$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b33524e9-0082-3463-8795-8c5fb806556b.roa File: b33524e9-0082-3463-8795-8c5fb806556b.roa (raw, json) Hash identifier: 6iXa/NWFlqH8Ttag8Cra8Nkr+aENIMV0uzWFTl8OpPM= Subject key identifier: 76:AD:DE:03:22:EB:3F:3F:66:0C:DD:0E:E7:DA:D6:34:43:03:F7:3E Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Certificate serial: 010D0C9F4328584AE5C677793CC5CDBBB1FA5F80 Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b33524e9-0082-3463-8795-8c5fb806556b.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 3855 IP address blocks: 66.55.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:77:79:3c:c5:cd:bb:b1:fa:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=1aeb1de9-942f-42ab-8188-9ef281f33f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1d:9a:0a:16:79:a8:c9:4a:93:74:0d:cb:ba: 74:41:f5:6f:13:6c:3d:a0:d6:a8:ee:79:0f:d9:d8: 8d:13:9f:b3:9b:97:01:02:a9:70:b8:f1:10:ff:28: d2:23:bc:f3:14:38:48:68:7d:c2:d5:05:02:2a:c0: a7:99:4b:61:59:c5:cd:9b:c4:4a:0d:74:49:e9:0a: 1a:85:33:8b:8a:39:58:b1:58:75:08:55:43:4e:c5: 0d:3d:23:df:33:37:a6:f8:c3:72:ce:f7:18:dc:c7: f1:12:78:fc:0d:d9:29:d5:7a:44:2f:8b:aa:88:e5: 5e:a2:1e:db:36:37:94:65:83:71:8f:90:62:c1:67: 5b:48:39:71:91:81:4a:54:7c:da:b2:57:ec:90:e1: ee:0f:2f:df:04:86:8b:70:64:12:b3:88:85:2e:9a: c4:d2:a6:ae:90:de:27:53:9a:b9:fb:bb:cd:3c:e0: f0:d8:c8:4c:7d:7d:a9:98:18:0b:ef:53:88:4d:11: 51:8c:53:50:77:d9:ad:e8:88:e1:88:77:c4:f9:00: f6:94:73:fb:22:a6:28:94:49:91:12:3f:62:43:9c: 1b:f4:5a:87:15:1d:61:18:20:ea:dc:3e:4b:ed:0c: dd:a2:72:d3:f2:c2:ae:6b:4a:02:f2:ad:ba:06:8e: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AD:DE:03:22:EB:3F:3F:66:0C:DD:0E:E7:DA:D6:34:43:03:F7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b33524e9-0082-3463-8795-8c5fb806556b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl X509v3 Authority Key Identifier: keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer sbgp-ipAddrBlock: critical IPv4: 66.55.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:33:44:fd:3c:c2:07:1d:b6:0a:8d:d4:e9:83:1d:0e:d8:fa: 25:4d:51:40:9d:77:2b:de:d3:61:ed:f8:cf:51:de:17:9c:18: 06:b5:48:e0:d2:6b:f3:2c:63:73:cb:07:a0:29:fe:19:f5:67: a2:18:5d:58:be:c2:88:2c:60:c8:ea:4b:e0:4e:58:76:50:3d: d5:a2:ff:54:e4:3a:78:dc:36:03:87:24:5e:6b:85:7c:13:39: fb:f5:83:53:db:22:c2:8b:0a:dd:ab:41:4a:e3:f3:c5:92:fe: 18:c2:11:d6:07:b5:ce:55:ed:85:11:22:b5:78:44:9f:fb:34: 37:19:f7:4b:e6:62:d5:91:93:0f:d1:be:2f:c1:ac:c6:32:8f: bb:4b:9b:26:20:f9:3f:d2:5d:5c:e4:fa:2b:33:0a:30:d2:43: 4d:70:96:aa:e6:73:86:01:5c:a1:9b:79:bc:f0:8b:c0:c2:1d: 5d:9c:e2:ea:36:4e:f8:21:2a:da:e6:7a:24:2d:57:a5:68:43: a1:6e:6f:c8:4e:b6:2c:2d:9a:a1:4d:e4:81:55:77:59:18:03: 16:e7:b7:82:3e:af:56:a7:9d:7a:8b:4b:78:8f:df:2e:86:46: 14:71:b7:b6:5d:84:c1:cc:29:65:d8:98:11:28:8e:0f:8a:5b: 73:8c:79:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnd5PMXNu7H6X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5 ZGIxMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MWFlYjFkZTktOTQyZi00MmFiLTgxODgtOWVmMjgxZjMzZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R2aChZ5qMlKk3QNy7p0QfVvE2w9oNao7nkP 2diNE5+zm5cBAqlwuPEQ/yjSI7zzFDhIaH3C1QUCKsCnmUthWcXNm8RKDXRJ6Qoa hTOLijlYsVh1CFVDTsUNPSPfMzem+MNyzvcY3MfxEnj8Ddkp1XpEL4uqiOVeoh7b NjeUZYNxj5BiwWdbSDlxkYFKVHzaslfskOHuDy/fBIaLcGQSs4iFLprE0qaukN4n U5q5+7vNPODw2MhMfX2pmBgL71OITRFRjFNQd9mt6IjhiHfE+QD2lHP7IqYolEmR Ej9iQ5wb9FqHFR1hGCDq3D5L7QzdonLT8sKua0oC8q26Bo4mlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHat3gMi6z8/ZgzdDufa1jRDA/c+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvYjMzNTI0ZTktMDA4Mi0z NDYzLTg3OTUtOGM1ZmI4MDY1NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0zRP08wgcdtgqN1OmDHQ7Y+iVNUUCddyve02Ht+M9R3hecGAa1SODS a/MsY3PLB6Ap/hn1Z6IYXVi+wogsYMjqS+BOWHZQPdWi/1TkOnjcNgOHJF5rhXwT Ofv1g1PbIsKLCt2rQUrj88WS/hjCEdYHtc5V7YURIrV4RJ/7NDcZ90vmYtWRkw/R vi/BrMYyj7tLmyYg+T/SXVzk+iszCjDSQ01wlqrmc4YBXKGbebzwi8DCHV2c4uo2 TvghKtrmeiQtV6VoQ6Fub8hOtiwtmqFN5IFVd1kYAxbnt4I+r1annXqLS3iP3y6G RhRxt7ZdhMHMKWXYmBEojg+KW3OMeSs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:30 2025 by rpki-client