$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa File: a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa (raw, json) Hash identifier: 1fzVItcxy2PGlMmAXt4uMU5uVlGBKwmz6IH+DHYx9x0= Subject key identifier: 35:33:DD:89:B0:C3:01:B1:FB:95:A5:8F:99:0A:62:E8:1F:39:B4:42 Certificate issuer: /CN=2cf622f9-718a-4280-a116-72e2088c51e3 Certificate serial: 010D0C9F4328584AECC14838CD09B1C28CF84D80 Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 394490 IP address blocks: 66.45.13.0/24 maxlen: 24 2620:dd:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:48:38:cd:09:b1:c2:8c:f8:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=750eb813-f0a6-4de2-8202-efb817288d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:99:91:f4:2c:aa:aa:9b:6a:da:82:1e:1b: 12:78:1d:3e:8b:d1:d9:42:a5:ba:4a:dc:30:8c:aa: c6:67:04:da:b6:b4:76:55:f5:e2:fe:73:c0:ca:9d: fa:7c:c4:a1:a7:9c:5a:5a:7a:8d:3d:7f:82:87:7d: 03:68:1a:e1:b4:35:36:09:b3:6f:cc:2b:53:15:da: 5d:e7:51:a4:38:03:5e:c8:5e:9a:46:fa:fb:e5:c6: cb:f9:44:12:a3:4e:ae:86:43:ba:57:03:2b:cd:70: 64:1f:6a:98:cd:32:7b:dd:0b:c9:ab:84:62:2a:8b: 00:c4:cb:d4:f0:0c:5e:c5:42:f5:2c:f1:16:65:44: 60:4a:b5:0b:88:72:d0:e3:ef:c9:9a:f4:00:85:f7: 25:a7:c2:b0:fe:6b:04:fa:14:e9:da:17:07:db:cb: a3:c4:01:47:ea:fd:1e:88:f8:51:b1:36:6d:4d:9c: 8e:fe:a4:f0:cc:28:6f:77:e8:f2:60:3b:9d:c8:ad: 31:b5:b3:ff:cf:53:0c:96:bc:78:ea:c6:24:64:66: 26:52:f6:d6:6c:c5:0b:e3:b8:df:76:4a:c5:63:e1: 89:5d:6c:eb:92:0a:2e:80:29:1b:99:f3:8d:4f:3b: a8:3f:80:cb:ca:ca:ac:5a:2d:48:eb:a1:7b:ab:2b: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:DD:89:B0:C3:01:B1:FB:95:A5:8F:99:0A:62:E8:1F:39:B4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl X509v3 Authority Key Identifier: keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer sbgp-ipAddrBlock: critical IPv4: 66.45.13.0/24 IPv6: 2620:dd:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a3:c9:f5:41:95:12:67:b9:75:53:89:5e:3c:f0:d0:e0:d1: 09:38:9f:ae:9c:de:67:b0:ec:a7:54:ee:b0:f1:26:d1:ae:51: a5:1b:70:8b:46:0a:d5:61:9a:ac:a1:65:f4:33:48:aa:3e:43: b2:6b:42:9f:68:d4:fa:fa:34:bc:dc:ba:01:0e:17:0f:6d:2a: e1:f4:ac:46:48:e5:c1:0c:41:30:73:fe:ac:c6:ee:1f:27:42: 2f:0b:ff:09:1f:b1:57:c8:ca:d2:d9:7f:d6:5e:b6:b6:54:0d: cb:0b:bd:34:a0:cb:50:8a:0f:f7:0e:15:9b:41:e5:4a:c6:88: 86:23:0d:38:64:f8:70:7d:d7:02:40:72:41:40:91:35:20:63: 5d:f0:41:de:1c:23:90:ce:99:5c:a0:78:40:bc:45:09:ef:5e: 4b:9a:8a:c9:78:d5:17:bf:ce:5a:16:7e:75:49:26:f2:be:1b: 6a:7a:b1:30:3b:e8:b3:64:c0:ee:bf:a1:30:91:e9:e1:8f:31: df:71:a5:75:bd:1c:21:8e:c7:e3:83:43:57:40:cc:be:3e:fa: 1f:55:4f:78:da:ad:0c:ca:c6:fd:8b:36:06:6a:47:c8:ec:29: 4d:e9:0b:6a:f7:8d:54:5d:b2:b3:1a:4d:34:48:8e:0b:86:9f: dd:82:9d:27 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErswUg4zQmxwoz4TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNmNjIyZjktNzE4YS00MjgwLWExMTYtNzJlMjA4OGM1 MWUzMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzUwZWI4MTMtZjBhNi00ZGUyLTgyMDItZWZiODE3Mjg4ZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstSZkfQsqqqbatqCHhsSeB0+i9HZQqW6Stww jKrGZwTatrR2VfXi/nPAyp36fMShp5xaWnqNPX+Ch30DaBrhtDU2CbNvzCtTFdpd 51GkOANeyF6aRvr75cbL+UQSo06uhkO6VwMrzXBkH2qYzTJ73QvJq4RiKosAxMvU 8AxexUL1LPEWZURgSrULiHLQ4+/JmvQAhfclp8Kw/msE+hTp2hcH28ujxAFH6v0e iPhRsTZtTZyO/qTwzChvd+jyYDudyK0xtbP/z1MMlrx46sYkZGYmUvbWbMUL47jf dkrFY+GJXWzrkgougCkbmfONTzuoP4DLysqsWi1I66F7qyuymQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDUz3YmwwwGx+5Wlj5kKYugfObRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2 MjJmOS03MThhLTQyODAtYTExNi03MmUyMDg4YzUxZTMvYTFlYmY0NGEtODIzYi0z NzdlLWJmMzYtNWE2MWMzMTZiMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmNmNjIyZjktNzE4YS00MjgwLWEx MTYtNzJlMjA4OGM1MWUzLzJjZjYyMmY5LTcxOGEtNDI4MC1hMTE2LTcyZTIwODhj NTFlMy5jcmwwHwYDVR0jBBgwFoAUMGLaWKnwufvsj2/Mg0mYz+O0DGowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2MjJmOS03MThhLTQyODAtYTExNi03MmUy MDg4YzUxZTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQi0NMA8E AgACMAkDBwAmIADdwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZKPJ9UGVEme5dVOJXjzw0ODRCTifrpze Z7Dsp1TusPEm0a5RpRtwi0YK1WGarKFl9DNIqj5DsmtCn2jU+vo0vNy6AQ4XD20q 4fSsRkjlwQxBMHP+rMbuHydCLwv/CR+xV8jK0tl/1l62tlQNywu9NKDLUIoP9w4V m0HlSsaIhiMNOGT4cH3XAkByQUCRNSBjXfBB3hwjkM6ZXKB4QLxFCe9eS5qKyXjV F7/OWhZ+dUkm8r4banqxMDvos2TA7r+hMJHp4Y8x33Gldb0cIY7H44NDV0DMvj76 H1VPeNqtDMrG/Ys2BmpHyOwpTekLaveNVF2ysxpNNEiOC4af3YKdJw== -----END CERTIFICATE-----Generated at Thu Aug 21 10:25:52 2025 by rpki-client