$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa File: 1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa (raw, json) Hash identifier: NAwNcXfhZhKRbrTcuoeikjiRTX5JRxdf8ds8dOCtMHw= Subject key identifier: B5:EB:9D:80:65:0C:7D:A8:1E:6E:67:E1:0B:FF:A5:F0:A6:0E:3B:08 Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab Certificate serial: 010D0C9F4328584B1C36B72EC8860E8D952B3380 Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 198949 IP address blocks: 66.22.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:b7:2e:c8:86:0e:8d:95:2b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3f5802fd-50db-41ce-a7be-eb1a6a1fc8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:79:1f:3b:3e:a9:64:bd:db:4a:b0:93:71: 8a:ba:cd:ac:45:4e:de:d7:8a:05:79:9e:a8:4e:5a: 38:fc:84:d6:d7:88:70:4b:5e:d2:2b:0a:3f:7e:e8: 49:ac:f4:b2:38:d8:c8:bd:7a:f1:b7:ee:65:60:dc: fe:87:e4:1e:43:db:3e:75:f6:2c:e5:fc:73:ba:56: 3d:aa:f6:c6:00:fd:b3:4d:9b:2a:fd:04:8d:8c:21: 51:16:2e:30:8d:ba:78:d8:82:8f:54:d1:25:a8:5d: e3:9f:27:4d:b7:bb:1a:f5:3c:f6:89:9e:32:2e:d8: 61:4a:a7:73:ef:31:ad:47:86:55:e6:fa:55:22:2f: 34:7b:0e:be:21:0f:d2:6d:af:fc:01:6a:4f:54:24: c2:59:2d:00:63:ad:f3:cb:bc:bf:1d:c9:b0:2c:c5: 77:14:a8:5a:4d:a9:da:4f:46:fd:d9:9b:b2:d2:55: c7:5c:04:de:08:f8:85:a1:43:ac:4d:c1:07:fb:70: 6d:ca:15:4d:dd:e2:49:5e:f8:12:88:84:e3:ff:03: da:8a:28:d4:e3:6f:bc:31:dd:2b:33:89:dc:d5:75: b2:e2:6e:fb:4a:a5:cc:4e:af:8c:7e:9d:45:1a:63: ab:7b:1f:0e:c3:e4:64:0b:8c:d2:0f:3c:8b:51:95: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EB:9D:80:65:0C:7D:A8:1E:6E:67:E1:0B:FF:A5:F0:A6:0E:3B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl X509v3 Authority Key Identifier: keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer sbgp-ipAddrBlock: critical IPv4: 66.22.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:df:d5:bb:7a:25:6c:50:e6:d6:46:d8:8b:37:e4:29:01:43: 66:8b:f0:23:b7:b8:cc:ab:00:ed:89:0c:8a:02:d8:fe:06:d9: 21:ad:6d:a2:e0:59:48:aa:86:78:c8:a9:2f:2c:f7:cc:5f:df: cc:c5:a0:54:91:49:69:56:b0:0a:5b:70:b3:3d:2e:90:70:7d: bf:ff:5b:b6:4a:a7:3a:05:4b:62:2b:c5:06:3d:16:31:ef:a3: ea:e6:2a:89:0f:17:82:49:66:80:eb:67:73:50:b2:e1:3c:e5: f3:35:a6:11:23:3f:97:94:2e:3f:0d:76:9f:8e:b2:0a:95:77: f8:56:5c:ac:80:51:26:a5:ed:5d:94:b3:91:26:cf:a8:24:e7: 58:a7:9b:e6:45:11:e5:66:5d:23:48:a2:89:7f:c4:a7:70:0a: 70:c7:c2:a3:73:10:ed:2b:a0:2a:d4:6f:ca:eb:51:e7:7b:31: f9:27:8a:57:19:e9:e5:ed:53:46:46:e6:69:7e:53:a1:e7:06: 26:1e:9d:c6:41:23:2f:23:7e:1d:2a:81:e5:ae:bc:ff:15:2c: ea:e3:ca:42:cf:3c:d6:d6:64:92:4d:5a:66:08:05:b4:f9:fd: 4b:4a:ee:94:00:cd:4d:32:a9:d0:02:3e:a0:a4:e2:ca:88:27: f8:ba:a9:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNrcuyIYOjZUrM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlYmYxZmQtYmU0OS00NzcxLTg3ZmItMmQwNDg4YmU0 Y2FiMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2Y1ODAyZmQtNTBkYi00MWNlLWE3YmUtZWIxYTZhMWZjOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzN5Hzs+qWS920qwk3GKus2sRU7e14oFeZ6o Tlo4/ITW14hwS17SKwo/fuhJrPSyONjIvXrxt+5lYNz+h+QeQ9s+dfYs5fxzulY9 qvbGAP2zTZsq/QSNjCFRFi4wjbp42IKPVNElqF3jnydNt7sa9Tz2iZ4yLthhSqdz 7zGtR4ZV5vpVIi80ew6+IQ/Sba/8AWpPVCTCWS0AY63zy7y/HcmwLMV3FKhaTana T0b92Zuy0lXHXATeCPiFoUOsTcEH+3BtyhVN3eJJXvgSiITj/wPaiijU42+8Md0r M4nc1XWy4m77SqXMTq+Mfp1FGmOrex8Ow+RkC4zSDzyLUZXj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXrnYBlDH2oHm5n4Qv/pfCmDjsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmVi ZjFmZC1iZTQ5LTQ3NzEtODdmYi0yZDA0ODhiZTRjYWIvMWM1ZGNmYTEtYzlmZi0z YjI1LWFhYzQtMWJkNTdmYmNkNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JlYmYxZmQtYmU0OS00NzcxLTg3 ZmItMmQwNDg4YmU0Y2FiLzdiZWJmMWZkLWJlNDktNDc3MS04N2ZiLTJkMDQ4OGJl NGNhYi5jcmwwHwYDVR0jBBgwFoAUpq0jJL8UkMK4U4ZCaPKBBwHrl0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmViZjFmZC1iZTQ5LTQ3NzEtODdmYi0yZDA0 ODhiZTRjYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQhYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7f1bt6JWxQ5tZG2Is35CkBQ2aL8CO3uMyrAO2JDIoC2P4G2SGtbaLg WUiqhnjIqS8s98xf38zFoFSRSWlWsApbcLM9LpBwfb//W7ZKpzoFS2IrxQY9FjHv o+rmKokPF4JJZoDrZ3NQsuE85fM1phEjP5eULj8Ndp+OsgqVd/hWXKyAUSal7V2U s5Emz6gk51inm+ZFEeVmXSNIool/xKdwCnDHwqNzEO0roCrUb8rrUed7MfknilcZ 6eXtU0ZG5ml+U6HnBiYencZBIy8jfh0qgeWuvP8VLOrjykLPPNbWZJJNWmYIBbT5 /UtK7pQAzU0yqdACPqCk4sqIJ/i6qTA= -----END CERTIFICATE-----Generated at Wed Sep 10 10:22:55 2025 by rpki-client