$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a8aa824-3166-3e26-a98a-1d3979daaab8.roa File: 5a8aa824-3166-3e26-a98a-1d3979daaab8.roa (raw, json) Hash identifier: HmQPFUu3x7rEpqEIJCZP86J/hfW1+hcZL01LVCLaYm0= Subject key identifier: DE:91:D1:8C:20:9E:19:75:42:CE:C5:73:20:DA:8E:37:E8:01:DB:88 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A7B4E7CD3A51B08E010C31940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a8aa824-3166-3e26-a98a-1d3979daaab8.roa Signing time: Fri 11 Jul 2025 09:43:20 +0000 ROA not before: Fri 11 Jul 2025 09:43:20 +0000 ROA not after: Thu 09 Oct 2025 09:43:20 +0000 asID: 7029 IP address blocks: 66.93.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:4e:7c:d3:a5:1b:08:e0:10:c3:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 11 09:43:20 2025 GMT Not After : Oct 9 09:43:20 2025 GMT Subject: CN=e4a4b8c2-2e74-4ecb-adad-fbd766ac141a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:fc:34:7b:60:e2:82:65:f9:8a:7a:2f:b5: 66:93:90:29:a1:ac:c2:ab:2a:52:23:85:7a:13:7a: 29:89:b6:33:48:01:7a:90:a4:4c:7b:46:cc:d5:6f: e1:0d:f8:a5:af:19:ac:bb:28:21:d8:7d:d2:bf:89: 69:0e:2d:2f:af:d2:07:3e:5e:9a:af:50:3e:f4:2e: 25:cc:e0:1e:f0:08:2c:cb:ab:7e:50:85:30:70:eb: 46:59:e5:c3:57:6b:b6:82:5f:cb:9f:32:95:08:b8: 12:86:cd:c9:b5:a6:06:d3:07:7f:ca:ee:7f:55:8b: ed:a3:65:68:c1:4e:67:63:be:2d:28:e8:5d:b3:fc: 63:3a:e9:f3:f7:f7:5e:cf:d2:2c:d2:53:72:b1:bc: 6f:27:bf:06:c8:74:d8:6a:8d:17:92:a0:f2:45:2f: 5d:2f:31:f7:76:b2:61:24:38:ba:d1:c5:65:6d:43: 74:83:5e:e2:69:7c:13:b8:98:81:74:73:da:61:57: e9:89:b5:70:5e:18:8c:c3:c9:20:f0:05:29:00:16: 4b:2d:7d:d8:e1:74:60:17:df:cd:8c:a8:4e:aa:02: 60:b5:59:58:dd:24:38:1c:d5:51:50:0a:e7:3f:28: 7b:91:9f:a7:e1:9b:d9:78:3b:61:a0:2c:33:47:b4: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:D1:8C:20:9E:19:75:42:CE:C5:73:20:DA:8E:37:E8:01:DB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a8aa824-3166-3e26-a98a-1d3979daaab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:64:d7:af:0c:4b:05:f7:fe:4b:8c:c7:7f:43:fa:dc:08:08: 22:c8:e2:d4:56:60:e7:eb:54:a8:20:88:81:89:18:04:73:f3: ab:48:01:d4:be:9b:e0:eb:18:f8:f9:a9:7a:68:ba:62:ba:d4: 71:08:d0:5f:9f:25:f1:ac:ae:b6:78:e3:d3:5f:7b:74:e4:9f: 80:a9:73:96:e5:dd:02:6e:a7:b1:f3:b5:90:8f:2f:fa:60:7b: c9:b1:0c:3d:89:18:71:ee:dc:76:30:9d:66:d0:5f:91:f3:ff: 0a:c2:db:fa:58:b4:ab:ab:41:85:c0:08:72:61:ea:1c:52:56: 5d:3c:bc:42:b1:dc:70:d2:86:c7:36:aa:17:53:3a:f5:67:a0: 37:15:90:15:d4:67:a1:ef:ef:2d:6a:c2:4b:b7:99:17:96:11: f4:a8:13:bb:6c:4f:e1:40:b4:b2:d4:69:eb:c0:0a:f7:16:32: 98:41:a6:b6:33:95:5b:f3:e9:ce:21:f3:4e:f7:f0:7e:f2:12: 66:50:b9:d9:c5:b0:10:23:60:40:78:99:59:98:77:df:4e:75: c1:33:d0:da:8d:8f:be:db:37:20:13:19:50:e8:38:42:6c:8d: 09:60:ee:3e:62:fc:76:06:81:a5:9b:9f:cf:21:f3:e5:2d:79: 17:38:3b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7TnzTpRsI4BDDGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcxMTA5NDMyMFoXDTI1MTAwOTA5NDMyMFowLzEtMCsGA1UEAxMk ZTRhNGI4YzItMmU3NC00ZWNiLWFkYWQtZmJkNzY2YWMxNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfn8NHtg4oJl+Yp6L7Vmk5ApoazCqypSI4V6 E3opibYzSAF6kKRMe0bM1W/hDfilrxmsuygh2H3Sv4lpDi0vr9IHPl6ar1A+9C4l zOAe8Agsy6t+UIUwcOtGWeXDV2u2gl/LnzKVCLgShs3JtaYG0wd/yu5/VYvto2Vo wU5nY74tKOhds/xjOunz9/dez9Is0lNysbxvJ78GyHTYao0XkqDyRS9dLzH3drJh JDi60cVlbUN0g17iaXwTuJiBdHPaYVfpibVwXhiMw8kg8AUpABZLLX3Y4XRgF9/N jKhOqgJgtVlY3SQ4HNVRUArnPyh7kZ+n4ZvZeDthoCwzR7SMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6R0Ywgnhl1Qs7FcyDajjfoAduIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWE4YWE4MjQtMzE2Ni0z ZTI2LWE5OGEtMWQzOTc5ZGFhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJk168MSwX3/kuMx39D+twICCLI4tRWYOfrVKggiIGJGARz86tIAdS+ m+DrGPj5qXpoumK61HEI0F+fJfGsrrZ449Nfe3Tkn4Cpc5bl3QJup7HztZCPL/pg e8mxDD2JGHHu3HYwnWbQX5Hz/wrC2/pYtKurQYXACHJh6hxSVl08vEKx3HDShsc2 qhdTOvVnoDcVkBXUZ6Hv7y1qwku3mReWEfSoE7tsT+FAtLLUaevACvcWMphBprYz lVvz6c4h80738H7yEmZQudnFsBAjYEB4mVmYd99OdcEz0NqNj77bNyATGVDoOEJs jQlg7j5i/HYGgaWbn88h8+UteRc4O8Y= -----END CERTIFICATE-----Generated at Sun Jul 20 14:21:05 2025 by rpki-client