$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa File: 7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa (raw, json) Hash identifier: KsZ561mv62ZKsrtfICDQCCKDD0r8w6ZW6g4zryvfOgY= Subject key identifier: 32:A5:4E:D3:AF:D7:DA:0C:35:E0:54:4D:05:9C:E9:13:60:2F:AE:DB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849F17FD29B1546EC0A9B48DE40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 13576 IP address blocks: 66.128.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d2:9b:15:46:ec:0a:9b:48:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=7bd424c3-d5a5-4adc-b8d9-84022b1c102b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:3d:c2:ac:17:e6:c0:7a:c8:a6:e6:d0:77: f0:fd:22:b3:7b:78:13:41:47:d1:02:55:85:7b:36: 9b:3b:7d:f9:05:7c:2e:43:dd:e5:f4:3d:87:93:1d: 12:f6:d6:a0:ed:88:8b:6d:76:88:7b:5e:f5:50:e4: 99:c7:37:9b:a3:14:e5:0d:44:11:df:6b:57:ea:43: eb:3c:53:7f:00:c9:76:72:4c:c9:fe:c6:61:ad:5e: 74:25:60:6f:11:ad:28:5c:41:29:c0:b9:98:51:aa: 77:41:60:c0:a2:ab:5b:74:e2:d0:02:fe:04:e6:15: 5f:7d:54:4e:59:f9:dd:e8:99:ae:db:a7:19:16:89: 2e:2f:15:10:5c:5e:21:da:7c:92:3c:91:54:4b:0c: 60:bc:f6:8c:7c:72:08:3f:6b:1d:b8:fa:23:70:1b: 3a:cf:2a:af:a8:ba:67:25:b7:a0:4d:c4:73:fd:9f: 8c:8f:54:ba:9a:5f:d5:a7:cc:ef:56:55:c1:80:a1: 8c:13:2a:5c:8b:49:71:07:e3:da:a1:c6:7e:de:c3: db:9f:cf:f7:38:e1:ac:ae:69:df:1b:d5:bc:43:92: 30:28:7f:e9:95:da:ab:e2:5e:e5:f9:b9:21:ed:36: 1f:0d:b3:e4:af:61:61:19:a0:77:cf:41:3f:d5:f7: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A5:4E:D3:AF:D7:DA:0C:35:E0:54:4D:05:9C:E9:13:60:2F:AE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:df:90:97:9e:8d:ce:5b:ab:14:80:06:d0:68:82:95:6f:8d: 3d:d2:36:54:26:28:e4:b0:4d:8a:79:c0:de:10:3a:84:8c:de: fd:86:8e:be:da:2f:c5:6e:39:49:08:31:a4:63:e3:27:eb:2b: de:c7:b1:68:9f:77:4c:cc:c4:ef:6b:58:ae:3b:f8:ea:99:99: fa:1b:cc:2d:02:e1:9c:07:ba:15:74:50:95:de:19:73:2d:ce: 79:f2:5e:62:15:cc:b8:a2:6e:58:00:5d:89:92:7e:8e:38:8d: 0d:1c:eb:62:1f:5b:0b:f1:c6:26:3c:5f:ff:85:c3:32:12:a9: d2:2d:29:f1:fd:e7:73:75:e4:e9:81:08:94:3c:fb:55:82:53: 51:8e:c6:49:93:20:be:dc:ec:6f:c5:60:c1:a0:6f:65:86:35: 08:91:0b:f0:fd:b5:43:d7:04:b9:c7:99:54:cd:32:df:bd:4b: a9:91:e1:ec:80:6f:26:a3:3d:78:1e:19:76:7f:1e:b0:23:33: 9a:0e:0c:99:8b:8b:49:d0:72:11:18:f9:1a:bd:2f:83:c6:f7: f2:64:31:b1:a1:6d:34:fd:16:26:37:76:f9:bc:40:f0:4b:82: 32:aa:a9:10:d8:0a:83:f3:5f:a2:2e:5d:2f:81:07:2d:cc:c4: 4c:2f:1f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9KbFUbsCptI3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk N2JkNDI0YzMtZDVhNS00YWRjLWI4ZDktODQwMjJiMWMxMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGU9wqwX5sB6yKbm0Hfw/SKze3gTQUfRAlWF ezabO335BXwuQ93l9D2Hkx0S9tag7YiLbXaIe171UOSZxzeboxTlDUQR32tX6kPr PFN/AMl2ckzJ/sZhrV50JWBvEa0oXEEpwLmYUap3QWDAoqtbdOLQAv4E5hVffVRO Wfnd6Jmu26cZFokuLxUQXF4h2nySPJFUSwxgvPaMfHIIP2sduPojcBs6zyqvqLpn JbegTcRz/Z+Mj1S6ml/Vp8zvVlXBgKGMEypci0lxB+PaocZ+3sPbn8/3OOGsrmnf G9W8Q5IwKH/pldqr4l7l+bkh7TYfDbPkr2FhGaB3z0E/1feFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKlTtOv19oMNeBUTQWc6RNgL67bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2QyMmYwYmQtYWQwYi0z YmQyLWFmYmYtMjIwNWY1MGZhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3fkJeejc5bqxSABtBogpVvjT3SNlQmKOSwTYp5wN4QOoSM3v2Gjr7a L8VuOUkIMaRj4yfrK97HsWifd0zMxO9rWK47+OqZmfobzC0C4ZwHuhV0UJXeGXMt znnyXmIVzLiiblgAXYmSfo44jQ0c62IfWwvxxiY8X/+FwzISqdItKfH953N15OmB CJQ8+1WCU1GOxkmTIL7c7G/FYMGgb2WGNQiRC/D9tUPXBLnHmVTNMt+9S6mR4eyA byajPXgeGXZ/HrAjM5oODJmLi0nQchEY+Rq9L4PG9/JkMbGhbTT9FiY3dvm8QPBL gjKqqRDYCoPzX6IuXS+BBy3MxEwvH+4= -----END CERTIFICATE-----Generated at Sun Jun 8 03:32:48 2025 by rpki-client