$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa File: 976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json) Hash identifier: cZqYIE21cwk+5Q1EpDrWmKXnKZ3ldrSj15alCxo5HLc= Subject key identifier: 3F:D7:64:04:AB:2C:ED:9C:27:18:03:20:C3:EE:3E:DD:83:8D:52:66 Certificate issuer: /CN=957264f8-0474-43d0-9a3b-5f53ce28790d Certificate serial: 010D0C9F43285849CE9A4FE388783499F7E0B6C0 Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 15344 IP address blocks: 66.212.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4f:e3:88:78:34:99:f7:e0:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=73c963b0-8002-4fe8-9108-2f4655324dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a1:90:a4:8a:5f:a3:68:da:f8:14:a4:cb:a4: 9e:c5:9e:78:97:46:71:66:26:f9:f8:74:b2:80:f5: 7c:0a:37:72:b3:fc:a6:87:46:b3:8b:4a:e9:84:4c: 95:52:45:05:10:df:5e:81:b6:52:cc:06:e8:31:50: 78:54:ae:69:2a:af:90:65:04:5d:d1:52:a6:d4:93: c1:ee:90:0a:71:dc:ba:cd:c5:63:5a:c4:84:c8:65: 3c:bc:3c:0e:52:0a:57:0f:fe:5f:a3:43:bd:18:dc: a5:8b:76:03:b0:fb:83:80:e3:37:34:07:c2:b9:9d: 5a:49:25:a4:80:57:65:46:0b:47:97:38:4d:67:e7: 93:f4:4e:dd:cc:83:1c:3e:89:1b:b9:59:38:0b:47: 35:68:3d:83:db:e6:7f:dd:38:6d:98:d4:4a:1d:3a: 9c:75:45:73:12:df:5d:a2:00:33:c5:3d:b2:c0:39: c0:de:3a:0f:19:74:11:c3:b8:4b:51:9e:7a:27:85: e1:bd:a6:a9:2d:18:ed:40:eb:f3:ad:5d:40:61:46: ec:e8:09:c9:93:29:28:66:3b:a8:7f:88:84:7b:0a: 12:46:c4:b4:28:33:d5:6a:6a:d5:d1:cd:09:52:5e: 6d:64:29:86:21:17:da:cd:83:a9:dd:9f:b8:d3:ec: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D7:64:04:AB:2C:ED:9C:27:18:03:20:C3:EE:3E:DD:83:8D:52:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl X509v3 Authority Key Identifier: keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer sbgp-ipAddrBlock: critical IPv4: 66.212.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:98:40:d9:eb:c2:a2:68:d8:a1:fe:b5:12:f7:b5:1f:a6:a8: eb:82:ef:be:cf:89:ac:47:bf:76:5c:99:9b:7f:36:1f:d6:b9: fa:84:fc:df:42:da:1c:23:26:47:af:1e:a4:42:25:d5:e4:dc: 63:6c:24:a0:26:1b:78:81:0b:b3:39:27:8a:51:27:72:93:30: f1:7b:89:69:9b:5e:23:3d:de:a1:ab:69:4b:a0:57:1e:9b:b0: cf:cd:e2:02:19:e3:c6:d8:7c:36:6b:49:38:d3:34:e8:68:2c: 92:4d:0f:a9:0d:df:23:77:6f:26:23:39:b3:e5:e9:69:d6:aa: 20:d3:06:a8:e1:c3:39:76:c3:47:91:d6:27:15:43:c4:93:19: 6d:0a:b5:e7:6e:d9:aa:9a:d4:8d:a7:01:98:cf:4d:9d:3b:31: 76:e0:83:a7:27:fa:e2:98:a2:6d:e8:b3:61:27:a9:df:45:29: 84:2f:b5:48:8d:4d:6d:00:5b:88:1e:f5:49:72:87:32:3b:d3: ee:f5:56:6f:20:75:55:0a:48:6f:03:11:9f:38:12:bb:48:7c: 69:79:1e:a5:09:ec:28:40:5f:e9:aa:83:5b:4b:be:d6:05:71: cb:47:43:e2:dc:4b:3c:a8:6f:28:23:47:51:ee:f6:c3:04:76: 92:65:f5:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmk/jiHg0mffgtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3 OTBkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzNjOTYzYjAtODAwMi00ZmU4LTkxMDgtMmY0NjU1MzI0ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqGQpIpfo2ja+BSky6SexZ54l0ZxZib5+HSy gPV8Cjdys/ymh0azi0rphEyVUkUFEN9egbZSzAboMVB4VK5pKq+QZQRd0VKm1JPB 7pAKcdy6zcVjWsSEyGU8vDwOUgpXD/5fo0O9GNyli3YDsPuDgOM3NAfCuZ1aSSWk gFdlRgtHlzhNZ+eT9E7dzIMcPokbuVk4C0c1aD2D2+Z/3ThtmNRKHTqcdUVzEt9d ogAzxT2ywDnA3joPGXQRw7hLUZ56J4XhvaapLRjtQOvzrV1AYUbs6AnJkykoZjuo f4iEewoSRsS0KDPVamrV0c0JUl5tZCmGIRfazYOp3Z+40+zAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/XZASrLO2cJxgDIMPuPt2DjVJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvOTc2YmZmNjEtZThiZi0z NzExLTg4ZGMtYTRhYjljOThiNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4 NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz Y2UyODc5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtQ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWYQNnrwqJo2KH+tRL3tR+mqOuC777PiaxHv3ZcmZt/Nh/WufqE/N9C 2hwjJkevHqRCJdXk3GNsJKAmG3iBC7M5J4pRJ3KTMPF7iWmbXiM93qGraUugVx6b sM/N4gIZ48bYfDZrSTjTNOhoLJJND6kN3yN3byYjObPl6WnWqiDTBqjhwzl2w0eR 1icVQ8STGW0Ktedu2aqa1I2nAZjPTZ07MXbgg6cn+uKYom3os2Enqd9FKYQvtUiN TW0AW4ge9UlyhzI70+71Vm8gdVUKSG8DEZ84ErtIfGl5HqUJ7ChAX+mqg1tLvtYF cctHQ+LcSzyobygjR1Hu9sMEdpJl9QY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:59:28 2025 by rpki-client