$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25a4a7fa-ac67-3b5f-a089-f36e5f6ca43c.roa File: 25a4a7fa-ac67-3b5f-a089-f36e5f6ca43c.roa (raw, json) Hash identifier: He1P07a/PWjNVKV2AbJaFiM8p+p46BCGBYpos6HkLRM= Subject key identifier: 49:4D:C1:73:E9:ED:DE:95:70:A9:04:65:AD:F4:78:10:3D:87:CB:34 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDF246C7EC74E11021080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25a4a7fa-ac67-3b5f-a089-f36e5f6ca43c.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 212573 IP address blocks: 216.66.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:df:24:6c:7e:c7:4e:11:02:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=a0e939ad-18df-469e-8854-c494eccd7f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:72:92:52:04:62:95:54:a6:24:ca:90:cc: 16:66:69:fe:ae:81:48:3e:b3:1d:4c:f6:a6:10:60: 79:55:1b:3f:b3:23:67:92:72:e8:7e:76:81:a7:67: c8:31:af:8a:cf:93:99:76:2a:ac:2a:2f:cf:90:4d: 38:dd:21:8a:97:29:8a:ff:79:e2:8e:cb:ca:56:67: af:af:1b:99:af:65:db:3d:a1:6a:05:f1:20:1a:99: b3:57:6f:9b:1e:33:b1:7f:2c:84:65:96:81:31:0a: 0a:68:f5:79:9d:f9:93:6b:f5:a6:c2:c7:47:2d:08: ad:99:1e:9e:5e:f6:d7:37:79:48:ea:d7:92:e3:b3: 9e:3b:f8:ea:98:57:ce:c4:a6:a9:85:54:f8:57:99: 21:8e:43:9c:23:b3:4f:eb:df:b4:c6:17:44:b3:32: 30:03:06:69:20:ce:60:2f:5a:40:a9:d6:45:34:4c: 1d:6f:7d:a3:3c:2b:3a:d7:f1:d9:1b:73:60:5f:0d: 17:80:04:79:6d:d1:83:c8:7a:28:4b:5a:6b:2b:d2: 0d:2b:06:e4:09:d9:00:57:dd:b8:70:23:fa:eb:a3: 82:c1:ee:6a:1d:03:4e:7f:07:db:e4:e7:87:53:bc: 73:62:e6:55:af:31:ef:09:99:3d:a4:fa:29:27:96: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4D:C1:73:E9:ED:DE:95:70:A9:04:65:AD:F4:78:10:3D:87:CB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25a4a7fa-ac67-3b5f-a089-f36e5f6ca43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fd:a4:d8:6c:2e:df:24:ec:69:a9:88:90:32:6e:26:17:0b: 75:53:9e:68:28:b7:93:4f:56:29:1a:a6:6e:f7:88:73:9e:0c: 43:60:72:d4:69:38:b3:a3:c5:91:9b:7c:3f:f4:58:f8:2c:e9: 9b:c0:3a:52:c4:97:5c:4a:db:9f:7b:71:6f:d2:76:48:42:26: c2:0c:75:1b:11:97:8e:3b:5d:19:15:99:c5:40:ed:51:82:9c: f4:45:bf:ad:fc:76:52:ae:c5:e9:c5:29:2c:b5:ac:b9:41:18: 68:07:34:4a:21:67:f7:84:6f:90:b0:04:cf:9f:85:ed:2e:17: e9:b8:ed:1e:7d:f2:83:47:1a:96:7c:9d:85:07:7c:c9:bb:77: 35:44:20:6c:1d:f2:c9:55:3a:78:13:ad:65:a3:31:1f:f1:96: 2a:87:8d:e8:83:0a:52:c3:df:db:c3:d9:7a:66:9e:b1:2c:72: 45:4d:c3:16:29:b7:ae:38:c2:5e:25:4d:78:18:7e:2e:84:33: 1d:ef:1b:7d:d3:38:69:8f:5c:69:a3:3c:da:98:9d:4e:d0:9a: a1:96:e0:2c:2b:0c:ea:e8:14:d3:8a:ac:0d:e0:a8:f5:f6:ae: d8:ce:21:74:52:c8:92:40:ce:85:5c:b2:28:bd:02:46:95:58: 6d:72:fe:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX98kbH7HThECEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YTBlOTM5YWQtMThkZi00NjllLTg4NTQtYzQ5NGVjY2Q3ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg1yklIEYpVUpiTKkMwWZmn+roFIPrMdTPam EGB5VRs/syNnknLofnaBp2fIMa+Kz5OZdiqsKi/PkE043SGKlymK/3nijsvKVmev rxuZr2XbPaFqBfEgGpmzV2+bHjOxfyyEZZaBMQoKaPV5nfmTa/WmwsdHLQitmR6e XvbXN3lI6teS47OeO/jqmFfOxKaphVT4V5khjkOcI7NP69+0xhdEszIwAwZpIM5g L1pAqdZFNEwdb32jPCs61/HZG3NgXw0XgAR5bdGDyHooS1prK9INKwbkCdkAV924 cCP666OCwe5qHQNOfwfb5OeHU7xzYuZVrzHvCZk9pPopJ5ajBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElNwXPp7d6VcKkEZa30eBA9h8s0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjVhNGE3ZmEtYWM2Ny0z YjVmLWEwODktZjM2ZTVmNmNhNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX9pNhsLt8k7GmpiJAybiYXC3VTnmgot5NPVikapm73iHOeDENgctRp OLOjxZGbfD/0WPgs6ZvAOlLEl1xK2597cW/SdkhCJsIMdRsRl447XRkVmcVA7VGC nPRFv638dlKuxenFKSy1rLlBGGgHNEohZ/eEb5CwBM+fhe0uF+m47R598oNHGpZ8 nYUHfMm7dzVEIGwd8slVOngTrWWjMR/xliqHjeiDClLD39vD2XpmnrEsckVNwxYp t644wl4lTXgYfi6EMx3vG33TOGmPXGmjPNqYnU7QmqGW4CwrDOroFNOKrA3gqPX2 rtjOIXRSyJJAzoVcsii9AkaVWG1y/qg= -----END CERTIFICATE-----Generated at Sun Jun 8 01:39:05 2025 by rpki-client