$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa File: dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa (raw, json) Hash identifier: YxW5MqFkZ+N5BuyxQI/sOdQShXV4Lq0yd+3HquV+tVs= Subject key identifier: DC:FC:98:87:B2:9E:DA:95:51:2F:69:DA:9E:D5:B1:99:C0:EE:3E:7E Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584AD23BA93BD09BA224312DB230 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 40501 IP address blocks: 66.85.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:a9:3b:d0:9b:a2:24:31:2d:b2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=aeabff7b-b440-4c58-8d43-93d31855cf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:00:4e:77:c1:d1:32:3e:31:20:81:2f:12: df:13:e7:71:84:61:96:2c:36:0c:b0:f2:1b:52:c8: 5e:ce:60:cb:d2:4d:83:59:df:52:44:37:dd:a7:2c: 8d:0a:b9:7c:46:c7:18:4d:b7:7e:59:bc:b7:39:45: 83:75:f7:f9:27:62:71:78:3c:6b:8a:3d:53:37:06: 7b:ce:48:ab:87:e3:3c:91:a6:34:fb:9e:60:6d:36: d1:b5:d6:af:9c:d6:7e:0a:97:bc:54:45:02:7f:80: 72:bc:43:0d:f3:78:cc:e2:de:33:75:a7:98:71:e6: ae:7b:2d:03:76:63:c6:80:56:ff:a8:65:4e:7a:f5: 2f:2f:91:23:c3:d9:ca:e7:f2:6d:02:48:b6:07:f0: ee:8b:28:cc:90:c7:97:34:35:12:64:41:c4:69:51: a4:fc:08:c7:e7:9c:c6:77:6f:31:f6:75:7b:1b:0b: 21:9d:58:f0:96:0a:05:c2:c8:bc:9a:4a:df:7b:67: 9c:cd:8c:d9:8c:49:43:5c:1f:7d:ef:e3:b3:fb:4c: 44:1e:25:d5:46:45:9a:6a:8d:f0:09:f8:2d:14:b3: 08:ec:1c:76:7f:95:b8:46:49:1b:fa:c9:f0:69:06: 00:7b:1a:9f:da:72:58:0e:4f:e6:10:a4:1e:f2:d2: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FC:98:87:B2:9E:DA:95:51:2F:69:DA:9E:D5:B1:99:C0:EE:3E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 66.85.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2a:f1:45:43:1e:aa:af:e0:a7:08:da:bd:6f:ab:58:bb:b0: 70:e9:a2:b8:b3:ad:9c:09:2d:b7:9c:e8:56:94:f1:f0:cd:8e: b7:d1:fd:40:9e:e7:e9:87:6c:43:8d:cb:a1:aa:f2:91:35:73: a2:a2:68:7b:23:78:be:a1:e3:ff:4d:3b:ba:c2:5e:26:34:d7: 8b:36:e8:2f:3c:ca:43:29:d9:2d:fb:51:e2:c3:3f:7b:eb:86: a9:67:ec:49:eb:5b:36:ac:65:40:2b:5b:83:c6:78:b4:10:5e: 47:80:66:3a:f8:38:e5:9f:ff:86:e9:74:83:91:3b:a6:ae:65: c7:c4:f0:dd:cb:23:76:4c:bf:3a:60:62:48:96:50:e7:98:20: 7a:d6:28:d7:06:26:8e:44:5d:03:95:58:67:8b:0c:cd:1d:f2: 7b:e0:f5:68:2e:27:1d:de:51:cc:3f:cc:1b:2d:20:a9:5d:14: 5d:e9:04:81:79:7f:09:09:07:dd:58:a5:06:e1:84:c9:e9:1c: 23:e4:f6:a7:7f:2c:3a:78:10:3d:e6:9a:cb:09:77:73:54:5e: 53:d8:72:c5:e3:14:fd:e6:5d:34:62:da:a9:80:0e:cb:eb:3e: f9:de:58:0f:d5:f7:de:83:f5:5c:49:fa:ac:f7:3a:e8:00:b5: 87:e5:93:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6k70JuiJDEtsjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YWVhYmZmN2ItYjQ0MC00YzU4LThkNDMtOTNkMzE4NTVjZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRgATnfB0TI+MSCBLxLfE+dxhGGWLDYMsPIb UshezmDL0k2DWd9SRDfdpyyNCrl8RscYTbd+Wby3OUWDdff5J2JxeDxrij1TNwZ7 zkirh+M8kaY0+55gbTbRtdavnNZ+Cpe8VEUCf4ByvEMN83jM4t4zdaeYceauey0D dmPGgFb/qGVOevUvL5Ejw9nK5/JtAki2B/DuiyjMkMeXNDUSZEHEaVGk/AjH55zG d28x9nV7GwshnVjwlgoFwsi8mkrfe2eczYzZjElDXB997+Oz+0xEHiXVRkWaao3w CfgtFLMI7Bx2f5W4Rkkb+snwaQYAexqf2nJYDk/mEKQe8tJGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz8mIeyntqVUS9p2p7VsZnA7j5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvZGJmZjZjNDctYmE3YS0z MzIwLWFkMTMtODM1NWE3YmQwMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoq8UVDHqqv4KcI2r1vq1i7sHDporizrZwJLbec6FaU8fDNjrfR/UCe 5+mHbEONy6Gq8pE1c6KiaHsjeL6h4/9NO7rCXiY014s26C88ykMp2S37UeLDP3vr hqln7EnrWzasZUArW4PGeLQQXkeAZjr4OOWf/4bpdIORO6auZcfE8N3LI3ZMvzpg YkiWUOeYIHrWKNcGJo5EXQOVWGeLDM0d8nvg9WguJx3eUcw/zBstIKldFF3pBIF5 fwkJB91YpQbhhMnpHCPk9qd/LDp4ED3mmssJd3NUXlPYcsXjFP3mXTRi2qmADsvr PvneWA/V996D9VxJ+qz3OugAtYflk2s= -----END CERTIFICATE-----Generated at Thu Aug 21 03:55:55 2025 by rpki-client