$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5d7e6b28-a0d3-3194-99c1-b9701e1b3ae3.roa File: 5d7e6b28-a0d3-3194-99c1-b9701e1b3ae3.roa (raw, json) Hash identifier: 5H3P5vtSnfZErNmHECdUHrfbWJkhWK3T37W+wLrAfIU= Subject key identifier: EA:1A:F7:9B:57:60:15:29:5D:30:64:7F:35:53:8C:B2:56:3E:CE:C2 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AECA4D02410DBED994EDF3100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5d7e6b28-a0d3-3194-99c1-b9701e1b3ae3.roa Signing time: Thu 21 Aug 2025 00:03:37 +0000 ROA not before: Thu 21 Aug 2025 00:03:37 +0000 ROA not after: Wed 19 Nov 2025 01:03:37 +0000 asID: 23473 IP address blocks: 66.253.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:a4:d0:24:10:db:ed:99:4e:df:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 21 00:03:37 2025 GMT Not After : Nov 19 01:03:37 2025 GMT Subject: CN=698b513a-16b3-4ee9-8e26-2e92ba41623f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:05:f0:44:a5:a8:f9:8d:0d:c0:c0:9f:96: 45:87:49:68:e4:8e:40:1d:ea:3d:e0:77:41:46:c1: 95:9a:5b:99:23:f1:a2:a7:b6:f7:a6:61:45:f5:1b: c2:f1:d7:ab:cc:89:0b:de:20:c4:9e:b8:e8:b9:2a: 84:51:27:df:da:79:d1:0b:ad:4b:27:41:5b:a8:ad: 15:3a:81:a7:3a:03:18:7a:6c:54:50:f6:ce:88:70: 50:c0:d7:eb:70:89:86:7c:ba:dc:73:d1:e5:e6:53: f9:29:07:75:29:49:c0:cf:cb:c8:59:6d:a6:7b:69: 9e:13:9c:23:de:8e:36:24:2c:8d:76:2d:2c:bc:ad: 83:15:5b:4c:3c:63:f3:df:4a:40:c7:fb:1a:ce:c0: 1a:9c:81:cd:18:5f:de:e2:c3:0f:e0:12:67:ef:ca: b8:09:4d:78:3c:7e:c6:25:03:86:fc:d4:d6:44:f5: 86:36:27:2b:fa:46:0a:83:54:97:41:f2:a7:d5:7b: 21:f3:05:11:75:21:30:69:5c:b9:1b:4e:3c:3b:bb: 15:31:42:f5:7e:50:7c:7a:56:c4:45:ac:fa:c9:29: bb:37:59:76:63:0d:10:97:f7:01:bd:55:83:ac:47: 04:51:c5:49:6d:eb:eb:94:c2:59:d5:58:2d:3f:43: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1A:F7:9B:57:60:15:29:5D:30:64:7F:35:53:8C:B2:56:3E:CE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5d7e6b28-a0d3-3194-99c1-b9701e1b3ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a6:ae:13:a4:f9:71:c4:c4:04:29:af:9a:36:45:c7:3d:cb: 38:c6:83:be:a0:e4:86:5f:47:f7:6d:b7:8f:7e:6d:57:1f:16: d9:53:57:13:63:8c:b4:90:9f:d0:cf:b8:e1:0b:e3:d4:6c:3f: ed:41:4f:f8:af:f6:9a:6e:69:e7:92:21:ae:b7:77:16:6d:26: 83:c1:64:9b:30:c5:98:99:e5:bd:5d:fd:2d:1d:51:5b:a9:dd: ef:55:1d:94:89:0f:57:0f:bb:ec:4c:d2:f3:a5:3d:20:ae:d7: 39:76:89:ad:6a:0c:e3:5d:58:55:3e:63:3b:44:cb:c5:62:72: 52:db:0f:59:9a:61:ab:58:50:49:b5:a6:8a:4b:95:20:c4:68: 4c:e3:0e:11:1b:c3:94:f3:88:b1:01:de:ec:f5:1e:bf:98:0a: 10:b1:f5:90:ed:99:81:3f:80:49:f8:45:93:83:dd:48:f5:76: 41:79:f8:5e:7d:1a:e2:25:c0:27:d0:e0:81:23:7b:6d:9f:28: 9d:4b:43:7a:c8:11:fb:bc:b3:f3:82:d0:01:1f:86:2b:07:2d: df:24:43:8a:93:d1:6d:51:66:9a:85:a2:fb:5b:33:99:e3:b1: fe:5f:ca:23:e9:24:62:2c:a5:1a:04:82:78:aa:1b:1d:c8:6c: 58:55:8e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErspNAkENvtmU7fMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMTAwMDMzN1oXDTI1MTExOTAxMDMzN1owLzEtMCsGA1UEAxMk Njk4YjUxM2EtMTZiMy00ZWU5LThlMjYtMmU5MmJhNDE2MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGcF8ESlqPmNDcDAn5ZFh0lo5I5AHeo94HdB RsGVmluZI/Gip7b3pmFF9RvC8derzIkL3iDEnrjouSqEUSff2nnRC61LJ0FbqK0V OoGnOgMYemxUUPbOiHBQwNfrcImGfLrcc9Hl5lP5KQd1KUnAz8vIWW2me2meE5wj 3o42JCyNdi0svK2DFVtMPGPz30pAx/sazsAanIHNGF/e4sMP4BJn78q4CU14PH7G JQOG/NTWRPWGNicr+kYKg1SXQfKn1Xsh8wURdSEwaVy5G048O7sVMUL1flB8elbE Raz6ySm7N1l2Yw0Ql/cBvVWDrEcEUcVJbevrlMJZ1VgtP0OgbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoa95tXYBUpXTBkfzVTjLJWPs7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWQ3ZTZiMjgtYTBkMy0z MTk0LTk5YzEtYjk3MDFlMWIzYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGmrhOk+XHExAQpr5o2Rcc9yzjGg76g5IZfR/dtt49+bVcfFtlTVxNj jLSQn9DPuOEL49RsP+1BT/iv9ppuaeeSIa63dxZtJoPBZJswxZiZ5b1d/S0dUVup 3e9VHZSJD1cPu+xM0vOlPSCu1zl2ia1qDONdWFU+YztEy8ViclLbD1maYatYUEm1 popLlSDEaEzjDhEbw5TziLEB3uz1Hr+YChCx9ZDtmYE/gEn4RZOD3Uj1dkF5+F59 GuIlwCfQ4IEje22fKJ1LQ3rIEfu8s/OC0AEfhisHLd8kQ4qT0W1RZpqFovtbM5nj sf5fyiPpJGIspRoEgniqGx3IbFhVjv0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:36 2025 by rpki-client