$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/af752bb6-5c49-322d-b8be-c43eb496a124.roa File: af752bb6-5c49-322d-b8be-c43eb496a124.roa (raw, json) Hash identifier: xBL5e+P0F24Vbfvxbsa468nOcny1tShI2XYN2z8rAhQ= Subject key identifier: 25:F0:D2:59:78:31:7B:1A:81:AB:17:E5:16:63:65:B9:46:DF:2E:6A Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F43285849F87A7C167553336D82A54790 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/af752bb6-5c49-322d-b8be-c43eb496a124.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 399804 IP address blocks: 66.187.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7c:16:75:53:33:6d:82:a5:47:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=9ec8fc66-250d-4653-a0b4-803df4064092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b2:5e:9b:6d:f6:5e:57:b4:a5:99:8b:51:22: 2d:de:8e:6c:56:21:91:9e:ad:ff:f9:dc:2a:80:56: f7:7f:ef:00:2d:07:e2:5a:80:e5:eb:41:eb:b9:db: aa:83:30:03:3c:dc:f0:26:7a:40:dc:77:d9:2f:c9: 56:0a:01:4d:33:b7:db:31:a6:78:0a:ab:c9:64:01: 6d:f0:4d:0d:7b:7e:15:ab:e3:71:88:b3:6e:1b:96: 0a:ae:9c:46:cb:6f:ea:d4:25:7f:e0:48:52:b3:e5: 7b:ee:b9:97:ee:97:91:6b:e5:e9:4d:38:b5:d6:4c: a9:be:88:c2:62:f1:19:43:78:2d:e6:76:98:21:34: 1c:47:84:24:cd:98:ab:f2:d2:50:41:f6:82:34:79: f2:e7:92:8c:24:c1:7f:5b:12:76:a7:99:5e:42:81: 15:75:40:c6:d1:30:09:b5:b0:75:26:7a:28:02:be: fc:a5:bc:c9:2d:5d:77:e7:1b:7e:c0:f6:f8:44:f4: 32:99:0b:ca:31:69:74:95:4a:9c:8b:16:57:30:15: f7:57:8f:e8:d5:8b:3e:0f:3e:3e:96:9c:8e:f6:0f: b1:4a:57:43:f3:2b:74:d4:a1:9e:26:68:ee:b9:5b: 4d:a2:53:50:87:7e:88:85:8c:fe:0a:94:51:e6:6d: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:D2:59:78:31:7B:1A:81:AB:17:E5:16:63:65:B9:46:DF:2E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/af752bb6-5c49-322d-b8be-c43eb496a124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:62:0e:d6:6c:1d:fd:33:52:ee:5a:c6:67:91:cd:94:ab:b5: 58:e6:20:86:2f:ff:7c:b8:7a:74:20:98:8f:f7:67:8a:4b:62: 22:e2:f2:c3:1d:33:82:21:81:cd:b0:7d:00:45:97:96:99:74: 0d:cf:b5:6f:18:b1:75:ea:45:b4:be:19:71:1f:13:d2:37:96: 85:32:a4:92:58:21:b8:fd:22:f9:37:40:f5:ac:30:79:f7:02: 00:b8:c2:c9:75:6a:17:99:b1:c7:d8:d4:c2:c9:ef:f9:b2:cf: 9a:49:48:02:da:d8:4d:6c:6b:20:2f:39:19:a4:3b:ea:52:39: c9:8c:25:4b:dc:28:5e:0c:36:ea:5c:b7:5a:f9:92:8b:37:ec: ea:37:cb:02:57:c9:3d:d1:bc:a5:09:08:72:42:24:73:28:f9: d8:6c:d4:a7:9c:90:0f:5d:cb:fb:55:66:c3:5a:98:f8:d7:6b: a6:0e:e3:34:99:dc:87:b2:4b:7a:a5:ec:9a:c2:87:49:a3:7b: a6:30:69:5b:06:5b:8b:33:83:3c:cd:14:ca:10:f7:3e:59:31: 31:62:bd:74:8a:d7:4c:6b:23:d3:13:7d:89:2e:05:7b:56:41: a2:d8:3c:93:b0:b6:e4:42:bc:65:aa:75:73:5c:41:6c:7e:ad: 08:9b:bc:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4enwWdVMzbYKlR5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OWVjOGZjNjYtMjUwZC00NjUzLWEwYjQtODAzZGY0MDY0MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLJem232Xle0pZmLUSIt3o5sViGRnq3/+dwq gFb3f+8ALQfiWoDl60HruduqgzADPNzwJnpA3HfZL8lWCgFNM7fbMaZ4CqvJZAFt 8E0Ne34Vq+NxiLNuG5YKrpxGy2/q1CV/4EhSs+V77rmX7peRa+XpTTi11kypvojC YvEZQ3gt5naYITQcR4QkzZir8tJQQfaCNHny55KMJMF/WxJ2p5leQoEVdUDG0TAJ tbB1JnooAr78pbzJLV135xt+wPb4RPQymQvKMWl0lUqcixZXMBX3V4/o1Ys+Dz4+ lpyO9g+xSldD8yt01KGeJmjuuVtNolNQh36IhYz+CpRR5m04uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXw0ll4MXsagasX5RZjZblG3y5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvYWY3NTJiYjYtNWM0OS0z MjJkLWI4YmUtYzQzZWI0OTZhMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRiDtZsHf0zUu5axmeRzZSrtVjmIIYv/3y4enQgmI/3Z4pLYiLi8sMd M4Ihgc2wfQBFl5aZdA3PtW8YsXXqRbS+GXEfE9I3loUypJJYIbj9Ivk3QPWsMHn3 AgC4wsl1aheZscfY1MLJ7/myz5pJSALa2E1sayAvORmkO+pSOcmMJUvcKF4MNupc t1r5kos37Oo3ywJXyT3RvKUJCHJCJHMo+dhs1KeckA9dy/tVZsNamPjXa6YO4zSZ 3IeyS3ql7JrCh0mje6YwaVsGW4szgzzNFMoQ9z5ZMTFivXSK10xrI9MTfYkuBXtW QaLYPJOwtuRCvGWqdXNcQWx+rQibvEI= -----END CERTIFICATE-----Generated at Mon Jun 9 02:03:37 2025 by rpki-client