$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa File: 25e4f701-0c1c-336e-b2fc-6226317b20ab.roa (raw, json) Hash identifier: Q2K2jdAz7H9jWHqKdEmBblSeIFshUJZ5viR1L2ercXg= Subject key identifier: 30:1C:80:EC:F7:F8:15:A0:FC:32:70:63:40:53:4D:3C:BB:05:30:7C Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584ACE0BA515C3CB33B9FFFF2310 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20303 IP address blocks: 66.43.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a5:15:c3:cb:33:b9:ff:ff:23:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=c6a78df5-a82e-4623-a4ce-ca0be5a937dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:ae:0e:3d:3b:d9:1b:de:2b:97:4d:82:16: b9:4c:23:e2:18:3c:a1:7d:e8:37:45:85:19:a7:c1: 9b:fd:37:14:34:b6:76:a2:2e:0a:69:f5:1f:ee:ea: 5d:13:c9:f9:5c:2d:75:61:ce:43:da:6c:ba:d7:07: f2:20:11:a5:df:61:4b:1c:af:bd:8e:d5:0e:5c:64: b8:d7:a1:d3:18:f1:58:fd:4f:f8:7a:bc:1f:0f:14: 2e:04:59:f4:93:4f:af:e6:5b:27:f5:21:7c:77:51: 41:5b:35:b9:78:f1:39:60:82:81:b5:a0:9f:7e:c4: 8a:75:7d:ec:e0:6d:4f:89:ed:bd:5b:a9:af:a2:24: 71:88:ad:63:94:54:ce:2c:90:d8:f2:47:b2:3b:b3: d9:1a:21:e9:cb:16:0d:89:7b:8e:e5:7a:96:0f:c1: 24:6e:f7:89:07:ad:58:3c:c6:8a:c1:cd:b5:31:ff: 43:03:c4:b0:47:1e:34:8b:c9:ee:3c:44:9b:4d:af: 30:6e:73:67:9b:5b:23:1e:12:c2:36:66:b3:34:2b: 0b:81:87:67:74:b2:d3:2a:1d:11:bd:a9:89:a9:d2: b2:c3:3a:ee:54:5f:a3:57:dc:5f:a4:c9:26:7c:64: 1e:c1:29:6d:b8:32:b1:8e:91:2c:0d:2d:ca:8b:91: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1C:80:EC:F7:F8:15:A0:FC:32:70:63:40:53:4D:3C:BB:05:30:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 66.43.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d4:4b:b7:f2:f3:06:5d:92:ae:74:14:3f:8c:91:3f:cb:84: e8:73:74:9e:a1:42:73:35:91:96:8f:fa:c5:cc:38:a0:73:5e: e3:80:27:c4:af:e0:72:fc:3f:c1:47:7b:a7:77:02:f6:83:5a: 5c:28:00:c3:d3:38:8f:68:f5:40:23:77:a5:0f:a5:f6:f9:fd: b8:4c:1d:c5:c4:4b:c9:24:f1:9e:2c:c1:ad:36:79:35:91:e0: 80:5c:e6:11:cf:71:f9:15:13:8c:be:4c:c3:22:12:90:8f:a4: 59:cb:e3:5a:f3:df:02:20:09:ad:6a:38:60:71:60:21:64:d2: 51:00:ef:8d:8e:3e:ff:68:97:d2:e0:44:92:ac:db:d2:4f:dd: 02:c3:54:6b:c9:d6:60:96:6e:64:8b:f7:c6:5c:c3:6c:37:87: 54:77:b3:b2:bd:63:cf:06:4d:f7:af:ea:2e:dc:60:96:4e:5a: ec:4a:47:5b:c6:91:75:0d:e0:c3:55:f1:63:27:e0:88:dc:32: e4:3b:4a:39:09:39:0f:d1:84:e9:eb:9b:45:63:f7:79:33:0d: 97:58:29:47:d9:03:9b:e4:f5:23:19:49:1c:d8:c8:c9:8b:70: fd:f5:d1:66:21:f9:72:38:d0:c8:f3:a3:04:30:ee:bf:87:b4: 38:94:02:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6UVw8szuf//IxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YzZhNzhkZjUtYTgyZS00NjIzLWE0Y2UtY2EwYmU1YTkzN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSCuDj072RveK5dNgha5TCPiGDyhfeg3RYUZ p8Gb/TcUNLZ2oi4KafUf7updE8n5XC11Yc5D2my61wfyIBGl32FLHK+9jtUOXGS4 16HTGPFY/U/4erwfDxQuBFn0k0+v5lsn9SF8d1FBWzW5ePE5YIKBtaCffsSKdX3s 4G1Pie29W6mvoiRxiK1jlFTOLJDY8keyO7PZGiHpyxYNiXuO5XqWD8EkbveJB61Y PMaKwc21Mf9DA8SwRx40i8nuPESbTa8wbnNnm1sjHhLCNmazNCsLgYdndLLTKh0R vamJqdKywzruVF+jV9xfpMkmfGQewSltuDKxjpEsDS3Ki5GsuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAcgOz3+BWg/DJwY0BTTTy7BTB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMjVlNGY3MDEtMGMxYy0z MzZlLWIyZmMtNjIyNjMxN2IyMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQisIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDUS7fy8wZdkq50FD+MkT/LhOhzdJ6hQnM1kZaP+sXMOKBzXuOAJ8Sv 4HL8P8FHe6d3AvaDWlwoAMPTOI9o9UAjd6UPpfb5/bhMHcXES8kk8Z4swa02eTWR 4IBc5hHPcfkVE4y+TMMiEpCPpFnL41rz3wIgCa1qOGBxYCFk0lEA742OPv9ol9Lg RJKs29JP3QLDVGvJ1mCWbmSL98Zcw2w3h1R3s7K9Y88GTfev6i7cYJZOWuxKR1vG kXUN4MNV8WMn4IjcMuQ7SjkJOQ/RhOnrm0Vj93kzDZdYKUfZA5vk9SMZSRzYyMmL cP310WYh+XI40MjzowQw7r+HtDiUArc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:38:48 2025 by rpki-client