$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa File: d611f183-fce4-35e3-8186-2b1b64150e12.roa (raw, json) Hash identifier: 0KzcY+xRMhieK0mB9+PNKHasNa6L7SE1R90AA1K23+4= Subject key identifier: 36:7E:6A:33:67:97:CE:C5:F5:31:BC:8B:15:A7:33:D1:BC:71:11:32 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584A9D30EBCD9099938D804E64C0 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 399275 IP address blocks: 167.253.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:eb:cd:90:99:93:8d:80:4e:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=52fb8688-fc70-45ed-9728-07790f79c2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:a1:b2:ad:47:8c:35:c0:8d:18:e3:d0:dd: 6a:b1:60:83:e9:b0:55:87:f3:40:2c:40:26:0b:56: 8b:13:72:1a:e2:64:94:50:3b:62:71:58:b1:94:b7: 3d:53:e0:a7:d7:c7:40:41:8f:5f:af:dc:8f:68:05: 5a:56:4b:d3:a5:2c:f2:c0:e2:1a:18:e1:12:fe:49: 2a:fa:97:7c:20:c5:d3:43:52:7c:a3:78:38:86:a4: bb:cc:0e:c6:c0:8d:4e:33:bb:63:18:e9:e5:92:7d: a7:55:6a:f9:32:28:39:46:e0:c0:42:5b:c2:45:4b: eb:18:b9:e3:2e:84:52:82:72:6f:08:99:c9:7e:4a: 63:61:8b:0f:1e:82:54:4b:39:a4:0a:ca:72:30:bc: f7:c4:00:24:b0:d0:80:76:2d:3d:4e:c6:60:ff:a7: ef:29:9b:e8:a1:be:8c:1f:6f:a7:a2:2f:d6:5c:d8: 5a:66:08:01:1a:0b:7c:b8:8b:6a:46:46:74:80:29: 29:f2:d1:99:5d:42:7c:ee:a3:50:10:ad:a4:54:fd: 6e:9b:14:7e:94:84:2f:59:a7:3d:7a:9f:1c:d9:d3: 83:d5:85:c8:18:ed:45:ec:9c:e1:ce:f0:1f:9a:d6: 76:1d:3c:39:7f:ba:0d:b4:bd:92:4a:06:53:d1:d0: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:6A:33:67:97:CE:C5:F5:31:BC:8B:15:A7:33:D1:BC:71:11:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c5:fd:f1:f2:38:4a:f4:5b:42:1f:8c:41:3f:9d:e5:f8:6e: af:08:38:3a:9e:af:2c:8b:e9:28:16:25:a3:15:f1:1d:70:54: b1:ad:e9:73:92:7d:19:4c:4b:6c:ce:83:e7:48:71:a3:85:d0: cb:84:c0:b3:4d:1f:28:e5:67:d0:15:f2:4e:bb:0b:bc:a6:ba: 00:4f:f8:41:aa:a8:23:d3:99:2f:42:d8:c5:45:7b:01:97:b7: 17:c7:30:31:2c:a6:ed:0a:8d:12:b3:60:6d:08:b7:7a:2a:fb: 2b:9b:14:75:4e:24:26:15:4f:fb:db:d3:b7:cf:82:75:23:2b: 06:ed:a0:6e:5f:e4:cc:f1:b1:e8:cf:59:d5:3b:d5:d3:17:97: d5:fd:cd:ed:10:8d:92:ca:1e:5a:ab:4b:4b:30:cf:c3:ea:dc: 45:24:e1:f5:33:60:c3:fc:ff:0a:86:6b:3f:1c:29:51:ab:89: f7:7e:59:74:ee:90:18:4f:ba:9a:77:e4:14:97:fb:12:10:d7: 40:36:9b:77:f6:c9:fa:94:5c:15:ff:96:14:7b:b9:13:84:a5: 94:07:18:b1:05:e7:94:b2:55:4d:bc:68:a1:6a:82:5c:fa:31: c7:1f:e4:5f:0f:1b:c9:2b:cd:f9:7b:3d:fc:1d:68:37:d1:7c: 80:43:d0:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOvNkJmTjYBOZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NTJmYjg2ODgtZmM3MC00NWVkLTk3MjgtMDc3OTBmNzljMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUShsq1HjDXAjRjj0N1qsWCD6bBVh/NALEAm C1aLE3Ia4mSUUDticVixlLc9U+Cn18dAQY9fr9yPaAVaVkvTpSzywOIaGOES/kkq +pd8IMXTQ1J8o3g4hqS7zA7GwI1OM7tjGOnlkn2nVWr5Mig5RuDAQlvCRUvrGLnj LoRSgnJvCJnJfkpjYYsPHoJUSzmkCspyMLz3xAAksNCAdi09TsZg/6fvKZvoob6M H2+noi/WXNhaZggBGgt8uItqRkZ0gCkp8tGZXUJ87qNQEK2kVP1umxR+lIQvWac9 ep8c2dOD1YXIGO1F7JzhzvAfmtZ2HTw5f7oNtL2SSgZT0dCprwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ+ajNnl87F9TG8ixWnM9G8cREyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvZDYxMWYxODMtZmNlNC0z NWUzLTgxODYtMmIxYjY0MTUwZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLF/fHyOEr0W0IfjEE/neX4bq8IODqeryyL6SgWJaMV8R1wVLGt6XOS fRlMS2zOg+dIcaOF0MuEwLNNHyjlZ9AV8k67C7ymugBP+EGqqCPTmS9C2MVFewGX txfHMDEspu0KjRKzYG0It3oq+yubFHVOJCYVT/vb07fPgnUjKwbtoG5f5MzxsejP WdU71dMXl9X9ze0QjZLKHlqrS0swz8Pq3EUk4fUzYMP8/wqGaz8cKVGrifd+WXTu kBhPupp35BSX+xIQ10A2m3f2yfqUXBX/lhR7uROEpZQHGLEF55SyVU28aKFqglz6 Mccf5F8PG8krzfl7PfwdaDfRfIBD0I0= -----END CERTIFICATE-----Generated at Thu Jul 31 22:55:18 2025 by rpki-client