$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa File: 6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa (raw, json) Hash identifier: B8+b5YbSv+y43p1DUdbDcYMWp3Kxnlaql+hmTbozRiE= Subject key identifier: D9:C5:DC:F1:0A:94:B8:24:22:DE:D7:46:3B:B8:34:A9:3D:1F:48:A3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A7B0490535993467DF03096C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa Signing time: Fri 11 Jul 2025 07:14:23 +0000 ROA not before: Fri 11 Jul 2025 07:14:23 +0000 ROA not after: Thu 09 Oct 2025 07:14:23 +0000 asID: 62610 IP address blocks: 66.253.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:04:90:53:59:93:46:7d:f0:30:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 11 07:14:23 2025 GMT Not After : Oct 9 07:14:23 2025 GMT Subject: CN=28b619f0-12d0-4c40-8531-5f5f9370e8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:ce:5b:ee:64:6a:99:b1:70:df:47:87:96: e7:5b:e3:f7:06:ef:9a:4e:2f:3e:c6:ea:3f:99:57: 29:37:a4:b3:6d:bf:7d:eb:70:5c:95:2c:3a:96:be: b5:bd:c2:8c:9b:f0:46:49:ea:a0:e5:62:ad:93:4b: ec:94:8c:3f:05:ac:f4:79:ba:2f:c2:67:5c:9b:ea: e3:7e:3c:55:77:14:83:8b:c8:05:5f:45:a6:95:b3: 17:ed:18:38:4b:fa:95:b1:94:0b:bc:34:20:25:0f: 99:2f:32:45:45:1f:72:54:72:05:00:8b:a2:61:2f: 30:a2:9f:4b:78:4c:b2:78:32:3e:d1:79:41:2d:5e: 34:6d:3b:27:22:16:c0:d9:f7:39:69:28:84:cf:b0: 65:6a:2b:ae:46:d8:34:0c:c5:00:88:01:15:39:bf: 58:20:81:6a:b4:5a:1b:5b:e5:6f:5c:a5:af:bb:7f: a3:ba:01:d7:0c:47:39:a9:54:3f:a6:12:31:71:93: 3b:c4:a9:91:24:45:ec:a7:16:b5:f3:9c:5f:31:26: fb:a1:19:cf:18:ea:a2:a4:63:0a:f2:5f:cd:9a:b4: 88:4e:2e:3b:00:ac:72:d3:1b:12:e0:77:94:76:07: 5c:36:21:fb:f8:00:a5:07:ac:35:8d:b6:2a:cb:06: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C5:DC:F1:0A:94:B8:24:22:DE:D7:46:3B:B8:34:A9:3D:1F:48:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ce:45:46:de:f2:de:11:71:af:09:8e:b8:3e:05:aa:43:e8: 55:73:2b:4a:f3:a1:ec:3d:32:8d:a0:6c:4c:cc:1a:72:2d:00: cf:80:41:fc:1e:76:31:de:2b:f0:4a:f7:76:2c:77:6e:3a:26: 8c:86:ec:ff:db:9c:d6:1c:5c:05:81:31:06:a1:ff:32:7d:53: 28:8e:30:35:76:bf:61:de:41:f5:3a:54:30:e4:ce:90:8f:93: 12:40:b1:8a:46:a1:38:90:69:b8:02:00:f9:96:16:0f:bd:f1: 0a:b2:98:c4:08:e8:b0:a9:36:15:06:3d:ce:3f:f5:ab:6d:7a: 73:25:a5:da:da:08:b9:46:f9:df:99:1e:44:4f:c0:20:4d:68: ad:67:ac:5a:24:77:f1:f5:26:7f:5f:3b:44:ef:66:3b:3a:9a: 70:6b:ca:94:1c:d4:60:32:2c:b6:18:10:96:e0:a1:41:00:ae: 3f:86:b8:b7:64:c4:d6:35:49:11:41:50:82:20:b2:dc:29:99: 1d:9e:4d:22:8c:09:e4:88:7b:f9:2a:c1:1b:39:e7:a9:67:ab: 6b:90:b3:92:85:85:53:cf:28:51:58:61:8f:87:8b:42:a7:70: 3b:6e:1e:fe:5a:84:18:45:6e:d9:09:05:3a:9d:91:71:aa:73: a5:0d:fe:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7BJBTWZNGffAwlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcxMTA3MTQyM1oXDTI1MTAwOTA3MTQyM1owLzEtMCsGA1UEAxMk MjhiNjE5ZjAtMTJkMC00YzQwLTg1MzEtNWY1ZjkzNzBlOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHfOW+5kapmxcN9Hh5bnW+P3Bu+aTi8+xuo/ mVcpN6Szbb9963BclSw6lr61vcKMm/BGSeqg5WKtk0vslIw/Baz0ebovwmdcm+rj fjxVdxSDi8gFX0WmlbMX7Rg4S/qVsZQLvDQgJQ+ZLzJFRR9yVHIFAIuiYS8wop9L eEyyeDI+0XlBLV40bTsnIhbA2fc5aSiEz7BlaiuuRtg0DMUAiAEVOb9YIIFqtFob W+VvXKWvu3+jugHXDEc5qVQ/phIxcZM7xKmRJEXspxa185xfMSb7oRnPGOqipGMK 8l/NmrSITi47AKxy0xsS4HeUdgdcNiH7+AClB6w1jbYqywbXUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnF3PEKlLgkIt7XRju4NKk9H0ijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjkwM2NlZjAtYTdhNi0z MWIyLWJiZjEtNWZlZGVlZDI3NjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfORUbe8t4Rca8Jjrg+BapD6FVzK0rzoew9Mo2gbEzMGnItAM+AQfwe djHeK/BK93Ysd246JoyG7P/bnNYcXAWBMQah/zJ9UyiOMDV2v2HeQfU6VDDkzpCP kxJAsYpGoTiQabgCAPmWFg+98QqymMQI6LCpNhUGPc4/9attenMlpdraCLlG+d+Z HkRPwCBNaK1nrFokd/H1Jn9fO0TvZjs6mnBrypQc1GAyLLYYEJbgoUEArj+GuLdk xNY1SRFBUIIgstwpmR2eTSKMCeSIe/kqwRs556lnq2uQs5KFhVPPKFFYYY+Hi0Kn cDtuHv5ahBhFbtkJBTqdkXGqc6UN/j0= -----END CERTIFICATE-----Generated at Tue Jul 22 20:32:52 2025 by rpki-client