$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d655bdb7-1926-3574-94c2-68cb87a81f8c.roa File: d655bdb7-1926-3574-94c2-68cb87a81f8c.roa (raw, json) Hash identifier: l5sBRsMyoQ7I7YAKQIkyO9wM1lZucvjg6cwV+Lxgo60= Subject key identifier: F5:67:F3:C4:BD:29:86:55:82:4A:11:EA:02:DE:ED:DF:C5:B9:A8:71 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B110C11B24128102414B3C240 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d655bdb7-1926-3574-94c2-68cb87a81f8c.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14090 IP address blocks: 66.163.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:11:b2:41:28:10:24:14:b3:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=9a502a7f-55b5-4ab3-b5a9-51f2a72a2279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:1a:60:1a:d2:6c:7a:4f:41:65:6e:e4:71: 71:9f:7b:8e:4b:be:b5:50:ed:37:61:ff:1b:1f:5a: d4:fc:08:0e:a3:75:4f:ac:7e:cf:9e:79:1e:65:fe: e2:38:b5:61:a0:7f:5b:e2:17:72:cd:ce:b6:56:5e: 1a:15:5b:3f:ad:82:66:33:0a:a8:a9:5f:b4:ac:b5: 28:d4:89:4f:9a:3d:f1:ab:68:ca:35:6b:97:9f:57: e1:2e:af:49:7a:c2:2c:29:4b:7e:ef:c3:04:46:04: 54:5c:9c:a3:9d:07:20:4d:fa:f1:08:cb:ac:80:6b: 9b:56:19:d2:21:f2:30:a2:8a:46:85:e7:5e:2b:17: e5:a7:4e:4e:85:23:5f:22:78:b3:26:cc:c6:7f:c7: 46:3a:c1:53:27:a4:6c:5e:e3:b2:27:a3:20:9e:de: d0:92:b6:b7:2c:58:9e:95:bc:db:1c:64:9a:de:54: 87:c6:7d:e6:28:e0:c6:8f:a6:da:b4:e0:a2:07:85: aa:14:c5:04:fd:9e:a5:27:4a:f7:ae:ba:fb:3a:c9: ef:1c:b3:b6:36:6c:ad:c1:2e:b4:83:56:e2:b6:53: 38:e8:d1:0f:f3:cc:40:f3:0e:31:bf:89:01:a1:bb: 47:bc:3a:32:e9:dc:eb:0f:04:78:f3:6a:cc:ed:62: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:F3:C4:BD:29:86:55:82:4A:11:EA:02:DE:ED:DF:C5:B9:A8:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d655bdb7-1926-3574-94c2-68cb87a81f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 66.163.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:64:ca:c6:95:11:95:0a:0b:fe:b8:ec:d7:c5:3a:71:e1:70: 6a:93:36:0d:09:7d:17:31:8b:d4:16:cb:16:26:29:46:41:f2: 51:a5:9e:e2:10:3a:63:c8:ca:51:b2:af:17:7c:23:54:46:9c: af:8d:c2:23:6c:21:5f:d2:ed:1f:66:2d:42:0c:15:04:18:17: ec:01:59:6d:0f:b9:d7:94:b1:66:cc:47:1f:54:ac:e4:a8:44: 2d:5d:0c:cc:af:08:52:26:e2:c3:0b:42:ec:96:8b:60:bb:0c: 61:60:5a:2a:cf:8e:99:2c:95:32:5c:2c:16:2e:39:0c:56:e3: e5:79:60:50:5a:66:66:4e:80:0e:f6:1d:4b:18:99:e5:18:41: 2c:e5:cd:47:a7:f8:9d:e2:a9:94:28:03:74:78:7a:7c:07:79: 29:d2:68:b9:ca:89:ae:a9:f0:8a:2b:37:80:3b:c6:02:1a:dc: 61:76:f4:7b:86:be:09:33:69:12:81:b6:db:6c:d5:9b:be:f8: a1:c6:02:6c:db:08:61:19:72:30:b5:05:51:b1:47:58:f7:c4: 3e:21:a2:8a:d5:83:c3:91:b0:cb:2b:23:8c:30:26:07:1c:5e: 77:e5:22:8c:d9:6b:81:e1:9a:02:26:ff:47:af:0a:4f:2f:cb: 06:21:d0:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDBGyQSgQJBSzwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWE1MDJhN2YtNTViNS00YWIzLWI1YTktNTFmMmE3MmEyMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYaYBrSbHpPQWVu5HFxn3uOS761UO03Yf8b H1rU/AgOo3VPrH7PnnkeZf7iOLVhoH9b4hdyzc62Vl4aFVs/rYJmMwqoqV+0rLUo 1IlPmj3xq2jKNWuXn1fhLq9JesIsKUt+78MERgRUXJyjnQcgTfrxCMusgGubVhnS IfIwoopGhedeKxflp05OhSNfInizJszGf8dGOsFTJ6RsXuOyJ6Mgnt7Qkra3LFie lbzbHGSa3lSHxn3mKODGj6batOCiB4WqFMUE/Z6lJ0r3rrr7OsnvHLO2NmytwS60 g1bitlM46NEP88xA8w4xv4kBobtHvDoy6dzrDwR482rM7WL0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVn88S9KYZVgkoR6gLe7d/FuahxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDY1NWJkYjctMTkyNi0z NTc0LTk0YzItNjhjYjg3YTgxZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtkysaVEZUKC/647NfFOnHhcGqTNg0JfRcxi9QWyxYmKUZB8lGlnuIQ OmPIylGyrxd8I1RGnK+NwiNsIV/S7R9mLUIMFQQYF+wBWW0PudeUsWbMRx9UrOSo RC1dDMyvCFIm4sMLQuyWi2C7DGFgWirPjpkslTJcLBYuOQxW4+V5YFBaZmZOgA72 HUsYmeUYQSzlzUen+J3iqZQoA3R4enwHeSnSaLnKia6p8IorN4A7xgIa3GF29HuG vgkzaRKBttts1Zu++KHGAmzbCGEZcjC1BVGxR1j3xD4hoorVg8ORsMsrI4wwJgcc XnflIozZa4HhmgIm/0evCk8vywYh0Gg= -----END CERTIFICATE-----Generated at Thu Sep 18 07:14:20 2025 by rpki-client