$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/7f4ea9ed-7e06-3c63-9d83-eaa2a8519ca3.roa File: 7f4ea9ed-7e06-3c63-9d83-eaa2a8519ca3.roa (raw, json) Hash identifier: 7KqAXpMd+dAgSQOn7AWqg4ataLtW4R5UjZKOWNFpeWs= Subject key identifier: 34:9C:2C:1D:9C:72:D1:3E:0B:93:4D:92:AD:D0:71:11:16:3E:94:8B Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285849D1650531FB94305A59814600 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/7f4ea9ed-7e06-3c63-9d83-eaa2a8519ca3.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 6453 IP address blocks: 66.198.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:05:31:fb:94:30:5a:59:81:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=c03c07a5-c94d-4193-b63b-3df4f64a69bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:5f:4a:2b:3b:51:e8:1a:9c:cd:d8:3e:52: 28:1e:98:d3:42:fa:b9:45:ce:54:11:9d:43:f8:c8: b3:67:de:79:80:a0:49:25:64:d0:ae:37:b3:81:8e: fc:eb:38:39:11:21:e1:03:0f:35:9a:cc:c2:58:e2: 87:54:9e:92:d2:a6:a9:c3:e4:0b:95:be:19:18:b1: a1:16:1c:96:b4:d2:00:32:cb:62:00:fe:99:43:19: 28:2e:aa:99:c3:a1:10:66:ff:51:de:13:67:80:eb: c9:2a:e4:eb:c3:5b:2d:c2:b1:ac:59:0e:4c:a6:6d: 78:89:90:68:fa:7f:c8:f4:e1:8c:c9:6e:6b:7a:7c: ce:eb:01:57:fb:07:12:08:46:40:7d:bf:28:61:32: 8d:a3:a8:95:38:7e:0c:32:f3:03:db:70:ab:41:ec: 67:45:f7:57:50:ba:d3:f4:c2:50:00:b3:f1:cf:ad: e7:be:9c:be:85:ec:76:77:fd:ac:63:67:85:6c:2d: 2a:31:0a:5b:d8:c0:41:1c:cc:d2:eb:b7:e1:70:ac: a0:90:5b:6c:95:b3:1c:fb:19:4b:99:d1:e7:2b:a7: 70:14:a7:34:51:71:e4:ba:c6:a1:08:a9:4d:79:2d: d0:a1:58:6e:5b:0e:16:73:cd:e3:02:33:2f:52:4e: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9C:2C:1D:9C:72:D1:3E:0B:93:4D:92:AD:D0:71:11:16:3E:94:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/7f4ea9ed-7e06-3c63-9d83-eaa2a8519ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 66.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a5:0b:7c:d0:79:1e:45:4c:58:94:ff:d9:84:60:81:69:a2: 8e:3a:65:11:6c:da:70:71:d1:ed:9e:b3:8d:ce:e8:6c:51:9b: f5:03:e2:f6:be:38:d2:78:6d:7a:72:2b:a9:8a:9c:49:89:ea: 45:80:83:3c:0a:d0:7d:57:ab:99:66:9d:d6:80:91:63:16:fa: 69:a0:ff:4b:0b:2e:b2:95:60:96:38:69:08:7e:e9:c0:80:1b: 68:12:0e:7e:f8:4c:78:87:25:78:e3:4c:1f:ac:ef:27:dd:5c: b5:8b:67:da:67:b1:90:5e:0a:32:55:14:3b:b5:e3:d0:66:ed: 2c:c2:b0:ab:49:2f:21:2d:7e:cc:96:e4:e0:99:ae:ea:1a:64: 9b:ab:e8:a1:51:00:b2:63:9b:74:0c:ad:98:be:09:b4:4e:70: 3f:74:6a:13:8c:b0:a6:ea:f9:a9:8d:a9:ed:03:dc:d4:7e:bb: 57:b8:2a:b7:f1:7e:c6:55:72:b5:ff:4c:18:70:50:af:d2:24: f7:59:ac:e0:5a:fd:51:b5:e8:d4:b2:8f:cb:cd:6f:ba:50:bb: 0f:ef:e8:31:9c:cf:83:c4:2b:27:57:8f:48:1d:eb:9f:0c:e1: d2:68:0b:60:0c:be:01:7b:6a:4f:99:c4:28:b1:21:1c:e5:34: ec:ab:b7:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQUx+5QwWlmBRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YzAzYzA3YTUtYzk0ZC00MTkzLWI2M2ItM2RmNGY2NGE2OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0VfSis7UeganM3YPlIoHpjTQvq5Rc5UEZ1D +MizZ955gKBJJWTQrjezgY786zg5ESHhAw81mszCWOKHVJ6S0qapw+QLlb4ZGLGh FhyWtNIAMstiAP6ZQxkoLqqZw6EQZv9R3hNngOvJKuTrw1stwrGsWQ5Mpm14iZBo +n/I9OGMyW5renzO6wFX+wcSCEZAfb8oYTKNo6iVOH4MMvMD23CrQexnRfdXULrT 9MJQALPxz63nvpy+hex2d/2sY2eFbC0qMQpb2MBBHMzS67fhcKygkFtslbMc+xlL mdHnK6dwFKc0UXHkusahCKlNeS3QoVhuWw4Wc83jAjMvUk6gAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDScLB2cctE+C5NNkq3QcREWPpSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvN2Y0ZWE5ZWQtN2UwNi0z YzYzLTlkODMtZWFhMmE4NTE5Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQsYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+lC3zQeR5FTFiU/9mEYIFpoo46ZRFs2nBx0e2es43O6GxRm/UD4va+ ONJ4bXpyK6mKnEmJ6kWAgzwK0H1Xq5lmndaAkWMW+mmg/0sLLrKVYJY4aQh+6cCA G2gSDn74THiHJXjjTB+s7yfdXLWLZ9pnsZBeCjJVFDu149Bm7SzCsKtJLyEtfsyW 5OCZruoaZJur6KFRALJjm3QMrZi+CbROcD90ahOMsKbq+amNqe0D3NR+u1e4Krfx fsZVcrX/TBhwUK/SJPdZrOBa/VG16NSyj8vNb7pQuw/v6DGcz4PEKydXj0gd658M 4dJoC2AMvgF7ak+ZxCixIRzlNOyrtyU= -----END CERTIFICATE-----Generated at Sat Jun 7 21:41:59 2025 by rpki-client