$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/738f6ed0-40f1-329a-a783-f8bb696ada94.roa File: 738f6ed0-40f1-329a-a783-f8bb696ada94.roa (raw, json) Hash identifier: Ovuf4j+Z1xm5tcuvPzeRMStN1pSBwXlSuIWpULorhHA= Subject key identifier: 09:20:50:C7:90:AA:6B:C7:65:75:B0:9C:8E:8B:AF:C2:62:66:70:39 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B157F0FF3A24C5B2F04DAC300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/738f6ed0-40f1-329a-a783-f8bb696ada94.roa Signing time: Thu 04 Sep 2025 15:15:41 +0000 ROA not before: Thu 04 Sep 2025 15:15:41 +0000 ROA not after: Wed 03 Dec 2025 16:15:41 +0000 asID: 150671 IP address blocks: 66.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:7f:0f:f3:a2:4c:5b:2f:04:da:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 4 15:15:41 2025 GMT Not After : Dec 3 16:15:41 2025 GMT Subject: CN=3030c0c9-5584-45cf-a7d1-8da22c8440a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:6c:a0:69:d1:b5:02:27:87:e7:96:6a:6d: 91:52:23:f5:04:19:f9:e0:1c:34:8d:62:c4:57:18: 3b:fd:72:b6:d9:9d:27:a0:99:0e:38:45:ba:c8:10: 77:be:3c:57:09:b6:d6:75:18:e0:fe:a3:ab:32:1d: 4c:22:ef:c9:66:51:75:ec:46:c2:09:19:ae:cd:db: 05:0a:1b:7b:09:92:76:93:de:7c:26:f7:77:04:fc: 45:65:b3:fe:d4:52:bb:d8:6b:56:58:e6:b3:4d:5f: c7:81:fb:a2:b5:7e:1c:67:bb:3d:b6:b9:7e:ff:6f: d6:44:8b:f6:8b:a1:94:c4:ba:1e:66:41:ac:5d:f9: 52:c9:b5:9e:8b:19:4c:81:b8:ec:ae:e5:5f:fa:57: 35:69:f3:4a:58:da:ae:9f:99:e8:82:d2:36:a6:ca: 9d:59:2a:07:58:15:db:ac:61:ff:32:10:44:b1:9b: d5:cc:f7:e6:8c:8f:cd:d2:02:5b:84:90:44:9c:2a: b8:1e:8b:ce:10:b7:b2:b4:ed:c2:39:14:33:85:d0: 07:da:f6:35:97:50:22:0f:96:d3:85:6f:c9:96:39: 4e:27:93:c3:bd:68:c4:fa:f4:02:a8:01:1d:2f:bb: 8d:c3:cb:36:0d:05:da:1a:b8:93:96:45:7a:63:dc: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:20:50:C7:90:AA:6B:C7:65:75:B0:9C:8E:8B:AF:C2:62:66:70:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/738f6ed0-40f1-329a-a783-f8bb696ada94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 66.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:41:d0:ae:86:43:30:4b:74:3f:3b:a7:1b:dc:67:ea:1c:6b: 70:63:7d:db:6b:da:0c:19:ca:fa:5f:99:0f:e1:6e:1f:6e:86: be:00:1a:89:88:13:99:28:bd:1d:67:13:cb:2b:ce:3a:a5:6c: 8f:50:12:63:eb:75:5e:3b:73:14:09:30:5a:5c:90:cd:1a:84: ba:7b:09:7f:a0:d6:96:00:72:d7:46:fa:b8:41:94:24:b8:25: c3:5b:16:11:5c:02:78:b8:a9:fe:48:a6:d6:aa:a6:90:3f:ba: a6:56:28:08:c8:b7:e5:d3:ff:4c:70:cb:69:b0:cd:97:26:88: b7:e9:bf:0c:95:12:26:d2:83:8d:46:44:c3:57:e7:66:0e:20: e1:9f:ee:93:f8:54:46:0f:15:9b:64:b4:64:fe:d5:80:c0:5b: c5:6a:4b:33:46:a8:29:2c:7c:3b:ae:af:c3:51:bc:34:69:1e: 4f:b2:bf:f5:2f:6a:bb:32:ed:a7:2f:d8:24:7c:5b:46:08:f3: ba:37:ea:c8:d6:25:fb:43:1a:e5:53:6e:50:fc:2d:7b:63:1e: ff:99:d4:e9:fc:c9:6d:71:d0:8a:2d:f7:93:90:86:5e:08:d5: dc:73:d4:2a:c2:bb:0a:da:6d:c6:1f:0a:bb:9c:47:39:2e:cc: 42:9e:3b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVfw/zokxbLwTawwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDkwNDE1MTU0MVoXDTI1MTIwMzE2MTU0MVowLzEtMCsGA1UEAxMk MzAzMGMwYzktNTU4NC00NWNmLWE3ZDEtOGRhMjJjODQ0MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxhsoGnRtQInh+eWam2RUiP1BBn54Bw0jWLE Vxg7/XK22Z0noJkOOEW6yBB3vjxXCbbWdRjg/qOrMh1MIu/JZlF17EbCCRmuzdsF Cht7CZJ2k958Jvd3BPxFZbP+1FK72GtWWOazTV/HgfuitX4cZ7s9trl+/2/WRIv2 i6GUxLoeZkGsXflSybWeixlMgbjsruVf+lc1afNKWNqun5nogtI2psqdWSoHWBXb rGH/MhBEsZvVzPfmjI/N0gJbhJBEnCq4HovOELeytO3CORQzhdAH2vY1l1AiD5bT hW/JljlOJ5PDvWjE+vQCqAEdL7uNw8s2DQXaGriTlkV6Y9wD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkgUMeQqmvHZXWwnI6Lr8JiZnA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzM4ZjZlZDAtNDBmMS0z MjlhLWE3ODMtZjhiYjY5NmFkYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZB0K6GQzBLdD87pxvcZ+oca3Bjfdtr2gwZyvpfmQ/hbh9uhr4AGomI E5kovR1nE8srzjqlbI9QEmPrdV47cxQJMFpckM0ahLp7CX+g1pYActdG+rhBlCS4 JcNbFhFcAni4qf5IptaqppA/uqZWKAjIt+XT/0xwy2mwzZcmiLfpvwyVEibSg41G RMNX52YOIOGf7pP4VEYPFZtktGT+1YDAW8VqSzNGqCksfDuur8NRvDRpHk+yv/Uv arsy7acv2CR8W0YI87o36sjWJftDGuVTblD8LXtjHv+Z1On8yW1x0Iot95OQhl4I 1dxz1CrCuwrabcYfCrucRzkuzEKeOyM= -----END CERTIFICATE-----Generated at Tue Sep 9 13:03:15 2025 by rpki-client