$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80f00f2-e319-3e2a-a897-292021563a1e.roa File: b80f00f2-e319-3e2a-a897-292021563a1e.roa (raw, json) Hash identifier: BS7FxKjo+CYkQPeSZQwqvQT18CF0F/dRRvM9Wn4kF0k= Subject key identifier: 47:A2:87:A3:4C:6D:5A:1F:66:CA:28:5A:9B:C3:F2:3E:56:47:5C:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD883873A1C8F957D57400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80f00f2-e319-3e2a-a897-292021563a1e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 66.208.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:88:38:73:a1:c8:f9:57:d5:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=e2df4c6b-c968-4671-8651-9853a8b217f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:c7:14:67:93:da:6d:d0:22:74:f3:d3:e2: 7c:59:a9:55:26:40:3b:1c:06:af:42:05:d7:ff:f7: 59:7c:8e:cc:89:4c:81:34:3d:dc:bd:5a:db:72:e7: bb:c3:57:80:6a:48:f1:ef:25:b1:18:eb:2e:cd:86: e2:9e:71:f4:17:cb:52:38:df:55:e4:3d:dd:a3:2c: e5:c9:1b:fa:b8:fe:e5:83:16:b3:aa:1e:82:c5:81: 86:16:38:19:4b:1e:ea:27:b0:1f:cb:1e:e2:94:cb: c0:2b:d9:40:a0:a5:72:0e:a4:1b:b3:6d:04:12:7a: 10:71:f7:41:9d:12:b7:a7:da:53:cd:bc:7b:e7:47: e6:bb:29:98:6b:87:ad:48:a7:09:e6:61:55:54:f2: d2:b4:14:7f:77:44:24:32:ec:5a:f7:9a:71:44:d3: 6d:38:eb:18:50:5a:f5:ee:9c:24:c4:d0:aa:5c:30: 94:7a:5e:ff:3d:58:f1:78:10:39:8d:30:af:c3:57: 2b:a8:b8:8e:1e:2d:5d:51:40:29:ba:4e:a2:7e:ac: 1a:5b:76:02:b3:51:96:ef:f2:15:9d:fd:07:3d:d6: 41:7b:c3:b9:bc:4c:7f:d6:3c:30:a1:6e:ae:a8:89: ca:0c:d6:f4:5e:d9:53:3b:54:bd:83:45:42:c2:bb: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A2:87:A3:4C:6D:5A:1F:66:CA:28:5A:9B:C3:F2:3E:56:47:5C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80f00f2-e319-3e2a-a897-292021563a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.208.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e8:70:15:10:02:eb:66:d9:0a:34:8c:76:15:e6:a0:f5:16: 9b:76:54:54:25:08:d1:d1:09:3b:60:dd:31:e0:13:4b:6a:75: 26:4a:4d:10:fb:33:0d:8e:d9:ba:29:f5:a6:0e:0f:5e:f7:5b: 49:0a:88:89:62:3e:85:39:84:b8:ac:db:59:a9:d2:4a:d0:92: b7:2d:15:54:ed:ce:d7:14:fc:e5:16:50:b9:31:81:74:36:57: 37:90:ce:09:95:13:2a:0a:92:86:8a:54:30:5d:49:c2:35:f6: e0:54:8e:9d:b4:4b:6f:c3:de:1a:af:89:3f:68:49:9a:37:42: 41:9e:9a:57:e5:0b:57:9e:69:1d:6d:c7:16:d0:c4:5e:14:c0: 59:54:ec:6a:70:78:46:2c:1c:b6:16:0c:54:88:83:a7:71:95: 63:bc:af:b3:34:18:27:22:6b:a8:fa:26:c6:0c:a3:42:2b:5e: 17:28:d2:e8:08:35:4b:50:29:71:d3:df:f0:b0:35:7c:7d:53: cd:70:f7:ea:a1:d4:9f:ac:ea:48:d4:53:2a:1d:da:e1:1a:31: c1:85:26:98:fc:bb:a5:23:22:cb:48:96:50:c8:90:82:47:7e: 0f:ca:11:49:06:d4:72:2c:f9:b3:e7:b9:85:4e:9f:02:e6:b7: 0a:0d:45:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/Yg4c6HI+VfVdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZTJkZjRjNmItYzk2OC00NjcxLTg2NTEtOTg1M2E4YjIxN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGvHFGeT2m3QInTz0+J8WalVJkA7HAavQgXX //dZfI7MiUyBND3cvVrbcue7w1eAakjx7yWxGOsuzYbinnH0F8tSON9V5D3doyzl yRv6uP7lgxazqh6CxYGGFjgZSx7qJ7Afyx7ilMvAK9lAoKVyDqQbs20EEnoQcfdB nRK3p9pTzbx750fmuymYa4etSKcJ5mFVVPLStBR/d0QkMuxa95pxRNNtOOsYUFr1 7pwkxNCqXDCUel7/PVjxeBA5jTCvw1crqLiOHi1dUUApuk6ifqwaW3YCs1GW7/IV nf0HPdZBe8O5vEx/1jwwoW6uqInKDNb0XtlTO1S9g0VCwrvEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeih6NMbVofZsooWpvD8j5WR1zZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjgwZjAwZjItZTMxOS0z ZTJhLWE4OTctMjkyMDIxNTYzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtD2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3ocBUQAutm2Qo0jHYV5qD1Fpt2VFQlCNHRCTtg3THgE0tqdSZKTRD7 Mw2O2bop9aYOD173W0kKiIliPoU5hLis21mp0krQkrctFVTtztcU/OUWULkxgXQ2 VzeQzgmVEyoKkoaKVDBdScI19uBUjp20S2/D3hqviT9oSZo3QkGemlflC1eeaR1t xxbQxF4UwFlU7GpweEYsHLYWDFSIg6dxlWO8r7M0GCcia6j6JsYMo0IrXhco0ugI NUtQKXHT3/CwNXx9U81w9+qh1J+s6kjUUyod2uEaMcGFJpj8u6UjIstIllDIkIJH fg/KEUkG1HIs+bPnuYVOnwLmtwoNRcM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:19:26 2025 by rpki-client