$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa File: a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa (raw, json) Hash identifier: cMnYsXOUXpnn3CnMW/2GlhroezhALpf1SGgWAJvjSC8= Subject key identifier: 9B:95:8A:82:EC:91:84:CD:47:CC:0D:E1:44:D4:B9:99:B5:55:42:B8 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE096F7F56C7EC976D99380 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:96:f7:f5:6c:7e:c9:76:d9:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=a6205c8c-c56d-48dc-bd7c-a55e56d4d6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:a3:82:aa:55:1a:a2:64:55:4f:dd:5b:2c: ae:03:c3:b2:8f:64:57:2e:e0:4c:2c:9c:b3:7a:1c: c7:d7:db:e9:c6:a1:62:18:b1:38:f8:53:ce:24:ee: 2b:98:f7:8a:c7:ac:13:77:a4:02:f0:38:7c:14:5f: 41:ca:4a:4b:be:08:1c:71:43:cc:24:eb:bd:17:ea: 60:21:4d:22:b8:d5:7a:29:1f:73:9f:3a:6a:f3:7e: 70:df:f5:ff:ce:e2:07:68:9c:97:9b:ea:cd:c4:90: 9d:81:96:0f:8c:f9:ca:51:c0:4e:37:93:ef:d8:8c: 8f:07:e8:36:24:e7:86:39:f8:99:7d:6f:a9:1d:67: 28:c7:0e:df:2e:4c:b1:57:a6:de:f7:ab:85:4f:4a: 11:2f:4e:31:11:e2:b8:dc:27:ad:57:04:de:90:ea: 66:33:6d:a7:6e:9a:92:e1:34:3e:11:0b:43:9d:7f: 1e:0d:8c:af:f5:2a:c0:cb:bc:f5:a5:56:ee:7a:a9: 3f:d8:88:68:69:66:60:54:ec:d6:01:f8:61:d9:53: f3:1b:f1:cf:e8:3d:b5:90:1d:d8:68:25:53:37:cc: 0e:68:be:0e:1d:12:59:49:1a:69:cb:0a:5d:ff:70: 86:98:65:e6:e8:62:b7:44:13:b6:c0:5f:d8:7d:1f: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:8A:82:EC:91:84:CD:47:CC:0D:E1:44:D4:B9:99:B5:55:42:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:18:b9:7a:7c:26:bd:68:fa:14:38:af:f1:f9:92:22:ad: 26:12:3b:f6:15:91:9a:86:66:3b:4a:ba:43:1f:22:52:89:51: f2:6a:a4:5f:88:47:3c:b2:a0:6d:32:77:0e:05:d6:45:da:26: fa:ad:b9:f9:89:b0:c2:22:6f:5a:35:a3:bc:e0:0b:d2:8e:6e: 2a:af:0d:cf:84:d3:07:0e:bb:69:7b:dc:64:e0:e4:2a:ea:5c: c6:c5:53:b6:f5:94:e0:03:ab:be:f8:d0:cd:e0:dd:a3:54:a0: 69:14:15:8d:07:1e:03:c8:7a:5e:26:9a:64:0c:f9:a1:49:ae: ec:7f:9a:ac:c6:a2:fe:1b:72:3e:04:79:87:01:f2:70:69:56: 8f:93:4a:00:78:f5:cf:91:9e:24:61:f4:55:94:81:5a:bc:e0: b3:5d:32:44:75:6a:7e:f9:f9:79:7c:96:28:1d:48:f9:8c:0d: ee:e8:fe:52:cb:c9:80:a9:63:2e:b8:77:bd:89:29:06:90:b1: c7:c8:ae:41:50:f3:98:b6:ce:0b:f2:bf:cf:52:41:ee:3b:54: 10:8a:52:6a:f4:8b:8b:43:ac:18:a7:66:da:cf:9f:8c:4c:1e: 14:33:a8:3a:c1:ee:d4:af:8d:dc:2b:e9:b4:74:8c:c7:6b:93: a6:02:57:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jb39Wx+yXbZk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YTYyMDVjOGMtYzU2ZC00OGRjLWJkN2MtYTU1ZTU2ZDRkNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBajgqpVGqJkVU/dWyyuA8Oyj2RXLuBMLJyz ehzH19vpxqFiGLE4+FPOJO4rmPeKx6wTd6QC8Dh8FF9BykpLvggccUPMJOu9F+pg IU0iuNV6KR9znzpq835w3/X/zuIHaJyXm+rNxJCdgZYPjPnKUcBON5Pv2IyPB+g2 JOeGOfiZfW+pHWcoxw7fLkyxV6be96uFT0oRL04xEeK43CetVwTekOpmM22nbpqS 4TQ+EQtDnX8eDYyv9SrAy7z1pVbueqk/2IhoaWZgVOzWAfhh2VPzG/HP6D21kB3Y aCVTN8wOaL4OHRJZSRppywpd/3CGmGXm6GK3RBO2wF/YfR/ABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuVioLskYTNR8wN4UTUuZm1VUK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTAwZTVkMGEtOGQ1Yi0z N2Y1LTk3NTktYjJlOWE4OTg3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTCGLl6fCa9aPoUOK/x+ZIirSYSO/YVkZqGZjtKukMfIlKJUfJqpF+I RzyyoG0ydw4F1kXaJvqtufmJsMIib1o1o7zgC9KObiqvDc+E0wcOu2l73GTg5Crq XMbFU7b1lOADq7740M3g3aNUoGkUFY0HHgPIel4mmmQM+aFJrux/mqzGov4bcj4E eYcB8nBpVo+TSgB49c+RniRh9FWUgVq84LNdMkR1an75+Xl8ligdSPmMDe7o/lLL yYCpYy64d72JKQaQscfIrkFQ85i2zgvyv89SQe47VBCKUmr0i4tDrBinZtrPn4xM HhQzqDrB7tSvjdwr6bR0jMdrk6YCV3Y= -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:43 2025 by rpki-client