$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa File: 8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa (raw, json) Hash identifier: HFk1Mu9EgpR/3Mdxgufr3NrpDmwqDPTEq3mZ2dRznjc= Subject key identifier: F3:03:D6:33:43:44:81:AB:F7:79:1E:40:F1:7C:AF:A8:2F:E4:1E:86 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A612B192F9628644858B75580 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 13768 IP address blocks: 66.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:19:2f:96:28:64:48:58:b7:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=4ee757f1-019b-43ea-90d1-3511a44780a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3a:b0:b5:ed:1e:a4:40:13:1e:5f:e0:f6:4a: ef:ff:a0:d7:00:11:b6:56:24:a1:14:ff:d8:99:50: c9:07:d0:60:24:11:71:a8:36:ae:37:fa:b0:b1:49: 42:e2:1a:24:55:a8:f8:da:ad:16:f9:f3:e7:cc:8c: bc:ae:c6:c4:4a:d9:99:3d:36:68:f0:b2:d1:19:8e: 3c:db:c7:1c:2e:87:7c:b0:38:8f:e8:6f:e0:8a:b1: 81:b8:4d:1b:77:9e:f0:f7:c0:b5:7c:f0:8b:5a:0e: 85:1f:6f:6d:09:84:dd:f8:3b:be:a9:5f:6e:5a:47: 06:c7:21:45:5f:85:a8:1a:c8:2b:20:86:ff:78:c4: 0f:30:83:a7:82:b0:4d:47:25:41:96:9f:4b:78:be: 52:6d:be:68:70:3e:ce:81:60:02:20:31:18:f8:f0: 98:6d:b7:de:aa:30:63:2d:cd:4c:74:ba:4f:65:78: 02:c6:c4:e7:e2:47:88:8d:be:48:62:44:d4:e7:72: 4e:7a:bd:f5:90:06:b1:6c:f7:3f:bf:56:e8:b6:d8: e4:da:aa:3f:46:be:79:73:60:36:d7:20:45:7e:1a: 50:fe:bb:2b:0e:3f:13:ff:b9:98:8f:3c:6f:fa:a7: 9e:1e:aa:f0:88:3e:d0:e7:54:9f:61:d5:f3:21:c8: 1f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:03:D6:33:43:44:81:AB:F7:79:1E:40:F1:7C:AF:A8:2F:E4:1E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3e:b6:5f:e3:28:48:5f:c5:9a:fb:3d:ed:aa:c4:85:0e:ac: 3b:a5:05:1e:db:2d:2a:ac:de:a2:30:9e:38:92:32:07:eb:82: e9:79:e7:e6:e7:f2:5e:84:0e:2a:62:17:cc:01:5d:f4:00:a2: b1:bb:3b:4f:67:46:63:5a:22:e7:b2:64:8e:11:86:d5:75:c4: b2:9e:a3:7e:0d:8a:6b:44:d1:73:9c:24:73:e4:08:ee:97:3c: 88:d8:7e:af:89:3d:3c:a4:3e:87:ce:92:88:49:c1:9c:69:5b: c3:b9:6e:69:3b:a4:29:f6:1a:28:1d:9c:69:88:cb:03:42:63: 93:2a:f5:39:34:41:2f:66:04:7b:99:51:60:8f:2e:1b:83:29: 8c:cf:25:d7:ef:12:ce:07:18:95:f0:73:67:73:52:87:7b:8f: 4d:50:b0:75:a5:35:37:4a:74:1d:9c:2c:ea:e0:80:82:68:c3: cd:64:ce:17:73:c1:7c:ab:28:15:34:2f:bf:51:e5:c0:f3:7a: 33:2d:17:2c:e2:72:d9:b1:52:47:5e:ea:c0:75:32:7c:40:2f: 83:d7:22:99:38:ba:38:b2:5c:6a:e3:e1:bb:0a:75:02:39:31: d5:b1:52:84:24:f8:c5:cb:3a:14:50:05:bc:d2:8f:00:54:44: df:f5:ba:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxkvlihkSFi3VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NGVlNzU3ZjEtMDE5Yi00M2VhLTkwZDEtMzUxMWE0NDc4MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDqwte0epEATHl/g9krv/6DXABG2ViShFP/Y mVDJB9BgJBFxqDauN/qwsUlC4hokVaj42q0W+fPnzIy8rsbEStmZPTZo8LLRGY48 28ccLod8sDiP6G/girGBuE0bd57w98C1fPCLWg6FH29tCYTd+Du+qV9uWkcGxyFF X4WoGsgrIIb/eMQPMIOngrBNRyVBlp9LeL5Sbb5ocD7OgWACIDEY+PCYbbfeqjBj Lc1MdLpPZXgCxsTn4keIjb5IYkTU53JOer31kAaxbPc/v1bottjk2qo/Rr55c2A2 1yBFfhpQ/rsrDj8T/7mYjzxv+qeeHqrwiD7Q51SfYdXzIcgfawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMD1jNDRIGr93keQPF8r6gv5B6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGRhMGIxNTMtNTYzYi0z YmYzLTk4ZTMtMTZmNWM0OGZjMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ+tl/jKEhfxZr7Pe2qxIUOrDulBR7bLSqs3qIwnjiSMgfrgul55+bn 8l6EDipiF8wBXfQAorG7O09nRmNaIueyZI4RhtV1xLKeo34NimtE0XOcJHPkCO6X PIjYfq+JPTykPofOkohJwZxpW8O5bmk7pCn2GigdnGmIywNCY5Mq9Tk0QS9mBHuZ UWCPLhuDKYzPJdfvEs4HGJXwc2dzUod7j01QsHWlNTdKdB2cLOrggIJow81kzhdz wXyrKBU0L79R5cDzejMtFyzictmxUkde6sB1MnxAL4PXIpk4ujiyXGrj4bsKdQI5 MdWxUoQk+MXLOhRQBbzSjwBURN/1uvg= -----END CERTIFICATE-----Generated at Wed Jul 23 12:46:06 2025 by rpki-client