$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa File: 38b0deb3-ebb4-3576-86af-67255c5388ed.roa (raw, json) Hash identifier: dwJ0vPFpPAdnhGUER/rYBRshEspaSbiVl5Wop03TorE= Subject key identifier: CC:51:59:64:46:8F:C7:60:D7:E2:9F:47:F9:5C:3F:B6:09:06:D6:52 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584AC2E0E2E5A3C049F040DED980 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 32181 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e2:e5:a3:c0:49:f0:40:de:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=5dcc6c29-0c6d-47d2-8830-1a5c464e43bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:1b:8c:c0:1a:ed:c2:2d:cf:4d:61:ca:6c: 78:3e:9d:3f:1c:c3:17:6b:50:dc:f0:03:9b:af:94: b4:c1:0b:e2:41:37:e1:b8:97:c5:ae:68:aa:d8:1b: 24:cb:36:a4:cf:00:bd:2f:8e:bb:b5:23:37:6e:8b: 3b:07:00:bb:b7:bc:80:05:f7:da:df:77:97:e9:7a: ae:96:9f:35:81:51:79:18:ab:40:7a:6f:e7:c1:58: d8:9b:2b:40:09:8b:05:24:bb:7d:09:4b:2a:14:f4: 26:f3:4b:db:8c:f0:40:06:55:4c:68:32:b7:8b:4c: 3d:c8:43:5d:db:90:63:6c:43:ea:7e:c7:c7:f9:01: 2f:8a:3b:a6:09:4c:40:98:c2:7b:11:8c:3b:62:f1: aa:24:dd:0d:dc:36:41:04:f6:df:0b:11:a3:2d:cf: 39:c9:09:63:74:42:e8:5a:93:85:1d:8a:7b:ff:2b: 7e:39:2e:df:5e:68:fe:dc:7e:67:48:fb:28:61:c6: 4e:2d:c8:f4:3a:bf:51:93:27:05:cd:b6:54:13:6a: e7:15:e8:94:b5:a6:eb:06:3c:e5:dc:75:0b:30:99: 7a:10:fd:f7:7e:ea:44:2c:eb:dd:3e:41:b4:4b:a0: b5:1c:ef:22:19:fe:5b:ef:b2:1f:61:8b:7c:a9:c1: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:51:59:64:46:8F:C7:60:D7:E2:9F:47:F9:5C:3F:B6:09:06:D6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:33:50:35:5f:d8:ce:9d:48:70:33:3b:70:9d:c2:a1:05:1f: e5:97:0c:45:05:55:49:9b:44:73:44:4f:0c:99:aa:41:4b:b5: e3:80:15:a0:e4:0f:dd:a0:05:1b:ad:cd:85:0d:34:e6:3c:5f: cf:47:c0:0b:0c:84:1b:c7:a1:97:e1:b2:66:57:59:cb:00:b1: 31:0e:81:06:03:d8:86:27:cb:a8:d4:13:8d:a8:a8:4c:8b:df: f4:1a:b5:d3:ba:45:c6:f7:93:db:53:84:54:e0:d7:03:ed:45: ba:2a:86:49:fb:72:b7:ce:2f:46:a8:76:38:e1:b9:3a:e3:41: 9c:1d:08:82:b1:44:26:16:b5:31:f1:89:73:a6:be:ca:3c:02: 6a:90:db:ff:72:12:9d:40:aa:39:6f:89:2f:65:61:12:31:90: 82:f4:59:df:08:ab:61:a8:c3:b6:5a:d1:c4:8f:61:a3:c9:e0: f0:00:58:9b:62:41:70:4f:a8:61:71:80:ec:49:e8:55:f2:38: c2:e0:1a:02:22:67:47:fb:1d:3c:18:8e:17:05:76:4d:be:2b: ac:db:d0:40:15:c6:1b:ec:11:09:14:ef:52:77:fd:45:a2:8e: b5:80:30:c8:63:ea:6e:ee:73:8f:4c:2b:92:4b:9b:be:eb:dd: b7:4a:8d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OLlo8BJ8EDe2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NWRjYzZjMjktMGM2ZC00N2QyLTg4MzAtMWE1YzQ2NGU0M2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbkbjMAa7cItz01hymx4Pp0/HMMXa1Dc8AOb r5S0wQviQTfhuJfFrmiq2BskyzakzwC9L467tSM3bos7BwC7t7yABffa33eX6Xqu lp81gVF5GKtAem/nwVjYmytACYsFJLt9CUsqFPQm80vbjPBABlVMaDK3i0w9yENd 25BjbEPqfsfH+QEvijumCUxAmMJ7EYw7YvGqJN0N3DZBBPbfCxGjLc85yQljdELo WpOFHYp7/yt+OS7fXmj+3H5nSPsoYcZOLcj0Or9RkycFzbZUE2rnFeiUtabrBjzl 3HULMJl6EP33fupELOvdPkG0S6C1HO8iGf5b77IfYYt8qcGFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxRWWRGj8dg1+KfR/lcP7YJBtZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMzhiMGRlYjMtZWJiNC0z NTc2LTg2YWYtNjcyNTVjNTM4OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGozUDVf2M6dSHAzO3CdwqEFH+WXDEUFVUmbRHNETwyZqkFLteOAFaDk D92gBRutzYUNNOY8X89HwAsMhBvHoZfhsmZXWcsAsTEOgQYD2IYny6jUE42oqEyL 3/QatdO6Rcb3k9tThFTg1wPtRboqhkn7crfOL0aodjjhuTrjQZwdCIKxRCYWtTHx iXOmvso8AmqQ2/9yEp1AqjlviS9lYRIxkIL0Wd8Iq2Gow7Za0cSPYaPJ4PAAWJti QXBPqGFxgOxJ6FXyOMLgGgIiZ0f7HTwYjhcFdk2+K6zb0EAVxhvsEQkU71J3/UWi jrWAMMhj6m7uc49MK5JLm77r3bdKjTI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:47:24 2025 by rpki-client