$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa File: a71a6b1c-dd84-33b2-898c-4f69915afa83.roa (raw, json) Hash identifier: GWFfK6t3aKj1do7lFadPHFC9bGavuT6l4zVb5pD2ODA= Subject key identifier: A0:4A:05:A8:AE:DA:3E:A0:4C:5A:CF:F1:14:14:A5:5B:A8:0B:7C:62 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A814655D063F8F12688982E00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 399114 IP address blocks: 66.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:55:d0:63:f8:f1:26:88:98:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4f1ad63d-9586-4656-9dda-05d60b1b1609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:e8:f7:96:07:cd:70:05:68:81:82:c5:e7: 1e:30:f4:42:53:9e:67:7f:b7:3e:64:c4:a1:9a:0b: 35:e6:e1:51:8b:85:ae:7a:9d:c9:bc:1a:4a:15:9d: 05:9a:ca:dc:46:5e:69:5c:8d:6a:3a:81:84:cc:e5: 5c:f3:99:8b:25:67:24:2a:84:47:1c:3a:a2:59:b8: 2b:d1:d7:d9:6b:80:28:0a:a2:f3:73:88:d6:c1:11: 71:d7:53:84:9d:39:3c:02:da:91:ab:4f:23:27:a1: bd:9b:c7:a7:24:28:da:c2:c5:c1:b5:16:df:8b:c9: 2e:4b:43:d4:bd:ad:66:06:52:8d:27:25:13:0f:82: 4a:38:75:db:6c:fe:81:ab:10:9f:49:41:68:9a:1c: d5:1a:43:f7:66:42:c2:17:02:1f:45:e4:6f:20:cc: f7:37:2b:c8:e9:4a:36:94:6e:65:2f:d0:e6:fa:3e: 72:3a:db:c7:20:7c:e5:c8:32:26:13:51:df:2d:38: 31:f1:80:c7:f0:8b:54:d6:e3:ab:02:25:73:32:b5: 9a:33:5d:90:4c:de:c3:5d:e7:84:9f:e1:b4:bb:b8: a1:c3:66:fc:db:7d:17:2d:ca:3f:2a:e7:78:a7:83: 98:1f:c2:e6:10:39:dc:07:90:c1:b0:6a:32:7c:71: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4A:05:A8:AE:DA:3E:A0:4C:5A:CF:F1:14:14:A5:5B:A8:0B:7C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0c:67:82:b4:36:6c:7e:6d:eb:f8:3b:dd:76:f2:c5:fd:9a: e2:cf:9a:e4:07:3d:a9:0e:2c:2b:7e:56:79:9f:b1:59:9c:5e: 22:c8:42:de:94:d4:4d:93:b6:f7:3f:03:86:12:5c:ef:54:b2: d9:2b:6e:1d:f9:2f:08:9d:7d:c2:77:07:b8:0f:81:76:5e:1f: 0b:5a:25:47:7b:9c:9e:ed:97:39:fb:d3:4c:76:37:e8:c4:f1: 9c:96:c1:bf:75:ed:53:02:51:3b:a4:5e:08:16:4d:7d:a7:2c: ed:df:e9:8b:3f:76:3c:fa:a7:f8:6a:85:a3:bd:34:da:43:25: ea:be:f4:c4:1d:a4:ca:5b:fa:3c:24:8a:d8:83:15:49:8b:62: 0c:8a:3c:1b:a8:4e:e5:5b:6e:09:51:fd:6d:d7:4d:1e:46:aa: 14:03:05:5c:9b:c9:d6:9b:08:25:23:9f:e5:c7:b0:30:20:4a: 93:be:bb:72:ec:f9:84:4e:34:d2:44:99:09:f3:d8:21:13:f3: b7:ab:74:8a:e4:24:d4:62:45:31:49:4f:c1:2e:6f:b6:ba:ae: e3:e8:7e:6d:cb:6d:13:5b:d4:f4:9e:76:cb:c6:41:9d:2c:cc: 53:1e:ab:4b:da:e8:97:16:94:10:c9:ad:a6:ee:50:17:e2:db: f0:cc:8d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlXQY/jxJoiYLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NGYxYWQ2M2QtOTU4Ni00NjU2LTlkZGEtMDVkNjBiMWIxNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sLo95YHzXAFaIGCxeceMPRCU55nf7c+ZMSh mgs15uFRi4Wuep3JvBpKFZ0FmsrcRl5pXI1qOoGEzOVc85mLJWckKoRHHDqiWbgr 0dfZa4AoCqLzc4jWwRFx11OEnTk8AtqRq08jJ6G9m8enJCjawsXBtRbfi8kuS0PU va1mBlKNJyUTD4JKOHXbbP6BqxCfSUFomhzVGkP3ZkLCFwIfReRvIMz3NyvI6Uo2 lG5lL9Dm+j5yOtvHIHzlyDImE1HfLTgx8YDH8ItU1uOrAiVzMrWaM12QTN7DXeeE n+G0u7ihw2b8230XLco/Kud4p4OYH8LmEDncB5DBsGoyfHFVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBKBaiu2j6gTFrP8RQUpVuoC3xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTcxYTZiMWMtZGQ4NC0z M2IyLTg5OGMtNGY2OTkxNWFmYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAMZ4K0Nmx+bev4O9128sX9muLPmuQHPakOLCt+VnmfsVmcXiLIQt6U 1E2Ttvc/A4YSXO9Ustkrbh35LwidfcJ3B7gPgXZeHwtaJUd7nJ7tlzn700x2N+jE 8ZyWwb917VMCUTukXggWTX2nLO3f6Ys/djz6p/hqhaO9NNpDJeq+9MQdpMpb+jwk itiDFUmLYgyKPBuoTuVbbglR/W3XTR5GqhQDBVybydabCCUjn+XHsDAgSpO+u3Ls +YRONNJEmQnz2CET87erdIrkJNRiRTFJT8Eub7a6ruPofm3LbRNb1PSedsvGQZ0s zFMeq0va6JcWlBDJrabuUBfi2/DMjXw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:30 2025 by rpki-client