$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa File: 0752d7a5-5222-310c-85f3-05e84bd2890b.roa (raw, json) Hash identifier: tKcTxb3kB6hjW8jSY9lExVIffz8D5LQojB9ZDVcNqp4= Subject key identifier: 96:63:F2:C8:4B:F2:BE:87:3F:98:7D:67:4C:17:F4:CC:03:76:E2:7C Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584A73509EACFB2671E4C954AE80 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 4213 IP address blocks: 66.172.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:9e:ac:fb:26:71:e4:c9:54:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=5a30f52c-21a2-479d-9f0c-41c73d1fc3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:5b:d0:9a:1a:f9:74:ca:d0:fd:7f:28:44: 0c:33:b7:30:43:e9:fb:bb:96:55:cd:9f:ce:58:2f: 1d:45:43:f5:55:82:b5:b8:f3:08:66:a5:93:53:d8: d8:8c:2a:7d:72:3b:90:16:2a:cb:d5:fa:b1:fc:7f: c5:9c:33:eb:3d:1b:04:9c:76:bf:7e:c7:63:08:6e: 4a:40:44:b5:17:47:ae:26:01:82:75:46:51:1d:8a: 65:4b:e8:c0:e0:f9:b6:6b:9d:23:d3:41:6e:c0:29: 7b:0e:62:e0:f3:17:00:5c:fe:9f:39:0c:ed:eb:6f: 21:75:e4:6b:84:84:dc:39:f4:61:d4:29:b2:b0:09: a3:1b:e3:e9:85:36:fd:eb:9e:f7:fd:55:31:d3:4e: 1b:e8:22:fa:cd:fc:b7:82:6b:1e:5d:26:e1:42:57: c2:9c:5a:79:42:13:e8:a6:3d:f3:ee:5a:ce:f0:24: 19:f2:47:ca:e2:ba:0a:1a:15:f2:46:37:7d:fe:34: d7:68:c0:1d:90:86:62:9c:a6:50:51:a8:8a:f5:9b: 6c:fb:99:eb:64:02:49:2f:6c:a4:5b:99:c8:a5:cf: d6:a8:63:2a:48:a3:a0:b6:c8:21:8e:e0:df:5f:42: 3a:91:64:cf:0b:66:92:ec:9f:18:d3:b2:3e:64:d3: 3e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:F2:C8:4B:F2:BE:87:3F:98:7D:67:4C:17:F4:CC:03:76:E2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 66.172.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:64:89:2d:e7:0c:63:fc:b1:dc:c7:5b:35:02:25:1d:e7:9f: 50:ab:1c:b8:85:bf:14:20:8e:b8:cf:39:46:ae:93:d8:6f:eb: b8:4e:88:74:f5:39:18:8e:81:6d:3b:a9:de:98:ce:1b:ff:7d: 32:f1:d8:8f:7b:1d:47:76:96:74:a0:4d:1b:2d:c7:55:ea:93: 14:02:06:2a:7d:43:95:e8:40:0a:1a:ea:74:c7:ac:0e:b0:24: ae:67:a6:dc:35:4e:51:ef:22:e1:31:cb:9b:f0:1f:6a:8b:fe: 4c:ca:2c:d0:a7:3c:e8:2f:e8:be:31:9a:72:2e:fe:06:2f:9b: 8e:03:d1:89:c9:ca:1b:5a:f5:4c:5b:36:45:e2:36:9e:7c:9d: a3:d3:19:4f:2f:d6:4b:30:f6:85:1b:c6:3c:6f:d0:81:7e:ad: 57:6a:96:64:eb:0b:98:f3:c9:f6:f5:77:34:5c:a3:f0:47:bb: 89:cb:5f:68:3b:17:f5:7f:33:4d:80:6e:b2:36:af:22:13:ac: da:49:b3:b1:b2:75:e6:39:a5:9e:da:81:04:31:ea:04:6c:9a: 89:ed:d3:b9:33:fb:92:88:f1:d7:02:b3:53:04:fb:3f:19:01: 59:3b:a7:e3:ab:b2:a2:ec:31:c4:d0:e0:5f:e2:95:00:75:11: 8b:4a:cc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUJ6s+yZx5MlUroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk NWEzMGY1MmMtMjFhMi00NzlkLTlmMGMtNDFjNzNkMWZjM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQlb0Joa+XTK0P1/KEQMM7cwQ+n7u5ZVzZ/O WC8dRUP1VYK1uPMIZqWTU9jYjCp9cjuQFirL1fqx/H/FnDPrPRsEnHa/fsdjCG5K QES1F0euJgGCdUZRHYplS+jA4Pm2a50j00FuwCl7DmLg8xcAXP6fOQzt628hdeRr hITcOfRh1CmysAmjG+PphTb96573/VUx004b6CL6zfy3gmseXSbhQlfCnFp5QhPo pj3z7lrO8CQZ8kfK4roKGhXyRjd9/jTXaMAdkIZinKZQUaiK9Zts+5nrZAJJL2yk W5nIpc/WqGMqSKOgtsghjuDfX0I6kWTPC2aS7J8Y07I+ZNM+uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZj8shL8r6HP5h9Z0wX9MwDduJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMDc1MmQ3YTUtNTIyMi0z MTBjLTg1ZjMtMDVlODRiZDI4OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQqwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVkiS3nDGP8sdzHWzUCJR3nn1CrHLiFvxQgjrjPOUauk9hv67hOiHT1 ORiOgW07qd6Yzhv/fTLx2I97HUd2lnSgTRstx1XqkxQCBip9Q5XoQAoa6nTHrA6w JK5nptw1TlHvIuExy5vwH2qL/kzKLNCnPOgv6L4xmnIu/gYvm44D0YnJyhta9Uxb NkXiNp58naPTGU8v1ksw9oUbxjxv0IF+rVdqlmTrC5jzyfb1dzRco/BHu4nLX2g7 F/V/M02AbrI2ryITrNpJs7GydeY5pZ7agQQx6gRsmont07kz+5KI8dcCs1ME+z8Z AVk7p+OrsqLsMcTQ4F/ilQB1EYtKzCI= -----END CERTIFICATE-----Generated at Sat Jul 12 00:02:07 2025 by rpki-client