$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa File: 66a0ccf2-be25-3812-acc8-c6922a2ae498.roa (raw, json) Hash identifier: oKuZ2QvGc3JGoq/3tqs9aILEYUxbPDbPTm4yLqGI6PA= Subject key identifier: D4:7A:D2:8A:5A:DE:D8:35:7B:B7:16:5D:F4:7C:23:F4:EC:9C:B7:8F Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BBF1C6FCFF6C5EADF8C80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 66.209.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:bf:1c:6f:cf:f6:c5:ea:df:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=d5081f38-632b-4a56-bd0a-967cbe77f9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:20:eb:e2:53:f9:5a:8d:83:cc:d0:9b:80: 46:fc:3e:3c:b7:12:a6:f1:39:b1:d5:6d:e5:9b:f1: f9:86:2f:b4:26:a8:fa:f7:cb:5b:e0:5f:36:a8:5f: e1:f2:7e:b2:7e:50:cf:44:39:aa:c5:7b:99:6f:38: 40:b5:da:c9:26:17:20:b3:67:b8:31:e1:5c:c7:22: 8e:ee:f1:9e:d9:61:a8:64:99:b2:78:80:76:2a:c8: 3f:25:63:91:f7:fd:d6:36:6b:85:95:54:7b:22:e3: b5:77:57:e4:ba:ca:d4:d9:01:ce:56:e1:88:a3:6c: d2:27:3c:c6:4c:f4:2c:12:61:96:ac:53:8d:ce:eb: 51:5b:7a:61:a2:37:dc:83:9f:26:c1:4a:fa:a4:8f: 41:0b:c7:31:80:0e:8b:3a:f8:9d:e9:f5:9b:ff:cf: 80:14:83:49:93:ad:42:17:ae:aa:4d:50:29:d9:b0: 74:07:3f:ab:64:3b:94:9c:92:03:c9:3e:21:d7:51: f0:64:31:73:be:be:a9:d8:cd:32:ed:94:8f:74:5b: d6:c7:45:9c:dd:7e:e0:f8:dd:dd:ea:fe:c8:c2:dc: a4:ae:69:69:1a:25:07:be:90:be:b4:28:f0:a3:d4: be:30:c2:83:5f:53:93:2e:e5:2c:d0:2d:9d:14:eb: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:D2:8A:5A:DE:D8:35:7B:B7:16:5D:F4:7C:23:F4:EC:9C:B7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8d:be:9c:d3:e9:ee:47:e6:fa:a9:50:80:6e:f4:a5:00:74: 59:bf:16:74:24:38:5e:fc:9b:42:8f:16:ea:40:f8:ed:e8:24: 3c:9f:bb:41:08:80:8b:c3:74:93:a5:60:9c:84:8f:d0:1c:5f: 4c:ab:64:80:40:c7:a1:8a:df:a2:1d:b2:9f:4a:00:03:85:50: f2:fd:b2:46:e2:71:f5:da:87:16:f3:d3:9f:47:3e:da:04:9b: 45:e9:ed:c1:6c:ef:29:2e:43:fc:57:e4:80:63:98:7f:87:14: 2e:de:3f:4f:41:d9:f9:aa:ef:3a:4c:f3:44:cc:ca:7e:95:84: fc:3d:94:7a:08:42:70:94:ed:9a:cf:89:44:08:c4:6e:83:c0: c5:72:7d:61:c3:98:98:2c:e4:9e:c4:a3:5e:80:53:15:03:6f: 55:42:97:e1:3d:8e:a5:6a:29:e4:cd:03:85:d6:79:f5:ef:64: 69:5a:bc:4f:45:59:30:76:7d:7d:b0:6f:6d:03:67:df:02:26: 7d:b7:69:c0:f4:6c:39:92:e6:8d:9c:c2:1d:fb:20:7c:22:61: 27:e1:ac:39:b3:e6:03:06:9b:72:34:4f:56:ae:b0:2b:ac:91: 17:93:8d:12:62:59:35:81:54:66:09:a6:57:82:44:c2:94:e9: 07:da:23:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram78cb8/2xerfjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDUwODFmMzgtNjMyYi00YTU2LWJkMGEtOTY3Y2JlNzdmOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiggg6+JT+VqNg8zQm4BG/D48txKm8Tmx1W3l m/H5hi+0Jqj698tb4F82qF/h8n6yflDPRDmqxXuZbzhAtdrJJhcgs2e4MeFcxyKO 7vGe2WGoZJmyeIB2Ksg/JWOR9/3WNmuFlVR7IuO1d1fkusrU2QHOVuGIo2zSJzzG TPQsEmGWrFONzutRW3phojfcg58mwUr6pI9BC8cxgA6LOvid6fWb/8+AFINJk61C F66qTVAp2bB0Bz+rZDuUnJIDyT4h11HwZDFzvr6p2M0y7ZSPdFvWx0Wc3X7g+N3d 6v7IwtykrmlpGiUHvpC+tCjwo9S+MMKDX1OTLuUs0C2dFOvrlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR60opa3tg1e7cWXfR8I/TsnLePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNjZhMGNjZjItYmUyNS0z ODEyLWFjYzgtYzY5MjJhMmFlNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtGHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyNvpzT6e5H5vqpUIBu9KUAdFm/FnQkOF78m0KPFupA+O3oJDyfu0EI gIvDdJOlYJyEj9AcX0yrZIBAx6GK36Idsp9KAAOFUPL9skbicfXahxbz059HPtoE m0Xp7cFs7ykuQ/xX5IBjmH+HFC7eP09B2fmq7zpM80TMyn6VhPw9lHoIQnCU7ZrP iUQIxG6DwMVyfWHDmJgs5J7Eo16AUxUDb1VCl+E9jqVqKeTNA4XWefXvZGlavE9F WTB2fX2wb20DZ98CJn23acD0bDmS5o2cwh37IHwiYSfhrDmz5gMGm3I0T1ausCus kReTjRJiWTWBVGYJpleCRMKU6QfaI7E= -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:49 2025 by rpki-client