$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae7888c7-c9a8-30a0-a91a-c23081b03093.roa File: ae7888c7-c9a8-30a0-a91a-c23081b03093.roa (raw, json) Hash identifier: LZ+xwRMDB2Kxq6YqHCWCv/uvv5o9Bt/ZBjd7/lbAX5w= Subject key identifier: 09:47:0B:92:8F:9E:0E:E4:6A:3E:79:2F:05:FF:9D:89:CD:7D:34:C9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584AF521711A345D586BC62E0AC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae7888c7-c9a8-30a0-a91a-c23081b03093.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 149280 IP address blocks: 66.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:71:1a:34:5d:58:6b:c6:2e:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=cb3f9880-ce32-4c5a-b522-1092dfd6f7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:cb:df:5d:b7:16:4c:32:36:16:4b:0a:db: 72:6d:95:99:d1:38:a1:e2:62:8e:54:35:fe:88:67: 25:f5:e3:0a:3f:23:21:98:4b:c4:d7:23:5b:5a:4a: 27:9f:1e:cb:36:b2:80:6d:e1:6c:79:d8:50:35:c7: 76:dd:6c:eb:b7:75:c1:78:af:89:ce:eb:66:a4:8c: 94:30:54:8b:53:f0:e0:37:cc:6c:f1:c0:7d:f7:9d: a8:c1:a4:ad:5f:07:46:79:05:08:ee:1b:68:87:bf: f7:3e:d6:af:3d:83:2f:12:15:a6:5c:a3:d1:6d:cc: f6:62:5d:eb:50:7a:d0:07:8e:51:8a:3b:b0:58:84: ba:cb:cf:c1:f9:72:3d:a1:11:cd:a2:fb:17:c0:9c: 83:8e:65:40:74:dd:f8:a7:f8:a3:fc:07:3c:ce:1e: 2d:9c:a0:12:a9:5e:42:bf:7c:ae:b0:73:8a:af:d7: b0:53:72:12:6b:c0:a2:f7:fb:6e:6e:1a:6c:c8:a1: 97:9d:47:16:e4:db:2c:89:8b:12:ad:7b:7c:6d:a0: a4:9e:68:e9:25:66:c9:67:81:a9:a1:9a:cd:b1:c8: 89:37:91:f3:04:eb:a8:06:12:4c:18:66:bc:8b:08: aa:ca:05:2d:3d:c1:11:70:68:c3:7d:70:93:81:0d: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:47:0B:92:8F:9E:0E:E4:6A:3E:79:2F:05:FF:9D:89:CD:7D:34:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae7888c7-c9a8-30a0-a91a-c23081b03093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 66.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c0:5a:50:bd:49:60:96:05:8e:18:89:f3:5e:ee:d7:16:d6: 89:5f:75:d9:ba:2d:26:d6:2c:5a:b0:98:6b:08:6d:6e:51:8e: 1c:92:0a:7b:ec:7d:8b:fd:e3:b5:30:b4:90:34:df:33:c1:ca: 15:57:b6:e4:27:f0:83:4a:df:89:79:22:93:ff:82:d3:8e:59: f4:ba:23:de:61:c3:79:5a:1f:2b:b1:63:1e:9e:fd:6a:a1:4c: 79:2b:c7:5e:d9:9e:db:f2:7c:a7:95:4e:77:4e:4a:b8:09:be: 32:e1:ad:16:d7:b9:3d:79:6a:3a:51:85:bd:fd:ef:f1:05:a6: 41:39:8d:76:13:fc:b3:32:6c:a6:22:f0:3a:ab:07:32:8f:21: 31:c3:36:2f:ed:f0:2e:d7:c1:7c:a5:ce:86:fd:1b:14:4d:2c: ad:3d:38:64:21:cf:60:22:ca:4d:62:d1:f1:6d:38:6e:87:06: d0:96:93:15:ed:ba:51:f9:60:55:a7:0d:84:dd:ca:d8:55:d3: 96:23:d9:f6:ef:51:a5:fb:f0:7a:9e:a4:3e:09:de:fd:48:80: 4f:62:87:f9:47:61:fe:1f:d3:df:ff:d6:c3:e6:2f:b9:4f:e0: 51:29:5a:d3:07:03:ff:d9:52:8c:1c:4d:3b:6a:95:e4:70:74: 99:e3:ff:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IXEaNF1Ya8YuCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2IzZjk4ODAtY2UzMi00YzVhLWI1MjItMTA5MmRmZDZmN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvL3123FkwyNhZLCttybZWZ0Tih4mKOVDX+ iGcl9eMKPyMhmEvE1yNbWkonnx7LNrKAbeFsedhQNcd23Wzrt3XBeK+JzutmpIyU MFSLU/DgN8xs8cB9952owaStXwdGeQUI7htoh7/3PtavPYMvEhWmXKPRbcz2Yl3r UHrQB45RijuwWIS6y8/B+XI9oRHNovsXwJyDjmVAdN34p/ij/Ac8zh4tnKASqV5C v3yusHOKr9ewU3ISa8Ci9/tubhpsyKGXnUcW5NssiYsSrXt8baCknmjpJWbJZ4Gp oZrNsciJN5HzBOuoBhJMGGa8iwiqygUtPcERcGjDfXCTgQ2BMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlHC5KPng7kaj55LwX/nYnNfTTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWU3ODg4YzctYzlhOC0z MGEwLWE5MWEtYzIzMDgxYjAzMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvAWlC9SWCWBY4YifNe7tcW1olfddm6LSbWLFqwmGsIbW5RjhySCnvs fYv947UwtJA03zPByhVXtuQn8INK34l5IpP/gtOOWfS6I95hw3laHyuxYx6e/Wqh THkrx17ZntvyfKeVTndOSrgJvjLhrRbXuT15ajpRhb397/EFpkE5jXYT/LMybKYi 8DqrBzKPITHDNi/t8C7XwXylzob9GxRNLK09OGQhz2Aiyk1i0fFtOG6HBtCWkxXt ulH5YFWnDYTdythV05Yj2fbvUaX78HqepD4J3v1IgE9ih/lHYf4f09//1sPmL7lP 4FEpWtMHA//ZUowcTTtqleRwdJnj/44= -----END CERTIFICATE-----Generated at Mon Aug 25 20:24:07 2025 by rpki-client