$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa File: eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa (raw, json) Hash identifier: UKtERIC77NnkjZxK0+I+xo8pftgVuWFsgdXrrkO5jIg= Subject key identifier: F5:F1:07:E4:B0:00:D7:A0:E9:64:04:22:FA:47:80:42:AE:C3:A4:8E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584ADB486A16B38518E7BE83E0C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa Signing time: Thu 14 Aug 2025 18:48:42 +0000 ROA not before: Thu 14 Aug 2025 18:48:42 +0000 ROA not after: Wed 12 Nov 2025 19:48:42 +0000 asID: 23473 IP address blocks: 66.253.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:48:6a:16:b3:85:18:e7:be:83:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 14 18:48:42 2025 GMT Not After : Nov 12 19:48:42 2025 GMT Subject: CN=eb83c5e3-9ba4-4920-89cd-9b8e813656cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:a3:b0:6d:08:e2:a8:86:93:85:15:bd:0d: 68:c5:a5:21:34:07:05:eb:69:c1:f7:96:70:ea:a6: cd:aa:62:91:d3:a7:03:a9:e5:8a:18:33:c5:66:33: 13:85:67:10:fa:4c:b3:01:5b:b2:43:6a:ec:36:50: 6a:dc:d7:d7:2d:f4:76:d8:80:f8:9e:86:eb:fa:25: 86:9d:49:a4:ad:3b:4b:e2:1d:2e:82:51:8b:64:15: 73:ce:2f:fa:11:d1:1e:ae:f9:fb:7f:97:66:65:cf: 7c:6d:c5:3e:98:00:5f:1a:2d:c0:17:c4:9a:c7:4b: 0f:f6:3f:cf:eb:9b:cf:36:7c:fd:bc:80:64:20:d9: c3:09:26:95:1f:80:1f:32:69:81:f7:36:30:fc:c1: bf:c7:59:76:a8:04:73:ae:29:10:07:aa:0e:07:94: 6f:c1:cd:d2:cc:44:6c:eb:54:79:29:57:0d:f4:7c: 0d:69:af:df:87:5b:3d:3e:6a:58:f8:f6:48:b1:2e: c9:b8:29:24:be:ec:21:38:33:e5:1f:e0:b1:61:2d: da:bf:d5:da:29:cf:50:7b:f7:64:a8:19:27:94:e2: 8b:86:3f:74:44:3b:ed:37:2a:40:29:83:a8:b7:d7: 35:91:69:68:4e:fe:2b:b9:af:d5:e8:3c:6e:93:09: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F1:07:E4:B0:00:D7:A0:E9:64:04:22:FA:47:80:42:AE:C3:A4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eaa3a791-73e0-3aa4-86cc-a48fce6a583e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a8:b1:ea:c0:4a:70:bd:03:b6:24:a1:01:82:23:f4:9b:2b: 08:d3:90:dc:1c:7e:85:6e:22:fd:aa:52:d6:ba:35:63:21:ec: 64:f4:66:17:d2:31:71:e7:07:6b:bb:a8:29:53:2f:2d:44:43: f7:1f:77:c6:21:15:c8:ac:db:1c:80:f5:a4:a1:a6:4a:15:cb: 7b:89:bb:de:0e:7d:68:7a:c0:d4:67:27:1f:fd:5f:2b:e7:78: 2a:05:7b:ac:bd:aa:53:75:b0:c2:54:05:63:24:bd:19:d8:34: fc:69:3c:6d:a7:9f:d8:4a:57:6c:12:d2:08:f7:6f:22:78:c7: 0e:bd:67:a9:9e:5f:23:f8:60:a5:ad:4c:79:32:2f:1b:de:64: f0:08:d4:0a:8d:cd:5c:fb:12:d1:67:ea:a5:3c:02:1f:8f:9d: 82:13:ca:a1:73:40:c1:87:1c:9b:35:8e:28:39:78:4a:2c:d6: b2:ac:d8:02:bc:73:e5:c5:c5:2f:be:f5:ee:08:f3:75:ce:99: 69:bd:6c:10:8c:b3:e5:83:33:68:4f:f5:9e:ba:11:2f:fd:cc: c4:48:8b:8b:26:86:80:b5:ab:6e:f4:e4:88:50:6e:5c:78:11: 17:0e:5a:a7:ef:51:b4:96:49:70:62:72:0c:a9:37:92:91:08: 28:9b:0d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErbSGoWs4UY576D4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgxNDE4NDg0MloXDTI1MTExMjE5NDg0MlowLzEtMCsGA1UEAxMk ZWI4M2M1ZTMtOWJhNC00OTIwLTg5Y2QtOWI4ZTgxMzY1NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs36jsG0I4qiGk4UVvQ1oxaUhNAcF62nB95Zw 6qbNqmKR06cDqeWKGDPFZjMThWcQ+kyzAVuyQ2rsNlBq3NfXLfR22ID4nobr+iWG nUmkrTtL4h0uglGLZBVzzi/6EdEervn7f5dmZc98bcU+mABfGi3AF8Sax0sP9j/P 65vPNnz9vIBkINnDCSaVH4AfMmmB9zYw/MG/x1l2qARzrikQB6oOB5Rvwc3SzERs 61R5KVcN9HwNaa/fh1s9PmpY+PZIsS7JuCkkvuwhODPlH+CxYS3av9XaKc9Qe/dk qBknlOKLhj90RDvtNypAKYOot9c1kWloTv4rua/V6DxukwnX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXxB+SwANeg6WQEIvpHgEKuw6SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZWFhM2E3OTEtNzNlMC0z YWE0LTg2Y2MtYTQ4ZmNlNmE1ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCoserASnC9A7YkoQGCI/SbKwjTkNwcfoVuIv2qUta6NWMh7GT0ZhfS MXHnB2u7qClTLy1EQ/cfd8YhFcis2xyA9aShpkoVy3uJu94OfWh6wNRnJx/9Xyvn eCoFe6y9qlN1sMJUBWMkvRnYNPxpPG2nn9hKV2wS0gj3byJ4xw69Z6meXyP4YKWt THkyLxveZPAI1AqNzVz7EtFn6qU8Ah+PnYITyqFzQMGHHJs1jig5eEos1rKs2AK8 c+XFxS++9e4I83XOmWm9bBCMs+WDM2hP9Z66ES/9zMRIi4smhoC1q2705IhQblx4 ERcOWqfvUbSWSXBicgypN5KRCCibDXw= -----END CERTIFICATE-----Generated at Thu Aug 21 03:50:52 2025 by rpki-client