$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa File: 421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa (raw, json) Hash identifier: nAWo2fgiu1gU6ecLA3DgV6JmemfSv7s9QDeAAJLYg1Y= Subject key identifier: 49:49:F8:A4:BF:92:FC:0D:40:11:2B:31:E9:15:D2:25:E6:98:86:D3 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A612B1941FAC4CB51448ECA90 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 13768 IP address blocks: 66.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:19:41:fa:c4:cb:51:44:8e:ca:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=043a3ebd-233d-4b0b-a5ae-7a02cdb2eec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:0e:53:a9:57:5c:e6:43:63:12:6f:94:e1: 58:e1:a8:14:a9:df:e5:98:08:f7:d8:c9:67:94:6d: b6:c5:c8:1c:86:0e:a6:c6:7d:1d:7a:20:50:1d:bb: d5:ff:49:26:ee:c8:f8:1d:1f:77:76:4a:31:a7:12: 10:a0:f1:65:66:58:b6:08:0f:da:78:a3:40:15:b8: 00:72:b8:ac:91:0c:d6:46:70:25:e5:91:ed:36:10: 05:e9:d8:5a:63:75:63:53:39:9d:c1:35:77:08:da: 45:48:7c:56:e8:12:fe:04:39:17:19:34:81:f2:be: 62:3e:58:1c:e5:bb:31:8f:7a:ca:aa:e1:55:60:07: 06:ce:d2:3f:75:78:84:46:50:32:91:c5:18:d1:bd: 0a:e8:5b:b1:22:33:cd:bf:7c:46:09:8a:bf:9d:cc: 7a:0c:88:7a:0c:34:0d:d6:49:ae:7d:ba:18:8b:31: 75:04:e2:52:ad:cc:59:ba:fa:d1:ac:30:1b:8f:9e: 20:d1:88:5f:a4:27:a4:5c:73:65:36:80:e4:ab:91: 72:27:72:c9:8e:c7:40:1b:6c:72:ac:85:17:c1:bb: 21:da:97:d9:85:02:aa:c7:2c:a4:65:5c:e7:e1:be: 1a:29:da:55:46:e0:87:6a:95:5c:45:08:cc:d3:e4: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:F8:A4:BF:92:FC:0D:40:11:2B:31:E9:15:D2:25:E6:98:86:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b8:00:fb:f0:4c:07:1f:02:27:3e:d2:25:40:9f:6f:9e:90: 89:dc:58:65:fc:6e:91:10:fe:e4:de:59:87:76:d2:1b:57:c9: 45:df:9f:dd:b1:29:b1:0f:df:ce:12:3b:ec:84:69:6d:63:11: 44:f8:97:9b:e3:92:4d:96:e5:f9:52:84:de:31:ba:58:c5:d2: 69:66:78:03:64:c7:4c:7c:39:e0:5b:a4:95:c7:ef:cf:08:ef: 6b:99:df:2f:8b:ee:1d:7d:d5:08:62:1f:d4:ba:42:98:4e:32: 98:9c:b4:ad:5b:86:71:66:a4:e2:5b:ae:ed:0f:d9:cf:51:9a: 0c:55:c9:3b:13:a0:a3:ee:cf:62:6e:78:64:de:2d:af:52:f5: d3:6a:09:96:69:91:ba:c4:ba:2d:ba:1a:7e:62:58:25:7f:ae: d6:78:65:ee:7b:6b:86:04:8c:d6:81:58:ff:66:05:8b:fd:b1: 51:42:fd:f5:60:28:36:c8:67:47:ac:0c:70:2f:83:5c:84:c0: 40:c2:16:7a:d6:27:8a:80:8a:8e:a6:68:b5:96:df:09:36:f4: 13:f0:39:ab:ec:8e:b4:e5:e3:43:cb:70:21:7e:1a:16:17:8d: 63:fc:b8:0b:d6:da:27:a5:05:21:56:1d:18:88:87:ea:58:10: be:bf:91:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxlB+sTLUUSOypAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MDQzYTNlYmQtMjMzZC00YjBiLWE1YWUtN2EwMmNkYjJlZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQOU6lXXOZDYxJvlOFY4agUqd/lmAj32Mln lG22xcgchg6mxn0deiBQHbvV/0km7sj4HR93dkoxpxIQoPFlZli2CA/aeKNAFbgA criskQzWRnAl5ZHtNhAF6dhaY3VjUzmdwTV3CNpFSHxW6BL+BDkXGTSB8r5iPlgc 5bsxj3rKquFVYAcGztI/dXiERlAykcUY0b0K6FuxIjPNv3xGCYq/ncx6DIh6DDQN 1kmufboYizF1BOJSrcxZuvrRrDAbj54g0YhfpCekXHNlNoDkq5FyJ3LJjsdAG2xy rIUXwbsh2pfZhQKqxyykZVzn4b4aKdpVRuCHapVcRQjM0+RSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElJ+KS/kvwNQBErMekV0iXmmIbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDIxZDFiODktY2I1Yy0z ZTQyLWI1NzYtZmEzNGU1MGYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm4APvwTAcfAic+0iVAn2+ekIncWGX8bpEQ/uTeWYd20htXyUXfn92x KbEP384SO+yEaW1jEUT4l5vjkk2W5flShN4xuljF0mlmeANkx0x8OeBbpJXH788I 72uZ3y+L7h191QhiH9S6QphOMpictK1bhnFmpOJbru0P2c9RmgxVyTsToKPuz2Ju eGTeLa9S9dNqCZZpkbrEui26Gn5iWCV/rtZ4Ze57a4YEjNaBWP9mBYv9sVFC/fVg KDbIZ0esDHAvg1yEwEDCFnrWJ4qAio6maLWW3wk29BPwOavsjrTl40PLcCF+GhYX jWP8uAvW2ielBSFWHRiIh+pYEL6/kb8= -----END CERTIFICATE-----Generated at Thu Jul 10 10:52:19 2025 by rpki-client