$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa File: d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa (raw, json) Hash identifier: kzShM9wI0bkK9Len/dbXqkMdHdVGLUw5W3KcMHm8qig= Subject key identifier: 38:3F:20:77:32:01:B7:5D:22:80:CC:E2:1C:D1:6F:EC:78:38:72:9A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB701FE8CF0549A206680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 397659 IP address blocks: 216.66.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b7:01:fe:8c:f0:54:9a:20:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ac81564f-e35a-47c0-b876-5e9eaa8daa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:6a:89:00:93:05:7d:c0:e4:78:6b:bc:e3: eb:26:5b:05:86:15:43:3d:46:b2:28:e0:a4:bc:7c: 8b:12:3f:b1:ab:42:ba:76:34:b6:d3:54:10:6f:44: 99:3d:5f:53:43:61:6a:30:5c:1d:38:3e:b7:29:23: e8:09:9d:eb:49:03:19:91:4e:92:46:44:ee:53:26: 6b:2e:b7:da:bf:e1:30:8f:5e:b6:0b:9c:f1:7c:5e: 0f:6a:42:8e:9e:49:03:32:cf:58:02:27:bd:94:eb: b4:86:5e:70:47:1a:a9:b2:95:a7:8e:c4:4f:0e:5d: d8:44:91:09:fc:78:20:c6:47:cf:1f:58:c8:b5:61: 19:10:69:57:3c:5d:33:b0:c2:26:7b:37:d9:b1:b1: 79:2c:22:23:3a:ed:95:5e:a2:28:40:0d:d2:e2:c5: 32:ba:90:82:0b:a6:fa:6a:4f:ee:79:76:b0:25:9c: 80:3a:e2:98:68:c6:26:ab:16:0c:0e:bc:f6:8d:64: aa:05:63:c9:3b:22:f6:97:63:7c:80:25:7d:7d:e7: 0b:6b:b5:d8:a5:5d:88:95:ca:d8:69:d0:cc:d1:6e: e9:4d:cd:fb:b6:7d:78:0d:4f:1e:31:e3:30:26:f6: 49:aa:be:68:84:8a:a9:9f:55:89:71:db:1d:5a:26: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3F:20:77:32:01:B7:5D:22:80:CC:E2:1C:D1:6F:EC:78:38:72:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:00:3b:45:b0:95:67:7e:b8:bc:97:e6:93:5e:64:e1:6f:6e: 60:92:3d:00:0e:37:d1:81:e3:2f:51:77:11:d4:53:36:9a:08: 4a:5e:7c:17:81:e7:b2:f4:6b:8b:6e:af:ec:2e:47:f3:27:a6: ee:f2:7b:59:33:89:43:ee:18:1d:ac:fc:18:90:0d:72:de:ce: b3:d4:31:3f:ab:4a:a6:50:3d:03:81:3a:73:d9:56:25:39:ad: 10:25:e2:af:65:33:fc:bb:7a:76:28:c5:90:4f:24:0f:e6:5f: c7:1a:7b:1e:9c:db:b4:77:71:41:26:9c:59:56:8e:ad:65:19: f2:bd:85:92:1c:5a:c2:0e:51:8a:c6:79:56:b6:ad:36:a5:fa: fe:a8:ab:3c:54:b6:fe:62:fb:bf:e5:0b:a9:a0:b0:12:d3:b7: 81:a0:93:0e:04:3c:39:b4:af:5f:37:4c:05:d0:64:b2:c2:95: 88:18:11:16:97:bd:e4:2c:7f:8c:33:8b:31:4a:9e:d7:7f:b2: dd:30:19:5c:0a:a5:36:09:f9:3e:02:5d:0e:cd:fe:43:4b:99: 85:ae:aa:40:68:12:79:0c:97:a9:8a:e9:13:41:ad:3b:27:90: ff:51:e6:ec:67:5a:f7:c3:d6:26:d7:68:2b:60:6d:3f:74:41: 03:f8:65:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX7cB/ozwVJogZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWM4MTU2NGYtZTM1YS00N2MwLWI4NzYtNWU5ZWFhOGRhYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupBqiQCTBX3A5HhrvOPrJlsFhhVDPUayKOCk vHyLEj+xq0K6djS201QQb0SZPV9TQ2FqMFwdOD63KSPoCZ3rSQMZkU6SRkTuUyZr Lrfav+Ewj162C5zxfF4PakKOnkkDMs9YAie9lOu0hl5wRxqpspWnjsRPDl3YRJEJ /HggxkfPH1jItWEZEGlXPF0zsMImezfZsbF5LCIjOu2VXqIoQA3S4sUyupCCC6b6 ak/ueXawJZyAOuKYaMYmqxYMDrz2jWSqBWPJOyL2l2N8gCV9fecLa7XYpV2IlcrY adDM0W7pTc37tn14DU8eMeMwJvZJqr5ohIqpn1WJcdsdWia4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg/IHcyAbddIoDM4hzRb+x4OHKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDhhYjc1NzctNmFiMy0z YmE4LTg4NWUtMTI5YmJiMWRhODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4AO0WwlWd+uLyX5pNeZOFvbmCSPQAON9GB4y9RdxHUUzaaCEpefBeB 57L0a4tur+wuR/Mnpu7ye1kziUPuGB2s/BiQDXLezrPUMT+rSqZQPQOBOnPZViU5 rRAl4q9lM/y7enYoxZBPJA/mX8caex6c27R3cUEmnFlWjq1lGfK9hZIcWsIOUYrG eVa2rTal+v6oqzxUtv5i+7/lC6mgsBLTt4Ggkw4EPDm0r183TAXQZLLClYgYERaX veQsf4wzizFKntd/st0wGVwKpTYJ+T4CXQ7N/kNLmYWuqkBoEnkMl6mK6RNBrTsn kP9R5uxnWvfD1ibXaCtgbT90QQP4Zfs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:22 2025 by rpki-client