$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa File: 887961af-3aed-3506-bd33-2d162c0a8179.roa (raw, json) Hash identifier: QBRrC25p+xDvBDgynscniSRA53B1k19B8NGWuBMAEtM= Subject key identifier: 20:89:E4:9E:F1:08:25:69:92:3E:EE:5B:06:FF:F9:B5:C6:37:74:17 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC690D8673D452084F563100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa Signing time: Wed 20 Aug 2025 22:03:12 +0000 ROA not before: Wed 20 Aug 2025 22:03:12 +0000 ROA not after: Tue 18 Nov 2025 23:03:12 +0000 asID: 23473 IP address blocks: 66.253.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:69:0d:86:73:d4:52:08:4f:56:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 22:03:12 2025 GMT Not After : Nov 18 23:03:12 2025 GMT Subject: CN=7a6a0fa2-6eab-49c0-b9bc-b6749f9d44a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:c1:c2:0f:ec:cb:61:d3:0c:fa:b1:c0:c3: ea:18:f7:a6:6b:d3:9a:f1:9c:40:49:d6:46:64:37: 4e:9a:52:2e:3f:ee:d1:a2:16:e9:56:71:20:17:59: bd:89:21:04:a2:ac:1e:17:2b:4d:9e:78:30:cb:fe: aa:0e:b9:35:46:12:31:0a:a6:f1:78:e9:2a:cb:aa: d0:f9:25:e7:19:fb:4a:48:f9:54:29:fb:98:6d:3c: 98:4f:d3:16:39:e8:8b:8f:f5:95:da:a7:54:c7:08: 49:6f:9f:02:04:99:44:a8:f3:d4:b2:a9:b9:11:59: e3:ea:f7:29:20:42:4b:db:05:9e:ee:a7:92:90:65: e2:e9:7c:8d:32:d5:02:f7:59:34:b0:0d:02:d9:29: 88:74:24:23:ef:95:84:93:d3:a1:44:fc:e6:b1:a7: 4c:5b:c4:e0:45:6c:74:30:8f:7d:16:34:7d:f4:c9: 8f:0d:99:a4:74:64:3e:d2:cf:c3:de:8b:78:d9:43: 95:31:03:0b:39:3c:ee:f1:25:7c:19:cf:4b:04:8d: b4:88:c9:50:f1:de:b4:5e:57:67:46:df:a0:7f:32: a5:12:dd:fd:63:8d:ac:55:ea:03:fc:be:a1:a5:0d: ee:ae:74:9d:ea:32:33:6e:5d:5a:18:dd:1f:23:ab: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:E4:9E:F1:08:25:69:92:3E:EE:5B:06:FF:F9:B5:C6:37:74:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:ba:01:bd:d9:9d:2d:90:f2:4e:3a:c7:78:99:cf:6c:e4: 75:83:5e:c1:05:47:22:ec:f8:4f:6c:6b:ef:64:47:a7:6f:ec: 7e:fb:eb:40:26:4f:83:3d:c6:00:fa:a4:a1:f7:18:6f:24:5c: 23:49:86:35:59:a5:6a:19:f4:37:20:c3:90:30:f0:8f:b3:e5: 23:69:eb:07:8e:6d:4c:ca:85:cd:77:62:92:8a:84:7d:2d:ce: e1:1f:8c:43:5f:2b:b3:da:e5:7a:33:ff:46:54:0e:b8:42:b6: 6f:af:24:30:c3:55:1e:5a:e5:dd:ca:43:5f:e3:ed:4d:bb:11: fa:d7:a7:9d:aa:68:cf:ed:ed:2d:cf:39:fd:38:c3:ea:dc:36: 0b:5e:a0:06:c1:70:28:0d:9c:85:46:23:6e:66:4d:c0:50:13: 5e:59:e0:b3:e3:fa:29:fe:91:ea:63:38:77:a0:da:b5:5c:43: fb:9f:97:af:bb:f9:ef:c1:89:66:44:65:e3:fc:e3:16:16:52: ef:e9:2a:75:7e:b2:79:5e:9c:3f:91:9a:3e:2b:86:e0:d8:95: 1b:9b:12:17:98:19:c1:5d:98:c3:ae:af:96:6c:27:87:c0:8f: 9b:2f:7d:e0:c1:84:35:8d:3d:59:fe:11:89:77:fb:8d:cb:ad: ce:06:b7:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsaQ2Gc9RSCE9WMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIyMDMxMloXDTI1MTExODIzMDMxMlowLzEtMCsGA1UEAxMk N2E2YTBmYTItNmVhYi00OWMwLWI5YmMtYjY3NDlmOWQ0NGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8PBwg/sy2HTDPqxwMPqGPema9Oa8ZxASdZG ZDdOmlIuP+7RohbpVnEgF1m9iSEEoqweFytNnngwy/6qDrk1RhIxCqbxeOkqy6rQ +SXnGftKSPlUKfuYbTyYT9MWOeiLj/WV2qdUxwhJb58CBJlEqPPUsqm5EVnj6vcp IEJL2wWe7qeSkGXi6XyNMtUC91k0sA0C2SmIdCQj75WEk9OhRPzmsadMW8TgRWx0 MI99FjR99MmPDZmkdGQ+0s/D3ot42UOVMQMLOTzu8SV8Gc9LBI20iMlQ8d60Xldn Rt+gfzKlEt39Y42sVeoD/L6hpQ3urnSd6jIzbl1aGN0fI6vz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCJ5J7xCCVpkj7uWwb/+bXGN3QXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODg3OTYxYWYtM2FlZC0z NTA2LWJkMzMtMmQxNjJjMGE4MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNXugG92Z0tkPJOOsd4mc9s5HWDXsEFRyLs+E9sa+9kR6dv7H7760Am T4M9xgD6pKH3GG8kXCNJhjVZpWoZ9Dcgw5Aw8I+z5SNp6weObUzKhc13YpKKhH0t zuEfjENfK7Pa5Xoz/0ZUDrhCtm+vJDDDVR5a5d3KQ1/j7U27EfrXp52qaM/t7S3P Of04w+rcNgteoAbBcCgNnIVGI25mTcBQE15Z4LPj+in+kepjOHeg2rVcQ/ufl6+7 +e/BiWZEZeP84xYWUu/pKnV+snlenD+Rmj4rhuDYlRubEheYGcFdmMOur5ZsJ4fA j5svfeDBhDWNPVn+EYl3+43Lrc4Gt8Y= -----END CERTIFICATE-----Generated at Thu Aug 21 03:55:57 2025 by rpki-client