$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa File: afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa (raw, json) Hash identifier: JAHZhKh41FYUlTq0SRWXKLhRgXx9ylQelM7Fzihd264= Subject key identifier: 9C:FF:89:AE:5D:CF:6B:8E:79:42:D7:50:F2:B2:F9:DB:43:1B:6F:0C Certificate issuer: /CN=66580030-eaac-4617-b624-3b0a2974a04d Certificate serial: 010D0C9F4328584A10354F0657F7B446DBFC4180 Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 23352 IP address blocks: 199.30.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4f:06:57:f7:b4:46:db:fc:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=f03f2b0a-c5bb-4f5f-9500-b9e1ce156885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:04:90:45:f1:8e:eb:33:cb:c7:cd:b6:da: ec:aa:e1:37:eb:b7:f2:1c:59:dc:da:d6:d0:16:33: 1d:14:aa:cc:26:48:5f:de:0c:8b:ba:c8:d5:66:fd: d3:cf:01:7c:a4:2b:d7:fa:ec:e6:3c:70:d0:1b:c1: d5:2f:ae:fc:d1:06:c2:69:63:b4:5e:73:24:76:d6: 52:35:f6:0a:2a:e4:6c:ac:34:46:d4:9c:17:a7:d5: 69:28:3e:87:8d:6e:f7:49:aa:42:e3:71:35:73:b8: 09:91:24:4a:cd:cb:65:f3:99:3d:92:f3:bf:37:57: 86:87:23:16:dc:be:2e:73:97:95:12:2d:06:a6:d2: a7:73:f5:1f:a2:e2:91:c7:4e:1a:a2:21:d9:11:92: ec:1e:81:4e:35:47:46:93:17:e6:b9:3a:38:b6:e0: a2:6e:a9:fd:3e:f3:6f:f5:e1:f8:55:aa:d0:f0:0e: 16:b6:fe:b4:83:87:bb:c6:de:11:2a:c2:05:27:24: 05:2a:92:88:57:7e:38:7a:96:bd:19:23:e7:83:cb: d2:f4:0b:19:a4:3a:89:b6:11:fc:ab:17:3a:f5:f0: 50:b1:60:f1:bb:f4:ed:4d:25:5f:9f:00:c0:d4:fb: 14:e4:48:0e:85:a4:84:e8:ee:95:08:9f:cd:9d:9f: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FF:89:AE:5D:CF:6B:8E:79:42:D7:50:F2:B2:F9:DB:43:1B:6F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl X509v3 Authority Key Identifier: keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer sbgp-ipAddrBlock: critical IPv4: 199.30.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9e:d8:94:df:cc:5a:61:f7:b4:f0:e1:c1:ae:67:b4:24:82: 03:ee:fa:69:25:d9:f8:15:20:86:d5:2a:f2:1b:aa:b8:f0:b3: 4b:f0:bb:06:ea:e3:4f:39:18:cf:b0:5e:cc:13:8e:5e:b5:7f: de:1f:6d:93:05:c1:b7:86:90:2d:a5:0e:20:e1:a5:58:18:a2: c0:e7:5a:87:25:69:a2:fd:d0:d0:34:d4:56:ab:95:fe:4d:1b: 20:70:f6:1f:00:cb:bb:7e:db:86:75:25:8c:82:e1:7c:a7:40: 8b:a2:d6:47:70:75:1f:f7:32:69:d3:9b:0f:01:9c:b4:ca:5e: 81:9c:fa:00:90:f8:33:22:e3:25:62:b6:77:06:6a:9c:ea:fb: c8:a5:a9:ad:4e:26:43:78:62:a8:ff:d8:9c:9e:85:b2:a2:f1: 7f:53:12:5d:cb:5a:d8:32:a2:d4:ba:db:9d:fc:08:53:e1:b7: 87:36:5e:93:ad:58:a7:2c:6e:9e:8f:42:41:74:ef:f2:d0:2b: 67:38:5c:53:02:f4:67:17:0a:f1:dc:54:0c:2f:90:30:8e:ea: b1:8f:54:f3:bd:5a:1f:58:a6:dd:10:58:f1:08:c6:2a:bc:f5: fc:a5:bc:0c:4c:30:fc:5c:a4:0e:6d:06:10:eb:3f:90:b7:bd: 00:74:33:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNU8GV/e0Rtv8QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY1ODAwMzAtZWFhYy00NjE3LWI2MjQtM2IwYTI5NzRh MDRkMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjAzZjJiMGEtYzViYi00ZjVmLTk1MDAtYjllMWNlMTU2ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQMEkEXxjuszy8fNttrsquE367fyHFnc2tbQ FjMdFKrMJkhf3gyLusjVZv3TzwF8pCvX+uzmPHDQG8HVL6780QbCaWO0XnMkdtZS NfYKKuRsrDRG1JwXp9VpKD6HjW73SapC43E1c7gJkSRKzctl85k9kvO/N1eGhyMW 3L4uc5eVEi0GptKnc/UfouKRx04aoiHZEZLsHoFONUdGkxfmuTo4tuCibqn9PvNv 9eH4VarQ8A4Wtv60g4e7xt4RKsIFJyQFKpKIV344epa9GSPng8vS9AsZpDqJthH8 qxc69fBQsWDxu/TtTSVfnwDA1PsU5EgOhaSE6O6VCJ/NnZ+ZBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz/ia5dz2uOeULXUPKy+dtDG28MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjU4 MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBhMjk3NGEwNGQvYWZhZmVlYTQtOTk0Zi0z YTE0LThiNmItNjJkYmI3NGFmZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjY1ODAwMzAtZWFhYy00NjE3LWI2 MjQtM2IwYTI5NzRhMDRkLzY2NTgwMDMwLWVhYWMtNDYxNy1iNjI0LTNiMGEyOTc0 YTA0ZC5jcmwwHwYDVR0jBBgwFoAUfLSefWTanAW/yHL0FXi1fgszKUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NjU4MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBh Mjk3NGEwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOe2JTfzFph97Tw4cGuZ7QkggPu+mkl2fgVIIbVKvIbqrjws0vwuwbq 4085GM+wXswTjl61f94fbZMFwbeGkC2lDiDhpVgYosDnWoclaaL90NA01Farlf5N GyBw9h8Ay7t+24Z1JYyC4XynQIui1kdwdR/3MmnTmw8BnLTKXoGc+gCQ+DMi4yVi tncGapzq+8ilqa1OJkN4Yqj/2JyehbKi8X9TEl3LWtgyotS62538CFPht4c2XpOt WKcsbp6PQkF07/LQK2c4XFMC9GcXCvHcVAwvkDCO6rGPVPO9Wh9Ypt0QWPEIxiq8 9fylvAxMMPxcpA5tBhDrP5C3vQB0M5U= -----END CERTIFICATE-----Generated at Mon Jun 16 23:20:08 2025 by rpki-client