$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/21d08510-dd8e-342a-b532-ef562767db65.roa File: 21d08510-dd8e-342a-b532-ef562767db65.roa (raw, json) Hash identifier: y0nYM6l/Njc8WReNFxsQC3R8AUgxNXMtTv02W4CKcNA= Subject key identifier: 72:B4:31:EA:3D:AB:7B:82:E0:FA:51:13:54:BA:C8:09:EC:94:DC:1D Certificate issuer: /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Certificate serial: 010D0C9F4328584A62908FB62BC2647D7FD7D780 Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/21d08510-dd8e-342a-b532-ef562767db65.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 399331 IP address blocks: 66.220.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:8f:b6:2b:c2:64:7d:7f:d7:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=bd6c5e00-dac9-4ac3-b1f1-156d77c6c6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:21:65:6d:f0:ab:4d:7c:c9:6d:9f:e8:3d: f7:41:19:5e:a0:c5:1d:a5:c3:ee:11:b4:5a:7a:b3: d4:43:d2:43:2f:6f:87:bc:74:e9:98:6b:43:d0:ec: 7d:ac:e2:31:8f:44:b0:e2:c5:ea:70:98:32:3e:be: 61:cd:20:f7:72:9c:1c:c3:32:ee:33:7e:9e:00:af: bb:5a:dc:90:48:a4:82:2b:ca:97:ee:77:52:80:e5: 2d:63:ee:89:21:17:98:0e:e5:1a:eb:0e:1c:c7:27: fa:a1:de:0e:d1:60:b7:85:8a:7b:f0:c1:22:7f:d9: 92:d7:1c:db:41:de:9a:46:f9:5e:3a:b7:16:25:15: b1:38:b6:7e:60:97:cf:0d:12:0e:a2:51:3d:f6:b7: b7:93:f5:12:75:b8:47:d2:5e:0b:d0:ba:a5:3a:71: 04:68:77:70:4d:c6:84:6e:29:ce:0c:ca:8b:a7:d2: ba:17:4c:ad:7b:1c:b3:91:21:9a:b7:60:73:ef:3e: 4d:d3:63:89:ad:85:8b:1a:d7:b5:67:61:38:83:d5: dc:53:96:96:54:42:ad:af:20:64:e5:6a:18:85:b8: 21:e2:a0:34:7c:70:c4:e1:eb:87:28:70:bc:0b:73: 74:cf:45:b3:01:08:f8:2f:b2:84:6d:37:b9:9d:6f: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B4:31:EA:3D:AB:7B:82:E0:FA:51:13:54:BA:C8:09:EC:94:DC:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/21d08510-dd8e-342a-b532-ef562767db65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl X509v3 Authority Key Identifier: keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer sbgp-ipAddrBlock: critical IPv4: 66.220.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:81:cd:a0:54:04:f8:29:46:17:97:82:6e:27:d6:fe:80:67: 70:fd:08:f3:14:dd:8a:8b:2b:16:82:5c:31:cf:ad:03:cb:89: 4e:1a:cf:a4:c0:61:75:dc:5d:6e:82:9d:21:bb:66:ea:ae:cc: 6c:57:f0:c8:8c:ab:19:8a:da:c8:e2:be:9e:09:52:69:db:54: e7:7c:13:2e:07:ae:38:cb:b4:ec:fc:b9:9b:c7:6a:df:34:65: eb:82:9d:3d:e2:96:0c:4c:ab:c3:56:6d:db:15:f1:bf:48:2e: cf:09:3d:56:81:d4:d7:0d:c1:96:f6:77:a6:6c:03:77:bd:b6: 42:22:5f:0b:2e:15:74:4d:98:c9:7a:51:44:ef:89:18:69:ad: 11:70:e7:25:19:ee:e0:fc:6a:86:f2:06:06:de:a2:c9:a1:2a: e7:a4:4c:f8:c5:8c:b6:68:1b:b2:27:5b:32:6e:03:5e:3a:e9: f8:1d:54:a3:c7:04:20:3c:54:fc:42:d4:97:fd:8f:2a:fb:26: fe:2f:82:c5:6c:25:22:7c:83:11:33:5f:71:fc:c3:8d:59:37: 22:aa:4b:f4:0a:e6:55:25:ca:01:f0:37:9f:22:5a:c1:78:b8: b9:2a:8f:29:4b:a8:a6:48:e7:8a:fe:4b:40:94:33:c3:9b:cc: d5:b7:94:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikI+2K8JkfX/X14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx YWU4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YmQ2YzVlMDAtZGFjOS00YWMzLWIxZjEtMTU2ZDc3YzZjNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RghZW3wq018yW2f6D33QRleoMUdpcPuEbRa erPUQ9JDL2+HvHTpmGtD0Ox9rOIxj0Sw4sXqcJgyPr5hzSD3cpwcwzLuM36eAK+7 WtyQSKSCK8qX7ndSgOUtY+6JIReYDuUa6w4cxyf6od4O0WC3hYp78MEif9mS1xzb Qd6aRvleOrcWJRWxOLZ+YJfPDRIOolE99re3k/USdbhH0l4L0LqlOnEEaHdwTcaE binODMqLp9K6F0ytexyzkSGat2Bz7z5N02OJrYWLGte1Z2E4g9XcU5aWVEKtryBk 5WoYhbgh4qA0fHDE4euHKHC8C3N0z0WzAQj4L7KEbTe5nW9zSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK0Meo9q3uC4PpRE1S6yAnslNwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvMjFkMDg1MTAtZGQ4ZS0z NDJhLWI1MzItZWY1NjI3NjdkYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3 MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5 YTExNzFhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtw7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeBzaBUBPgpRheXgm4n1v6AZ3D9CPMU3YqLKxaCXDHPrQPLiU4az6TA YXXcXW6CnSG7ZuquzGxX8MiMqxmK2sjivp4JUmnbVOd8Ey4HrjjLtOz8uZvHat80 ZeuCnT3ilgxMq8NWbdsV8b9ILs8JPVaB1NcNwZb2d6ZsA3e9tkIiXwsuFXRNmMl6 UUTviRhprRFw5yUZ7uD8aobyBgbeosmhKuekTPjFjLZoG7InWzJuA1466fgdVKPH BCA8VPxC1Jf9jyr7Jv4vgsVsJSJ8gxEzX3H8w41ZNyKqS/QK5lUlygHwN58iWsF4 uLkqjylLqKZI54r+S0CUM8ObzNW3lNM= -----END CERTIFICATE-----Generated at Thu Jul 3 14:13:52 2025 by rpki-client