$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa File: 10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa (raw, json) Hash identifier: IyzhVwc6x17NJI5kKaYzINhUM6mYMFjIYngBGffAL4c= Subject key identifier: 92:B9:0A:1A:B7:A5:88:09:F8:4B:57:A3:6B:13:7E:EA:89:B6:63:D4 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC5EFB46852EDDFBAA0FA780 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa Signing time: Wed 20 Aug 2025 21:42:55 +0000 ROA not before: Wed 20 Aug 2025 21:42:55 +0000 ROA not after: Tue 18 Nov 2025 22:42:55 +0000 asID: 23473 IP address blocks: 66.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:5e:fb:46:85:2e:dd:fb:aa:0f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 21:42:55 2025 GMT Not After : Nov 18 22:42:55 2025 GMT Subject: CN=d981e265-4938-4920-a9f1-a33db62d8b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:2d:f6:f9:78:d1:0c:00:32:06:32:2a:b0: 76:da:fd:cf:f7:c6:b3:dd:e0:4c:1e:4a:e7:bd:75: 6d:42:bc:0b:d7:3a:48:a7:e4:8b:1d:40:33:54:7c: 11:3a:3f:00:0e:bd:3e:d8:ac:b0:95:80:39:f2:ea: 70:4f:92:3c:4e:71:3d:d8:e8:fa:2c:08:7a:1b:fc: 7e:4e:be:b0:24:aa:83:06:8c:88:af:21:8e:ee:b1: 52:ae:5b:8d:04:91:fa:fc:2e:dc:e3:f1:0f:f1:83: 87:db:ad:43:fe:ee:bb:a5:bd:6c:0e:20:9d:7f:72: fc:0a:1a:92:73:5f:09:69:a7:37:27:d5:58:16:ab: cd:6f:26:3c:4f:f7:05:d3:20:0b:67:68:b0:61:c6: d5:6e:b2:18:bb:0d:34:c2:cd:d2:84:60:56:e4:0d: 5f:88:52:de:8a:f2:7d:63:52:e4:4d:c7:16:a6:61: 52:df:4e:88:38:3a:a7:56:3e:e0:76:2d:20:00:aa: 8e:72:0c:f2:13:85:8d:5b:66:29:28:32:77:c8:65: bc:c4:ea:8b:e9:61:78:c4:5a:bb:dd:76:cb:d8:4c: b1:57:c6:cd:7f:3c:d3:eb:a4:55:cd:6d:7f:ff:78: b7:e1:04:dc:ef:fe:2e:ef:69:28:bd:c7:ab:9e:5e: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B9:0A:1A:B7:A5:88:09:F8:4B:57:A3:6B:13:7E:EA:89:B6:63:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f0:63:83:13:0a:2e:f4:a1:9f:ec:b8:ec:dd:08:99:2e:9a: 6d:11:87:af:18:ee:9a:b9:88:4b:84:e9:b4:af:eb:7a:91:b3: 9d:63:cc:99:73:b1:79:1c:58:a3:c2:25:f7:a1:c0:5b:37:e0: d2:fc:2d:87:2b:6e:c9:fc:a6:ee:32:23:b8:98:8c:d0:93:b2: f9:43:19:a7:52:2a:2e:71:c4:15:23:73:17:28:2a:4d:11:ff: 1c:e2:88:ff:06:fa:5d:65:fe:91:5e:de:e3:07:75:9f:8d:6e: 79:29:89:0d:08:70:4e:86:e0:31:a3:02:6b:05:90:10:21:60: fa:c7:7f:27:2a:df:e6:43:52:4b:17:05:e1:8c:7c:45:8f:21: 6d:23:10:d4:97:50:d1:b3:d6:44:54:8c:50:97:42:79:cd:51: af:82:16:6c:c9:4d:99:08:a0:e7:15:32:c9:c1:3a:0e:b0:58: 5a:c4:1d:57:34:ee:50:53:ad:98:bd:46:7c:06:ba:5f:00:d0: 37:54:30:be:d2:8a:71:9e:49:89:5e:29:97:e3:2c:25:ef:40: 0c:5c:d9:23:9e:87:83:a4:bc:2a:bf:b2:4e:27:e7:d9:b5:77: f1:c0:52:f4:d5:2f:fc:61:7b:9c:ac:26:81:b1:ce:3a:6b:f7: 92:85:68:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsXvtGhS7d+6oPp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIxNDI1NVoXDTI1MTExODIyNDI1NVowLzEtMCsGA1UEAxMk ZDk4MWUyNjUtNDkzOC00OTIwLWE5ZjEtYTMzZGI2MmQ4YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvAt9vl40QwAMgYyKrB22v3P98az3eBMHkrn vXVtQrwL1zpIp+SLHUAzVHwROj8ADr0+2KywlYA58upwT5I8TnE92Oj6LAh6G/x+ Tr6wJKqDBoyIryGO7rFSrluNBJH6/C7c4/EP8YOH261D/u67pb1sDiCdf3L8ChqS c18Jaac3J9VYFqvNbyY8T/cF0yALZ2iwYcbVbrIYuw00ws3ShGBW5A1fiFLeivJ9 Y1LkTccWpmFS306IODqnVj7gdi0gAKqOcgzyE4WNW2YpKDJ3yGW8xOqL6WF4xFq7 3XbL2EyxV8bNfzzT66RVzW1//3i34QTc7/4u72kovcernl6OVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK5Chq3pYgJ+EtXo2sTfuqJtmPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTBkMmZhZDktZDg1YS0z OGVkLTliMGUtYmYwOTU0ZjI0MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7wY4MTCi70oZ/suOzdCJkumm0Rh68Y7pq5iEuE6bSv63qRs51jzJlz sXkcWKPCJfehwFs34NL8LYcrbsn8pu4yI7iYjNCTsvlDGadSKi5xxBUjcxcoKk0R /xziiP8G+l1l/pFe3uMHdZ+NbnkpiQ0IcE6G4DGjAmsFkBAhYPrHfycq3+ZDUksX BeGMfEWPIW0jENSXUNGz1kRUjFCXQnnNUa+CFmzJTZkIoOcVMsnBOg6wWFrEHVc0 7lBTrZi9RnwGul8A0DdUML7SinGeSYleKZfjLCXvQAxc2SOeh4OkvCq/sk4n59m1 d/HAUvTVL/xhe5ysJoGxzjpr95KFaM0= -----END CERTIFICATE-----Generated at Thu Aug 21 03:55:18 2025 by rpki-client