$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa File: 4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa (raw, json) Hash identifier: IJBmf8wejZK5AmNmRKhHue5QnemoEdp6aI2lQU138b4= Subject key identifier: F5:CE:13:05:C9:4F:78:74:56:A9:F7:31:F3:09:2B:64:A7:0C:05:98 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584AE19692879DFD86DFA7D35E80 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 6597 IP address blocks: 66.163.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:92:87:9d:fd:86:df:a7:d3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=1d6eb687-870a-4a17-b057-c0eba36c980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:1d:99:b1:13:7d:17:9b:45:9b:95:cf:d0: a3:b2:46:77:51:cd:ec:1e:79:85:2c:9e:fe:f0:c8: 70:4e:3a:32:45:66:7f:51:b9:23:b7:cc:f4:69:64: 77:ff:17:4b:66:b1:7d:72:21:6f:97:70:d3:1b:dc: a1:72:90:90:92:da:32:c2:8a:e2:e3:bf:26:1d:80: 1d:f6:cc:a9:0e:bc:1e:56:ea:89:64:33:6a:6f:1d: 58:0d:e4:5a:7a:e7:e5:40:10:8a:12:a8:16:42:e6: 68:5e:de:00:e4:53:37:50:92:91:1d:cc:bb:7b:d3: be:a2:35:28:f0:40:f0:c2:07:c0:3f:15:1a:30:3f: cb:1e:48:e5:b1:ac:3c:c9:e8:fa:8d:bf:ea:95:d9: 12:99:28:63:f0:3c:b8:14:de:d2:32:d0:16:95:c0: e0:b5:b4:59:a4:67:5a:33:2f:55:0b:b1:e0:37:ec: 2b:9f:b3:2f:46:cf:85:08:f4:97:7b:a6:e7:52:79: 1e:2c:b2:b6:8c:09:d2:b2:c4:dc:ac:1b:37:99:71: 76:25:e8:c0:95:f4:02:34:b6:db:ff:43:b2:e6:64: c3:01:5c:98:27:8d:2a:8c:d5:d8:53:b3:e3:88:0b: 01:43:fd:b1:23:45:8b:9a:17:38:73:d2:84:57:a1: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:13:05:C9:4F:78:74:56:A9:F7:31:F3:09:2B:64:A7:0C:05:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 66.163.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:59:6f:f0:49:93:96:c3:1e:7a:14:26:fe:af:0c:b0:a9:7c: aa:6d:5d:8c:8a:76:ec:cf:7f:49:a0:cc:ce:02:c3:ad:29:48: 77:9b:e1:a2:6b:94:b6:65:e5:b3:f1:97:e0:55:f8:1b:e5:3d: a2:1a:cf:9e:72:a1:b7:20:ed:98:9c:03:7f:25:2a:76:5c:86: dc:51:a8:b7:17:2d:3d:0f:5e:62:57:c7:7a:a7:a7:7e:0b:74: a0:90:c1:59:9e:cc:6e:62:b3:8a:ea:e5:51:ea:6e:23:79:99: d7:f7:a1:b3:15:89:a3:ed:40:da:34:ca:94:24:82:5f:01:12: 40:dd:41:49:32:84:f2:06:9a:0a:fa:37:6d:96:10:fd:2d:41: cb:7c:b9:3e:07:97:55:03:d9:be:cb:00:4e:2c:02:f6:1f:b0: ec:e0:b8:cf:a7:ed:42:4d:62:cc:2c:9b:58:3a:fe:a2:d3:cf: 93:cc:c5:41:9d:d7:d3:9e:3a:c9:1e:3a:2c:71:ff:5d:8f:9b: c3:aa:7b:f2:4b:a1:ad:60:b4:6c:59:ae:54:bb:7b:3d:c0:c2: 79:61:22:8a:fb:6d:b9:ad:d3:84:73:d7:64:41:9e:c4:59:8d: c6:87:c9:7a:c9:52:3d:76:ea:65:16:2a:5e:ac:02:c2:f9:34: 9c:83:9e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlpKHnf2G36fTXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MWQ2ZWI2ODctODcwYS00YTE3LWIwNTctYzBlYmEzNmM5ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu0dmbETfRebRZuVz9CjskZ3Uc3sHnmFLJ7+ 8MhwTjoyRWZ/Ubkjt8z0aWR3/xdLZrF9ciFvl3DTG9yhcpCQktoywori478mHYAd 9sypDrweVuqJZDNqbx1YDeRaeuflQBCKEqgWQuZoXt4A5FM3UJKRHcy7e9O+ojUo 8EDwwgfAPxUaMD/LHkjlsaw8yej6jb/qldkSmShj8Dy4FN7SMtAWlcDgtbRZpGda My9VC7HgN+wrn7MvRs+FCPSXe6bnUnkeLLK2jAnSssTcrBs3mXF2JejAlfQCNLbb /0Oy5mTDAVyYJ40qjNXYU7PjiAsBQ/2xI0WLmhc4c9KEV6Fd2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXOEwXJT3h0Vqn3MfMJK2SnDAWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvNGUxNWYwNDctYzBhZS0z ZmU3LWEyNGItN2EyNjExNmFmMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpZb/BJk5bDHnoUJv6vDLCpfKptXYyKduzPf0mgzM4Cw60pSHeb4aJr lLZl5bPxl+BV+BvlPaIaz55yobcg7ZicA38lKnZchtxRqLcXLT0PXmJXx3qnp34L dKCQwVmezG5is4rq5VHqbiN5mdf3obMViaPtQNo0ypQkgl8BEkDdQUkyhPIGmgr6 N22WEP0tQct8uT4Hl1UD2b7LAE4sAvYfsOzguM+n7UJNYswsm1g6/qLTz5PMxUGd 19OeOskeOixx/12Pm8Oqe/JLoa1gtGxZrlS7ez3AwnlhIor7bbmt04Rz12RBnsRZ jcaHyXrJUj126mUWKl6sAsL5NJyDnqI= -----END CERTIFICATE-----Generated at Mon Aug 25 03:03:14 2025 by rpki-client