$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/cad5f036-4c3f-30b7-aa38-05ea06a74901.roa File: cad5f036-4c3f-30b7-aa38-05ea06a74901.roa (raw, json) Hash identifier: mTDps6jdMcqWMfSvpjxwCDTzZbG7SqMVHBZg0zKVB7s= Subject key identifier: 58:E6:01:06:4A:F9:E7:77:93:AE:E0:AA:12:43:CE:66:75:BD:29:DD Certificate issuer: /CN=381d91d1-0a3a-48b2-aca2-5a6f28e3b324 Certificate serial: 010D0C9F4328584A8C70BC16A4841555842017C0 Authority key identifier: A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/cad5f036-4c3f-30b7-aa38-05ea06a74901.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 153706 IP address blocks: 66.212.56.0/24 maxlen: 24 66.212.57.0/24 maxlen: 24 66.212.58.0/24 maxlen: 24 66.212.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:bc:16:a4:84:15:55:84:20:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381d91d1-0a3a-48b2-aca2-5a6f28e3b324 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=42edbf52-b93a-4444-a037-7bb4512bacf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:7b:25:3a:b2:4c:5d:c9:c4:52:75:ec:44: 0f:ff:1b:20:82:f7:12:d2:03:5f:39:bc:9a:3d:66: 59:69:b4:49:2a:43:bb:52:f8:70:03:2d:93:3f:2f: 40:86:75:ae:e3:4a:0b:09:07:29:68:37:a9:a1:c6: bd:de:a3:1a:1b:ee:ee:1c:5c:77:da:40:17:02:7f: 2b:aa:d1:b0:dd:84:e1:79:11:3a:1b:e7:92:f7:43: 63:61:34:33:44:78:48:f3:fb:eb:42:3e:18:10:9a: 2f:17:65:ab:58:a6:38:de:81:dd:79:71:86:1f:31: f7:61:82:3a:ab:41:94:5d:35:f3:ab:cb:f5:8b:61: e4:5a:e0:4b:84:e1:34:a9:3e:23:c0:9f:66:e6:f2: 83:2b:5e:df:a9:3d:bf:df:5e:8e:0d:54:48:b5:3a: ba:da:80:86:f2:f6:05:07:c7:14:0f:92:3a:86:3b: 15:de:b8:ca:3f:ee:29:66:70:f3:08:6e:e6:55:be: f5:da:16:de:62:96:47:fa:37:63:f4:7e:11:88:b6: 89:e1:20:77:28:4b:be:a4:df:79:f9:ae:93:00:8f: 6e:f1:66:a1:e6:af:89:c2:b0:92:57:bc:4e:cf:c7: 0f:ae:cb:b9:4a:17:ee:7d:68:5a:d1:05:8c:46:74: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:01:06:4A:F9:E7:77:93:AE:E0:AA:12:43:CE:66:75:BD:29:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/cad5f036-4c3f-30b7-aa38-05ea06a74901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.crl X509v3 Authority Key Identifier: keyid:A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer sbgp-ipAddrBlock: critical IPv4: 66.212.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a4:38:71:da:dc:7f:6f:7b:a6:ea:e8:2d:20:b3:ab:5e:3e: 79:c6:63:f4:b4:2f:6d:b7:0b:10:25:86:dd:8f:e1:71:c8:c0: 92:45:62:75:24:14:2a:26:16:20:62:07:3d:d9:a0:81:92:07: 8e:0f:8a:e2:fe:24:81:a0:6d:5a:55:3c:5e:0e:db:c0:73:db: ac:03:96:90:61:c1:36:7b:3c:05:b5:c4:e9:56:29:7d:d4:4c: 6e:fe:ac:be:cd:3f:16:21:8d:c6:6c:84:7a:57:4d:b7:7d:38: 04:dc:3f:51:1c:e3:9a:22:64:b3:97:df:26:ed:6e:7c:16:85: b4:e3:ec:03:4c:60:00:f0:0a:26:3f:a2:bc:5d:f6:69:91:f3: a4:74:f3:3d:50:8e:77:ed:1e:08:ed:8f:36:f5:f7:14:10:76: c0:48:89:d3:52:76:21:03:95:5e:11:19:ad:26:bc:71:a0:27: ca:15:fa:f3:c9:e4:ae:a3:35:8b:19:1b:0d:61:1a:c2:7b:c6: e6:08:77:15:1d:19:40:ad:01:6d:cc:48:f0:83:33:3b:89:09: c0:fc:0e:dd:47:dd:b8:ac:ff:99:9c:3a:d8:dc:e6:43:3b:a9: 97:62:ed:99:a3:53:66:b3:d4:b1:6a:16:b9:4a:8b:86:85:d8: cc:e1:12:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcLwWpIQVVYQgF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgxZDkxZDEtMGEzYS00OGIyLWFjYTItNWE2ZjI4ZTNi MzI0MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NDJlZGJmNTItYjkzYS00NDQ0LWEwMzctN2JiNDUxMmJhY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjB7JTqyTF3JxFJ17EQP/xsggvcS0gNfObya PWZZabRJKkO7UvhwAy2TPy9AhnWu40oLCQcpaDepoca93qMaG+7uHFx32kAXAn8r qtGw3YTheRE6G+eS90NjYTQzRHhI8/vrQj4YEJovF2WrWKY43oHdeXGGHzH3YYI6 q0GUXTXzq8v1i2HkWuBLhOE0qT4jwJ9m5vKDK17fqT2/316ODVRItTq62oCG8vYF B8cUD5I6hjsV3rjKP+4pZnDzCG7mVb712hbeYpZH+jdj9H4RiLaJ4SB3KEu+pN95 +a6TAI9u8Wah5q+JwrCSV7xOz8cPrsu5ShfufWha0QWMRnRY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjmAQZK+ed3k67gqhJDzmZ1vSndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODFk OTFkMS0wYTNhLTQ4YjItYWNhMi01YTZmMjhlM2IzMjQvY2FkNWYwMzYtNGMzZi0z MGI3LWFhMzgtMDVlYTA2YTc0OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzgxZDkxZDEtMGEzYS00OGIyLWFj YTItNWE2ZjI4ZTNiMzI0LzM4MWQ5MWQxLTBhM2EtNDhiMi1hY2EyLTVhNmYyOGUz YjMyNC5jcmwwHwYDVR0jBBgwFoAUplEOH58xmWLnQqUMu5CT0EZmkvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zODFkOTFkMS0wYTNhLTQ4YjItYWNhMi01YTZm MjhlM2IzMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSkOHHa3H9ve6bq6C0gs6tePnnGY/S0L223CxAlht2P4XHIwJJFYnUk FComFiBiBz3ZoIGSB44PiuL+JIGgbVpVPF4O28Bz26wDlpBhwTZ7PAW1xOlWKX3U TG7+rL7NPxYhjcZshHpXTbd9OATcP1Ec45oiZLOX3ybtbnwWhbTj7ANMYADwCiY/ orxd9mmR86R08z1QjnftHgjtjzb19xQQdsBIidNSdiEDlV4RGa0mvHGgJ8oV+vPJ 5K6jNYsZGw1hGsJ7xuYIdxUdGUCtAW3MSPCDMzuJCcD8Dt1H3bis/5mcOtjc5kM7 qZdi7ZmjU2az1LFqFrlKi4aF2MzhEi4= -----END CERTIFICATE-----Generated at Sun Jul 20 14:45:55 2025 by rpki-client