$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa File: ff76f477-9fcf-3f97-a435-7620968e5ec0.roa (raw, json) Hash identifier: WHHmXGCt1YjRpSqXmQxMFd32WAwwc6h+MClhBxN1uv0= Subject key identifier: 92:C4:71:E6:68:71:03:29:05:2C:A0:2B:BD:00:F1:1A:29:D7:4F:5D Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Certificate serial: 010D0C9F4328584AFF955190884FADD283E68C80 Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa Signing time: Wed 27 Aug 2025 18:52:45 +0000 ROA not before: Wed 27 Aug 2025 18:52:45 +0000 ROA not after: Tue 25 Nov 2025 19:52:45 +0000 asID: 996 IP address blocks: 66.207.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:95:51:90:88:4f:ad:d2:83:e6:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Validity Not Before: Aug 27 18:52:45 2025 GMT Not After : Nov 25 19:52:45 2025 GMT Subject: CN=95d1f331-2a4c-4479-8523-b1729efe5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:55:92:ea:59:20:02:3a:d2:5d:72:bd:e1:8a: a8:f2:39:b7:60:87:8d:7f:ea:b8:45:ef:e9:8e:e4: de:88:9a:a5:83:88:e4:e4:49:45:9d:23:ca:f4:fd: 75:8b:99:52:c5:15:6e:f8:58:86:5e:f9:f7:03:ec: 6f:43:14:8a:c8:7e:91:dc:81:5a:29:6e:5a:c6:f8: ae:23:89:e2:24:84:3b:d8:d0:bc:2b:8d:93:6c:6a: 8e:2e:04:f1:26:9c:38:92:c8:c8:0c:2d:1b:ae:14: b5:54:fa:10:2f:3c:52:9f:c4:a0:fb:46:50:3e:7d: f0:c9:e2:db:03:c1:b0:60:9c:95:56:b8:e3:1d:c6: a2:4b:52:56:0e:08:88:2e:d6:26:11:56:b2:af:71: d8:5d:a3:31:35:40:43:37:9a:00:8c:a4:88:9f:ac: 74:32:31:72:71:66:54:06:e2:02:7b:83:cd:6f:2d: f5:ec:31:c9:fb:39:8e:90:a5:3c:49:2f:fc:81:42: 63:7e:ee:d0:cc:ed:b6:fa:5c:47:f0:ce:a4:2e:05: 7e:8e:7b:dc:54:c5:52:8c:21:da:99:0b:0d:3a:09: 7d:cb:68:45:1c:17:1b:be:e5:0f:d4:12:9e:2d:72: 36:2a:ca:17:60:a8:07:e5:06:40:b6:40:47:31:45: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C4:71:E6:68:71:03:29:05:2C:A0:2B:BD:00:F1:1A:29:D7:4F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl X509v3 Authority Key Identifier: keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer sbgp-ipAddrBlock: critical IPv4: 66.207.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3c:35:2f:5b:2f:d1:b8:c3:63:dc:93:3d:40:6f:f5:74:7f: 52:64:c4:9f:9e:5b:9f:33:fb:43:a3:f6:8c:a8:69:64:91:65: 9d:ce:9c:a6:f4:32:b2:5a:75:5d:7c:82:93:77:89:b0:98:12: 5b:63:82:08:a8:c1:83:3f:74:6a:f3:d8:6e:f1:a3:78:3e:59: 17:65:35:30:e8:4e:a2:80:9f:5c:c2:5c:34:50:5a:42:a3:3f: 8c:5d:6f:11:97:33:cc:8e:a5:42:19:a1:1e:6f:c8:53:6c:7c: 10:09:02:a3:1a:13:16:c4:32:75:40:7f:7c:ac:4f:f7:a9:6f: bc:ac:70:fd:53:0e:11:c4:71:9d:75:f4:1a:18:2d:ec:e2:05: e5:95:61:43:e7:0a:69:a7:ce:8f:26:27:7b:5a:5b:f2:5b:dc: 39:5c:07:1c:43:40:d7:c9:0f:7d:23:08:74:28:6c:57:b8:60: 46:68:78:f3:34:42:83:69:40:31:0a:77:58:bd:42:47:dc:6f: 16:02:b5:b6:f3:68:b0:05:55:7e:04:40:13:5c:3b:20:8f:89: c3:10:f0:22:f2:e5:95:69:fd:3e:63:fd:2a:bb:b9:8d:c5:7c: 2e:2c:71:fc:55:90:8b:01:69:7b:2c:e6:40:4e:b1:84:40:0e: db:21:92:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/lVGQiE+t0oPmjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk YjYwMB4XDTI1MDgyNzE4NTI0NVoXDTI1MTEyNTE5NTI0NVowLzEtMCsGA1UEAxMk OTVkMWYzMzEtMmE0Yy00NDc5LTg1MjMtYjE3MjllZmU1MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFWS6lkgAjrSXXK94Yqo8jm3YIeNf+q4Re/p juTeiJqlg4jk5ElFnSPK9P11i5lSxRVu+FiGXvn3A+xvQxSKyH6R3IFaKW5axviu I4niJIQ72NC8K42TbGqOLgTxJpw4ksjIDC0brhS1VPoQLzxSn8Sg+0ZQPn3wyeLb A8GwYJyVVrjjHcaiS1JWDgiILtYmEVayr3HYXaMxNUBDN5oAjKSIn6x0MjFycWZU BuICe4PNby317DHJ+zmOkKU8SS/8gUJjfu7QzO22+lxH8M6kLgV+jnvcVMVSjCHa mQsNOgl9y2hFHBcbvuUP1BKeLXI2KsoXYKgH5QZAtkBHMUVe6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLEceZocQMpBSygK70A8Rop109dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvZmY3NmY0NzctOWZjZi0z Zjk3LWE0MzUtNzYyMDk2OGU1ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0 ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1 N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk8NS9bL9G4w2Pckz1Ab/V0f1JkxJ+eW58z+0Oj9oyoaWSRZZ3OnKb0 MrJadV18gpN3ibCYEltjggiowYM/dGrz2G7xo3g+WRdlNTDoTqKAn1zCXDRQWkKj P4xdbxGXM8yOpUIZoR5vyFNsfBAJAqMaExbEMnVAf3ysT/epb7yscP1TDhHEcZ11 9BoYLeziBeWVYUPnCmmnzo8mJ3taW/Jb3DlcBxxDQNfJD30jCHQobFe4YEZoePM0 QoNpQDEKd1i9QkfcbxYCtbbzaLAFVX4EQBNcOyCPicMQ8CLy5ZVp/T5j/Sq7uY3F fC4scfxVkIsBaXss5kBOsYRADtshkio= -----END CERTIFICATE-----Generated at Fri Sep 5 23:33:35 2025 by rpki-client