$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa File: 4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa (raw, json) Hash identifier: /EqDI7X9EHJWGqAKgCjfWf6Ofr/BKskYyuwKHfpVStM= Subject key identifier: CB:64:EC:AC:2C:85:DD:70:7A:B7:B5:3B:69:60:74:C3:CB:CF:8A:E4 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A682609BACC8E9BA8AE481C00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 13536 IP address blocks: 66.152.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:09:ba:cc:8e:9b:a8:ae:48:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=c117be50-63c6-40ce-8eae-cecd6d9c404c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:2a:23:1e:90:cd:08:0c:29:2c:a4:d9:b6: e2:31:04:80:99:7a:13:7e:db:e5:b5:9e:5d:3c:10: 73:9b:46:28:6f:ba:be:c9:bc:2e:ea:d1:a6:b9:0b: 20:11:90:81:ed:97:d8:ce:f9:60:c3:e3:8a:f3:0a: 00:fe:31:1b:67:9b:ea:31:fb:0b:ac:b8:21:e4:cb: f7:55:22:6b:1e:bc:d4:83:6d:e8:13:a1:c3:f8:16: 84:8f:82:f6:6b:ef:c6:e5:4a:15:93:3c:1a:ee:6a: b8:4d:32:67:31:f8:ff:e2:27:07:4e:40:f8:10:a9: e9:0d:c6:ae:2a:14:e4:ab:df:57:93:71:b7:bd:8f: 27:18:36:be:05:ca:bb:3c:06:00:4f:11:a3:87:41: 4f:d5:f8:1e:41:1f:0f:e3:93:c3:69:38:e2:d3:54: 97:91:0c:cb:76:5b:9c:40:3f:7d:fe:57:49:fb:3b: 77:6b:bd:b1:cb:df:a5:b8:22:dd:b9:81:49:6e:45: 9c:28:39:ef:2b:5a:3d:d4:0b:70:db:94:6b:96:fc: ab:57:b1:d8:de:a2:1f:7b:b3:89:85:76:75:8b:bd: aa:1a:0d:c8:e5:c9:9d:92:7b:c1:09:c8:f8:2a:38: 3a:54:08:15:25:5d:52:49:e3:11:ab:1a:a4:cc:f7: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:64:EC:AC:2C:85:DD:70:7A:B7:B5:3B:69:60:74:C3:CB:CF:8A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:52:10:cc:ef:e7:3f:67:7a:68:e7:29:24:c9:2c:fb:22:86: 9e:41:65:60:7a:fa:f1:41:99:ee:31:92:56:98:7c:30:76:7f: a4:a9:27:4b:d8:54:60:11:99:12:fe:78:a3:9b:9c:46:05:4c: a3:63:55:b2:f3:cd:43:02:c8:5f:0c:a1:7a:48:7d:ef:9d:fd: 02:52:00:f8:35:ba:cb:52:9b:a5:a0:25:ab:f8:0d:93:a3:c5: 3d:f2:ad:b2:e6:f2:25:86:69:b6:76:4c:60:87:73:d6:06:e2: 75:49:b2:ff:7a:2f:3f:a2:38:38:4d:16:5a:3f:a4:c7:5a:4f: c4:88:8d:c2:75:5a:a2:e8:54:88:42:40:9f:6b:5a:0b:35:f2: cd:f8:5d:74:88:8d:39:13:0f:b7:77:c7:03:4b:ab:ae:6b:7c: 44:19:b2:cd:18:18:be:e2:91:04:09:bf:6f:ee:9f:7a:5d:c5: 0f:80:a8:7c:1d:dc:f5:9f:ae:c1:05:db:3c:84:18:71:8f:46: 51:56:62:c7:bf:bf:e9:ad:03:13:3d:01:f9:98:5e:63:21:0d: 0c:eb:08:3d:5c:84:8a:fd:f1:21:72:84:7a:cb:2e:3f:24:16: 24:a0:8b:21:c5:6c:f1:4d:51:2c:2e:78:90:8a:ad:5a:87:d8: aa:58:d3:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgm6zI6bqK5IHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YzExN2JlNTAtNjNjNi00MGNlLThlYWUtY2VjZDZkOWM0MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EsqIx6QzQgMKSyk2bbiMQSAmXoTftvltZ5d PBBzm0Yob7q+ybwu6tGmuQsgEZCB7ZfYzvlgw+OK8woA/jEbZ5vqMfsLrLgh5Mv3 VSJrHrzUg23oE6HD+BaEj4L2a+/G5UoVkzwa7mq4TTJnMfj/4icHTkD4EKnpDcau KhTkq99Xk3G3vY8nGDa+Bcq7PAYATxGjh0FP1fgeQR8P45PDaTji01SXkQzLdluc QD99/ldJ+zt3a72xy9+luCLduYFJbkWcKDnvK1o91Atw25RrlvyrV7HY3qIfe7OJ hXZ1i72qGg3I5cmdknvBCcj4Kjg6VAgVJV1SSeMRqxqkzPf/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtk7Kwshd1were1O2lgdMPLz4rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNGVmOWQzM2MtZTg4Ni0z ZTFkLWE5NTAtNjhmZWFhOWE5Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQphgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRSEMzv5z9nemjnKSTJLPsihp5BZWB6+vFBme4xklaYfDB2f6SpJ0vY VGARmRL+eKObnEYFTKNjVbLzzUMCyF8MoXpIfe+d/QJSAPg1ustSm6WgJav4DZOj xT3yrbLm8iWGabZ2TGCHc9YG4nVJsv96Lz+iODhNFlo/pMdaT8SIjcJ1WqLoVIhC QJ9rWgs18s34XXSIjTkTD7d3xwNLq65rfEQZss0YGL7ikQQJv2/un3pdxQ+AqHwd 3PWfrsEF2zyEGHGPRlFWYse/v+mtAxM9AfmYXmMhDQzrCD1chIr98SFyhHrLLj8k FiSgiyHFbPFNUSwueJCKrVqH2KpY048= -----END CERTIFICATE-----Generated at Wed Jul 9 15:44:41 2025 by rpki-client