$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa File: 0708b39d-1d52-36df-8431-01f06fe04df4.roa (raw, json) Hash identifier: 3CZLiyV4v6V/cXWnN4IMSqsmvyJUnyCY2iZLxQarlSs= Subject key identifier: E8:47:4B:AC:45:D9:E2:CC:BA:47:F2:19:96:C8:E9:A0:47:F0:8F:F7 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584AF521411A661C2BB6CC065364 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 396905 IP address blocks: 66.187.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:41:1a:66:1c:2b:b6:cc:06:53:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=0b9f9a03-5f86-4a8d-94d7-e2febb93d031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:ab:ff:01:7c:8a:8f:f3:c1:ed:aa:6f:d6: 1e:10:02:b8:76:80:ec:95:2f:0a:d9:3c:12:89:5d: 20:f9:72:db:a7:47:78:c7:5b:04:41:d9:7d:6f:e7: 75:43:e8:82:1e:e1:e4:4f:58:9c:07:4c:a5:a3:10: 09:8f:1c:89:ce:67:15:c5:f0:c1:49:3f:9f:ec:3f: f6:8e:8b:4f:c6:74:2f:ef:61:7c:48:48:0d:79:b3: a1:46:c7:f1:f7:85:c4:48:ad:ca:cc:57:ea:e8:5c: 1b:fd:c8:62:4a:62:31:d0:0a:73:a6:21:ed:3c:6c: be:48:0a:81:aa:d0:0e:ea:39:25:66:75:12:3a:42: 33:2f:12:8e:73:9c:ef:f0:c2:fb:fd:cb:3a:59:d2: 6f:e0:c2:01:bb:0d:c3:57:83:fd:7e:75:5b:e8:58: 2e:0b:8b:ea:07:78:01:54:cd:82:33:08:96:db:d4: 4f:a3:10:32:87:ab:a1:7d:ba:3f:71:1d:a5:86:1b: 26:dc:69:4b:cd:4c:96:ce:d0:3a:05:ce:77:5d:1b: 4f:db:7b:fe:70:22:1f:64:86:23:1a:56:5a:80:82: 3a:eb:fb:59:ad:98:ec:d4:bc:4c:5c:17:c7:76:d1: 7d:92:ed:51:ca:e2:fb:42:be:a1:b6:2e:dc:f1:fd: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:47:4B:AC:45:D9:E2:CC:BA:47:F2:19:96:C8:E9:A0:47:F0:8F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 66.187.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:30:67:85:15:fe:0d:23:2d:32:9d:3e:6b:00:d8:f2:1c:5c: 1c:22:84:61:42:bc:d8:bf:59:8d:ca:8a:80:0c:0a:c1:a2:1b: 37:d1:08:41:25:e3:90:55:60:d9:53:89:fb:c7:da:aa:64:9c: 31:99:36:e3:e6:12:c1:a3:04:61:19:6d:8b:c0:1e:02:d2:a8: 7b:a9:bc:6f:25:f5:dc:71:52:fe:40:da:00:57:40:9e:9b:31: 88:fb:56:8d:85:09:fa:8f:cd:4b:47:d7:20:09:e2:ad:cb:7c: 89:41:1b:ea:b5:ad:5a:8b:38:05:2a:fb:52:9b:00:74:68:19: 51:dd:65:a7:b7:75:16:fb:39:ea:df:25:a5:7b:98:41:86:53: f0:81:8a:93:ea:fe:47:e8:30:8d:a2:88:92:31:a6:45:c5:69: 7d:a1:ae:3b:d1:b4:05:ee:59:ec:d1:a8:53:8c:11:33:1d:27: 6d:c7:ec:5c:91:98:45:1a:7c:45:a8:68:8a:c6:d1:18:f6:bc: 2d:ac:f6:fd:cd:51:55:ed:a6:21:b8:2f:7e:bc:8b:1f:ef:c2: 88:32:74:24:ea:2c:c3:03:f4:90:a0:66:8d:d9:d9:08:cc:0e: 17:4b:02:c3:33:55:2e:15:e9:18:e7:97:ad:0c:54:4f:c6:5b: d1:f9:a0:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUEaZhwrtswGU2QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGI5ZjlhMDMtNWY4Ni00YThkLTk0ZDctZTJmZWJiOTNkMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRmr/wF8io/zwe2qb9YeEAK4doDslS8K2TwS iV0g+XLbp0d4x1sEQdl9b+d1Q+iCHuHkT1icB0yloxAJjxyJzmcVxfDBST+f7D/2 jotPxnQv72F8SEgNebOhRsfx94XESK3KzFfq6Fwb/chiSmIx0ApzpiHtPGy+SAqB qtAO6jklZnUSOkIzLxKOc5zv8ML7/cs6WdJv4MIBuw3DV4P9fnVb6FguC4vqB3gB VM2CMwiW29RPoxAyh6uhfbo/cR2lhhsm3GlLzUyWztA6Bc53XRtP23v+cCIfZIYj GlZagII66/tZrZjs1LxMXBfHdtF9ku1RyuL7Qr6hti7c8f16lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhHS6xF2eLMukfyGZbI6aBH8I/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMDcwOGIzOWQtMWQ1Mi0z NmRmLTg0MzEtMDFmMDZmZTA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4wZ4UV/g0jLTKdPmsA2PIcXBwihGFCvNi/WY3KioAMCsGiGzfRCEEl 45BVYNlTifvH2qpknDGZNuPmEsGjBGEZbYvAHgLSqHupvG8l9dxxUv5A2gBXQJ6b MYj7Vo2FCfqPzUtH1yAJ4q3LfIlBG+q1rVqLOAUq+1KbAHRoGVHdZae3dRb7Oerf JaV7mEGGU/CBipPq/kfoMI2iiJIxpkXFaX2hrjvRtAXuWezRqFOMETMdJ23H7FyR mEUafEWoaIrG0Rj2vC2s9v3NUVXtpiG4L368ix/vwogydCTqLMMD9JCgZo3Z2QjM DhdLAsMzVS4V6Rjnl60MVE/GW9H5oNU= -----END CERTIFICATE-----Generated at Sun Aug 24 09:36:13 2025 by rpki-client