$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52a939ce-06bf-3398-95ba-2a4267cf983f.roa File: 52a939ce-06bf-3398-95ba-2a4267cf983f.roa (raw, json) Hash identifier: 1/94AbiolKqKMH6qGYSewnVcLY9EScNOAPKz+Kx0Izk= Subject key identifier: 8C:4F:7B:92:CD:E1:0C:01:D8:1C:4B:71:90:06:00:0B:E8:63:4F:5A Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BCA7C965C1D2B173FF280 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52a939ce-06bf-3398-95ba-2a4267cf983f.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7106 IP address blocks: 66.209.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:ca:7c:96:5c:1d:2b:17:3f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=cd353ca0-cbda-447a-aa3b-ed0f0324552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:31:3b:f1:ec:5c:93:3d:b9:17:fe:aa:c6: d7:85:25:7c:25:ac:65:43:e7:0c:e8:7b:b9:a5:36: 3a:20:ae:cc:70:78:79:47:db:30:23:5e:55:54:a2: df:a9:da:05:5d:d3:76:7c:46:9e:41:a1:f8:db:97: 2a:1f:d8:77:a7:c7:93:94:dd:75:70:7f:b7:04:ac: 2e:5a:40:12:b2:0a:55:fb:d8:57:00:83:3b:09:8e: d8:0c:44:91:a5:89:e3:ee:1b:1e:e7:4f:7a:0f:d9: 4b:f4:94:93:8b:46:c1:04:7e:94:08:e2:9e:c1:79: 89:8c:3d:65:57:cd:99:0e:78:a6:72:08:c0:4e:62: 87:ad:82:c8:52:ac:25:ba:96:8e:20:f2:e3:00:ae: b8:24:df:2b:06:61:38:af:df:5d:66:0f:f7:ed:0a: a5:79:23:c7:89:50:bc:86:83:14:ec:8f:d7:08:ba: 69:75:ae:a2:1a:78:71:62:8c:8d:4d:af:07:64:26: 99:b8:4f:9a:f4:b3:1e:c7:bc:16:f5:fa:a2:4f:79: a7:b6:fa:3d:75:36:d9:c7:a5:c0:7d:f9:45:b4:62: bd:3f:79:cd:1c:e2:d3:da:aa:83:09:3f:03:6b:8c: 85:56:a3:02:9e:68:37:db:6e:cb:dd:15:85:f6:11: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4F:7B:92:CD:E1:0C:01:D8:1C:4B:71:90:06:00:0B:E8:63:4F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52a939ce-06bf-3398-95ba-2a4267cf983f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:06:04:59:60:81:f4:a8:db:d1:55:f8:a8:70:62:da:84:b2: a6:26:fc:48:2e:a0:24:db:0a:dc:f9:4f:e6:a2:c4:c3:af:15: 0e:4b:20:da:c1:bd:69:31:42:18:2e:81:cc:3a:90:91:2c:ea: 0e:f2:7d:b0:eb:99:13:22:86:a1:90:be:97:4d:2f:ac:12:c4: 77:67:23:60:2d:30:a4:6a:9d:bc:9c:35:3d:6b:50:bc:29:98: 10:07:66:74:69:9f:bf:27:cc:93:73:02:fa:5d:94:4d:a1:82: da:9d:8b:3d:ff:ef:e7:7a:d8:99:af:d8:7f:24:cb:f0:7b:0d: 9c:53:c2:cf:9d:0e:9f:a0:b4:f9:fd:cf:5e:54:8e:86:13:32: 79:a1:95:34:6e:c1:17:54:7a:76:15:81:c2:6b:75:00:8a:36: a6:e6:7a:47:43:2c:70:58:6f:52:a0:a6:dc:b5:b5:02:8b:f1: 11:0e:96:a6:38:b5:ae:85:31:f4:87:bd:75:79:80:08:fe:a6: 15:33:a2:4f:90:90:03:14:52:24:24:1f:f9:9b:c5:ce:18:aa: f8:37:be:1a:33:23:c9:7d:79:58:36:a3:da:4d:d8:8f:bb:6d: f5:7f:09:18:c5:a9:32:c5:8e:61:b2:3d:d9:63:01:86:73:13: c6:b4:aa:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8p8llwdKxc/8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk Y2QzNTNjYTAtY2JkYS00NDdhLWFhM2ItZWQwZjAzMjQ1NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry4xO/HsXJM9uRf+qsbXhSV8JaxlQ+cM6Hu5 pTY6IK7McHh5R9swI15VVKLfqdoFXdN2fEaeQaH425cqH9h3p8eTlN11cH+3BKwu WkASsgpV+9hXAIM7CY7YDESRpYnj7hse5096D9lL9JSTi0bBBH6UCOKewXmJjD1l V82ZDnimcgjATmKHrYLIUqwlupaOIPLjAK64JN8rBmE4r99dZg/37QqleSPHiVC8 hoMU7I/XCLppda6iGnhxYoyNTa8HZCaZuE+a9LMex7wW9fqiT3mntvo9dTbZx6XA fflFtGK9P3nNHOLT2qqDCT8Da4yFVqMCnmg3227L3RWF9hGG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxPe5LN4QwB2BxLcZAGAAvoY09aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNTJhOTM5Y2UtMDZiZi0z Mzk4LTk1YmEtMmE0MjY3Y2Y5ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQtGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkGBFlggfSo29FV+KhwYtqEsqYm/EguoCTbCtz5T+aixMOvFQ5LINrB vWkxQhgugcw6kJEs6g7yfbDrmRMihqGQvpdNL6wSxHdnI2AtMKRqnbycNT1rULwp mBAHZnRpn78nzJNzAvpdlE2hgtqdiz3/7+d62Jmv2H8ky/B7DZxTws+dDp+gtPn9 z15UjoYTMnmhlTRuwRdUenYVgcJrdQCKNqbmekdDLHBYb1Kgpty1tQKL8REOlqY4 ta6FMfSHvXV5gAj+phUzok+QkAMUUiQkH/mbxc4Yqvg3vhozI8l9eVg2o9pN2I+7 bfV/CRjFqTLFjmGyPdljAYZzE8a0qsk= -----END CERTIFICATE-----Generated at Sun Aug 24 03:01:24 2025 by rpki-client