$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/325b3052-7863-3528-815f-58dccfb12c17.roa File: 325b3052-7863-3528-815f-58dccfb12c17.roa (raw, json) Hash identifier: yYq64BDgRlO29QPPuKsgDLi8/7+Z3gV+fguOXsMT3rQ= Subject key identifier: 22:E3:BD:27:F6:03:29:70:A7:37:57:D5:2A:78:E5:6A:00:E5:E4:E5 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE0953B6B2A19A14C7A5FC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/325b3052-7863-3528-815f-58dccfb12c17.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 66.118.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:95:3b:6b:2a:19:a1:4c:7a:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=b3143605-5392-464c-afaa-9905f0a37d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:35:36:74:fd:89:7b:9e:02:80:99:f1:91: a5:dd:18:20:f5:a2:ca:e5:e0:3c:21:98:d0:77:f7: 50:15:10:f5:de:31:11:0d:f3:47:96:ee:3e:b6:2b: fb:4b:c9:d7:04:46:15:8a:c3:9f:7b:48:c3:57:5b: b2:11:5b:9b:2e:cb:67:78:48:96:a2:34:78:4f:53: 80:0e:a4:4e:37:a1:9b:f2:d4:89:d6:65:6b:c9:ef: 6f:fc:8d:5c:1f:ab:d0:6c:97:02:2f:d3:7e:f5:a5: 44:21:cd:c5:3a:16:5a:56:1f:ff:ae:ef:00:d4:b3: 57:40:8c:cf:fa:33:69:2b:bc:c0:31:98:04:95:21: 5c:2a:92:3b:fd:ad:77:79:01:56:f1:1a:1e:56:c6: 73:ba:d8:cb:2d:0e:db:ba:11:df:a8:0a:05:95:dc: d5:08:25:9b:54:24:23:74:67:91:d3:f4:3e:44:0d: 06:79:3b:4d:b8:a6:51:26:bd:f1:98:9b:84:26:90: 42:b9:8b:b4:c7:b9:94:71:46:27:c4:58:29:d3:c9: 39:80:a1:c2:c4:fb:7d:70:ec:2a:44:c7:e2:a6:21: 11:2b:73:67:bd:47:9b:54:2b:3d:09:4c:e8:15:12: f4:05:19:e0:3e:ed:02:16:31:46:a7:ca:f8:73:f8: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:BD:27:F6:03:29:70:A7:37:57:D5:2A:78:E5:6A:00:E5:E4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/325b3052-7863-3528-815f-58dccfb12c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7d:61:b6:b1:6e:a7:b8:57:24:4e:ed:87:89:95:12:97:20: 81:87:7e:98:f2:9a:14:68:88:16:28:df:11:8b:db:56:76:51: 23:10:c2:0f:28:b5:66:c6:c4:60:24:b6:fe:5f:d3:66:f1:a0: a7:90:24:14:15:b7:60:09:9f:b6:50:ca:f9:7c:eb:1c:fc:bb: 1d:cf:d3:e5:14:b3:cd:fd:2a:10:43:39:40:d2:12:2e:e6:19: 1a:4d:38:fd:bf:f0:be:43:36:77:b7:0a:80:a2:0e:82:d0:bc: d5:ed:88:a3:62:48:63:cb:e6:f6:be:56:f6:8f:27:7b:c2:56: 17:8c:e2:68:0c:cc:4a:94:90:40:e7:44:fb:60:f0:3a:21:c7: 9d:68:31:6d:c6:e0:cb:c1:58:5a:fb:2d:c1:76:94:9c:2e:e8: 5e:a6:89:70:ff:68:19:d0:49:79:85:ad:34:7d:3f:ea:2e:76: 97:c2:ab:3b:06:51:6a:b2:2c:3d:e9:9c:83:4a:0f:5e:9e:1e: 0e:63:64:6f:c9:58:0c:9c:05:42:cd:59:d6:18:f2:10:95:11: 85:6f:5a:7f:3e:83:33:18:40:28:fd:83:80:c4:d8:8d:35:a6: a6:41:34:ca:9f:3b:f7:6b:8c:8c:0f:67:85:cf:46:ba:43:47: 76:17:52:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JU7ayoZoUx6X8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YjMxNDM2MDUtNTM5Mi00NjRjLWFmYWEtOTkwNWYwYTM3ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tU1NnT9iXueAoCZ8ZGl3Rgg9aLK5eA8IZjQ d/dQFRD13jERDfNHlu4+tiv7S8nXBEYVisOfe0jDV1uyEVubLstneEiWojR4T1OA DqRON6Gb8tSJ1mVrye9v/I1cH6vQbJcCL9N+9aVEIc3FOhZaVh//ru8A1LNXQIzP +jNpK7zAMZgElSFcKpI7/a13eQFW8RoeVsZzutjLLQ7buhHfqAoFldzVCCWbVCQj dGeR0/Q+RA0GeTtNuKZRJr3xmJuEJpBCuYu0x7mUcUYnxFgp08k5gKHCxPt9cOwq RMfipiERK3NnvUebVCs9CUzoFRL0BRngPu0CFjFGp8r4c/jxXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLjvSf2AylwpzdX1Sp45WoA5eTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMzI1YjMwNTItNzg2My0z NTI4LTgxNWYtNThkY2NmYjEyYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE19Ybaxbqe4VyRO7YeJlRKXIIGHfpjymhRoiBYo3xGL21Z2USMQwg8o tWbGxGAktv5f02bxoKeQJBQVt2AJn7ZQyvl86xz8ux3P0+UUs839KhBDOUDSEi7m GRpNOP2/8L5DNne3CoCiDoLQvNXtiKNiSGPL5va+VvaPJ3vCVheM4mgMzEqUkEDn RPtg8Dohx51oMW3G4MvBWFr7LcF2lJwu6F6miXD/aBnQSXmFrTR9P+oudpfCqzsG UWqyLD3pnINKD16eHg5jZG/JWAycBULNWdYY8hCVEYVvWn8+gzMYQCj9g4DE2I01 pqZBNMqfO/drjIwPZ4XPRrpDR3YXUtw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:56:44 2025 by rpki-client