$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa File: 1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa (raw, json) Hash identifier: CfcL5J9gghVbUlf7BIcESD7uCb4L9q2zVQEyND+/38M= Subject key identifier: 10:12:FF:F0:2A:4B:7B:09:A4:E6:02:49:3A:F0:4B:C2:D4:0F:45:FF Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A1E2AA0CA50C8C2E6511BDD80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 30058 IP address blocks: 66.90.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a0:ca:50:c8:c2:e6:51:1b:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=36b294a8-afa0-448a-8081-c5f439065864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:b0:c2:de:d4:e5:cd:88:1a:2f:bf:0d:ea: 30:8f:f3:f8:25:f1:eb:30:fd:4f:9e:74:71:3b:34: bf:db:4b:9a:7b:16:e8:38:77:09:89:0b:21:65:30: 40:87:26:ec:78:91:8b:47:5a:6f:09:cf:7a:73:a8: c5:e9:f2:0c:f9:9d:b5:81:ed:a9:60:55:cd:46:2b: c0:ae:3c:bc:e5:58:a6:4f:5e:ef:77:0e:33:97:22: 48:b7:13:f8:5d:f2:0c:17:47:bb:92:86:4f:f0:c0: 36:b0:b9:30:a8:fc:59:a5:83:c6:d0:1a:50:5d:dc: 7b:51:29:96:2a:7e:b8:ec:b7:24:1b:e1:0b:95:51: ef:fc:01:b0:07:67:78:bd:dc:9c:5e:4d:53:a9:3b: 91:49:9a:63:d3:cf:2d:4d:95:25:54:63:5c:90:78: 0a:ca:7b:c0:ac:02:4a:a7:7d:41:a4:65:8d:15:04: dd:d8:73:cf:ef:c9:d2:fe:ea:c6:53:eb:da:2f:f8: ef:f0:54:51:65:0c:7f:e1:00:6a:62:68:23:bd:35: 0e:a7:fa:33:d6:a3:21:e8:8e:c0:e4:8e:56:ca:5c: 8b:90:4e:88:5f:9a:4f:54:23:71:42:c8:22:4c:79: ca:ad:c6:ac:cc:b0:d3:79:5f:90:f8:7a:8e:04:c4: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:FF:F0:2A:4B:7B:09:A4:E6:02:49:3A:F0:4B:C2:D4:0F:45:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d8:c1:7d:11:07:cb:7f:f5:8b:ff:16:bf:41:fd:24:3e:63: de:18:51:6c:1c:9b:d4:3d:7c:34:d4:2d:44:9d:cc:08:bf:62: 63:6a:4f:31:41:d5:12:f1:74:ac:12:4a:e7:6a:3d:65:25:7d: 1d:24:4d:62:e3:37:6b:62:82:9f:9c:b2:62:07:b7:5c:dc:c3: 43:53:25:b5:87:6f:bd:af:37:2d:7a:b3:92:84:1e:81:15:d1: a1:11:39:7f:a1:3f:ef:27:39:50:b5:92:0e:f4:ec:58:8b:d9: 02:06:f7:c1:3c:4c:5a:d6:43:34:71:27:9a:01:3d:f0:86:44: fd:aa:f6:44:c9:7e:ba:bd:cb:79:c2:96:e4:9b:19:16:56:bf: fa:15:b3:27:76:22:3e:b4:37:8c:50:04:97:b5:d3:93:65:c5: f7:f1:53:e6:07:dc:9b:06:18:79:8b:b2:9a:b6:0b:53:ab:ca: 05:17:43:3d:1e:bc:31:1d:3f:0c:8d:c9:24:78:d2:0f:c4:6b: 37:e1:52:c1:30:a8:73:86:83:d7:c8:b2:42:f6:90:49:c2:a7: eb:3b:0b:27:f0:8b:c0:fe:cf:26:92:cf:0a:9f:c4:c2:60:17: 1e:0d:a5:b9:ba:01:27:4d:7e:d1:b6:2e:79:6a:c7:18:3b:40: 55:37:fa:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqDKUMjC5lEb3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk MzZiMjk0YTgtYWZhMC00NDhhLTgwODEtYzVmNDM5MDY1ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZGwwt7U5c2IGi+/Deowj/P4JfHrMP1PnnRx OzS/20uaexboOHcJiQshZTBAhybseJGLR1pvCc96c6jF6fIM+Z21ge2pYFXNRivA rjy85VimT17vdw4zlyJItxP4XfIMF0e7koZP8MA2sLkwqPxZpYPG0BpQXdx7USmW Kn647LckG+ELlVHv/AGwB2d4vdycXk1TqTuRSZpj088tTZUlVGNckHgKynvArAJK p31BpGWNFQTd2HPP78nS/urGU+vaL/jv8FRRZQx/4QBqYmgjvTUOp/oz1qMh6I7A 5I5WylyLkE6IX5pPVCNxQsgiTHnKrcaszLDTeV+Q+HqOBMQUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAS//AqS3sJpOYCSTrwS8LUD0X/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWMyMWVkNzMtYTFiOS0z NjJhLThkODMtNWNjYWQ0YTQzYWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQlpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITYwX0RB8t/9Yv/Fr9B/SQ+Y94YUWwcm9Q9fDTULUSdzAi/YmNqTzFB 1RLxdKwSSudqPWUlfR0kTWLjN2tigp+csmIHt1zcw0NTJbWHb72vNy16s5KEHoEV 0aEROX+hP+8nOVC1kg707FiL2QIG98E8TFrWQzRxJ5oBPfCGRP2q9kTJfrq9y3nC luSbGRZWv/oVsyd2Ij60N4xQBJe105NlxffxU+YH3JsGGHmLspq2C1OrygUXQz0e vDEdPwyNySR40g/EazfhUsEwqHOGg9fIskL2kEnCp+s7Cyfwi8D+zyaSzwqfxMJg Fx4Npbm6ASdNftG2Lnlqxxg7QFU3+tM= -----END CERTIFICATE-----Generated at Sun Jun 15 16:05:51 2025 by rpki-client