22:d0:48:34:b8:76:92:c0:10:9d:76:39:74:b4:28:92:23: b4:06:02:35:6a:61:d3:b3:1a:7d:67:e3:f7:1b:10:74:f6:0f: d4:7a:be:66:05:28:76:85:ba:97:a6:5f:ce:ba:68:3c:9e:d4: 8a:64:f6:20:dc:b9:10:a5:e7:d9:60:c1:0c:a1:9d:06:f5:4f: 48:d9:c8:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWgeJ4kVBCDUC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZWMzY2YtODU4YS00NTdiLTg0NGYtOGM2MjgzZjVl NWQ5MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YzQ5YzFlZTMtNDE3Ny00MTNlLWE5Y2YtODY3MGRjZTI1YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3C2WM/7s9vz/6eLiEbu0snGHq6ZbeP2xIj5 hB9qC45cHjtjzDCshTdeu8W2k4wcqMtZ1qg4BHafzJ4MpsL9wDIvkkMEB9AjQtZ/ eYZenO1oFjP/VFlupWEfo3CZn9ip7uD/A8KKZ2sKrqY9/B093L/B3JFqk/owlFjM +QQUlk4kuDh6GmRfWfqLTxJFy9uKBJUy/S8x0lLckbjXXiFeErKlt3/ceYX+cO/k tOMogcW5tlOAEwd8+0aYCNolcF6jLWcKRV1YfPpwImva4NAXGhtCtY3SmYiEhUW7 uQ8wp3C5AhUXkzqQ2ngmXVKRBDNo/78MvtDFzc9yz1n7Zu4yGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHKwjOYHEHGISFyzY6B67UWvtvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNl YzNjZi04NThhLTQ1N2ItODQ0Zi04YzYyODNmNWU1ZDkvOGQ5MDc2OTQtZjA4NC0z NjYxLWI5ZDctMmU0ZWU5YTVkZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAzZWMzY2YtODU4YS00NTdiLTg0 NGYtOGM2MjgzZjVlNWQ5LzkwM2VjM2NmLTg1OGEtNDU3Yi04NDRmLThjNjI4M2Y1 ZTVkOS5jcmwwHwYDVR0jBBgwFoAUPVYhXxO4CO7AZA1SjS1VdeJwyO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNlYzNjZi04NThhLTQ1N2ItODQ0Zi04YzYy ODNmNWU1ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6z97AiVBPdBmRSBlaL5D5BRyNs8iNTNodL1KPz+5LfbEh+Cx6iG5b9 hhkr701he9NMPWTZQ8RxpQhOBg41Yxe4sZtxqNdg85reGBQXOdXWUBMNYCzg8W3I 6xG1Gp5qSiTvDgDOc3teHQorO+2MfaJE5G4SU6vBW1IBfhN2asrG98lejKDpF+/K qvwdQ5GByca9e5s78A9BB3We9HIwpzK3ESN/ADiEUrcMnZyfejqLkPHKdjUi0Eg0 uHaSwBCddjl0tCiSI7QGAjVqYdOzGn1n4/cbEHT2D9R6vmYFKHaFupemX866aDye 1Ipk9iDcuRCl59lgwQyhnQb1T0jZyKI= -----END CERTIFICATE-----Generated at Mon Jun 16 04:57:31 2025 by rpki-client