$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa File: cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa (raw, json) Hash identifier: epot2JjWAhuHo7TMTiaViH5j4d3sgFp6s0L/mKTFiRY= Subject key identifier: 31:C3:63:0F:FE:61:28:5D:2A:F6:A4:62:44:31:02:CE:72:E9:30:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBA1C30F40F56866F04600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 66.249.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a1:c3:0f:40:f5:68:66:f0:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=211f02c8-14da-4a41-9359-c6f231a057e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:ad:71:56:56:4a:69:02:7b:64:72:4c:8c: 13:9c:f8:a4:f3:fe:cf:b8:0a:eb:a8:a0:98:96:ac: 81:dc:85:87:fe:76:90:29:c9:19:e6:37:4c:a7:5e: ad:40:fa:19:23:dc:0c:eb:42:bf:f3:bb:aa:ba:e1: b8:36:a9:6f:dd:2f:1d:7d:bd:c3:17:37:fd:be:b9: 85:be:b6:ce:89:8f:c3:10:81:5c:42:c3:8a:ce:6d: 49:a4:45:02:94:61:e6:d2:30:93:c1:79:14:d5:e0: 5b:5b:9f:f3:be:3d:ae:7f:4d:c4:70:48:b9:30:27: ac:04:5d:d2:30:9d:36:66:07:e3:3b:5c:73:ae:38: bc:13:99:de:c9:65:16:e4:0e:30:4c:99:9e:06:57: ee:1f:55:bd:cf:a4:42:cd:f1:d7:b9:64:c6:4e:4f: c4:07:45:fc:c8:66:d9:83:01:cb:42:f5:b1:e3:78: 43:b4:3e:d9:58:c2:5c:f2:07:6f:11:33:1a:92:1c: 24:7f:a4:9e:12:bd:03:f5:ee:3f:7a:52:f4:9a:b2: ce:db:56:8f:68:02:3c:04:f8:8d:5c:f9:e8:1d:e0: d9:49:b6:c6:9c:27:b3:f7:86:57:82:8a:80:92:5f: e2:98:9b:c4:f3:9c:a1:64:3f:2a:6c:f6:3b:4d:8c: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C3:63:0F:FE:61:28:5D:2A:F6:A4:62:44:31:02:CE:72:E9:30:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:05:5e:8c:c3:21:1a:28:7d:32:e0:97:68:3e:a3:ae:94:f4: 3c:e4:0f:c5:7a:94:58:e2:30:b7:5f:fa:de:27:01:ef:a6:6e: fa:cf:2c:a3:67:4c:0e:d4:9e:b5:ef:e5:27:f1:0b:69:26:c3: 20:2d:a2:a9:36:d8:2d:00:ac:b8:46:e5:71:23:0a:30:49:a6: ad:de:b7:88:c0:41:48:6d:a4:d8:a2:49:ca:11:35:f1:84:ac: 7e:5a:8a:ca:e4:2e:2d:a7:90:c7:34:ab:0c:0f:8f:83:96:9e: 47:0d:5f:03:8f:51:53:7c:84:2c:b7:d2:da:58:25:5f:bb:e9: 4f:2b:3e:1b:65:68:f8:67:9e:aa:d8:66:4f:a6:30:0f:99:a9: f6:3b:98:db:4d:0c:5f:67:c7:90:45:51:60:48:c9:b8:52:51: a4:6b:2e:62:ad:68:60:27:0a:8b:47:22:8d:e1:ed:fc:f8:4a: ee:79:f3:a6:2f:75:db:b9:ce:0b:e5:c5:b0:fd:1e:3a:bb:92: 7e:6c:21:f2:71:6e:6a:5d:60:06:40:91:4b:84:e1:10:a4:23: e2:d2:3f:d3:70:ae:22:56:ee:80:a9:80:21:e9:a4:e7:ea:9e: d9:d1:54:2e:19:2b:af:a3:89:1c:1e:9a:bc:24:e4:d9:46:e7: 37:8c:3e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26HDD0D1aGbwRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjExZjAyYzgtMTRkYS00YTQxLTkzNTktYzZmMjMxYTA1N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmWtcVZWSmkCe2RyTIwTnPik8/7PuArrqKCY lqyB3IWH/naQKckZ5jdMp16tQPoZI9wM60K/87uquuG4Nqlv3S8dfb3DFzf9vrmF vrbOiY/DEIFcQsOKzm1JpEUClGHm0jCTwXkU1eBbW5/zvj2uf03EcEi5MCesBF3S MJ02ZgfjO1xzrji8E5neyWUW5A4wTJmeBlfuH1W9z6RCzfHXuWTGTk/EB0X8yGbZ gwHLQvWx43hDtD7ZWMJc8gdvETMakhwkf6SeEr0D9e4/elL0mrLO21aPaAI8BPiN XPnoHeDZSbbGnCez94ZXgoqAkl/imJvE85yhZD8qbPY7TYy3RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHDYw/+YShdKvakYkQxAs5y6TAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y1NjJlMzEtZjEyNi0z NGE1LThmZjQtNmRiN2M5MTFkOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMFXozDIRoofTLgl2g+o66U9DzkD8V6lFjiMLdf+t4nAe+mbvrPLKNn TA7UnrXv5SfxC2kmwyAtoqk22C0ArLhG5XEjCjBJpq3et4jAQUhtpNiiScoRNfGE rH5aisrkLi2nkMc0qwwPj4OWnkcNXwOPUVN8hCy30tpYJV+76U8rPhtlaPhnnqrY Zk+mMA+ZqfY7mNtNDF9nx5BFUWBIybhSUaRrLmKtaGAnCotHIo3h7fz4Su5586Yv ddu5zgvlxbD9Hjq7kn5sIfJxbmpdYAZAkUuE4RCkI+LSP9NwriJW7oCpgCHppOfq ntnRVC4ZK6+jiRwemrwk5NlG5zeMPoI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:22 2025 by rpki-client