$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a8866e30-3fba-39a8-a386-1b87deac93d9.roa File: a8866e30-3fba-39a8-a386-1b87deac93d9.roa (raw, json) Hash identifier: h7nWEkOHgNosvD2G3BgTko8b1Lu2xTHNFNN2fSv0x8o= Subject key identifier: C2:19:A9:ED:65:B7:55:A0:AE:C9:00:64:07:1C:B3:A9:9C:C9:FC:C2 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584ACE0BAE16CF39B861CDD69100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a8866e30-3fba-39a8-a386-1b87deac93d9.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 23473 IP address blocks: 66.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ae:16:cf:39:b8:61:cd:d6:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=feee1331-5b2e-4c12-94bd-e5774019c64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:71:0a:80:78:f8:13:97:df:e0:b4:0c:35:5d: 9a:f2:91:a0:0b:fe:64:4b:6e:17:d7:72:69:84:b5: 5c:72:4b:45:d1:ea:e0:a6:da:8c:a5:c8:35:0a:72: 88:46:bf:b0:45:35:a4:40:f1:1f:1d:d1:3d:d2:af: 36:bc:92:0d:c9:75:13:8a:0a:15:f9:7d:14:d9:c1: ab:5c:cd:54:64:2d:8a:73:8a:25:9c:39:da:ff:ec: d8:92:40:8e:10:37:11:dd:81:31:18:a0:5e:ca:e7: ae:02:6b:eb:84:45:bb:6f:91:8a:75:c1:0b:20:4a: bd:5d:79:29:d8:31:3d:d8:de:02:86:e0:c9:7a:60: 10:e9:24:12:81:de:a3:73:df:0e:05:2b:e0:7f:35: c4:fe:86:8f:b3:33:36:47:6f:25:63:5f:84:07:3e: ae:64:f6:0d:e5:b6:f1:8a:35:11:91:f1:c9:e9:20: 8c:92:c8:d4:f1:06:64:d7:7a:96:97:0e:ce:8a:d2: cf:6d:07:e2:85:d7:e8:2e:34:b3:ad:a1:8d:fa:06: 1b:eb:57:38:6b:09:e7:60:7a:e9:cc:24:b1:a9:29: df:57:46:b8:70:74:e6:b5:a0:f5:0d:e0:0a:8e:ae: ac:ac:1f:4e:68:f7:6f:07:ef:7d:df:a8:65:56:1c: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:A9:ED:65:B7:55:A0:AE:C9:00:64:07:1C:B3:A9:9C:C9:FC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a8866e30-3fba-39a8-a386-1b87deac93d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7c:29:3a:f5:b8:00:3b:f1:67:e8:ba:fb:01:b6:1d:6b:53: 9b:28:09:66:d5:71:4a:1f:e1:f2:28:11:ad:70:ab:32:35:68: de:79:5d:e1:ae:b7:1a:61:d1:9d:c9:87:87:3d:9c:fc:00:ce: 30:a5:b9:e4:a3:19:7c:eb:d9:98:08:24:32:c3:91:75:04:73: 33:57:ba:32:3e:92:33:50:c4:f7:b7:48:41:bc:23:5f:10:5e: f9:a0:a2:c3:fb:f1:78:0e:9c:83:94:54:e5:cc:9a:e1:62:ae: dd:5a:c6:08:58:c6:e3:d2:67:1a:4c:eb:59:04:87:87:5d:b3: 3a:90:4c:73:f6:14:9b:3f:6e:86:e8:c7:95:2e:8e:06:f6:93: 76:08:63:60:9f:bc:bd:e1:44:19:07:ef:5c:64:52:c3:57:07: c2:f6:7c:b5:1c:16:ee:61:e1:d1:ca:9f:eb:83:31:d4:f4:29: 61:50:f6:96:a2:af:e7:9e:a9:69:a6:1e:c7:59:c3:a2:62:cb: 56:e9:98:24:ef:8c:89:3f:ef:67:cf:cb:b2:8d:6a:d7:d6:2b: 29:1d:2f:ed:14:d2:fb:b6:ff:61:4e:31:15:96:ef:a7:87:fb: 66:29:6e:ec:f9:df:97:6f:91:2c:87:08:ed:85:1a:9d:90:31: b6:e0:45:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC64Wzzm4Yc3WkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZmVlZTEzMzEtNWIyZS00YzEyLTk0YmQtZTU3NzQwMTljNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3EKgHj4E5ff4LQMNV2a8pGgC/5kS24X13Jp hLVccktF0ergptqMpcg1CnKIRr+wRTWkQPEfHdE90q82vJINyXUTigoV+X0U2cGr XM1UZC2Kc4olnDna/+zYkkCOEDcR3YExGKBeyueuAmvrhEW7b5GKdcELIEq9XXkp 2DE92N4ChuDJemAQ6SQSgd6jc98OBSvgfzXE/oaPszM2R28lY1+EBz6uZPYN5bbx ijURkfHJ6SCMksjU8QZk13qWlw7OitLPbQfihdfoLjSzraGN+gYb61c4awnnYHrp zCSxqSnfV0a4cHTmtaD1DeAKjq6srB9OaPdvB+9936hlVhzGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIZqe1lt1WgrskAZAccs6mcyfzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTg4NjZlMzAtM2ZiYS0z OWE4LWEzODYtMWI4N2RlYWM5M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF8KTr1uAA78WfouvsBth1rU5soCWbVcUof4fIoEa1wqzI1aN55XeGu txph0Z3Jh4c9nPwAzjClueSjGXzr2ZgIJDLDkXUEczNXujI+kjNQxPe3SEG8I18Q XvmgosP78XgOnIOUVOXMmuFirt1axghYxuPSZxpM61kEh4ddszqQTHP2FJs/bobo x5Uujgb2k3YIY2CfvL3hRBkH71xkUsNXB8L2fLUcFu5h4dHKn+uDMdT0KWFQ9pai r+eeqWmmHsdZw6Jiy1bpmCTvjIk/72fPy7KNatfWKykdL+0U0vu2/2FOMRWW76eH +2Ypbuz535dvkSyHCO2FGp2QMbbgRZg= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:43 2025 by rpki-client