$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa File: f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa (raw, json) Hash identifier: Sp0Wc0Gv7NZtPoPLGFQtTw6yF2I7dY0VlGjPC0ldR/w= Subject key identifier: 7E:5E:3E:25:40:7A:E0:CA:E1:77:50:13:C6:C0:57:A5:82:3B:60:96 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F43285849FF751896CA717A142EC41A80 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 66.114.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:18:96:ca:71:7a:14:2e:c4:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=5def2830-cdbf-4f2b-b57f-dead026995f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:b8:55:1a:5d:5a:b8:32:dd:cd:df:01:33: 53:50:f8:86:80:d6:5f:d9:f3:63:af:09:1d:6c:84: 9f:86:df:88:bb:74:ef:a2:6d:f5:0e:15:4d:49:55: 11:93:e9:31:81:a8:f6:cd:44:f4:26:a2:8f:6e:bd: 75:ee:e0:ff:c9:c0:de:65:be:99:9d:cb:25:78:ca: 49:d5:6e:29:93:21:20:fd:c2:cf:ea:eb:c6:25:ec: 92:d1:92:f1:f1:24:3f:a5:dd:6b:8d:51:26:f7:8c: 47:c0:7d:2f:be:b3:99:c3:7c:4e:0d:bb:81:08:78: 35:8b:54:52:e6:cf:a3:87:9f:bf:e3:0a:48:93:bc: 7b:c5:fc:3a:e3:b8:cb:ad:d7:76:65:d6:cd:59:2d: e3:72:8c:aa:b2:37:ba:f1:48:cb:c2:d7:5d:b6:c2: 29:91:9f:77:05:43:74:ba:2b:d8:80:89:18:81:cd: 36:88:09:4f:76:2b:8e:89:43:9e:e8:4d:89:21:b0: 68:51:79:38:1f:cc:9d:9a:b8:d1:72:bf:25:0a:52: f6:d3:6a:b9:13:26:18:42:13:bd:ee:a7:41:3c:e9: e2:33:0a:30:56:16:f5:9c:d8:d9:1d:6b:35:e5:34: 38:53:6d:9e:bb:70:ef:8f:1a:b4:ff:33:53:32:a6: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5E:3E:25:40:7A:E0:CA:E1:77:50:13:C6:C0:57:A5:82:3B:60:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 66.114.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a7:6a:25:21:92:e0:d2:dd:c4:fd:77:76:71:29:0b:b1:6c: 10:06:52:ad:71:66:72:e3:a3:c8:8b:0a:7b:54:c4:87:ed:4f: 21:0e:4a:2d:1e:73:9c:5a:80:ab:2f:59:a9:e7:79:da:f6:e0: 0e:94:01:47:12:6b:85:0b:d4:71:3f:bb:11:ed:fd:1c:8d:ab: 0c:da:58:89:bb:44:69:ff:36:d2:00:a8:5b:2b:c2:40:8d:76: b6:f7:a0:c6:8d:6b:14:55:5a:0e:8b:ba:dd:99:36:15:79:98: c3:84:ae:df:87:8e:a6:1f:a7:20:68:8d:dd:fa:cf:d8:5d:16: 72:79:7f:1a:8e:0f:5a:29:41:d2:1f:90:4f:b4:57:da:80:a1: b9:20:45:95:bb:07:c1:6d:59:4a:df:fc:77:17:41:15:50:77: 41:98:a3:31:aa:5a:2b:89:53:95:c4:98:cc:91:9c:33:5a:13: 2e:c7:36:2d:81:fe:8d:55:50:78:12:3d:be:6d:f2:60:2d:41: 87:64:fb:d9:61:af:97:3d:14:7a:50:ef:0e:de:a5:65:6f:fd: 26:6a:ed:92:48:5a:6d:e5:08:16:7d:a8:2a:46:14:6a:44:c9: c6:fb:ee:cb:50:cf:9d:f8:99:ca:95:0c:84:8e:c1:18:3f:3c: de:41:ed:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRiWynF6FC7EGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk NWRlZjI4MzAtY2RiZi00ZjJiLWI1N2YtZGVhZDAyNjk5NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYu4VRpdWrgy3c3fATNTUPiGgNZf2fNjrwkd bISfht+Iu3Tvom31DhVNSVURk+kxgaj2zUT0JqKPbr117uD/ycDeZb6ZncsleMpJ 1W4pkyEg/cLP6uvGJeyS0ZLx8SQ/pd1rjVEm94xHwH0vvrOZw3xODbuBCHg1i1RS 5s+jh5+/4wpIk7x7xfw647jLrdd2ZdbNWS3jcoyqsje68UjLwtddtsIpkZ93BUN0 uivYgIkYgc02iAlPdiuOiUOe6E2JIbBoUXk4H8ydmrjRcr8lClL202q5EyYYQhO9 7qdBPOniMwowVhb1nNjZHWs15TQ4U22eu3Dvjxq0/zNTMqYCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5ePiVAeuDK4XdQE8bAV6WCO2CWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZjhiOWU5MGItY2M4MC0z YmJkLWI0NzUtMTFjYjdlN2NkNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEanaiUhkuDS3cT9d3ZxKQuxbBAGUq1xZnLjo8iLCntUxIftTyEOSi0e c5xagKsvWannedr24A6UAUcSa4UL1HE/uxHt/RyNqwzaWIm7RGn/NtIAqFsrwkCN drb3oMaNaxRVWg6Lut2ZNhV5mMOErt+HjqYfpyBojd36z9hdFnJ5fxqOD1opQdIf kE+0V9qAobkgRZW7B8FtWUrf/HcXQRVQd0GYozGqWiuJU5XEmMyRnDNaEy7HNi2B /o1VUHgSPb5t8mAtQYdk+9lhr5c9FHpQ7w7epWVv/SZq7ZJIWm3lCBZ9qCpGFGpE ycb77stQz534mcqVDISOwRg/PN5B7RM= -----END CERTIFICATE-----Generated at Sun Jun 15 09:00:28 2025 by rpki-client