$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa File: 453c48aa-717a-3f97-94e0-a121f55d388a.roa (raw, json) Hash identifier: Uk6x9fLGQZQ1x0LnsDmP8eIthKrdWi7D8N9nFb6NTdA= Subject key identifier: 78:31:C0:92:77:D2:C7:B1:04:F5:F8:F5:50:20:77:0E:E5:13:90:DD Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE096E8BF03EE05FB318FE0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:96:e8:bf:03:ee:05:fb:31:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=ead8b8a8-b325-488a-bb82-7d7cfccae770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:8d:34:41:4e:89:79:7c:22:8a:90:3d:ff: 8d:30:5d:fb:c3:f1:c4:f7:e6:2f:a9:4b:75:99:bc: a5:e6:a8:2b:6a:b0:07:f7:01:59:b8:8f:72:16:92: 01:48:7c:28:86:d6:b1:d5:c3:37:3a:17:34:12:50: bb:25:6c:c6:45:2d:22:cb:29:83:1c:b0:9b:8b:92: 6b:5a:4c:78:f2:f3:d7:4d:0f:cc:2a:c2:7d:a8:56: 42:68:a9:40:67:65:e5:dd:99:69:9a:c6:ad:8f:51: fc:fc:d2:85:80:07:e3:9a:de:d7:8a:5f:24:26:ee: 17:bf:e8:26:f7:bc:72:46:7d:db:6c:ff:43:80:6a: 11:f1:4b:87:87:f8:eb:de:14:c0:ec:e0:7b:0a:ad: e7:51:e1:31:c0:e5:33:f7:c3:68:22:f3:75:5f:1f: 92:37:7b:07:72:2c:db:27:f3:c1:66:99:4e:2f:dd: f1:41:8b:e1:6a:78:bd:65:e6:92:d2:0f:b2:89:31: 37:2c:04:9a:6d:4c:80:dc:df:9c:6b:0d:66:e9:48: 74:39:47:5b:07:c4:e9:76:1e:9f:90:eb:38:0e:6a: ac:7a:2c:4a:f3:82:ff:88:67:c5:3a:07:65:70:c4: 58:c7:a9:66:11:34:29:51:a2:b7:86:3b:ff:8f:65: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:31:C0:92:77:D2:C7:B1:04:F5:F8:F5:50:20:77:0E:E5:13:90:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b6:a2:6d:07:03:60:5d:21:8b:47:9a:d0:b8:78:f6:77:3b: 7f:3b:62:2a:dd:59:36:82:c4:6a:35:1b:70:38:f6:93:d6:d9: 9c:55:50:d8:d7:de:e9:e6:c6:44:cc:8b:6f:bf:a0:7b:81:91: e9:0d:40:52:c6:32:cb:c9:39:42:0c:17:7b:24:49:11:06:4d: 02:25:18:e2:77:bc:d9:b4:e2:12:e9:86:e5:ea:cc:fa:c8:60: 2f:54:68:2c:9d:63:0d:40:5c:1b:8d:d0:eb:e2:5d:aa:de:4b: 9e:0b:03:23:9c:2d:b3:3e:8f:2a:ba:c0:cf:03:b6:4b:67:b2: 0a:0a:06:25:10:a8:b3:cc:06:94:96:8b:c6:97:ad:8a:a3:42: 1e:d6:7c:96:57:af:60:5e:43:35:0f:87:a1:48:f5:db:dd:6b: b3:ba:33:05:90:f9:a6:32:50:60:21:d7:67:90:e4:e8:d8:26: e1:8b:bd:b2:8c:ae:65:bd:17:e3:6f:86:41:06:31:fb:c5:5a: bb:83:b1:60:29:46:7c:70:9b:c3:b2:13:b8:c2:0c:26:31:77: 61:d7:6a:8e:c2:c1:19:cb:f1:a4:2e:6d:ee:89:e2:1a:ed:80: d0:2b:5e:90:20:b2:7b:74:8e:8f:85:61:fb:be:d6:45:40:6a: 6a:25:87:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JbovwPuBfsxj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ZWFkOGI4YTgtYjMyNS00ODhhLWJiODItN2Q3Y2ZjY2FlNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5CNNEFOiXl8IoqQPf+NMF37w/HE9+YvqUt1 mbyl5qgrarAH9wFZuI9yFpIBSHwohtax1cM3Ohc0ElC7JWzGRS0iyymDHLCbi5Jr Wkx48vPXTQ/MKsJ9qFZCaKlAZ2Xl3Zlpmsatj1H8/NKFgAfjmt7Xil8kJu4Xv+gm 97xyRn3bbP9DgGoR8UuHh/jr3hTA7OB7Cq3nUeExwOUz98NoIvN1Xx+SN3sHcizb J/PBZplOL93xQYvhani9ZeaS0g+yiTE3LASabUyA3N+caw1m6Uh0OUdbB8Tpdh6f kOs4DmqseixK84L/iGfFOgdlcMRYx6lmETQpUaK3hjv/j2VHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgxwJJ30sexBPX49VAgdw7lE5DdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDUzYzQ4YWEtNzE3YS0z Zjk3LTk0ZTAtYTEyMWY1NWQzODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu2om0HA2BdIYtHmtC4ePZ3O387YirdWTaCxGo1G3A49pPW2ZxVUNjX 3unmxkTMi2+/oHuBkekNQFLGMsvJOUIMF3skSREGTQIlGOJ3vNm04hLphuXqzPrI YC9UaCydYw1AXBuN0OviXareS54LAyOcLbM+jyq6wM8DtktnsgoKBiUQqLPMBpSW i8aXrYqjQh7WfJZXr2BeQzUPh6FI9dvda7O6MwWQ+aYyUGAh12eQ5OjYJuGLvbKM rmW9F+NvhkEGMfvFWruDsWApRnxwm8OyE7jCDCYxd2HXao7CwRnL8aQube6J4hrt gNArXpAgsnt0jo+FYfu+1kVAamolhxw= -----END CERTIFICATE-----Generated at Sun Jul 20 14:58:14 2025 by rpki-client