$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa File: 4deac7bd-bb42-3c2d-9be3-d984835111b5.roa (raw, json) Hash identifier: U7MJtgQXgLMZZ0eglGtAb0+3DNMMHRj2vB6mXeUJkL8= Subject key identifier: 32:88:FB:B1:F5:07:77:04:93:EE:36:D6:A8:43:48:DC:19:10:4B:AE Certificate issuer: /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae Certificate serial: 010D0C9F4328584AECC13127B2CA41402A4F64C0 Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 25637 IP address blocks: 66.228.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:31:27:b2:ca:41:40:2a:4f:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=28d28e0c-4fe4-40c0-8728-ddb442648a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:db:73:f2:4e:c5:6c:99:dc:b7:a8:a8:56: 5b:49:67:cb:bf:ce:6b:64:6a:e5:bb:fb:c0:e4:da: a7:05:ed:06:62:5d:ca:23:dd:7c:28:51:0d:48:5d: c8:b7:f5:d3:de:c6:d8:94:08:3f:7b:da:b8:ef:fb: b2:ef:fc:30:e1:77:56:b2:d3:37:3f:64:a3:6e:dd: a1:59:53:1f:96:60:ba:10:2c:91:c9:74:a1:38:eb: 96:78:16:b8:b8:36:b2:a6:0c:0c:f0:a3:27:2a:c4: 4a:0d:0d:f6:d7:38:ea:d7:e4:bd:a2:d3:64:97:b8: 99:19:21:fc:43:ea:05:44:f7:41:e3:3b:17:9c:88: 19:4d:5e:e4:0a:e9:41:75:b2:5e:c0:49:34:0a:2a: b2:11:84:24:cd:f8:1c:8e:15:7e:80:90:6e:a8:be: da:ae:0a:0f:67:d1:4f:b1:5c:79:4e:5e:6c:83:7a: 24:4b:bf:a1:53:51:5c:cf:0c:20:7d:6f:2c:5c:8f: 63:83:fc:6e:35:56:81:0a:25:b4:72:f3:71:f0:1d: e8:15:e3:c3:de:b8:34:5c:77:55:4c:06:52:48:59: 11:39:9f:ca:50:8a:41:cc:8b:53:e0:74:62:c0:e1: 5d:be:f3:11:69:34:2f:b8:77:49:d7:00:72:15:75: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:88:FB:B1:F5:07:77:04:93:EE:36:D6:A8:43:48:DC:19:10:4B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl X509v3 Authority Key Identifier: keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer sbgp-ipAddrBlock: critical IPv4: 66.228.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:62:3a:23:ca:df:3a:40:6e:5f:bd:c6:f5:99:02:30:6b:9b: 9a:bd:9e:c6:f4:a2:15:20:ef:d3:36:4d:bf:e5:53:bf:c9:52: 9c:71:d5:c2:d2:d9:72:f4:53:ea:b1:e6:d0:54:25:03:2d:e9: b4:0f:98:5d:23:1d:59:eb:6a:82:dd:4a:fa:32:ef:dc:e8:e6: 2a:67:31:95:dc:b2:8b:52:ce:11:e5:15:20:76:f6:6c:4e:38: df:aa:a4:8b:de:62:de:26:1d:7f:af:6e:69:43:36:78:39:14: a6:b3:bf:eb:13:d7:6a:78:cf:d0:e4:10:e1:08:50:9f:78:7e: 3e:ad:e1:a7:73:9e:38:2a:23:3e:37:e6:c7:b6:6e:cb:82:9f: 97:74:e4:c3:6a:7a:48:81:47:89:f0:99:8b:c5:bc:be:86:20: df:f7:0d:17:93:0a:58:de:70:ce:ec:11:52:14:57:e9:28:62: 96:da:ae:96:74:61:4c:d6:e1:2d:84:17:e1:e5:5c:50:05:93: 11:3e:4d:f4:64:71:9c:64:66:97:a3:e0:8d:06:6d:18:e0:f3: 1d:f2:fc:61:3d:96:b4:5d:ee:d8:70:52:3e:f1:ca:60:0f:78: 24:1d:5f:39:7b:6c:53:5d:54:4e:79:5b:d1:12:dc:f1:06:0f: 9a:80:f2:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTEnsspBQCpPZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmNDliNmYtYTE3MC00ODVlLThjMDctZDUxOGI5MDZj NmFlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjhkMjhlMGMtNGZlNC00MGMwLTg3MjgtZGRiNDQyNjQ4YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr7bc/JOxWyZ3LeoqFZbSWfLv85rZGrlu/vA 5NqnBe0GYl3KI918KFENSF3It/XT3sbYlAg/e9q47/uy7/ww4XdWstM3P2Sjbt2h WVMflmC6ECyRyXShOOuWeBa4uDaypgwM8KMnKsRKDQ321zjq1+S9otNkl7iZGSH8 Q+oFRPdB4zsXnIgZTV7kCulBdbJewEk0CiqyEYQkzfgcjhV+gJBuqL7argoPZ9FP sVx5Tl5sg3okS7+hU1FczwwgfW8sXI9jg/xuNVaBCiW0cvNx8B3oFePD3rg0XHdV TAZSSFkROZ/KUIpBzItT4HRiwOFdvvMRaTQvuHdJ1wByFXVczQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKI+7H1B3cEk+421qhDSNwZEEuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0 OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4YjkwNmM2YWUvNGRlYWM3YmQtYmI0Mi0z YzJkLTliZTMtZDk4NDgzNTExMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmNDliNmYtYTE3MC00ODVlLThj MDctZDUxOGI5MDZjNmFlL2ExZjQ5YjZmLWExNzAtNDg1ZS04YzA3LWQ1MThiOTA2 YzZhZS5jcmwwHwYDVR0jBBgwFoAUX9bbEgNtVA77X1VfwUr8INlUplQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4 YjkwNmM2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFiOiPK3zpAbl+9xvWZAjBrm5q9nsb0ohUg79M2Tb/lU7/JUpxx1cLS 2XL0U+qx5tBUJQMt6bQPmF0jHVnraoLdSvoy79zo5ipnMZXcsotSzhHlFSB29mxO ON+qpIveYt4mHX+vbmlDNng5FKazv+sT12p4z9DkEOEIUJ94fj6t4adznjgqIz43 5se2bsuCn5d05MNqekiBR4nwmYvFvL6GIN/3DReTCljecM7sEVIUV+koYpbarpZ0 YUzW4S2EF+HlXFAFkxE+TfRkcZxkZpej4I0GbRjg8x3y/GE9lrRd7thwUj7xymAP eCQdXzl7bFNdVE55W9ES3PEGD5qA8hI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:24:05 2025 by rpki-client