$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa File: e5380eca-3a33-3f78-8a68-959ba62a5d27.roa (raw, json) Hash identifier: EZcxKHm8aBesSv5SvY/5t9PAaY5KS4obWNj/H/Oh4K8= Subject key identifier: 5B:FD:44:34:F2:C3:10:C4:00:18:14:5C:EC:3E:7B:04:39:0D:69:41 Certificate issuer: /CN=ec2240cc-d515-4cf6-9c7a-914117fee035 Certificate serial: 010D0C9F4328584ADD66810FBAD2F19E7B315DC0 Authority key identifier: 05:4C:1F:37:3D:4E:5C:1E:4A:67:7A:6F:F0:BB:95:55:B9:BF:49:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 46346 IP address blocks: 66.163.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:81:0f:ba:d2:f1:9e:7b:31:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2240cc-d515-4cf6-9c7a-914117fee035 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=1e954b4f-7101-424e-b3a3-c92365ed0c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9a:f9:b7:f3:ca:0c:05:53:13:83:1c:90:ac: ab:19:11:23:e8:9b:3c:ab:a3:7b:df:29:ae:25:c7: 52:75:51:eb:cb:79:ba:89:ea:a0:34:e2:fd:3a:72: 9a:43:99:5b:dc:3b:6c:a4:15:02:94:21:a9:1c:8c: 83:11:f9:60:7a:a9:ab:45:de:22:7b:d6:dd:e0:28: 00:a0:f9:1c:d1:86:0d:5e:64:21:5e:e2:30:b1:3c: 57:18:02:02:c2:5a:26:1a:d8:41:1e:2d:f0:4a:12: d5:b0:63:a8:dd:06:3e:91:2f:72:f2:c1:3c:27:ad: a5:59:01:39:e9:51:d2:33:58:3b:48:89:31:9e:3c: 9a:58:70:3c:5c:d0:c0:e8:24:8f:99:a7:8c:c0:67: a4:0e:56:88:da:e7:cb:d7:da:fb:56:57:e1:47:b6: 5e:06:ab:9b:9e:3b:dd:a4:52:c4:97:28:41:00:40: 90:e6:a4:66:41:50:96:25:4d:c7:42:d2:63:2b:d6: 70:35:8f:49:c1:76:11:ec:7b:67:47:2e:5b:95:d9: fa:03:d0:08:42:23:15:3c:f6:ae:1e:c1:1c:ae:f6: 19:30:80:16:df:b9:27:c9:0d:99:eb:de:67:61:59: 9b:f2:98:30:fc:c1:1d:fd:1d:cd:23:84:2f:69:d0: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FD:44:34:F2:C3:10:C4:00:18:14:5C:EC:3E:7B:04:39:0D:69:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.crl X509v3 Authority Key Identifier: keyid:05:4C:1F:37:3D:4E:5C:1E:4A:67:7A:6F:F0:BB:95:55:B9:BF:49:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer sbgp-ipAddrBlock: critical IPv4: 66.163.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8f:40:e4:a7:3c:7d:f6:ee:4d:c2:9c:89:51:d7:e1:11:3d: 1b:b1:b3:6d:75:37:5a:c6:c5:65:4a:cf:de:a6:54:b1:f9:7c: e8:0f:ca:ee:8a:39:e9:f5:97:07:47:8d:3d:72:b0:ff:4a:8b: 35:86:b5:f9:53:85:29:1f:46:c5:80:3a:7c:48:92:19:95:90: 6e:6a:56:e5:ee:b3:4c:de:9d:83:93:d5:ce:35:b4:f1:42:ef: 46:02:22:5b:ff:5c:c7:40:c0:e5:2b:14:6a:55:b0:a4:d9:28: 07:0b:34:5c:3c:c5:ab:60:2e:08:36:e8:ff:ac:01:d3:37:a4: 4e:cb:05:a4:74:d9:7c:72:8a:76:72:9b:19:dc:20:f3:27:eb: 3b:b0:73:69:31:00:2f:a3:fd:24:20:05:df:f9:fc:e4:a3:e7: a9:7d:06:8b:4f:bc:5d:b0:39:40:04:b3:d5:0b:d7:2c:38:7f: b5:3b:eb:31:7b:35:2b:2a:14:8c:65:62:bf:c3:9b:a3:f7:71: d3:6a:2f:f0:2e:5b:f1:93:08:22:98:39:1d:50:04:1e:26:7e: a6:c6:d5:38:ff:3f:de:dd:7e:f1:1c:d5:95:91:47:2f:0f:eb: 96:a0:4b:d0:8e:f1:93:8f:e4:aa:25:2a:7e:78:23:f8:45:ca: ef:1d:7b:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoEPutLxnnsxXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMyMjQwY2MtZDUxNS00Y2Y2LTljN2EtOTE0MTE3ZmVl MDM1MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MWU5NTRiNGYtNzEwMS00MjRlLWIzYTMtYzkyMzY1ZWQwYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75r5t/PKDAVTE4MckKyrGREj6Js8q6N73ymu JcdSdVHry3m6ieqgNOL9OnKaQ5lb3DtspBUClCGpHIyDEflgeqmrRd4ie9bd4CgA oPkc0YYNXmQhXuIwsTxXGAICwlomGthBHi3wShLVsGOo3QY+kS9y8sE8J62lWQE5 6VHSM1g7SIkxnjyaWHA8XNDA6CSPmaeMwGekDlaI2ufL19r7VlfhR7ZeBqubnjvd pFLElyhBAECQ5qRmQVCWJU3HQtJjK9ZwNY9JwXYR7HtnRy5bldn6A9AIQiMVPPau HsEcrvYZMIAW37knyQ2Z695nYVmb8pgw/MEd/R3NI4QvadDASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv9RDTywxDEABgUXOw+ewQ5DWlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIy NDBjYy1kNTE1LTRjZjYtOWM3YS05MTQxMTdmZWUwMzUvZTUzODBlY2EtM2EzMy0z Zjc4LThhNjgtOTU5YmE2MmE1ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWMyMjQwY2MtZDUxNS00Y2Y2LTlj N2EtOTE0MTE3ZmVlMDM1L2VjMjI0MGNjLWQ1MTUtNGNmNi05YzdhLTkxNDExN2Zl ZTAzNS5jcmwwHwYDVR0jBBgwFoAUBUwfNz1OXB5KZ3pv8LuVVbm/SRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIyNDBjYy1kNTE1LTRjZjYtOWM3YS05MTQx MTdmZWUwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiPQOSnPH327k3CnIlR1+ERPRuxs211N1rGxWVKz96mVLH5fOgPyu6K Oen1lwdHjT1ysP9KizWGtflThSkfRsWAOnxIkhmVkG5qVuXus0zenYOT1c41tPFC 70YCIlv/XMdAwOUrFGpVsKTZKAcLNFw8xatgLgg26P+sAdM3pE7LBaR02XxyinZy mxncIPMn6zuwc2kxAC+j/SQgBd/5/OSj56l9BotPvF2wOUAEs9UL1yw4f7U76zF7 NSsqFIxlYr/Dm6P3cdNqL/AuW/GTCCKYOR1QBB4mfqbG1Tj/P97dfvEc1ZWRRy8P 65agS9CO8ZOP5KolKn54I/hFyu8dexE= -----END CERTIFICATE-----Generated at Thu Aug 21 01:33:35 2025 by rpki-client