$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/639f3d6a-2425-3497-bdae-a1dc2f26e207.roa File: 639f3d6a-2425-3497-bdae-a1dc2f26e207.roa (raw, json) Hash identifier: mth+ant+VJ/S7wVuhMtQKNCBKV44so4uu51Ry1MpiD4= Subject key identifier: 46:AA:4A:E4:54:1E:AE:AC:4A:A4:76:D5:C9:59:45:B3:10:59:BE:D3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB57047D3E0F6A2BDFBC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/639f3d6a-2425-3497-bdae-a1dc2f26e207.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 393670 IP address blocks: 216.66.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b5:70:47:d3:e0:f6:a2:bd:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=bf208a8d-9519-40c5-84e3-94605552b078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:a8:6b:15:d7:04:3b:b5:c2:dc:5c:f1:3b: f2:33:fe:72:1e:c2:73:ed:d6:69:6b:c5:10:a8:2f: 8c:21:a9:c1:2d:99:c9:c5:1d:09:e3:a7:b7:3b:d9: ec:fb:e6:03:0f:2a:a1:59:5a:5f:cd:db:99:3e:25: 0c:d0:cd:57:6f:3c:61:87:15:25:e7:8d:13:d6:72: 94:cc:2d:65:e9:02:b6:13:9b:c2:14:60:e3:cb:6c: 08:7c:59:8d:90:5c:9f:52:86:2b:42:58:9e:63:48: 51:58:93:0a:83:45:26:1b:b1:82:19:2f:8b:a9:c4: d7:17:bb:e6:fb:97:25:8d:a1:7a:1a:6b:e1:ca:7e: 2f:35:62:df:69:5a:b4:f0:ef:da:60:41:eb:09:3c: 3d:67:4a:b5:cf:21:12:fa:19:a0:a2:29:66:03:00: 15:34:e4:70:75:72:c4:d0:a8:22:59:31:a8:22:93: 61:34:d3:58:c0:56:19:97:8b:c4:8c:62:71:06:2f: c6:75:ad:35:79:2d:36:d3:2f:03:95:b7:25:ef:49: e2:97:32:a0:e7:75:20:bb:40:ac:be:17:e9:5a:80: 2f:45:29:f9:53:1e:df:f3:33:e2:01:fa:da:2d:12: 44:d3:97:e9:a1:07:f4:ba:b4:3f:ed:33:92:7e:df: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AA:4A:E4:54:1E:AE:AC:4A:A4:76:D5:C9:59:45:B3:10:59:BE:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/639f3d6a-2425-3497-bdae-a1dc2f26e207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5d:a1:3d:d0:41:b2:3b:0c:ba:0a:b0:4b:75:c9:da:d6:7e: 63:0a:cf:a2:24:14:ee:a7:ea:c3:0f:12:39:cc:f3:fe:8f:d3: c6:4a:c6:65:37:42:c4:46:44:8b:7d:ab:db:24:06:4f:2e:8b: ab:7d:02:c2:89:9a:b3:37:48:ad:cf:5c:8b:da:b8:30:88:97: 5a:ad:74:ac:64:f5:51:a8:2e:65:9b:9a:51:7d:bf:81:21:8d: 5f:36:e7:ae:a2:13:31:ee:7e:c9:39:3a:a3:53:4b:6e:90:a1: f7:07:d2:c9:c8:a2:0f:4d:ca:67:51:13:81:7a:d9:b8:6f:a4: 06:63:c4:fc:82:d5:2c:d5:f7:21:04:5c:09:69:5a:e7:3d:8a: db:48:39:c5:ef:51:05:3d:cb:2d:37:63:e9:57:20:f8:90:66: 78:3f:33:ae:11:47:bb:ee:c2:58:b3:0a:7c:be:8e:a2:87:5a: cb:d3:fe:71:1e:7b:d3:e7:22:b5:16:fa:de:40:a5:9e:06:e3: 20:0c:8e:96:c4:13:52:74:31:28:79:f2:56:6a:64:3a:4a:9e: 61:e2:e9:1e:d9:2d:2d:22:96:3f:65:4a:59:9f:c4:24:cd:3b: 8b:b0:51:5c:b1:60:bf:50:27:bc:94:44:68:d5:a6:85:fb:b8: ab:b9:98:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX7VwR9Pg9qK9+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmYyMDhhOGQtOTUxOS00MGM1LTg0ZTMtOTQ2MDU1NTJiMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6oaxXXBDu1wtxc8TvyM/5yHsJz7dZpa8UQ qC+MIanBLZnJxR0J46e3O9ns++YDDyqhWVpfzduZPiUM0M1XbzxhhxUl540T1nKU zC1l6QK2E5vCFGDjy2wIfFmNkFyfUoYrQlieY0hRWJMKg0UmG7GCGS+LqcTXF7vm +5cljaF6Gmvhyn4vNWLfaVq08O/aYEHrCTw9Z0q1zyES+hmgoilmAwAVNORwdXLE 0KgiWTGoIpNhNNNYwFYZl4vEjGJxBi/Gda01eS020y8Dlbcl70nilzKg53Ugu0Cs vhfpWoAvRSn5Ux7f8zPiAfraLRJE05fpoQf0urQ/7TOSft/XYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaqSuRUHq6sSqR21clZRbMQWb7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjM5ZjNkNmEtMjQyNS0z NDk3LWJkYWUtYTFkYzJmMjZlMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1doT3QQbI7DLoKsEt1ydrWfmMKz6IkFO6n6sMPEjnM8/6P08ZKxmU3 QsRGRIt9q9skBk8ui6t9AsKJmrM3SK3PXIvauDCIl1qtdKxk9VGoLmWbmlF9v4Eh jV82566iEzHufsk5OqNTS26QofcH0snIog9NymdRE4F62bhvpAZjxPyC1SzV9yEE XAlpWuc9ittIOcXvUQU9yy03Y+lXIPiQZng/M64RR7vuwlizCny+jqKHWsvT/nEe e9PnIrUW+t5ApZ4G4yAMjpbEE1J0MSh58lZqZDpKnmHi6R7ZLS0ilj9lSlmfxCTN O4uwUVyxYL9QJ7yURGjVpoX7uKu5mCs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:43:13 2025 by rpki-client