$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa File: 3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa (raw, json) Hash identifier: /GwnMaRVpUczXfmQjpXNc09Cp79dU/xGHLBNF93+mcw= Subject key identifier: 98:38:34:83:CC:2C:E7:16:B5:F0:45:CD:82:93:07:D7:B4:EA:9E:57 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584AEF8BC72F4BED5A51C4237280 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 22351 IP address blocks: 66.205.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c7:2f:4b:ed:5a:51:c4:23:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=6f53f2d8-6fcc-4776-bd0a-0a884b61bc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:e6:f4:1d:90:26:1b:98:f6:2a:62:b8:f4: 33:5f:fc:76:f0:81:b0:d2:13:8f:63:cf:cc:0d:a3: fc:8c:5e:fc:b1:a6:1c:b9:cd:a0:f7:3b:cb:7d:49: 9a:49:c0:bc:21:9a:3a:7e:fc:c8:6b:b2:93:ae:98: 87:9a:02:28:b2:5d:d3:12:79:f0:30:b8:b7:2d:a2: 4c:38:b9:c9:af:3b:0e:65:20:35:a2:fd:50:db:42: 53:2e:4a:b2:79:71:cc:e2:b9:e2:40:08:96:56:99: e6:fe:e6:01:8a:e9:cb:60:df:a6:61:fa:57:00:bc: b4:37:c3:fc:68:42:d1:27:d8:ca:58:d5:91:34:a1: 20:90:46:f7:ea:b0:e0:91:3e:bc:11:c6:3c:89:43: 5f:74:26:48:ff:30:d2:f4:dd:85:e2:59:49:9c:dc: 38:cb:ce:2f:78:6b:b3:6c:e0:49:64:e7:18:c7:f6: d3:b2:5d:14:7f:78:f1:9b:e8:d6:3c:cb:25:38:41: 59:52:dd:ab:b1:e2:27:ea:9d:26:1c:c3:ec:f6:5e: eb:d6:61:66:c1:a2:d3:4e:0d:77:9c:94:3f:33:45: e5:0a:32:2a:7e:d7:22:ef:af:3a:39:3c:67:48:36: 32:53:ec:f0:fe:cd:05:66:5f:2b:91:fb:f5:e3:df: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:38:34:83:CC:2C:E7:16:B5:F0:45:CD:82:93:07:D7:B4:EA:9E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.205.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a2:a8:49:25:76:92:77:35:58:ed:b5:64:51:e2:61:8d:51: 20:ea:b5:d1:d6:25:33:5a:6c:eb:98:6d:21:1a:71:0e:28:df: 86:83:ed:6e:52:a6:c2:05:f2:89:31:61:2d:69:81:69:c1:26: c9:56:d7:2b:20:8f:8a:64:f3:84:98:5c:91:c1:16:87:c2:cf: fa:e6:31:76:04:0b:ec:13:75:d1:45:c3:42:c0:7d:d4:15:ac: 9a:32:de:50:de:2b:bb:01:cb:6b:fe:e7:d9:cc:c5:70:0e:a0: e2:4b:12:fc:9b:67:9a:7f:69:8d:40:5c:dd:0b:99:5b:58:59: da:1b:48:0e:78:53:1e:b9:14:d6:3e:f8:63:a2:b7:28:66:26: 65:6c:d7:c7:2f:eb:21:ef:f2:75:21:d4:fe:60:6e:13:37:6a: 26:4c:ca:44:fc:11:0e:b8:ed:34:18:3d:7a:9c:66:85:c5:9f: 66:46:ac:9e:69:f3:c5:5a:2d:60:c8:92:02:86:89:3c:df:d8: da:b1:37:d1:12:13:64:85:44:27:dd:d0:45:cb:f5:49:3f:b2: 1d:f4:3c:5b:8e:ed:13:f1:4e:1d:23:55:ea:4e:9f:7d:3e:82: af:7c:66:d1:95:cf:5c:de:3c:e7:0b:73:b9:3d:14:6b:e4:f9: ba:c9:3f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8cvS+1aUcQjcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NmY1M2YyZDgtNmZjYy00Nzc2LWJkMGEtMGE4ODRiNjFiYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya3m9B2QJhuY9ipiuPQzX/x28IGw0hOPY8/M DaP8jF78saYcuc2g9zvLfUmaScC8IZo6fvzIa7KTrpiHmgIosl3TEnnwMLi3LaJM OLnJrzsOZSA1ov1Q20JTLkqyeXHM4rniQAiWVpnm/uYBiunLYN+mYfpXALy0N8P8 aELRJ9jKWNWRNKEgkEb36rDgkT68EcY8iUNfdCZI/zDS9N2F4llJnNw4y84veGuz bOBJZOcYx/bTsl0Uf3jxm+jWPMslOEFZUt2rseIn6p0mHMPs9l7r1mFmwaLTTg13 nJQ/M0XlCjIqftci7686OTxnSDYyU+zw/s0FZl8rkfv149+egQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg4NIPMLOcWtfBFzYKTB9e06p5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvM2QzYTA3MmEtMjFkZS0z ZTVhLThlMmYtODIxM2U0ODkwM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqiqEkldpJ3NVjttWRR4mGNUSDqtdHWJTNabOuYbSEacQ4o34aD7W5S psIF8okxYS1pgWnBJslW1ysgj4pk84SYXJHBFofCz/rmMXYEC+wTddFFw0LAfdQV rJoy3lDeK7sBy2v+59nMxXAOoOJLEvybZ5p/aY1AXN0LmVtYWdobSA54Ux65FNY+ +GOityhmJmVs18cv6yHv8nUh1P5gbhM3aiZMykT8EQ647TQYPXqcZoXFn2ZGrJ5p 88VaLWDIkgKGiTzf2NqxN9ESE2SFRCfd0EXL9Uk/sh30PFuO7RPxTh0jVepOn30+ gq98ZtGVz1zePOcLc7k9FGvk+brJP+0= -----END CERTIFICATE-----Generated at Mon Aug 25 06:18:53 2025 by rpki-client