$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa File: 54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa (raw, json) Hash identifier: xZWO8m8rn65y6nkqI22wGquyM1gyg2UKKm1q9k03s20= Subject key identifier: 12:F0:41:05:3D:AB:37:F9:C0:11:36:EA:C6:80:5A:5A:1D:1D:56:DE Certificate issuer: /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Certificate serial: 010D0C9F4328584A629091C85D74793DAA674F80 Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 399331 IP address blocks: 66.220.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:91:c8:5d:74:79:3d:aa:67:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=1c8853f7-061a-47bb-b41d-3fad96187b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:7e:bf:31:d3:f1:18:bb:26:d5:cc:5c:0c: c6:cb:51:4f:d3:d4:ec:33:90:9c:fe:af:aa:6b:39: 55:b5:71:47:0e:20:bd:be:43:db:57:88:23:7c:99: 70:15:82:fd:4d:2e:51:09:ee:fc:73:51:d7:d3:98: 3f:58:82:23:dc:a0:b7:6c:6f:df:d1:0a:82:38:7c: 54:59:1e:85:c3:9c:a3:2a:5f:66:80:3b:35:2d:4d: c3:37:2e:84:e0:13:07:cd:3c:8d:5a:ee:d7:48:ff: d6:76:61:5f:d4:84:d4:00:2d:69:28:a1:9f:f2:71: a0:6b:5f:a4:9c:84:0b:76:de:9a:4b:93:2c:a7:b9: 8a:67:bd:91:7a:84:83:06:1c:42:f8:99:0a:e6:7e: 85:03:78:a0:93:67:c6:f2:5c:05:bb:29:02:62:e7: 7a:a0:b3:f5:a5:b5:ae:4a:4b:20:23:d1:a2:da:f2: 82:f6:3d:b0:e3:90:36:fa:4e:72:ec:95:6c:68:f2: aa:3e:9e:ae:3f:41:0f:aa:c1:c9:57:8d:4d:4a:20: 18:f0:72:39:1c:cb:3c:c5:45:42:b0:3c:4e:ec:ee: 2e:cc:40:9d:99:bd:3e:a7:bf:9b:31:2f:39:34:7e: 8a:cb:36:28:8e:d3:d5:08:d8:75:99:aa:6b:10:85: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:41:05:3D:AB:37:F9:C0:11:36:EA:C6:80:5A:5A:1D:1D:56:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl X509v3 Authority Key Identifier: keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer sbgp-ipAddrBlock: critical IPv4: 66.220.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:6d:e2:cc:77:25:3d:16:b0:19:4f:64:6a:73:2a:c7:63:df: a6:bb:a8:08:6d:c4:02:4f:1c:d6:2c:1c:9b:50:60:12:0b:b0: f3:05:10:59:c8:6c:b6:3c:1e:50:e8:50:18:bd:b1:63:64:1b: 6e:57:45:94:db:f4:57:5b:c5:f3:9e:41:42:e2:51:5f:ba:35: f2:df:21:ce:a0:e2:2d:51:bb:44:a1:e3:1f:d7:cb:16:4b:19: a7:38:79:1b:7b:55:bc:ad:dd:19:80:0e:92:9d:66:39:3b:97: 99:a1:da:e6:20:b3:b9:a4:52:c0:af:98:72:28:e3:50:d5:a6: be:24:2d:79:86:fb:a5:26:8b:23:8d:00:07:86:03:89:ad:28: 9e:86:8b:48:a0:a4:65:f4:46:5e:73:34:a3:24:e9:60:8c:d9: 9b:b1:9e:d4:26:32:06:42:6e:29:2f:25:6f:cc:39:97:bd:0d: c1:82:53:8e:26:1c:54:1f:73:50:69:b3:62:b0:d9:be:5b:6d: bf:46:a0:93:7d:bc:b9:5a:e2:e5:aa:88:64:df:87:1e:bd:28: 83:0b:75:4e:86:b5:d1:39:72:43:49:dc:88:66:da:b5:0e:b4: 7e:ae:fb:94:44:da:b1:bf:bb:51:3c:4d:24:4c:aa:c7:b4:08: aa:c9:1a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJHIXXR5PapnT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx YWU4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MWM4ODUzZjctMDYxYS00N2JiLWI0MWQtM2ZhZDk2MTg3YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2F+vzHT8Ri7JtXMXAzGy1FP09TsM5Cc/q+q azlVtXFHDiC9vkPbV4gjfJlwFYL9TS5RCe78c1HX05g/WIIj3KC3bG/f0QqCOHxU WR6Fw5yjKl9mgDs1LU3DNy6E4BMHzTyNWu7XSP/WdmFf1ITUAC1pKKGf8nGga1+k nIQLdt6aS5Msp7mKZ72ReoSDBhxC+JkK5n6FA3igk2fG8lwFuykCYud6oLP1pbWu SksgI9Gi2vKC9j2w45A2+k5y7JVsaPKqPp6uP0EPqsHJV41NSiAY8HI5HMs8xUVC sDxO7O4uzECdmb0+p7+bMS85NH6KyzYojtPVCNh1maprEIUnpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLwQQU9qzf5wBE26saAWlodHVbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvNTRjYmIyMzItNjJkNS0z ZDc2LThlOGEtN2VhNjgwZDg5ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3 MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5 YTExNzFhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtw8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNt4sx3JT0WsBlPZGpzKsdj36a7qAhtxAJPHNYsHJtQYBILsPMFEFnI bLY8HlDoUBi9sWNkG25XRZTb9FdbxfOeQULiUV+6NfLfIc6g4i1Ru0Sh4x/XyxZL Gac4eRt7Vbyt3RmADpKdZjk7l5mh2uYgs7mkUsCvmHIo41DVpr4kLXmG+6UmiyON AAeGA4mtKJ6Gi0igpGX0Rl5zNKMk6WCM2ZuxntQmMgZCbikvJW/MOZe9DcGCU44m HFQfc1Bps2Kw2b5bbb9GoJN9vLla4uWqiGTfhx69KIMLdU6GtdE5ckNJ3Ihm2rUO tH6u+5RE2rG/u1E8TSRMqse0CKrJGj4= -----END CERTIFICATE-----Generated at Thu Jul 3 13:40:36 2025 by rpki-client