$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa File: 5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa (raw, json) Hash identifier: nUE7hCKtQtFM1SixUsaZS7qDtPqo4HmHSSqkhjtqTtY= Subject key identifier: C9:AE:E0:C6:8F:48:F8:A6:04:0E:45:0C:C0:F2:E4:88:54:B1:AF:F1 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584AC2E0E2D4D147A6BBA0651780 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 23522 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e2:d4:d1:47:a6:bb:a0:65:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=1ca7b7cb-a7a7-4e39-a169-7ca762aabdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e3:2a:8d:79:a4:61:21:2c:06:50:ca:0e:b2: a1:66:1f:bf:3a:3d:81:0c:fc:84:9d:7a:cc:c0:75: 39:01:19:93:f1:47:5f:f0:63:9d:d8:68:25:5d:62: c3:9d:b0:dd:4e:d7:b7:08:de:37:78:d2:a6:bb:a9: 68:ec:20:3f:d7:7d:5c:50:99:36:9f:ac:65:2a:5e: cd:4d:c9:03:f4:b6:30:9c:ee:d2:f1:91:c8:d2:fb: 9e:b0:51:09:3c:36:d5:7c:d7:39:76:a8:bd:1f:0c: 96:dc:10:3b:0c:80:62:a3:89:cc:09:be:21:59:a1: eb:39:ef:8c:66:bb:3e:01:c1:2e:db:0a:7e:f9:d5: 98:8a:df:93:6a:a8:d3:0b:0d:45:f9:f8:2c:a3:ee: 32:96:56:7b:b0:e1:c0:3b:95:29:08:64:e4:d0:9f: 65:84:d2:34:ee:a8:a6:55:51:fa:f5:34:d6:17:43: 88:fe:27:ee:92:b1:43:94:68:67:cd:68:db:fa:a7: f5:bb:4a:b0:b5:be:ab:b5:eb:c5:15:c8:69:32:ef: d0:b3:a2:27:7b:05:7c:a3:e0:05:05:1f:4e:40:40: 85:5c:91:ce:dd:28:90:2a:f7:f0:e8:e7:b1:a0:62: d6:99:4d:5d:ac:a2:f1:b4:b2:bd:bb:b5:44:b2:77: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:E0:C6:8F:48:F8:A6:04:0E:45:0C:C0:F2:E4:88:54:B1:AF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:53:ad:55:42:0e:e2:15:36:7c:9b:65:09:45:fc:47:23:9e: f9:24:3a:af:35:88:a7:b9:a4:c2:f6:dc:69:6d:65:72:7b:3e: e8:46:43:29:bc:24:31:02:9c:dc:f5:81:6e:6d:fc:61:f5:dc: 3a:99:e7:b4:11:bc:e3:9e:9c:4f:be:82:10:66:d3:cc:2c:f1: 6d:6b:a1:81:81:fa:99:06:09:fc:c7:15:cc:14:ae:fc:6f:80: 93:25:2b:bc:fa:3c:9d:b1:65:da:b9:37:42:e6:42:75:a9:32: f5:16:78:6c:95:bb:a3:f1:44:b4:12:a7:47:6a:e6:59:89:3f: c6:a3:1b:1e:0f:f5:6b:2f:c2:c5:71:f2:3e:a8:ff:b6:4f:95: a7:5a:3e:10:ec:10:63:a6:ca:64:b0:2e:f0:f6:9f:41:05:b5: 59:95:05:dd:fd:bf:2a:66:4f:ca:86:09:a5:22:99:ac:e6:56: 1e:14:44:43:5d:94:52:86:b4:92:37:a8:9d:7d:44:ff:a7:63: b6:42:11:53:ec:fa:23:9c:94:4d:c0:b9:59:da:2d:3d:53:bd: c8:fb:c0:7a:e4:14:21:41:19:66:39:fa:e2:6f:81:b7:db:b3: 40:f7:32:bd:6a:1e:73:2b:62:bb:3f:91:a8:8b:4f:a7:30:e7: d6:29:af:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OLU0Uemu6BlF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MWNhN2I3Y2ItYTdhNy00ZTM5LWExNjktN2NhNzYyYWFiZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+MqjXmkYSEsBlDKDrKhZh+/Oj2BDPyEnXrM wHU5ARmT8Udf8GOd2GglXWLDnbDdTte3CN43eNKmu6lo7CA/131cUJk2n6xlKl7N TckD9LYwnO7S8ZHI0vuesFEJPDbVfNc5dqi9HwyW3BA7DIBio4nMCb4hWaHrOe+M Zrs+AcEu2wp++dWYit+TaqjTCw1F+fgso+4yllZ7sOHAO5UpCGTk0J9lhNI07qim VVH69TTWF0OI/ifukrFDlGhnzWjb+qf1u0qwtb6rtevFFchpMu/Qs6InewV8o+AF BR9OQECFXJHO3SiQKvfw6OexoGLWmU1drKLxtLK9u7VEsndwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmu4MaPSPimBA5FDMDy5IhUsa/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNWQ3MDhlYjItYjdiYy0z ZWExLWE3ZDUtMmUxOGYwZjY2ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZTrVVCDuIVNnybZQlF/EcjnvkkOq81iKe5pML23GltZXJ7PuhGQym8 JDECnNz1gW5t/GH13DqZ57QRvOOenE++ghBm08ws8W1roYGB+pkGCfzHFcwUrvxv gJMlK7z6PJ2xZdq5N0LmQnWpMvUWeGyVu6PxRLQSp0dq5lmJP8ajGx4P9WsvwsVx 8j6o/7ZPladaPhDsEGOmymSwLvD2n0EFtVmVBd39vypmT8qGCaUimazmVh4URENd lFKGtJI3qJ19RP+nY7ZCEVPs+iOclE3AuVnaLT1Tvcj7wHrkFCFBGWY5+uJvgbfb s0D3Mr1qHnMrYrs/kaiLT6cw59Ypr5g= -----END CERTIFICATE-----Generated at Sun Aug 24 03:44:29 2025 by rpki-client