$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa File: 7effcafc-decd-3160-8a47-fac0462e8a13.roa (raw, json) Hash identifier: WCZixXXyqz8IDO5tx+R0jUL16P0b/gl1nA8kAe/DNdY= Subject key identifier: B0:95:E0:98:55:E4:DC:F3:42:51:A7:AF:86:0F:AB:AB:5F:C0:6D:C5 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AFC1C032B1689FB1279CAC800 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 21949 IP address blocks: 66.207.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:03:2b:16:89:fb:12:79:ca:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=c9a98819-602d-461c-b307-dc39ea76ddd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:54:3a:2c:3f:d7:7a:4f:fa:17:c3:ff:32: bd:64:50:4c:b7:1b:4c:ad:55:74:1d:20:12:28:68: b9:aa:38:a7:5e:31:17:da:3d:23:07:8d:6b:05:dc: 50:94:8d:52:87:f8:4b:d9:70:a0:78:1a:e0:db:49: ea:46:20:26:32:e7:11:77:5d:ff:e8:6f:16:52:4d: b2:28:95:fb:75:60:6f:15:36:02:52:d8:9f:68:f5: fd:7d:8b:fb:16:ea:32:51:50:07:90:7e:27:24:cc: 41:1e:e4:e9:cb:39:36:10:9e:02:ea:1a:96:53:7c: 5e:ae:02:e3:62:f5:ab:05:a1:fb:b2:3f:e9:86:97: 81:08:73:5d:54:88:4c:8a:ed:92:a9:f3:d5:c3:b2: 4b:2f:6a:f4:67:d9:de:78:f7:0d:8f:bb:3b:76:d9: 03:ad:01:6e:81:7c:d2:38:cf:79:98:43:00:bb:d8: 5f:54:76:47:08:2a:8f:9d:71:61:7c:e1:86:7a:59: d3:15:e4:fb:0a:8a:1e:8d:83:92:d7:3e:80:25:b6: 15:b7:5a:52:b3:9f:20:91:f7:a2:a6:af:af:e4:00: 41:96:1c:76:68:8d:09:62:28:24:ab:fb:b0:ca:ec: 3c:1c:19:65:5a:2e:14:82:1b:b4:26:50:a6:d4:d0: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:95:E0:98:55:E4:DC:F3:42:51:A7:AF:86:0F:AB:AB:5F:C0:6D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 66.207.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3f:31:03:1c:50:97:df:1d:cb:66:8e:01:34:68:53:85:ff: 9b:07:c4:f4:3a:6d:8b:65:78:77:07:f9:4c:a0:75:48:2c:6b: fb:b7:ce:e9:6a:e9:c9:93:ea:2a:2e:1b:24:50:72:8c:eb:a5: 6a:38:21:49:ae:f7:52:46:e7:2a:0d:10:91:5f:91:98:9d:8f: 9d:20:24:e4:6d:be:8e:6b:7b:62:9a:be:c2:a4:fb:97:28:a9: 09:62:2d:c8:33:32:f1:09:95:25:16:9c:42:d4:4f:80:0e:83: bc:72:88:2f:00:8e:82:55:5b:68:10:91:2d:f0:d1:43:25:a0: 33:d1:52:ad:6e:b1:b5:8b:3f:7c:a0:90:8c:31:c5:2a:ea:ec: 91:65:d1:20:11:37:c1:56:d4:e5:92:28:b3:aa:1e:ef:0b:69: 3a:c7:4f:be:52:9b:9c:da:0b:7f:2e:30:e0:cd:d3:b9:3a:61: ca:7e:5d:8e:21:68:4b:1b:6c:f7:07:f1:6b:7c:38:a2:2f:e5: 94:7f:e7:7d:5b:8d:ae:fc:65:fd:64:76:f0:e1:a0:44:1c:df: bd:b4:83:b2:a8:f3:71:9f:95:6c:50:c5:54:20:84:0f:8f:0a: 34:44:6b:0a:b3:7e:3c:91:7b:0d:8f:7c:66:6b:cf:75:d9:2f: ae:9e:a0:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAMrFon7EnnKyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzlhOTg4MTktNjAyZC00NjFjLWIzMDctZGMzOWVhNzZkZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1BUOiw/13pP+hfD/zK9ZFBMtxtMrVV0HSAS KGi5qjinXjEX2j0jB41rBdxQlI1Sh/hL2XCgeBrg20nqRiAmMucRd13/6G8WUk2y KJX7dWBvFTYCUtifaPX9fYv7FuoyUVAHkH4nJMxBHuTpyzk2EJ4C6hqWU3xergLj YvWrBaH7sj/phpeBCHNdVIhMiu2SqfPVw7JLL2r0Z9neePcNj7s7dtkDrQFugXzS OM95mEMAu9hfVHZHCCqPnXFhfOGGelnTFeT7CooejYOS1z6AJbYVt1pSs58gkfei pq+v5ABBlhx2aI0JYigkq/uwyuw8HBllWi4Ughu0JlCm1NCkAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCV4JhV5NzzQlGnr4YPq6tfwG3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2VmZmNhZmMtZGVjZC0z MTYwLThhNDctZmFjMDQ2MmU4YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQs/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4/MQMcUJffHctmjgE0aFOF/5sHxPQ6bYtleHcH+UygdUgsa/u3zulq 6cmT6iouGyRQcozrpWo4IUmu91JG5yoNEJFfkZidj50gJORtvo5re2KavsKk+5co qQliLcgzMvEJlSUWnELUT4AOg7xyiC8AjoJVW2gQkS3w0UMloDPRUq1usbWLP3yg kIwxxSrq7JFl0SARN8FW1OWSKLOqHu8LaTrHT75Sm5zaC38uMODN07k6Ycp+XY4h aEsbbPcH8Wt8OKIv5ZR/531bja78Zf1kdvDhoEQc3720g7Ko83GflWxQxVQghA+P CjREawqzfjyRew2PfGZrz3XZL66eoFA= -----END CERTIFICATE-----Generated at Mon Sep 15 17:11:35 2025 by rpki-client