$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa File: 8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa (raw, json) Hash identifier: QnhoTt3p2NMJK2/jxKlC/Gc40U8S1QuNOTG8DjMTltc= Subject key identifier: 6B:F0:CC:59:C4:CF:15:21:53:8A:E9:4D:F0:66:D0:8B:1B:9F:01:DB Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584AF256981BCF93CB0865E5F600 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 6079 IP address blocks: 66.44.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:98:1b:cf:93:cb:08:65:e5:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=329519ab-7d93-4340-9999-e7cea2b93115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:3d:52:0d:9b:67:59:fe:89:41:19:7e:6b: ba:d7:21:cb:72:19:9f:7f:b4:9e:39:5c:d9:f2:02: b5:2e:cf:b2:4f:1a:d1:ca:be:53:7e:39:0d:00:5d: 12:b4:f4:de:9f:fe:b6:69:70:4c:2c:0b:db:ba:20: 44:8d:4a:7d:9a:ad:21:75:e8:98:59:89:58:e4:04: 2e:8f:06:9f:51:e7:d8:65:33:eb:70:a4:d9:48:96: c4:b0:11:37:6a:f2:c0:25:78:fb:07:ce:48:d3:b0: b5:3e:68:c4:d4:33:49:e7:61:a1:de:83:b7:26:36: 7f:f8:2a:17:79:ed:72:0b:f3:ac:19:bc:f4:0e:94: 48:cb:d6:7d:45:b1:30:ec:ca:ec:83:b0:89:63:53: f9:15:51:66:4a:cb:fe:54:55:c2:d7:88:c6:ba:07: fc:3a:46:38:a3:fc:05:25:81:43:cc:47:03:7e:f8: cb:68:c1:47:22:2d:2d:bf:6d:dd:86:6a:f6:f3:e8: 1e:32:06:e3:f6:f9:6d:55:9a:36:72:76:4b:ba:5d: 9d:61:14:ec:60:fb:97:9e:d6:c0:71:de:e7:12:97: 02:bc:af:e2:b5:77:fd:a8:fe:54:83:a9:a2:cf:01: 34:64:71:00:d9:ca:eb:72:2e:b5:84:16:6f:0d:b5: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F0:CC:59:C4:CF:15:21:53:8A:E9:4D:F0:66:D0:8B:1B:9F:01:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 66.44.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:de:f8:62:b7:f7:a1:77:29:81:a9:ac:2c:20:70:30:de:aa: ec:f7:97:6a:3c:58:29:35:18:9e:a1:b8:ca:43:f0:12:4e:72: 71:d3:d8:6a:cb:9b:00:0a:82:f5:a7:90:83:b2:d7:ca:e0:ed: b5:b1:a2:a1:e7:b6:5f:fe:11:0a:6a:9e:f4:cf:34:00:b8:75: 49:ef:b0:f9:f8:dd:e7:2d:b4:91:90:e4:f4:30:c7:0d:a6:41: c2:ad:65:3b:0a:f6:bb:db:93:9b:50:fd:1e:92:96:88:f9:27: d8:d3:77:2b:7c:40:0b:00:5d:b9:1a:22:0e:df:ea:0d:bd:ae: 67:87:c3:78:b2:09:66:5a:64:73:cb:c2:65:60:e5:e1:7f:ea: 2e:e0:3a:20:d5:09:bc:8f:8e:f2:d3:68:af:33:53:a5:ef:13: 7e:f4:47:a2:93:7c:1d:65:7d:b8:a6:77:84:ca:a3:85:d1:5e: f3:1e:31:b5:0a:95:9e:06:84:6e:94:09:62:a3:cc:f2:f8:b1: 95:e9:ae:d6:38:15:18:4d:c9:8c:91:9e:fa:6a:72:6a:f5:d3: 59:d8:1f:3c:62:44:df:e7:57:87:58:b5:14:0b:3d:d5:da:0a: ae:3c:72:32:e5:fb:10:df:bb:dd:de:ed:8d:49:00:4d:fa:86: 5f:c7:c7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpgbz5PLCGXl9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzI5NTE5YWItN2Q5My00MzQwLTk5OTktZTdjZWEyYjkzMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mU9Ug2bZ1n+iUEZfmu61yHLchmff7SeOVzZ 8gK1Ls+yTxrRyr5TfjkNAF0StPTen/62aXBMLAvbuiBEjUp9mq0hdeiYWYlY5AQu jwafUefYZTPrcKTZSJbEsBE3avLAJXj7B85I07C1PmjE1DNJ52Gh3oO3JjZ/+CoX ee1yC/OsGbz0DpRIy9Z9RbEw7Mrsg7CJY1P5FVFmSsv+VFXC14jGugf8OkY4o/wF JYFDzEcDfvjLaMFHIi0tv23dhmr28+geMgbj9vltVZo2cnZLul2dYRTsYPuXntbA cd7nEpcCvK/itXf9qP5Ug6mizwE0ZHEA2crrci61hBZvDbWvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvwzFnEzxUhU4rpTfBm0IsbnwHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvOGYyMGI2MWYtMGE4MC0z MzFjLThhY2UtZWI4YTRkMzA2ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQiwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/e+GK396F3KYGprCwgcDDequz3l2o8WCk1GJ6huMpD8BJOcnHT2GrL mwAKgvWnkIOy18rg7bWxoqHntl/+EQpqnvTPNAC4dUnvsPn43ecttJGQ5PQwxw2m QcKtZTsK9rvbk5tQ/R6Sloj5J9jTdyt8QAsAXbkaIg7f6g29rmeHw3iyCWZaZHPL wmVg5eF/6i7gOiDVCbyPjvLTaK8zU6XvE370R6KTfB1lfbimd4TKo4XRXvMeMbUK lZ4GhG6UCWKjzPL4sZXprtY4FRhNyYyRnvpqcmr101nYHzxiRN/nV4dYtRQLPdXa Cq48cjLl+xDfu93e7Y1JAE36hl/HxyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:46 2025 by rpki-client