$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa File: 7a842816-3127-38d1-9d65-422d4458e42b.roa (raw, json) Hash identifier: o8KYZjrC4grkLBeECc+b34bLdIPpV5G6x8pchFvlqKg= Subject key identifier: 54:71:67:1D:82:78:82:23:29:12:DC:3D:6D:00:4E:17:5F:8F:DF:26 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584A89A619313F8A1EC7AB691E40 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 55293 IP address blocks: 68.66.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:19:31:3f:8a:1e:c7:ab:69:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=a5a6256a-d54c-4299-991d-04882c97f502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:de:45:d0:4c:36:49:93:7c:50:ed:9c:d3: 13:d6:b8:a6:4e:8a:1f:ec:19:b6:23:a0:52:b5:8d: 06:d2:13:ca:28:23:e3:c4:01:42:c2:4b:96:29:dd: 8b:4d:bb:30:69:86:a7:ab:97:95:53:35:4e:c5:98: 60:06:f5:be:95:a3:16:81:c6:b3:e9:00:56:4f:c4: dc:f2:52:7d:2d:99:1a:1f:21:9f:a9:c2:6d:64:72: 5e:48:12:78:e3:83:d3:ef:50:2c:37:02:9a:7a:2d: 9e:f2:a5:2e:31:14:36:37:1e:da:43:97:bc:76:bd: 7c:fa:43:52:38:63:65:82:62:3a:53:33:72:c7:05: 60:d8:26:27:08:17:c1:6f:a1:e7:5b:57:94:aa:d4: f9:6d:c8:62:ca:fe:6f:10:b1:38:7e:6c:b9:ea:26: f7:61:08:cb:d3:da:c4:c2:db:dd:92:6d:80:f0:e8: 6d:74:5d:e5:81:43:29:57:7d:c9:bb:73:d2:16:d7: 3f:a2:1d:8a:a5:fa:d4:d8:7e:a5:b8:e6:3b:2a:cb: 1c:0a:fa:1c:60:75:e3:9a:f9:e9:71:79:b5:2b:8b: 7c:9d:4e:6a:74:2e:d2:3c:fa:1e:19:d0:c5:2e:03: 80:a0:36:54:4c:96:d1:e8:ac:ce:d4:ec:71:40:da: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:67:1D:82:78:82:23:29:12:DC:3D:6D:00:4E:17:5F:8F:DF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fd:87:7e:d2:87:64:2b:b8:94:ed:e9:d2:c1:1e:74:23:bf: 50:d6:eb:1c:78:83:a0:b5:f3:e1:84:8e:6a:60:e2:55:79:a4: 12:ef:32:a1:1c:5a:70:a6:ac:04:72:53:ef:bb:6f:83:94:b9: 07:5c:d7:b6:d5:93:2d:80:6a:93:f1:00:1b:0b:6c:24:cd:1c: 49:0a:d5:dc:17:98:6e:a5:b8:75:48:a8:bb:20:fa:f3:97:46: cd:fe:dc:3d:8c:f8:e7:df:83:6d:eb:58:4b:c6:1d:dd:07:26: 84:c8:59:4c:54:7c:eb:a6:59:42:52:b8:01:fb:90:21:66:da: 63:05:30:d4:09:83:4f:28:e5:4b:21:87:49:90:b9:c5:c5:a7: b1:39:c1:27:d7:a1:0a:2e:74:ba:f9:4c:27:1e:f2:cc:dd:b6: 9b:a8:f6:b5:65:45:94:cc:6c:9d:87:4d:cc:20:c3:a3:ab:29: f0:2f:1a:b4:4c:2b:9b:31:63:d0:42:f5:74:4e:a1:24:2f:c2: 8b:3e:b0:30:ea:f7:be:7e:1a:f7:13:fa:72:82:a7:5b:3f:72: d4:b0:64:74:1a:db:c6:96:65:ab:cb:76:bb:16:6b:d7:34:4c: 96:bf:c3:a1:4b:74:30:a5:af:29:e4:d7:e4:cd:77:59:9a:9c: 9e:8a:17:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphkxP4oex6tpHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YTVhNjI1NmEtZDU0Yy00Mjk5LTk5MWQtMDQ4ODJjOTdmNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsXeRdBMNkmTfFDtnNMT1rimToof7Bm2I6BS tY0G0hPKKCPjxAFCwkuWKd2LTbswaYanq5eVUzVOxZhgBvW+laMWgcaz6QBWT8Tc 8lJ9LZkaHyGfqcJtZHJeSBJ444PT71AsNwKaei2e8qUuMRQ2Nx7aQ5e8dr18+kNS OGNlgmI6UzNyxwVg2CYnCBfBb6HnW1eUqtT5bchiyv5vELE4fmy56ib3YQjL09rE wtvdkm2A8OhtdF3lgUMpV33Ju3PSFtc/oh2KpfrU2H6luOY7KsscCvocYHXjmvnp cXm1K4t8nU5qdC7SPPoeGdDFLgOAoDZUTJbR6KzO1OxxQNqDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRxZx2CeIIjKRLcPW0AThdfj98mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvN2E4NDI4MTYtMzEyNy0z OGQxLTlkNjUtNDIyZDQ0NThlNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH9h37Sh2QruJTt6dLBHnQjv1DW6xx4g6C18+GEjmpg4lV5pBLvMqEc WnCmrARyU++7b4OUuQdc17bVky2AapPxABsLbCTNHEkK1dwXmG6luHVIqLsg+vOX Rs3+3D2M+Offg23rWEvGHd0HJoTIWUxUfOumWUJSuAH7kCFm2mMFMNQJg08o5Ush h0mQucXFp7E5wSfXoQoudLr5TCce8szdtpuo9rVlRZTMbJ2HTcwgw6OrKfAvGrRM K5sxY9BC9XROoSQvwos+sDDq975+GvcT+nKCp1s/ctSwZHQa28aWZavLdrsWa9c0 TJa/w6FLdDClrynk1+TNd1manJ6KF0k= -----END CERTIFICATE-----Generated at Fri Jul 25 13:01:06 2025 by rpki-client