$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/317443cc-be31-3118-8e38-f2e3a4f203b9.roa File: 317443cc-be31-3118-8e38-f2e3a4f203b9.roa (raw, json) Hash identifier: R1Qc4uece00jSRsmr340CsDfsBWsaa7h2WwG+JBP88U= Subject key identifier: EF:73:20:D2:2D:83:FD:E2:2D:9C:16:EA:A4:35:07:8C:93:74:67:52 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A7BB0B645B915738EE2550760 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/317443cc-be31-3118-8e38-f2e3a4f203b9.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 30058 IP address blocks: 66.90.81.0/24 maxlen: 24 198.16.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b6:45:b9:15:73:8e:e2:55:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=55b44470-57b1-46da-8604-909479507330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:58:18:39:0c:16:8e:a2:04:08:8e:b6:48: 53:c3:53:21:ee:f9:e8:d7:f8:08:5a:f2:8c:1a:04: 00:37:76:c5:2f:6b:bc:21:ff:be:6b:94:cf:4e:26: 10:17:f6:f5:74:49:aa:e9:83:b1:1d:1d:51:54:bf: 66:a3:2e:62:36:02:ab:0a:78:c5:44:d1:f6:59:d4: cf:ef:6d:d1:e7:30:88:d2:88:65:a4:24:83:f7:d3: f8:e4:0d:b9:dc:75:3c:9e:a8:39:66:33:0e:04:72: 86:f5:2b:d5:5f:d3:6d:b8:5c:7b:f9:73:72:9f:aa: 11:21:e8:91:2b:cc:3f:a7:2f:6d:07:97:fe:fb:f1: 02:46:d3:54:41:b7:83:f6:6c:1b:4b:0b:49:91:04: f9:f1:41:c7:2f:9d:c8:c1:71:e7:d6:48:08:ca:a1: f5:ef:8a:42:c4:c9:72:57:19:4d:73:e0:93:f1:15: 8c:bc:93:3a:cd:7c:a8:a0:e2:a6:2d:9e:f8:88:02: 40:05:02:eb:e3:e6:19:b2:29:7d:66:64:c8:42:82: a7:80:cc:1e:9e:b0:ee:29:b3:ff:90:2d:af:84:76: 1d:7a:5a:1f:e5:b1:3c:1c:27:ea:aa:5f:c7:8a:c7: 89:8b:44:c9:8a:bb:b6:48:d6:e1:d5:00:e8:e4:25: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:73:20:D2:2D:83:FD:E2:2D:9C:16:EA:A4:35:07:8C:93:74:67:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/317443cc-be31-3118-8e38-f2e3a4f203b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.81.0/24 198.16.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:66:fd:8b:bc:40:c5:f3:ec:96:7e:b7:a1:79:3a:3a:7b:46: 61:44:24:26:56:ea:6d:2f:6a:00:da:5d:ee:35:c5:ad:a8:b5: 93:97:1a:2f:31:ff:38:9f:58:be:49:af:27:e3:8c:98:84:a9: 0c:5c:86:de:c0:cb:4e:91:1f:35:6c:a4:04:9e:11:98:dd:fb: a6:3e:41:bb:92:52:71:9f:8c:4d:7c:c4:d6:ab:ff:d3:dd:06: 3f:c5:23:d3:cf:3a:70:e6:ed:0b:f9:54:88:19:6f:c2:a4:a8: 0a:49:3c:63:ae:79:fd:99:42:8e:5a:de:32:63:3d:f6:5a:70: 39:36:9c:62:56:7c:04:39:62:57:bf:cf:bd:84:b0:93:3c:57: 7a:b9:d1:63:3d:27:50:79:bf:4c:cd:93:fe:0e:6c:3a:fc:09: 0d:30:19:3d:fd:39:c2:6d:c1:c8:58:76:62:82:43:60:6b:65: 34:db:c1:bb:db:fb:a5:c9:d5:6f:bf:31:66:53:f8:69:0c:9a: f1:55:1e:7b:74:c4:5f:f7:76:4a:31:89:33:7d:f0:2a:ec:f0: 3e:4d:3a:ef:a3:db:96:ff:91:ea:ef:27:4a:ec:a5:78:be:a2: 62:29:f0:76:1d:5a:4e:c5:65:66:cf:d6:f0:81:4f:4f:05:90: 5d:fb:3c:33 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEp7sLZFuRVzjuJVB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk NTViNDQ0NzAtNTdiMS00NmRhLTg2MDQtOTA5NDc5NTA3MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLVYGDkMFo6iBAiOtkhTw1Mh7vno1/gIWvKM GgQAN3bFL2u8If++a5TPTiYQF/b1dEmq6YOxHR1RVL9moy5iNgKrCnjFRNH2WdTP 723R5zCI0ohlpCSD99P45A253HU8nqg5ZjMOBHKG9SvVX9NtuFx7+XNyn6oRIeiR K8w/py9tB5f++/ECRtNUQbeD9mwbSwtJkQT58UHHL53IwXHn1kgIyqH174pCxMly VxlNc+CT8RWMvJM6zXyooOKmLZ74iAJABQLr4+YZsil9ZmTIQoKngMwenrDuKbP/ kC2vhHYdelof5bE8HCfqql/HiseJi0TJiru2SNbh1QDo5CWRswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO9zINItg/3iLZwW6qQ1B4yTdGdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzE3NDQzY2MtYmUzMS0z MTE4LThlMzgtZjJlM2E0ZjIwM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQlpRAwQB xhBuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMxm/Yu8QMXz7JZ+t6F5Ojp7RmFEJCZW6m0vagDaXe41xa2o tZOXGi8x/zifWL5JryfjjJiEqQxcht7Ay06RHzVspASeEZjd+6Y+QbuSUnGfjE18 xNar/9PdBj/FI9PPOnDm7Qv5VIgZb8KkqApJPGOuef2ZQo5a3jJjPfZacDk2nGJW fAQ5Yle/z72EsJM8V3q50WM9J1B5v0zNk/4ObDr8CQ0wGT39OcJtwchYdmKCQ2Br ZTTbwbvb+6XJ1W+/MWZT+GkMmvFVHnt0xF/3dkoxiTN98Crs8D5NOu+j25b/kerv J0rspXi+omIp8HYdWk7FZWbP1vCBT08FkF37PDM= -----END CERTIFICATE-----Generated at Wed Jul 23 17:23:46 2025 by rpki-client