$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa File: ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa (raw, json) Hash identifier: CcdIj67XTLZW43CAShIPERuo3wVKt1C5e84flwmjaQU= Subject key identifier: C6:89:74:CF:57:92:C8:DA:D6:DE:54:DA:FE:85:CC:29:84:7E:5F:80 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACB40E3B78C8B98D5EBBA02E0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 20454 IP address blocks: 66.85.128.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e3:b7:8c:8b:98:d5:eb:ba:02:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=01a281a3-d625-4d80-aca2-ff8a5aae6db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:1c:4e:c3:bd:e8:32:c5:a9:6f:d6:49:9e: 91:6e:bf:90:f9:00:3f:05:db:86:7a:e4:88:a9:72: eb:6d:33:c2:22:9b:6e:54:a4:8f:91:68:13:4f:d8: 81:d5:14:60:f2:cc:02:55:9f:ca:cd:2f:bb:60:f9: 0c:ca:1e:f7:b4:5d:c6:ef:73:06:c1:e8:2a:46:ef: e9:1e:67:3d:5c:3b:fb:48:56:d8:52:0a:b7:72:e1: 6c:89:1c:da:f0:4d:29:6f:e2:2b:bc:70:9b:d8:29: 57:41:a7:91:a6:23:a5:ce:4c:b5:bf:e5:d0:3c:6d: 7e:89:f3:67:54:09:21:6d:c3:ba:4e:90:6b:ff:99: 28:8f:85:0b:06:f3:bc:08:ac:cb:6d:c6:de:5a:7b: 77:38:f7:8f:d4:55:f8:79:d7:33:0b:0d:ad:6f:aa: e1:d5:5a:7b:bf:17:d9:d4:cb:14:db:ea:62:29:49: 91:73:c8:2d:bb:e0:c9:03:47:cb:70:32:d6:38:53: 9d:ef:a2:dc:53:95:3b:e7:5c:76:5d:56:53:e4:f3: d6:4a:81:93:78:a8:8a:e6:29:5b:5c:ed:ac:60:dd: c4:2b:28:ed:01:1b:3b:0c:72:0d:58:94:31:08:9e: aa:31:4e:b2:17:39:b7:0f:5f:a6:87:2c:ee:db:7b: d7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:89:74:CF:57:92:C8:DA:D6:DE:54:DA:FE:85:CC:29:84:7E:5F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 66.85.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:31:80:d4:0f:83:12:0a:d0:ac:e8:7a:11:73:96:71:86:dc: 39:c8:4b:04:85:10:3a:66:41:5e:fa:b2:9c:9d:f0:7b:79:28: c4:0c:bb:05:bc:74:b9:20:07:0f:50:a3:49:2b:39:06:c0:f3: f0:7b:37:97:cd:d7:30:ab:19:7f:66:2a:a4:38:de:fa:a7:c7: 60:f2:79:6e:17:9d:ff:39:50:88:65:d6:02:32:02:97:e8:a5: 55:82:9c:81:9f:38:75:61:45:00:c1:57:d8:8a:e2:7b:4a:cb: 92:68:56:a8:3a:b4:4b:7e:30:66:25:75:f5:fe:d5:2d:70:0f: 96:88:ff:7e:80:d3:79:3e:c0:6e:6c:d1:e1:b3:a7:53:07:ef: 56:ca:9c:8d:44:dc:1c:fb:7b:ff:2b:6d:7c:41:8c:6a:c2:7b: ad:e7:36:d3:07:7b:94:c2:1d:5c:87:c7:19:97:56:57:68:ed: ff:60:45:9e:8b:db:22:de:5e:49:d0:6d:e5:c3:26:7d:d5:50: 41:37:49:f3:ba:42:e4:e5:0d:0a:98:9f:8c:4e:ea:9c:b0:55: 40:00:7e:8d:62:00:cd:69:5b:ad:38:ea:0e:76:e6:d7:01:4b: d5:51:2c:68:de:f1:1d:a8:81:3a:bf:9a:4d:a6:8b:04:9f:f1: 21:f9:7f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOO3jIuY1eu6AuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDFhMjgxYTMtZDYyNS00ZDgwLWFjYTItZmY4YTVhYWU2ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLYcTsO96DLFqW/WSZ6Rbr+Q+QA/BduGeuSI qXLrbTPCIptuVKSPkWgTT9iB1RRg8swCVZ/KzS+7YPkMyh73tF3G73MGwegqRu/p Hmc9XDv7SFbYUgq3cuFsiRza8E0pb+IrvHCb2ClXQaeRpiOlzky1v+XQPG1+ifNn VAkhbcO6TpBr/5koj4ULBvO8CKzLbcbeWnt3OPeP1FX4edczCw2tb6rh1Vp7vxfZ 1MsU2+piKUmRc8gtu+DJA0fLcDLWOFOd76LcU5U751x2XVZT5PPWSoGTeKiK5ilb XO2sYN3EKyjtARs7DHINWJQxCJ6qMU6yFzm3D1+mhyzu23vX6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaJdM9Xksja1t5U2v6FzCmEfl+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWMwN2YzMjYtNTJlYi0z NWJmLThjNzctY2FmZDFhMmU2YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgxgNQPgxIK0KzoehFzlnGG3DnISwSFEDpmQV76spyd8Ht5KMQMuwW8 dLkgBw9Qo0krOQbA8/B7N5fN1zCrGX9mKqQ43vqnx2DyeW4Xnf85UIhl1gIyApfo pVWCnIGfOHVhRQDBV9iK4ntKy5JoVqg6tEt+MGYldfX+1S1wD5aI/36A03k+wG5s 0eGzp1MH71bKnI1E3Bz7e/8rbXxBjGrCe63nNtMHe5TCHVyHxxmXVldo7f9gRZ6L 2yLeXknQbeXDJn3VUEE3SfO6QuTlDQqYn4xO6pywVUAAfo1iAM1pW6046g525tcB S9VRLGje8R2ogTq/mk2miwSf8SH5f5Y= -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:54 2025 by rpki-client