$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa File: cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa (raw, json) Hash identifier: WjMYERJMr1QzpqBretTFl+zB93C4361X6hIoSGSP7sw= Subject key identifier: CC:19:6C:48:7F:DE:4B:C8:7A:1F:52:F4:B9:DA:6C:8D:8A:F2:06:56 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A612B156A1C9E4FE96C2BE680 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 13768 IP address blocks: 66.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:15:6a:1c:9e:4f:e9:6c:2b:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=dba81cf6-bb23-4519-9073-aae79f10ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:7b:cf:f9:f3:53:b9:9f:14:aa:fa:b4:88: fc:91:36:94:29:9a:ad:ad:5d:68:b1:dd:f0:19:28: 5e:2c:47:2e:e3:03:8c:9e:ff:49:47:d2:2c:00:e0: 07:c3:22:10:2c:8d:94:af:59:10:8c:3b:ab:6d:e0: bf:0d:c1:92:3b:5d:4b:27:c2:3d:ef:99:15:25:90: 6a:61:e6:6c:98:0c:d9:25:89:dc:e7:74:81:bf:59: 90:e1:6c:df:8f:78:6d:cb:ef:f8:58:08:92:e7:ae: 1d:fb:28:cf:c3:38:6a:32:6f:c5:74:2c:08:89:51: ad:73:66:f5:11:e3:2d:cb:58:6f:0d:f6:83:f4:5a: 7f:a1:26:aa:15:6b:d3:7f:61:02:fd:d1:96:f5:e9: 4e:34:ac:70:09:3f:4c:47:d9:aa:61:c6:16:9f:2e: 2b:be:14:6b:49:ac:70:d5:9f:be:95:c3:cb:03:a9: e7:51:c4:34:69:7f:e9:50:51:ce:b2:5c:34:4f:0f: 8c:e3:59:60:62:90:ae:64:88:95:46:88:77:7b:38: ad:e0:c1:ef:79:c4:f7:11:2d:32:40:e9:8b:4f:41: 89:ea:36:e8:59:0a:8f:88:58:da:95:68:c8:c9:89: 71:9a:85:fd:dd:92:0d:fc:aa:4c:4e:d4:6c:2c:d6: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:19:6C:48:7F:DE:4B:C8:7A:1F:52:F4:B9:DA:6C:8D:8A:F2:06:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:15:d9:5c:8f:4d:8b:c2:a8:57:be:66:2e:2c:71:d4:f3:58: 81:3b:f5:da:d8:38:c2:1b:ce:61:72:76:e0:5c:03:73:5e:60: 5d:4e:43:9e:e1:7e:59:17:94:56:17:29:51:3f:7d:d5:cc:4b: 4c:6a:7d:2e:9e:8b:ed:90:c4:b1:20:59:ec:fd:13:ad:5d:54: 62:56:24:e7:55:1b:1d:ce:32:56:36:5f:41:39:e5:47:bd:1b: d3:1c:33:fa:d0:0c:cc:6c:eb:41:70:03:3a:0c:e9:92:27:58: 8e:d1:9c:ba:cb:3d:7f:c7:f5:65:50:1a:28:87:a7:41:46:d1: fb:41:5c:f5:24:a6:e1:a6:ea:51:c0:24:81:0b:14:5b:aa:b4: f0:6d:38:b8:c5:cb:54:a1:c4:09:4a:44:70:d2:a0:5e:5d:45: ce:a4:71:70:9e:10:1c:b8:89:0d:d6:e4:17:93:e8:5c:0b:81: 0b:0d:08:f5:e8:bf:a6:7c:2b:da:95:08:e2:3f:87:3a:4b:cf: 1e:21:84:ad:63:c4:c7:26:d1:01:fc:e0:5c:d6:80:24:f5:01: 8b:da:79:80:e9:15:f7:8b:49:a0:2b:c5:fa:a4:4c:5a:1f:51: 8a:fa:7c:9c:3f:1e:18:ff:ff:39:3a:e7:05:2c:8c:e8:ae:e0: 7a:b1:bd:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxVqHJ5P6Wwr5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ZGJhODFjZjYtYmIyMy00NTE5LTkwNzMtYWFlNzlmMTBjY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk17z/nzU7mfFKr6tIj8kTaUKZqtrV1osd3w GSheLEcu4wOMnv9JR9IsAOAHwyIQLI2Ur1kQjDurbeC/DcGSO11LJ8I975kVJZBq YeZsmAzZJYnc53SBv1mQ4Wzfj3hty+/4WAiS564d+yjPwzhqMm/FdCwIiVGtc2b1 EeMty1hvDfaD9Fp/oSaqFWvTf2EC/dGW9elONKxwCT9MR9mqYcYWny4rvhRrSaxw 1Z++lcPLA6nnUcQ0aX/pUFHOslw0Tw+M41lgYpCuZIiVRoh3ezit4MHvecT3ES0y QOmLT0GJ6jboWQqPiFjalWjIyYlxmoX93ZIN/KpMTtRsLNZzKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwZbEh/3kvIeh9S9LnabI2K8gZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvY2ZiMmNhMjctNWFjZC0z MTBmLWI3ZGQtNzViODQyMjI0ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIV2VyPTYvCqFe+Zi4scdTzWIE79drYOMIbzmFyduBcA3NeYF1OQ57h flkXlFYXKVE/fdXMS0xqfS6ei+2QxLEgWez9E61dVGJWJOdVGx3OMlY2X0E55Ue9 G9McM/rQDMxs60FwAzoM6ZInWI7RnLrLPX/H9WVQGiiHp0FG0ftBXPUkpuGm6lHA JIELFFuqtPBtOLjFy1ShxAlKRHDSoF5dRc6kcXCeEBy4iQ3W5BeT6FwLgQsNCPXo v6Z8K9qVCOI/hzpLzx4hhK1jxMcm0QH84FzWgCT1AYvaeYDpFfeLSaArxfqkTFof UYr6fJw/Hhj//zk65wUsjOiu4HqxvTY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:45:33 2025 by rpki-client