$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b30bce79-8db3-3481-90db-d2a12efaade1.roa File: b30bce79-8db3-3481-90db-d2a12efaade1.roa (raw, json) Hash identifier: 0cn253g0XsMnSyAAANiA4vXY3IibY95EbhXS7AqBQOQ= Subject key identifier: 1F:B9:23:B3:97:57:E2:F0:FD:FF:57:46:3A:07:2D:8D:0E:7C:BA:6E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC9C46C0DFC25462C1CB37E0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b30bce79-8db3-3481-90db-d2a12efaade1.roa Signing time: Wed 20 Aug 2025 23:46:25 +0000 ROA not before: Wed 20 Aug 2025 23:46:25 +0000 ROA not after: Wed 19 Nov 2025 00:46:25 +0000 asID: 23473 IP address blocks: 66.253.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:9c:46:c0:df:c2:54:62:c1:cb:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 23:46:25 2025 GMT Not After : Nov 19 00:46:25 2025 GMT Subject: CN=e30223e4-9ff0-40af-86d4-9fa623488c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:39:50:58:48:e9:27:2b:35:a0:9d:83:d4: c0:16:00:15:c4:8a:6e:bc:b7:61:57:a6:e4:44:70: e5:7e:e2:5a:2d:b3:8b:8a:0e:69:2a:aa:15:a7:bc: 83:f9:02:bc:b5:01:70:62:fd:49:ff:b9:55:b9:96: 10:74:d2:21:8e:0d:6d:11:c2:9c:9a:a6:e0:af:7c: 09:92:ae:7e:09:e1:17:40:ca:76:a7:86:56:81:07: cb:17:f7:87:22:98:80:bb:9d:b0:32:9a:49:7d:e5: 13:cc:eb:41:4d:cf:e3:dd:33:08:59:84:7b:10:fa: 0b:18:8b:7a:0a:e0:c4:1e:5c:2b:56:2b:6b:57:97: ec:37:0a:01:05:8a:fc:d6:70:7d:83:5d:35:94:06: ab:08:88:41:32:72:2b:79:98:91:80:ae:6b:a1:86: 87:04:51:66:4c:87:71:98:8a:1d:df:a9:80:8c:88: 0c:0d:d7:25:a8:a5:51:14:3d:4e:25:0b:a6:96:36: 5e:ba:28:24:5f:a6:d2:a7:36:48:58:1e:72:9e:56: 49:90:0f:07:0a:e8:86:6c:8d:86:05:70:df:de:37: 65:bb:39:70:61:79:0c:f7:a7:c6:07:fa:e6:93:80: 67:45:7a:54:36:24:ae:83:84:49:c6:f8:6a:55:53: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:23:B3:97:57:E2:F0:FD:FF:57:46:3A:07:2D:8D:0E:7C:BA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b30bce79-8db3-3481-90db-d2a12efaade1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:96:88:0c:a9:8c:f8:5e:47:34:ec:bd:39:ab:c4:1d:b5:83: d4:10:59:e7:bf:b3:e6:1d:7b:3f:59:df:bf:41:b6:84:78:5f: 0f:8e:0e:3d:fe:8f:16:01:da:45:d6:ac:85:fa:e1:0f:a1:98: 40:c2:77:8f:cc:39:e5:a6:90:5e:09:88:7b:c0:89:42:de:77: 77:dc:17:f6:40:86:a2:56:14:d4:6a:b7:be:db:44:54:95:dc: f6:32:07:a6:95:02:de:64:5b:42:57:40:96:c2:23:6c:2f:bc: 58:fd:b3:88:31:38:60:ce:62:05:28:30:d1:8d:80:21:a1:12: 8b:aa:73:6d:49:f9:a1:db:95:d8:a2:6e:d4:af:80:77:e1:2f: 51:fc:33:16:ee:2f:92:7b:10:59:e1:39:eb:2a:54:3a:01:a9: 19:77:63:28:9c:89:f4:e5:85:64:22:4a:c5:4d:2b:a1:e7:f0: c4:9f:9d:16:55:77:7f:24:1c:d2:7f:76:9f:c5:fb:59:8f:cd: a8:7e:6d:c8:fc:a6:56:3b:75:d2:f8:b4:22:6e:91:82:0e:31: d0:eb:1e:47:03:ce:13:d9:1c:62:8e:3e:8a:be:23:8d:68:90: 27:04:5b:ea:5a:97:34:74:51:48:7b:94:d4:4d:55:b1:8c:96: 08:92:8c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsnEbA38JUYsHLN+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIzNDYyNVoXDTI1MTExOTAwNDYyNVowLzEtMCsGA1UEAxMk ZTMwMjIzZTQtOWZmMC00MGFmLTg2ZDQtOWZhNjIzNDg4Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J45UFhI6ScrNaCdg9TAFgAVxIpuvLdhV6bk RHDlfuJaLbOLig5pKqoVp7yD+QK8tQFwYv1J/7lVuZYQdNIhjg1tEcKcmqbgr3wJ kq5+CeEXQMp2p4ZWgQfLF/eHIpiAu52wMppJfeUTzOtBTc/j3TMIWYR7EPoLGIt6 CuDEHlwrVitrV5fsNwoBBYr81nB9g101lAarCIhBMnIreZiRgK5roYaHBFFmTIdx mIod36mAjIgMDdclqKVRFD1OJQumljZeuigkX6bSpzZIWB5ynlZJkA8HCuiGbI2G BXDf3jdluzlwYXkM96fGB/rmk4BnRXpUNiSug4RJxvhqVVPX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+5I7OXV+Lw/f9XRjoHLY0OfLpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjMwYmNlNzktOGRiMy0z NDgxLTkwZGItZDJhMTJlZmFhZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGWiAypjPheRzTsvTmrxB21g9QQWee/s+Ydez9Z379BtoR4Xw+ODj3+ jxYB2kXWrIX64Q+hmEDCd4/MOeWmkF4JiHvAiULed3fcF/ZAhqJWFNRqt77bRFSV 3PYyB6aVAt5kW0JXQJbCI2wvvFj9s4gxOGDOYgUoMNGNgCGhEouqc21J+aHbldii btSvgHfhL1H8MxbuL5J7EFnhOesqVDoBqRl3YyicifTlhWQiSsVNK6Hn8MSfnRZV d38kHNJ/dp/F+1mPzah+bcj8plY7ddL4tCJukYIOMdDrHkcDzhPZHGKOPoq+I41o kCcEW+palzR0UUh7lNRNVbGMlgiSjPs= -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:16 2025 by rpki-client