$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa File: aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa (raw, json) Hash identifier: HInZetrFj5fdu8zSnDjBaXMZ7KUgZG3b6esrxzuLQbU= Subject key identifier: 95:DD:0D:7B:7A:E5:68:18:CB:AD:4F:39:43:9A:F7:CE:A5:CE:04:E0 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F43285849F17FB4C70653764221405AE0 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 20150 IP address blocks: 66.187.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b4:c7:06:53:76:42:21:40:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=f076a262-c0e9-462a-972a-e8fa56e595d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:26:c0:9b:7e:a0:f6:a4:eb:8f:4c:35:c6: 37:da:b4:85:4d:37:83:6f:9b:05:5a:66:03:41:2d: 9f:e5:1f:0e:48:81:04:cd:6e:f2:cb:7b:98:7a:a2: fb:78:11:0b:f4:fc:49:49:d5:54:ed:01:b7:1e:b5: 02:79:77:21:77:19:8c:8f:c3:9c:96:01:ad:b4:dc: 0c:78:d1:ff:b6:a1:87:78:84:f1:ca:a6:57:04:e2: ee:be:82:bc:44:fd:58:f2:7f:46:30:73:cf:dc:7e: e3:98:78:87:d2:94:05:35:48:7d:d3:7e:ef:aa:e3: 4a:44:1e:4e:cb:66:7c:f0:73:de:e2:d2:51:e4:47: f3:40:8d:71:d2:9c:4b:5f:a0:e8:a9:d2:20:7f:bb: 4c:89:01:c1:3e:3f:58:dc:0d:f4:f4:2d:dd:ba:ac: 7f:bc:8e:54:7b:a4:9c:70:8b:4e:c0:9f:a4:31:a6: b6:8f:3f:8c:58:4d:1d:0e:4f:b7:40:8c:4a:01:16: d4:f7:94:91:01:0a:3a:8e:f9:59:b8:c0:7e:47:00: 92:1b:ac:0c:f7:e7:df:c2:5a:09:d1:52:7a:8b:fe: c4:18:38:0f:72:76:fa:5f:05:26:51:c2:b0:8c:00: 28:92:d7:8f:27:1b:44:15:b4:57:88:ec:49:3f:68: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:0D:7B:7A:E5:68:18:CB:AD:4F:39:43:9A:F7:CE:A5:CE:04:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d2:5d:22:4e:7f:a1:d6:1c:10:cb:a5:09:42:4e:c2:60:16: a9:81:7e:18:bc:53:ae:7d:3e:fc:0a:d7:53:dd:cc:17:38:d5: 94:ce:fd:3d:7e:ad:33:14:d8:66:f7:ea:b1:77:f9:9d:25:8a: cd:5c:17:e1:03:c6:8e:f9:79:b6:d9:de:ff:9a:b4:ce:6f:c5: 50:e5:fc:21:e7:59:c6:f5:0a:fb:02:d9:be:6f:8f:88:fb:44: 3d:25:6e:e1:a1:6e:f6:3d:b5:36:ba:70:b5:35:0d:80:4f:c7: db:6a:06:f0:22:b8:56:a0:e9:00:79:64:af:51:7d:83:63:9e: bc:1f:e2:1a:57:a1:dd:d4:22:74:b5:b7:36:14:23:d4:3f:cd: 30:8e:3f:b5:d5:41:ac:c1:94:c0:44:c2:fc:d9:7f:e2:59:45: 45:43:cd:c2:e0:50:fb:27:35:a2:51:7b:93:37:38:71:14:e2: 67:e1:c3:18:84:bb:55:97:38:74:29:18:8e:ba:a5:b2:0b:3d: fc:e7:48:4d:6c:d4:16:4c:84:3c:63:72:68:d9:bb:d7:7c:9e: 72:0d:3e:12:ec:b4:d7:c6:5d:11:4a:e7:f8:7a:b2:b5:4a:8d: 6b:0d:7b:9a:4e:b2:2f:6c:e5:78:a2:3b:f8:1c:17:13:8f:99: 2a:49:f3:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7THBlN2QiFAWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZjA3NmEyNjItYzBlOS00NjJhLTk3MmEtZThmYTU2ZTU5NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXgmwJt+oPak649MNcY32rSFTTeDb5sFWmYD QS2f5R8OSIEEzW7yy3uYeqL7eBEL9PxJSdVU7QG3HrUCeXchdxmMj8OclgGttNwM eNH/tqGHeITxyqZXBOLuvoK8RP1Y8n9GMHPP3H7jmHiH0pQFNUh9037vquNKRB5O y2Z88HPe4tJR5EfzQI1x0pxLX6DoqdIgf7tMiQHBPj9Y3A309C3duqx/vI5Ue6Sc cItOwJ+kMaa2jz+MWE0dDk+3QIxKARbU95SRAQo6jvlZuMB+RwCSG6wM9+ffwloJ 0VJ6i/7EGDgPcnb6XwUmUcKwjAAoktePJxtEFbRXiOxJP2g7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXdDXt65WgYy61POUOa986lzgTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvYWEzYWFlNGItZWY4My0z ZDE0LWI5YWQtZWVjZmVhZGYxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3SXSJOf6HWHBDLpQlCTsJgFqmBfhi8U659PvwK11PdzBc41ZTO/T1+ rTMU2Gb36rF3+Z0lis1cF+EDxo75ebbZ3v+atM5vxVDl/CHnWcb1CvsC2b5vj4j7 RD0lbuGhbvY9tTa6cLU1DYBPx9tqBvAiuFag6QB5ZK9RfYNjnrwf4hpXod3UInS1 tzYUI9Q/zTCOP7XVQazBlMBEwvzZf+JZRUVDzcLgUPsnNaJRe5M3OHEU4mfhwxiE u1WXOHQpGI66pbILPfznSE1s1BZMhDxjcmjZu9d8nnINPhLstNfGXRFK5/h6srVK jWsNe5pOsi9s5XiiO/gcFxOPmSpJ89Y= -----END CERTIFICATE-----Generated at Sun Jun 8 18:23:23 2025 by rpki-client