$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa File: 0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa (raw, json) Hash identifier: 6hyFvDpx5Qb4Qu6d8qGNQzHHChHpAHsU891LaNK/25Q= Subject key identifier: CE:18:34:78:2D:C8:A3:C1:E0:C2:DE:C2:42:1C:EE:DE:4C:9C:C7:0A Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AD23BBF0F4A412E4B51600D00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 13576 IP address blocks: 66.128.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bf:0f:4a:41:2e:4b:51:60:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=894a5fa5-092e-43a1-91ce-495dd085a668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:6a:7b:87:c0:a3:0f:52:4c:1e:0f:94:99: 14:25:38:c6:fa:f5:e4:c8:8c:e7:97:f2:93:84:6d: 0d:2f:ae:ff:c9:c9:53:c6:a2:f1:e2:2b:90:c5:eb: be:e0:bd:dd:2e:99:6c:52:1f:b8:bb:22:93:4e:10: a6:08:55:c4:2d:ac:a7:fd:91:50:a3:dc:be:45:bb: 19:ba:af:15:83:ea:fc:81:90:5d:36:e5:dd:d2:e0: f7:84:b4:e4:32:42:30:a2:7a:0b:6e:59:57:5f:60: 06:cd:f5:53:4a:44:9f:0e:1a:cf:dd:6e:9a:5b:3d: ef:c6:5c:3d:a6:16:de:f9:7a:4e:b3:a0:82:bf:b8: 2e:71:a8:fd:dc:53:0e:bb:bd:d1:61:30:0a:3d:5a: 91:e7:4e:0c:e8:12:9a:c2:50:40:72:0f:bb:ce:e6: d3:d8:8b:6b:94:ff:84:fc:3b:1c:84:bf:91:de:a8: 56:72:66:b3:a4:c6:ab:83:b2:68:55:ed:81:55:74: eb:f0:d7:16:14:63:7e:14:36:d8:12:6e:f2:e2:95: 5f:c7:c7:a2:74:07:0f:1c:f8:da:f6:5a:e5:0d:96: a3:ee:10:10:29:49:9d:76:1d:74:e8:89:83:93:b8: 8c:9e:e4:65:fc:51:af:5e:a3:6e:18:63:11:e2:af: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:34:78:2D:C8:A3:C1:E0:C2:DE:C2:42:1C:EE:DE:4C:9C:C7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:be:7c:e2:64:27:dc:7c:fd:b9:3f:95:f0:54:cf:6e:43:c9: 26:6d:0e:54:55:7c:4c:b9:13:3a:72:15:7f:af:13:96:28:40: b4:af:cd:26:6a:23:88:3f:15:1b:3d:ec:22:a1:d1:d9:fa:c5: 1d:f6:26:8b:84:2e:48:67:99:62:bc:ea:a4:1d:97:f6:a5:85: 8d:74:1f:43:f9:c2:b5:cc:68:ab:b4:be:56:41:a8:33:a8:28: ac:23:61:25:d5:c9:b4:61:dc:44:8a:7f:8a:5e:1e:42:c1:15: ed:61:ed:6f:ba:df:36:0c:55:bb:2c:cc:51:ea:a9:fe:9b:3f: 85:62:93:9a:95:01:fb:7b:12:e8:64:7e:9c:fd:e7:2f:1e:1a: 8b:f9:7b:e2:79:9f:9d:be:55:f5:12:0c:34:cb:27:41:69:5b: 4a:c5:45:25:ae:d0:61:a7:89:a6:46:ca:e3:a9:19:3b:9f:ad: b0:42:16:24:52:d3:9b:0b:0e:36:df:26:95:53:ab:36:96:2e: 34:2e:ab:63:43:4f:a8:5e:09:34:3e:e5:95:8a:31:ac:cf:19: bf:91:3b:b7:54:f7:9d:ed:71:6f:e3:c7:95:86:a2:c9:50:c1: d7:50:70:67:5d:81:e6:fd:00:3f:97:98:d9:f0:55:e5:b0:37: e3:65:09:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO78PSkEuS1FgDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ODk0YTVmYTUtMDkyZS00M2ExLTkxY2UtNDk1ZGQwODVhNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiydqe4fAow9STB4PlJkUJTjG+vXkyIznl/KT hG0NL67/yclTxqLx4iuQxeu+4L3dLplsUh+4uyKTThCmCFXELayn/ZFQo9y+RbsZ uq8Vg+r8gZBdNuXd0uD3hLTkMkIwonoLbllXX2AGzfVTSkSfDhrP3W6aWz3vxlw9 phbe+XpOs6CCv7gucaj93FMOu73RYTAKPVqR504M6BKawlBAcg+7zubT2ItrlP+E /DschL+R3qhWcmazpMarg7JoVe2BVXTr8NcWFGN+FDbYEm7y4pVfx8eidAcPHPja 9lrlDZaj7hAQKUmddh106ImDk7iMnuRl/FGvXqNuGGMR4q/CzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4YNHgtyKPB4MLewkIc7t5MnMcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGZiMTIxYzYtOWFlZi0z ZDAzLTg1OTEtYjJmMGJlMTk3N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu+fOJkJ9x8/bk/lfBUz25DySZtDlRVfEy5EzpyFX+vE5YoQLSvzSZq I4g/FRs97CKh0dn6xR32JouELkhnmWK86qQdl/alhY10H0P5wrXMaKu0vlZBqDOo KKwjYSXVybRh3ESKf4peHkLBFe1h7W+63zYMVbsszFHqqf6bP4Vik5qVAft7Euhk fpz95y8eGov5e+J5n52+VfUSDDTLJ0FpW0rFRSWu0GGniaZGyuOpGTufrbBCFiRS 05sLDjbfJpVTqzaWLjQuq2NDT6heCTQ+5ZWKMazPGb+RO7dU953tcW/jx5WGoslQ wddQcGddgeb9AD+XmNnwVeWwN+NlCYY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:31 2025 by rpki-client