$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa File: 86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa (raw, json) Hash identifier: 3gSoxhMrjmgdtVRbxw5NFPZWG9OzEvfDUtHwEtZdlDc= Subject key identifier: 64:B0:2C:9C:D1:02:B8:D5:3E:33:1C:5B:01:97:71:4D:BE:5F:86:8C Certificate issuer: /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Certificate serial: 010D0C9F43285849E7BA79C51A2282F787FDAB10 Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 14203 IP address blocks: 66.129.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:79:c5:1a:22:82:f7:87:fd:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=b4fedbef-c445-43c6-b9a6-f78f8a7ea6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:ad:67:9a:65:01:64:4d:51:73:cc:74:77: f9:7a:38:77:e6:7e:72:2d:52:a3:e7:de:f8:b1:0c: a9:30:4a:db:da:d8:39:28:46:62:ed:13:ad:80:59: 91:e1:23:d0:b3:b1:2e:e0:b9:5e:3d:14:54:d5:00: 67:b8:41:0f:24:b8:2f:9a:a4:0e:5e:69:28:d7:4f: 3c:5a:3b:48:10:54:cb:21:c2:10:46:af:ba:e0:cb: 75:16:44:d0:de:23:82:54:89:93:57:60:9e:fb:25: 1d:88:b0:fe:bc:66:f4:0a:a3:a4:84:d1:08:d5:a0: 7f:ee:ad:f4:d6:d6:65:a3:da:96:8a:4d:5a:b4:34: be:12:2a:96:ea:eb:b4:4e:e8:43:04:ba:cd:1c:aa: 76:43:f2:80:83:21:cc:bc:3e:ac:6f:a1:c4:c0:b6: c3:ae:42:32:57:da:5f:22:12:ce:79:77:78:8c:b6: 7d:11:52:08:6b:10:ee:79:02:a8:7d:0a:04:a4:92: 74:ae:63:32:74:2a:a1:25:0a:55:0b:89:f4:aa:2d: 2e:ce:8d:e3:fa:de:48:a8:a3:b8:0d:7b:0e:55:72: 01:78:c3:a5:37:96:0a:49:6d:72:0a:41:37:56:6f: 3b:e7:3b:cc:d6:ec:19:cf:9d:68:2d:9f:25:9c:d9: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B0:2C:9C:D1:02:B8:D5:3E:33:1C:5B:01:97:71:4D:BE:5F:86:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl X509v3 Authority Key Identifier: keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer sbgp-ipAddrBlock: critical IPv4: 66.129.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2c:07:a0:50:85:59:ce:24:46:96:d1:a7:72:e4:53:5c:48: 3c:9d:56:a9:d4:28:98:99:77:30:bf:99:e8:59:d3:c6:dd:49: 3e:5b:b8:57:94:42:48:52:3f:af:7e:39:e8:0a:b1:ad:7e:0d: d5:e7:1f:d7:dd:fe:c5:c9:ad:10:7d:ca:77:7d:6c:44:53:c5: a2:af:9e:ce:78:be:c3:e6:6a:49:35:82:b2:04:56:24:a1:89: 40:45:4a:14:87:41:13:aa:2a:10:f9:5d:bd:96:0e:86:e5:f3: bd:c7:0f:ec:41:2d:95:b4:16:76:3d:a2:98:32:9d:91:44:ff: 51:9a:ca:21:87:b0:d5:3b:bb:31:4f:a2:ee:00:18:a0:d0:11: 92:93:40:b9:c7:9e:ee:be:7e:21:2d:ca:89:95:50:dc:9c:26: f0:d9:04:60:2a:71:f6:6f:d9:14:7a:ed:97:31:e5:88:b0:e3: 62:00:2b:8b:da:6a:4e:61:2c:61:35:cb:4d:70:f5:32:d1:21: 9d:d3:9b:21:80:92:8e:4e:75:0e:5f:9b:a5:23:46:f4:00:b8: fc:11:ab:76:ed:2d:cc:dd:53:00:1a:c7:cd:36:08:73:a2:97: de:30:76:1b:0c:87:3a:50:1b:ff:5a:c3:89:c3:b2:10:47:0e: c5:06:47:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunnFGiKC94f9qxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YzdmNmItODE2OC00NDI5LTk0ZDUtY2ZiMTRlNTdk ZDJlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YjRmZWRiZWYtYzQ0NS00M2M2LWI5YTYtZjc4ZjhhN2VhNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5ytZ5plAWRNUXPMdHf5ejh35n5yLVKj5974 sQypMErb2tg5KEZi7ROtgFmR4SPQs7Eu4LlePRRU1QBnuEEPJLgvmqQOXmko1088 WjtIEFTLIcIQRq+64Mt1FkTQ3iOCVImTV2Ce+yUdiLD+vGb0CqOkhNEI1aB/7q30 1tZlo9qWik1atDS+EiqW6uu0TuhDBLrNHKp2Q/KAgyHMvD6sb6HEwLbDrkIyV9pf IhLOeXd4jLZ9EVIIaxDueQKofQoEpJJ0rmMydCqhJQpVC4n0qi0uzo3j+t5IqKO4 DXsOVXIBeMOlN5YKSW1yCkE3Vm875zvM1uwZz51oLZ8lnNl+rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSwLJzRArjVPjMcWwGXcU2+X4aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZj N2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1N2RkMmUvODZlMWE5NmQtODYxMy0z ZTMwLWFkMGYtM2MyYzQxOTYyYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2YzdmNmItODE2OC00NDI5LTk0 ZDUtY2ZiMTRlNTdkZDJlL2RhNmM3ZjZiLTgxNjgtNDQyOS05NGQ1LWNmYjE0ZTU3 ZGQyZS5jcmwwHwYDVR0jBBgwFoAUA3k0rC78UNQi5NbDk13OTGnEefYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIx NGU1N2RkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQoHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4sB6BQhVnOJEaW0ady5FNcSDydVqnUKJiZdzC/mehZ08bdST5buFeU QkhSP69+OegKsa1+DdXnH9fd/sXJrRB9ynd9bERTxaKvns54vsPmakk1grIEViSh iUBFShSHQROqKhD5Xb2WDobl873HD+xBLZW0FnY9opgynZFE/1GayiGHsNU7uzFP ou4AGKDQEZKTQLnHnu6+fiEtyomVUNycJvDZBGAqcfZv2RR67Zcx5Yiw42IAK4va ak5hLGE1y01w9TLRIZ3TmyGAko5OdQ5fm6UjRvQAuPwRq3btLczdUwAax802CHOi l94wdhsMhzpQG/9aw4nDshBHDsUGR10= -----END CERTIFICATE-----Generated at Sat Jun 7 23:19:33 2025 by rpki-client