$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json) Hash identifier: OnHRul0Fo/daB/rWiknFFkd4Q3QL53OQOdVMXsxDNIU= Subject key identifier: 16:E3:14:0A:91:95:C3:A0:35:A2:BB:4B:C0:D5:B7:A8:92:56:A0:3A Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F4328584A03A54F53A28286963948D040 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 400404 IP address blocks: 66.71.208.0/21 maxlen: 24 96.45.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4f:53:a2:82:86:96:39:48:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=d1c04db1-ae0c-4990-bb1c-ead795d8ff2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:3f:92:c5:a8:d8:5d:f1:bb:cc:f9:fe:f4: 62:fa:53:55:03:48:98:8b:b8:4d:5d:e6:91:d0:cf: a4:5a:2a:29:0c:5b:fb:22:64:c7:73:a9:fc:0b:a5: 2d:6c:c0:9a:ce:e5:6a:25:67:ce:46:4a:d9:12:1b: 81:bf:fc:6a:77:65:46:8f:15:f6:85:19:c7:63:09: 86:fa:6a:71:b2:e9:85:b3:13:f6:64:8f:28:08:47: 31:69:57:c6:ee:9f:67:18:18:4c:27:d6:1a:80:23: 9b:10:3c:fd:4b:b9:29:c7:05:55:29:9e:59:67:59: 3b:9f:95:ca:0f:31:8c:44:4c:b0:79:f6:da:d3:e1: 8b:22:74:70:1f:81:8f:7a:54:63:ca:03:71:2b:b6: dc:8b:94:90:4b:0f:8e:71:ec:46:c2:ab:d4:f4:ca: f2:0c:7a:ca:0c:d3:68:1e:99:d4:20:02:cd:81:b0: 2c:e0:ce:5f:17:8f:1b:74:6e:2f:c7:95:1e:2f:fa: e5:a1:a4:82:70:0d:9d:4e:47:67:b0:8b:c4:34:89: 99:7d:86:a8:9b:78:ab:d3:e2:96:ed:2a:44:de:b8: 14:4e:0d:bb:14:91:39:81:b0:8b:2b:70:dd:6f:b3: 3c:41:da:ea:73:75:fd:5d:d2:6f:93:a4:2f:9e:a6: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E3:14:0A:91:95:C3:A0:35:A2:BB:4B:C0:D5:B7:A8:92:56:A0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: 66.71.208.0/21 96.45.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:86:ed:fe:df:4a:d3:60:b1:c6:98:c4:34:a7:51:5d:07:27: 89:2e:f3:2a:cc:f2:c1:f8:ff:a9:4d:96:00:0a:31:78:67:7e: 31:b8:d6:2a:5f:fb:f4:a9:b7:d1:c3:91:70:87:49:67:ad:c0: 60:f5:b2:13:81:a5:67:c6:7d:b1:ab:2f:d3:65:29:fd:46:3f: bd:5d:fb:ea:be:a2:71:0c:83:10:4b:21:11:28:14:2f:e0:c8: 4f:72:fb:bc:38:f9:54:15:df:dc:29:7b:72:07:16:fa:38:d3: 17:47:4a:ab:2e:4a:9e:b4:d9:1a:10:0f:1e:4b:18:8d:b2:24: 6d:53:f2:e6:ff:ec:3e:11:a7:4f:e7:ea:2f:27:9e:e5:68:a8: 39:9c:51:99:77:2e:8e:36:6f:ba:d9:9d:21:ee:6f:7e:08:be: 3d:3e:f8:3a:40:73:8c:08:f3:87:df:8e:8d:da:08:2c:6b:df: 9a:d4:3d:01:9d:82:7d:9b:f2:93:a4:37:a6:91:57:86:1f:b1: 6a:24:65:3c:47:4c:ce:07:db:81:85:8b:dc:f7:28:71:91:9a: b8:9b:90:3c:c1:25:83:9a:c0:33:d4:39:f6:26:49:d2:f1:13: 10:c2:50:31:59:8f:2e:9f:45:06:f6:89:f5:13:5b:27:f0:22: 9e:4c:04:e8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoDpU9TooKGljlI0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZDFjMDRkYjEtYWUwYy00OTkwLWJiMWMtZWFkNzk1ZDhmZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8g/ksWo2F3xu8z5/vRi+lNVA0iYi7hNXeaR 0M+kWiopDFv7ImTHc6n8C6UtbMCazuVqJWfORkrZEhuBv/xqd2VGjxX2hRnHYwmG +mpxsumFsxP2ZI8oCEcxaVfG7p9nGBhMJ9YagCObEDz9S7kpxwVVKZ5ZZ1k7n5XK DzGMREywefba0+GLInRwH4GPelRjygNxK7bci5SQSw+OcexGwqvU9MryDHrKDNNo HpnUIALNgbAs4M5fF48bdG4vx5UeL/rloaSCcA2dTkdnsIvENImZfYaom3ir0+KW 7SpE3rgUTg27FJE5gbCLK3Ddb7M8Qdrqc3X9XdJvk6QvnqYO8QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBbjFAqRlcOgNaK7S8DVt6iSVqA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvZmZhMzRlMTUtNGVjYS0z NDFiLWE1ZDEtOTZkNTE0M2IwNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQkfQAwQE YC2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHOG7f7fStNgscaYxDSnUV0HJ4ku8yrM8sH4/6lNlgAKMXhn fjG41ipf+/Spt9HDkXCHSWetwGD1shOBpWfGfbGrL9NlKf1GP71d++q+onEMgxBL IREoFC/gyE9y+7w4+VQV39wpe3IHFvo40xdHSqsuSp602RoQDx5LGI2yJG1T8ub/ 7D4Rp0/n6i8nnuVoqDmcUZl3Lo42b7rZnSHub34Ivj0++DpAc4wI84ffjo3aCCxr 35rUPQGdgn2b8pOkN6aRV4YfsWokZTxHTM4H24GFi9z3KHGRmribkDzBJYOawDPU OfYmSdLxExDCUDFZjy6fRQb2ifUTWyfwIp5MBOg= -----END CERTIFICATE-----Generated at Wed Jul 9 22:33:19 2025 by rpki-client