$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa File: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (raw, json) Hash identifier: M/XhFksSsIlp+qtfzTFGJrI+Zu0qYAaSFW6qwVVhphA= Subject key identifier: 8F:FB:F2:48:DC:4C:C0:E3:CC:68:93:26:BD:46:CB:7C:94:24:A8:BC Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584ACE0BA11B27C03DEE687C9FC0 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 209242 IP address blocks: 66.118.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a1:1b:27:c0:3d:ee:68:7c:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=d0b29936-d8ae-4a8e-8d29-81c32df08d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:85:db:42:71:82:41:ee:30:48:92:96:41: fd:94:1f:04:c5:df:ac:86:27:e3:66:6f:fc:c7:d1: 46:63:4e:e6:cc:56:96:9a:29:05:95:34:84:5b:23: 5e:c3:90:97:12:21:d4:35:1f:e4:0e:2a:a8:37:74: cf:c8:c3:be:12:58:42:2a:c9:00:d2:48:f5:be:b1: 71:87:0e:c6:6c:3d:67:5b:2a:87:f8:84:1e:98:d4: fe:01:2e:6e:ab:c2:eb:e6:86:c7:e2:55:a8:20:46: 66:cf:77:ca:1d:04:5f:e6:1e:22:d7:23:b2:02:99: a9:a7:e6:30:5d:b9:59:47:8f:ef:e0:0e:33:a6:18: 6f:4c:63:3f:d7:73:73:bc:45:16:1e:93:3d:be:26: 71:31:7d:89:22:95:59:9e:85:db:7d:fd:11:e9:ef: 6d:0e:98:f1:74:73:ff:00:b3:84:64:0b:b4:60:f6: d1:a9:91:a2:9d:41:5f:41:0c:f2:e5:e8:7e:ec:c5: 4f:39:cf:a9:25:ca:3e:2e:dc:cf:f1:21:6a:c7:65: 34:8b:b2:b2:f9:f7:f3:d9:95:e6:54:7a:5e:79:39: cd:45:18:95:56:e7:24:29:ac:e3:84:dc:60:25:0e: cf:09:eb:3e:03:e7:4b:3f:95:77:aa:94:57:74:22: 9a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FB:F2:48:DC:4C:C0:E3:CC:68:93:26:BD:46:CB:7C:94:24:A8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d1:7e:cc:6b:a1:ed:4a:cc:a4:63:21:25:10:1c:4a:e8:90: cb:d9:f7:0c:b0:2e:ab:ba:24:81:14:50:02:6e:99:ee:9c:7f: 3c:80:2b:12:4b:9f:d4:12:56:41:3b:d3:0b:1c:86:cb:74:1a: b3:3a:94:d7:05:d5:e4:49:d1:2f:ea:51:c3:7a:9b:7e:e0:ce: a3:8a:cb:a8:d9:0f:c3:38:d1:18:42:34:19:52:83:d2:27:23: 36:51:29:3e:2a:aa:09:db:bc:1f:01:24:7a:a7:01:21:08:0f: 0f:ae:75:1b:01:e3:fe:35:20:76:ed:4b:49:55:c0:2e:cd:a2: 41:9b:68:fd:13:b1:2f:c1:36:9c:b7:c8:ff:20:5a:27:e3:8b: e0:3a:f2:2f:69:25:3e:9b:4b:0a:7a:ab:5a:cb:13:d7:03:6f: d7:4b:38:e8:f0:f3:a8:7e:a8:e7:1c:be:d7:63:d7:33:d0:a3: 67:1d:90:ec:d2:a1:52:81:cb:31:97:93:9f:38:ed:c7:2c:d8: 65:80:28:d8:5e:07:a4:df:6a:4c:ff:7a:f2:39:51:b9:b3:b8: 40:7d:11:e6:26:24:75:39:7e:6f:66:9f:b2:c6:6e:4e:fd:c5: 9f:16:fc:87:78:58:c3:94:f7:87:e4:e0:5d:be:bd:cd:62:1e: 3f:a0:01:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6EbJ8A97mh8n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZDBiMjk5MzYtZDhhZS00YThlLThkMjktODFjMzJkZjA4ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSmF20JxgkHuMEiSlkH9lB8Exd+shifjZm/8 x9FGY07mzFaWmikFlTSEWyNew5CXEiHUNR/kDiqoN3TPyMO+ElhCKskA0kj1vrFx hw7GbD1nWyqH+IQemNT+AS5uq8Lr5obH4lWoIEZmz3fKHQRf5h4i1yOyApmpp+Yw XblZR4/v4A4zphhvTGM/13NzvEUWHpM9viZxMX2JIpVZnoXbff0R6e9tDpjxdHP/ ALOEZAu0YPbRqZGinUFfQQzy5eh+7MVPOc+pJco+LtzP8SFqx2U0i7Ky+ffz2ZXm VHpeeTnNRRiVVuckKazjhNxgJQ7PCes+A+dLP5V3qpRXdCKaYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/78kjcTMDjzGiTJr1Gy3yUJKi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvMzQ4MDU1MmUtNzhkOC0z MzgwLTk5NmQtZGQzZjk0N2JiNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnRfsxroe1KzKRjISUQHErokMvZ9wywLqu6JIEUUAJume6cfzyAKxJL n9QSVkE70wschst0GrM6lNcF1eRJ0S/qUcN6m37gzqOKy6jZD8M40RhCNBlSg9In IzZRKT4qqgnbvB8BJHqnASEIDw+udRsB4/41IHbtS0lVwC7NokGbaP0TsS/BNpy3 yP8gWifji+A68i9pJT6bSwp6q1rLE9cDb9dLOOjw86h+qOccvtdj1zPQo2cdkOzS oVKByzGXk5847ccs2GWAKNheB6Tfakz/evI5UbmzuEB9EeYmJHU5fm9mn7LGbk79 xZ8W/Id4WMOU94fk4F2+vc1iHj+gAdw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:01 2025 by rpki-client