$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa File: 86977d22-6d9b-33b1-b034-072d4f571283.roa (raw, json) Hash identifier: RW2RrUOw9kF1rW3DZpSovBuEtFhwIKAPaI6i4ATBSv4= Subject key identifier: C9:C0:FF:65:38:55:65:9E:69:AC:6D:ED:F5:9C:A0:57:74:3E:CE:12 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A8B0B655980A4C82394BFFB60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 174 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:65:59:80:a4:c8:23:94:bf:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=e8402f1c-8ca4-401f-bbe2-96a02e604b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:1e:da:b5:47:3d:02:c9:f7:40:c3:6e:5b: 53:ba:a4:53:e0:3a:5c:87:d8:c7:8c:07:d1:85:c5: f6:bc:46:76:a2:d9:1a:db:33:76:90:b7:c5:fe:a9: 45:08:08:f0:b3:6b:e5:e5:d6:40:02:70:d9:c0:35: fb:56:0e:34:47:0f:e7:1c:ee:df:4f:d9:f6:83:19: 2e:81:30:19:7a:32:e1:b1:f6:e4:e5:74:c2:ce:bc: 9e:fd:78:cf:aa:a2:f4:c9:2a:a1:08:12:13:71:3a: 02:16:51:5e:3a:49:b0:0e:b3:d7:49:30:70:75:8e: 5b:7b:a0:cd:7c:b3:a6:bb:97:5f:76:a5:d9:ca:47: 91:8a:72:39:67:cc:10:3b:82:d7:c4:1b:87:7f:6e: bd:7c:bb:e6:21:8b:2a:b1:97:88:48:9b:65:e7:81: 86:86:15:5a:81:ae:06:63:70:7a:f4:a1:8d:2b:22: 81:62:c9:db:71:3b:f0:0e:fb:cd:84:46:24:6c:93: be:f9:c2:4e:c7:97:18:c2:5b:ab:b9:f8:f4:6d:bd: 9e:1b:30:e9:28:9e:ba:4c:8b:0d:ff:df:4c:b4:f0: 95:42:94:6d:c9:8e:17:e7:d5:80:40:61:f8:6c:7c: 34:d4:b3:cc:da:f5:ed:a4:c4:73:f3:c3:7e:78:1c: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C0:FF:65:38:55:65:9E:69:AC:6D:ED:F5:9C:A0:57:74:3E:CE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:af:05:d0:d3:25:f6:63:b6:3d:3f:0f:42:cd:10:e0:a3:23: b3:c3:bd:d7:bc:b3:5b:23:5d:5d:36:2e:25:13:d4:a6:65:e8: b5:ee:02:ba:a3:f8:a8:5d:3b:80:6b:62:71:7b:40:d9:4b:6a: da:f6:46:82:96:d2:59:d4:86:f4:61:fe:75:9c:2a:73:60:0f: 76:81:6b:6a:c2:fd:20:3a:de:d7:c8:97:e1:25:1b:25:85:04: d6:48:b6:5d:8d:dd:90:82:70:d1:25:21:6a:75:30:c5:7d:ef: 4c:26:b9:9a:02:39:3e:fe:4b:c1:ff:ef:fb:e6:81:2d:c6:23: e8:31:ac:37:57:6a:6a:44:9f:4b:82:8c:7a:46:b7:b2:f6:67: d7:e8:ea:ed:68:de:78:cd:98:3d:69:25:fd:e7:4c:82:2b:7b: f8:be:8d:c0:25:5f:89:b2:04:0c:3b:8d:58:15:90:fb:7e:16: fd:4b:d3:49:d9:90:15:1b:fb:84:63:84:ab:47:80:0c:5f:30: 44:19:31:e6:90:b1:c8:b6:2a:7d:6e:c0:ff:84:a9:d3:0d:0a: a8:77:26:c6:3a:a4:3f:65:dd:44:47:6c:3b:e8:40:18:69:39: b8:64:31:29:f4:5e:78:45:dd:9e:a1:ef:e8:4c:9b:b5:cb:f6: 47:3c:23:55 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqLC2VZgKTII5S/+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZTg0MDJmMWMtOGNhNC00MDFmLWJiZTItOTZhMDJlNjA0YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJAe2rVHPQLJ90DDbltTuqRT4Dpch9jHjAfR hcX2vEZ2otka2zN2kLfF/qlFCAjws2vl5dZAAnDZwDX7Vg40Rw/nHO7fT9n2gxku gTAZejLhsfbk5XTCzrye/XjPqqL0ySqhCBITcToCFlFeOkmwDrPXSTBwdY5be6DN fLOmu5dfdqXZykeRinI5Z8wQO4LXxBuHf269fLvmIYsqsZeISJtl54GGhhVaga4G Y3B69KGNKyKBYsnbcTvwDvvNhEYkbJO++cJOx5cYwlurufj0bb2eGzDpKJ66TIsN /99MtPCVQpRtyY4X59WAQGH4bHw01LPM2vXtpMRz88N+eBxlFQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMnA/2U4VWWeaaxt7fWcoFd0Ps4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY5NzdkMjItNmQ5Yi0z M2IxLWIwMzQtMDcyZDRmNTcxMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAg68F0NMl9mO2PT8PQs0Q4KMjs8O917yzWyNdXTYuJRPUpmXote4CuqP4 qF07gGticXtA2Utq2vZGgpbSWdSG9GH+dZwqc2APdoFrasL9IDre18iX4SUbJYUE 1ki2XY3dkIJw0SUhanUwxX3vTCa5mgI5Pv5Lwf/v++aBLcYj6DGsN1dqakSfS4KM eka3svZn1+jq7WjeeM2YPWkl/edMgit7+L6NwCVfibIEDDuNWBWQ+34W/UvTSdmQ FRv7hGOEq0eADF8wRBkx5pCxyLYqfW7A/4Sp0w0KqHcmxjqkP2XdREdsO+hAGGk5 uGQxKfReeEXdnqHv6Eybtcv2RzwjVQ== -----END CERTIFICATE-----Generated at Thu Jul 31 02:07:24 2025 by rpki-client