$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa File: 891132c6-0309-32ba-a1d3-ef9e3b909c24.roa (raw, json) Hash identifier: /3mM0hFjcnzCZWOlPvqrlhZh1lDGTChF8VuuwTupfTk= Subject key identifier: 95:F9:6A:21:A1:65:15:71:B9:28:96:2B:0E:AD:57:75:87:73:EA:A9 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A20F54A6FE5DC36BFAA5B6800 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 22785 IP address blocks: 66.109.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4a:6f:e5:dc:36:bf:aa:5b:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=e422b99e-2c5c-46ca-8dc7-5a7194d81ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8d:ae:5c:4c:72:30:91:6a:bb:9b:9e:5e:51: c0:e6:83:0c:05:0e:ee:bc:38:c2:31:c1:36:9c:ac: b4:d8:5f:7e:eb:32:86:cb:b4:ca:e1:b4:db:69:e7: 60:5a:61:b7:16:be:3c:13:1f:2f:2c:1b:6a:a6:e7: ad:e8:37:c7:07:6f:15:8a:01:39:0d:c5:37:3f:05: 6c:d3:63:6a:83:5d:a1:09:e9:42:f8:17:82:6a:1f: 66:b4:6c:1a:44:13:2f:52:9a:81:e3:06:f3:42:1c: 8f:12:6b:52:36:03:2f:5e:5f:4f:ca:aa:69:a9:3d: cd:9c:d4:17:6b:68:cd:aa:bc:f7:b0:55:97:8f:ef: 61:95:a9:1b:1d:c9:f7:e1:4c:dc:16:4e:5f:4b:6a: 08:26:89:85:e7:5c:fd:0e:e4:4c:06:a7:74:fa:38: 46:c6:2e:5c:d2:31:62:7d:bc:8b:3c:34:ac:aa:8d: e8:c7:1a:5b:06:46:46:29:e6:9a:57:04:fd:10:15: 33:e9:7e:ca:57:41:e5:1d:39:50:a2:b7:9d:d7:04: a1:10:62:7c:c1:9a:fc:35:d6:15:82:ce:a5:29:10: f8:6e:90:eb:bf:99:6a:78:58:de:15:1a:1e:74:62: 89:e7:6b:a4:0d:63:30:23:7e:92:b6:12:c9:be:1d: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F9:6A:21:A1:65:15:71:B9:28:96:2B:0E:AD:57:75:87:73:EA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:89:97:4d:da:04:3e:4d:59:b0:55:7c:bc:26:51:ca:53:df: 45:88:56:56:e0:6e:9d:5b:28:99:63:f3:65:fc:58:61:aa:9a: 34:c3:da:cc:98:03:6c:7c:58:5d:08:b6:39:69:8a:7c:ec:d8: 62:55:89:42:8e:e3:4d:19:5a:0b:05:82:62:5f:04:ea:b4:77: e6:fe:5b:61:0f:12:4a:0e:d8:3a:cb:18:1d:c9:b4:31:2f:cd: a0:60:16:48:6a:0b:5c:f6:81:f8:ab:a3:21:69:14:fb:0f:e2: f6:21:97:69:9d:f0:cd:9b:47:3b:4b:d9:90:50:02:53:2d:c5: 14:e9:f2:d9:91:1f:8b:4d:d5:43:26:c0:df:65:13:cb:08:0a: db:c4:3c:21:9a:ad:9b:9e:60:39:92:df:a5:72:af:6d:07:cb: 58:e6:13:90:f7:6c:bf:b2:ff:af:02:0d:9b:35:56:85:7b:c9: a8:c7:5f:8a:ca:ec:b0:86:87:2a:91:13:f9:d8:b4:5d:1b:2c: fd:97:b3:a4:d4:9d:ad:1c:c0:86:5f:c6:0d:b4:d0:ab:e2:05: af:d4:5d:92:a2:ed:a1:80:44:dd:c0:b3:c1:bc:99:8b:cd:5a: 50:76:a8:af:cd:75:70:16:b0:39:a2:b2:fc:40:df:19:54:27: df:bc:5e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9Upv5dw2v6pbaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk ZTQyMmI5OWUtMmM1Yy00NmNhLThkYzctNWE3MTk0ZDgxZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I2uXExyMJFqu5ueXlHA5oMMBQ7uvDjCMcE2 nKy02F9+6zKGy7TK4bTbaedgWmG3Fr48Ex8vLBtqpuet6DfHB28VigE5DcU3PwVs 02Nqg12hCelC+BeCah9mtGwaRBMvUpqB4wbzQhyPEmtSNgMvXl9PyqppqT3NnNQX a2jNqrz3sFWXj+9hlakbHcn34UzcFk5fS2oIJomF51z9DuRMBqd0+jhGxi5c0jFi fbyLPDSsqo3oxxpbBkZGKeaaVwT9EBUz6X7KV0HlHTlQored1wShEGJ8wZr8NdYV gs6lKRD4bpDrv5lqeFjeFRoedGKJ52ukDWMwI36SthLJvh1u3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX5aiGhZRVxuSiWKw6tV3WHc+qpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvODkxMTMyYzYtMDMwOS0z MmJhLWExZDMtZWY5ZTNiOTA5YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQm2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuJl03aBD5NWbBVfLwmUcpT30WIVlbgbp1bKJlj82X8WGGqmjTD2syY A2x8WF0Itjlpinzs2GJViUKO400ZWgsFgmJfBOq0d+b+W2EPEkoO2DrLGB3JtDEv zaBgFkhqC1z2gfiroyFpFPsP4vYhl2md8M2bRztL2ZBQAlMtxRTp8tmRH4tN1UMm wN9lE8sICtvEPCGarZueYDmS36Vyr20Hy1jmE5D3bL+y/68CDZs1VoV7yajHX4rK 7LCGhyqRE/nYtF0bLP2Xs6TUna0cwIZfxg200KviBa/UXZKi7aGARN3As8G8mYvN WlB2qK/NdXAWsDmisvxA3xlUJ9+8Xk0= -----END CERTIFICATE-----Generated at Tue Jun 17 07:08:23 2025 by rpki-client