$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0147dacf-27b5-32d2-8ee1-4d395958be2c.roa File: 0147dacf-27b5-32d2-8ee1-4d395958be2c.roa (raw, json) Hash identifier: LbDg5Kd3zjmZVOLMejaL/gcH7eCU9pvfAbrWH/bgqZ0= Subject key identifier: 22:DE:45:7E:A6:C9:0D:E8:F9:6B:5F:02:8F:68:B9:EA:4D:1C:53:4D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE67B0F6B4F80A395E9306F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0147dacf-27b5-32d2-8ee1-4d395958be2c.roa Signing time: Mon 18 Aug 2025 19:04:38 +0000 ROA not before: Mon 18 Aug 2025 19:04:38 +0000 ROA not after: Sun 16 Nov 2025 20:04:38 +0000 asID: 7029 IP address blocks: 66.92.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:7b:0f:6b:4f:80:a3:95:e9:30:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 18 19:04:38 2025 GMT Not After : Nov 16 20:04:38 2025 GMT Subject: CN=bb50f542-5d9e-4bf4-84cf-1021c8690b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:1d:80:b1:d2:ed:9d:d2:0a:24:9d:88:73: 6d:d6:7b:4b:69:44:e2:04:2e:e5:42:67:cb:6c:55: b7:7d:ae:5c:b2:05:77:d2:c8:f0:81:6b:75:49:e2: 3c:41:f0:43:ec:2c:91:89:23:c3:33:5b:30:63:0b: e8:a2:96:bb:47:fe:6a:fd:de:2a:e5:e0:6b:80:b8: a5:af:ae:e5:b1:c7:90:51:32:1d:8f:33:a4:31:94: 07:96:ab:e7:62:2f:d0:3e:b7:c0:a4:03:eb:b7:67: f3:6e:16:71:5a:92:44:a4:d3:1d:bd:24:45:e1:2c: 67:d9:8d:63:47:96:ac:4a:c0:ea:53:88:c5:23:e4: 10:41:4f:83:b4:74:47:6a:31:21:5c:ea:e9:4c:65: 82:34:09:a2:f8:db:e3:3e:4a:4d:a3:db:11:dd:57: 15:29:ab:aa:22:9b:14:8f:ff:df:d3:8e:eb:ec:2a: 86:85:79:c2:90:ae:e6:c8:a3:11:f3:ae:6f:d1:f4: 06:6e:d1:b8:5d:b3:8d:08:02:cb:e6:0b:13:11:58: a3:39:40:dd:7c:fa:48:cc:19:71:9f:ab:97:88:88: 8e:21:cd:b5:ed:1c:2c:b6:2e:f3:61:35:87:48:4e: c2:dd:3f:c7:99:a5:92:0f:66:15:c4:82:69:d2:32: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:45:7E:A6:C9:0D:E8:F9:6B:5F:02:8F:68:B9:EA:4D:1C:53:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0147dacf-27b5-32d2-8ee1-4d395958be2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b8:7d:3e:77:f0:f2:32:19:fc:9f:af:34:4a:3a:24:c6:85: c0:68:03:8a:06:ce:59:96:c2:4b:10:06:7d:97:0e:f7:4f:e5: 13:e2:60:e9:dc:df:40:31:a6:d5:6a:31:23:55:90:05:49:73: 95:db:c1:5a:d7:bd:e6:af:78:71:e6:69:e5:be:48:47:16:e4: 65:7e:41:e3:f5:2f:15:3d:e5:1b:81:80:0f:33:38:44:30:5c: d0:ee:44:4b:57:3f:7d:77:3d:c8:21:66:5e:11:21:9b:93:ed: c8:dc:39:1c:73:16:51:84:a7:72:98:84:24:66:61:bf:ce:e4: 45:2d:24:bd:9a:ff:9c:77:2e:07:31:a3:90:51:9e:5b:f4:39: fd:e3:81:12:4c:fd:17:a8:02:90:d7:ac:d6:40:61:50:c2:21: 44:82:8d:9d:b8:92:cf:69:1f:3b:52:a3:c6:fc:cc:e5:fe:17: ab:ed:44:8c:1f:14:b1:09:21:e4:43:6e:ab:68:0f:f1:fe:fb: a6:93:7d:7e:a9:81:c3:df:60:a8:fb:ce:90:40:c5:29:de:63: 44:c7:a6:39:45:bc:b9:58:f9:0d:a2:e4:58:f4:04:bd:ca:53: 2a:76:43:41:0c:20:9b:5c:0e:de:e7:70:4a:68:c1:77:90:40: 72:80:0f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmew9rT4CjlekwbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxODE5MDQzOFoXDTI1MTExNjIwMDQzOFowLzEtMCsGA1UEAxMk YmI1MGY1NDItNWQ5ZS00YmY0LTg0Y2YtMTAyMWM4NjkwYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvodgLHS7Z3SCiSdiHNt1ntLaUTiBC7lQmfL bFW3fa5csgV30sjwgWt1SeI8QfBD7CyRiSPDM1swYwvoopa7R/5q/d4q5eBrgLil r67lsceQUTIdjzOkMZQHlqvnYi/QPrfApAPrt2fzbhZxWpJEpNMdvSRF4Sxn2Y1j R5asSsDqU4jFI+QQQU+DtHRHajEhXOrpTGWCNAmi+NvjPkpNo9sR3VcVKauqIpsU j//f047r7CqGhXnCkK7myKMR865v0fQGbtG4XbONCALL5gsTEVijOUDdfPpIzBlx n6uXiIiOIc217Rwsti7zYTWHSE7C3T/HmaWSD2YVxIJp0jKZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLeRX6myQ3o+WtfAo9ouepNHFNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDE0N2RhY2YtMjdiNS0z MmQyLThlZTEtNGQzOTU5NThiZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG4fT538PIyGfyfrzRKOiTGhcBoA4oGzlmWwksQBn2XDvdP5RPiYOnc 30AxptVqMSNVkAVJc5XbwVrXveaveHHmaeW+SEcW5GV+QeP1LxU95RuBgA8zOEQw XNDuREtXP313PcghZl4RIZuT7cjcORxzFlGEp3KYhCRmYb/O5EUtJL2a/5x3Lgcx o5BRnlv0Of3jgRJM/ReoApDXrNZAYVDCIUSCjZ24ks9pHztSo8b8zOX+F6vtRIwf FLEJIeRDbqtoD/H++6aTfX6pgcPfYKj7zpBAxSneY0THpjlFvLlY+Q2i5Fj0BL3K Uyp2Q0EMIJtcDt7ncEpowXeQQHKAD6w= -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:43 2025 by rpki-client