$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/724701d2-ff7a-32d8-87de-9492c36f7269.roa File: 724701d2-ff7a-32d8-87de-9492c36f7269.roa (raw, json) Hash identifier: 7R5yW8eUk1N+mOw9jhObVTpKGAbtMvHxe7HdfKV2yZ8= Subject key identifier: 38:0A:C1:DE:2C:48:A3:2A:9A:3F:FF:DF:C8:3E:F9:CB:E8:91:F5:2D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B157EC701E86D78246DB24A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/724701d2-ff7a-32d8-87de-9492c36f7269.roa Signing time: Thu 04 Sep 2025 15:15:07 +0000 ROA not before: Thu 04 Sep 2025 15:15:07 +0000 ROA not after: Wed 03 Dec 2025 16:15:07 +0000 asID: 38264 IP address blocks: 66.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:7e:c7:01:e8:6d:78:24:6d:b2:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 4 15:15:07 2025 GMT Not After : Dec 3 16:15:07 2025 GMT Subject: CN=4ddad65a-fef9-4b26-a4a7-4e96ac269957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:15:8d:7d:fa:53:ca:c4:a9:58:ea:b4:ad: 12:e2:4d:7d:a7:d8:1d:53:b9:a1:7f:bc:ca:9d:73: 91:c0:99:fe:ef:dc:87:a4:13:b2:16:07:a0:8f:cb: 51:e5:79:26:81:18:62:38:08:ec:07:d1:60:0f:f9: 6f:0c:ea:0e:bc:44:c2:c0:16:40:8b:4d:54:34:7f: 0b:d9:b5:57:5d:30:13:cc:2c:be:4d:4d:c4:27:13: 21:98:3d:60:e8:03:e4:1b:b9:49:b5:16:14:32:20: 6f:b6:3b:52:26:85:a8:ba:e5:16:5b:36:ad:23:68: 96:30:72:01:d1:c1:e8:3a:4e:65:44:85:d2:86:42: da:de:07:26:4a:5a:0f:32:a0:ce:4c:e2:3e:2b:9e: 61:f3:1f:3b:bb:8a:49:26:b3:79:3e:38:d2:e2:59: ee:1e:b9:7d:eb:99:ed:28:26:1d:53:ab:c3:0a:e9: 88:88:e7:bd:f9:de:0a:77:30:b5:8d:e9:31:02:d3: d2:d0:af:c8:d7:0d:db:dd:fd:76:14:07:d5:2d:f9: 16:c7:67:ab:59:5b:6c:c0:59:89:42:ea:35:b3:bc: ef:9b:94:fb:ef:6d:c0:56:1d:80:76:5e:41:5f:4e: 83:bc:c1:86:70:41:d4:02:8b:fc:00:70:cf:7a:14: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0A:C1:DE:2C:48:A3:2A:9A:3F:FF:DF:C8:3E:F9:CB:E8:91:F5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/724701d2-ff7a-32d8-87de-9492c36f7269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 66.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:40:c2:53:59:ac:bb:5c:11:dd:a6:f6:ec:00:96:d8:9e:8e: fc:79:89:30:e3:03:1c:27:d7:40:18:75:8f:c5:45:63:9d:40: 07:d8:06:5f:cc:e9:d8:50:c5:70:91:7d:2b:14:c3:51:c2:6a: 91:75:01:e4:58:8d:c3:58:38:e9:2b:0b:a5:2f:9b:f4:81:ed: 10:e2:2a:24:d1:5c:ec:6d:9d:67:fc:1d:3b:5b:b9:ef:8d:8c: 75:71:2a:ee:76:a8:54:b0:83:d1:b9:2d:aa:06:49:ca:0c:29: da:87:df:10:dd:d0:51:ca:27:29:38:90:ab:03:5f:1f:e7:50: d0:fe:9d:46:97:1b:36:f6:83:08:37:bc:81:7b:89:1c:da:e3: 73:66:51:c9:5b:24:75:a0:fa:e5:a4:92:61:03:5a:4c:d4:ae: 2b:cd:98:54:c5:2f:33:2a:3f:f2:e4:82:0d:d8:f4:ef:cb:5b: 7f:1b:6e:18:79:ff:35:c1:0a:45:a8:92:bc:05:d0:6f:01:a2: 22:5b:23:70:55:a3:18:a3:e7:83:85:82:b3:42:35:0f:78:60: 16:5a:f3:0f:59:44:e6:a4:4f:9c:1c:e6:ac:7d:34:bb:48:85: 7c:2a:4e:24:01:60:f5:58:35:b1:10:66:f2:3f:c9:e7:c1:01: db:a8:68:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVfscB6G14JG2ySoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDkwNDE1MTUwN1oXDTI1MTIwMzE2MTUwN1owLzEtMCsGA1UEAxMk NGRkYWQ2NWEtZmVmOS00YjI2LWE0YTctNGU5NmFjMjY5OTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIkVjX36U8rEqVjqtK0S4k19p9gdU7mhf7zK nXORwJn+79yHpBOyFgegj8tR5XkmgRhiOAjsB9FgD/lvDOoOvETCwBZAi01UNH8L 2bVXXTATzCy+TU3EJxMhmD1g6APkG7lJtRYUMiBvtjtSJoWouuUWWzatI2iWMHIB 0cHoOk5lRIXShkLa3gcmSloPMqDOTOI+K55h8x87u4pJJrN5PjjS4lnuHrl965nt KCYdU6vDCumIiOe9+d4KdzC1jekxAtPS0K/I1w3b3f12FAfVLfkWx2erWVtswFmJ Quo1s7zvm5T7723AVh2Adl5BX06DvMGGcEHUAov8AHDPehRRQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgKwd4sSKMqmj//38g++cvokfUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzI0NzAxZDItZmY3YS0z MmQ4LTg3ZGUtOTQ5MmMzNmY3MjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFAwlNZrLtcEd2m9uwAltiejvx5iTDjAxwn10AYdY/FRWOdQAfYBl/M 6dhQxXCRfSsUw1HCapF1AeRYjcNYOOkrC6Uvm/SB7RDiKiTRXOxtnWf8HTtbue+N jHVxKu52qFSwg9G5LaoGScoMKdqH3xDd0FHKJyk4kKsDXx/nUND+nUaXGzb2gwg3 vIF7iRza43NmUclbJHWg+uWkkmEDWkzUrivNmFTFLzMqP/Lkgg3Y9O/LW38bbhh5 /zXBCkWokrwF0G8BoiJbI3BVoxij54OFgrNCNQ94YBZa8w9ZROakT5wc5qx9NLtI hXwqTiQBYPVYNbEQZvI/yefBAduoaIU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:07:47 2025 by rpki-client