$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa File: 1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa (raw, json) Hash identifier: 6w+0kqdpjQM66cGq+JFBHwNSS8chK27CxTuRPbVh8yU= Subject key identifier: DF:55:C0:61:AB:5F:BE:B3:60:DA:C5:6D:8F:13:BD:39:D8:09:B2:19 Certificate issuer: /CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Certificate serial: 010D0C9F4328584AE19675F7323F9083585C6740 Authority key identifier: 7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 400191 IP address blocks: 66.59.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:75:f7:32:3f:90:83:58:5c:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=21f96c06-3ca9-47a9-940e-77ff69683eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:9b:7e:c7:3d:51:8d:0b:8e:64:a6:7d:8d: 14:b6:f8:b5:ac:db:22:56:cc:3f:e9:7e:76:4d:3a: 03:b7:d4:9f:91:e1:cf:13:7c:a3:95:ef:4b:81:f1: 1e:f4:1a:ad:e1:ee:bd:86:73:b7:48:6d:36:9b:ef: 39:40:5f:35:60:b8:21:34:e4:32:fe:ae:19:40:26: a9:ed:25:33:b2:a6:fe:07:0e:3d:d7:cb:45:20:50: d9:5d:4b:31:5a:12:f9:35:9d:76:f9:b6:bc:13:27: 47:27:02:14:f9:7d:30:d9:a8:3f:8c:57:99:e9:e6: 03:bd:e8:21:60:cb:ef:dc:7b:8b:ad:d7:90:74:ab: 77:e9:77:0c:a8:06:75:87:17:3d:ad:52:33:31:57: 21:98:fb:e0:95:07:01:54:87:9e:0f:7c:26:59:4c: 29:80:8e:e8:08:f2:02:b0:3e:45:f6:89:8f:5e:eb: 0f:c0:d5:9a:90:c3:22:c6:28:2a:68:7d:8b:64:5a: 7f:e4:bc:85:7f:36:3c:92:ca:bf:25:22:73:ea:4e: 4f:8f:27:22:b4:76:d7:de:bd:3d:f3:54:4f:40:52: 6a:a8:b0:d7:34:20:56:4e:07:ca:6d:63:ec:b7:1e: 04:e8:4d:ee:64:46:df:f9:32:35:ec:e4:55:c7:e7: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:55:C0:61:AB:5F:BE:B3:60:DA:C5:6D:8F:13:BD:39:D8:09:B2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/1fed6c3c-17d8-3f60-ac4e-0757fcf0829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl X509v3 Authority Key Identifier: keyid:7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer sbgp-ipAddrBlock: critical IPv4: 66.59.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:40:a9:3c:f8:c8:06:b8:a0:67:83:89:d5:24:cf:a4:1f:ec: 53:f5:75:0a:73:e1:fe:b5:4d:78:33:be:b2:26:72:0e:cd:9e: 3d:df:7c:68:5d:c2:df:37:f4:37:d3:1d:50:00:f1:4d:ef:a1: cf:c0:74:fc:b0:c0:40:01:fa:6d:2c:98:83:c4:4d:96:c3:73: 27:10:fa:d5:08:ae:26:cf:4a:d7:be:46:90:9b:df:fa:67:5f: c3:e3:16:af:31:88:b5:9f:11:95:71:3c:ca:a7:0e:9d:f4:96: 54:21:86:89:cd:e8:ba:a9:fe:c6:be:a2:c5:5c:f0:e1:d9:30: 92:dc:14:9a:63:76:3f:a2:36:7f:9e:49:60:84:96:28:b6:a5: ac:de:bd:d8:70:35:32:a0:11:15:e7:e4:5f:01:41:88:c6:f0: e4:62:1b:fe:5a:30:51:34:65:50:cd:d0:bb:36:4c:d8:83:2b: 60:2f:de:1a:f2:d3:8f:f4:51:9d:01:ad:88:b7:16:13:46:b6: d6:60:68:81:67:37:fd:3f:05:13:31:dc:fe:56:49:b9:16:b6: 85:1c:7a:89:53:a2:e3:a8:ed:45:55:14:3f:6a:6d:70:4b:a5: dc:3b:f9:b1:75:c7:c8:11:dc:72:5d:25:e4:f1:1f:c0:9d:9b: ff:23:70:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlnX3Mj+Qg1hcZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkMTI5MGItZTA0NS00M2NhLTk2YjgtYTNkYTg3ZTcy YzRiMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MjFmOTZjMDYtM2NhOS00N2E5LTk0MGUtNzdmZjY5NjgzZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbebfsc9UY0LjmSmfY0Utvi1rNsiVsw/6X52 TToDt9SfkeHPE3yjle9LgfEe9Bqt4e69hnO3SG02m+85QF81YLghNOQy/q4ZQCap 7SUzsqb+Bw4918tFIFDZXUsxWhL5NZ12+ba8EydHJwIU+X0w2ag/jFeZ6eYDvegh YMvv3HuLrdeQdKt36XcMqAZ1hxc9rVIzMVchmPvglQcBVIeeD3wmWUwpgI7oCPIC sD5F9omPXusPwNWakMMixigqaH2LZFp/5LyFfzY8ksq/JSJz6k5PjycitHbX3r09 81RPQFJqqLDXNCBWTgfKbWPstx4E6E3uZEbf+TI17ORVx+di3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9VwGGrX76zYNrFbY8TvTnYCbIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NmQx MjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2RhODdlNzJjNGIvMWZlZDZjM2MtMTdkOC0z ZjYwLWFjNGUtMDc1N2ZjZjA4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzZkMTI5MGItZTA0NS00M2NhLTk2 YjgtYTNkYTg3ZTcyYzRiLzc2ZDEyOTBiLWUwNDUtNDNjYS05NmI4LWEzZGE4N2U3 MmM0Yi5jcmwwHwYDVR0jBBgwFoAUf5bvygJ+DL7t4Wsxdw4p1Aq089IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NmQxMjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2Rh ODdlNzJjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdAqTz4yAa4oGeDidUkz6Qf7FP1dQpz4f61TXgzvrImcg7Nnj3ffGhd wt839DfTHVAA8U3voc/AdPywwEAB+m0smIPETZbDcycQ+tUIribPSte+RpCb3/pn X8PjFq8xiLWfEZVxPMqnDp30llQhhonN6Lqp/sa+osVc8OHZMJLcFJpjdj+iNn+e SWCElii2pazevdhwNTKgERXn5F8BQYjG8ORiG/5aMFE0ZVDN0Ls2TNiDK2Av3hry 04/0UZ0BrYi3FhNGttZgaIFnN/0/BRMx3P5WSbkWtoUceolTouOo7UVVFD9qbXBL pdw7+bF1x8gR3HJdJeTxH8Cdm/8jcOc= -----END CERTIFICATE-----Generated at Thu Aug 21 01:45:44 2025 by rpki-client