$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/e845493f-cad9-30ca-9aea-6b3a1c677423.roa File: e845493f-cad9-30ca-9aea-6b3a1c677423.roa (raw, json) Hash identifier: VXPse/pg/A5dRVVOAhMxfbSJETmu7rjruFIb3TnV5Is= Subject key identifier: D1:AA:97:75:FC:67:6B:F0:60:F3:0C:57:43:A8:F9:1F:FA:DF:FB:A8 Certificate issuer: /CN=c1ca327a-71b9-47e5-b718-53788c38e86c Certificate serial: 010D0C9F4328584AE1971B58C367B75EA3206680 Authority key identifier: CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/e845493f-cad9-30ca-9aea-6b3a1c677423.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 399821 IP address blocks: 66.150.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1b:58:c3:67:b7:5e:a3:20:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ca327a-71b9-47e5-b718-53788c38e86c Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=bcf21e3c-3745-4f24-a5d4-82aa52e65ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:3d:14:ee:77:5f:c5:cd:7a:5e:6c:22:63: e7:14:09:9c:8f:6b:71:ee:14:bd:3e:49:ca:fa:70: 2f:3e:93:e7:7f:53:54:cf:1e:99:aa:3a:c8:39:69: 4e:63:d6:ba:b5:47:3d:5f:a4:15:5e:17:73:09:ec: ef:f3:e4:20:06:80:6e:b0:c7:a3:17:b9:2e:51:f8: ce:a9:de:d4:f9:c9:2a:44:1b:05:2f:e9:47:f5:f8: d8:18:3f:d7:b7:4a:55:a2:0f:26:27:f7:8b:d5:00: 43:3a:8f:df:b0:ba:6a:cd:cd:cd:76:62:b6:b9:3f: a0:2e:95:0e:c6:54:48:43:fd:b1:e2:ad:54:7f:88: ea:c0:ce:60:17:fe:87:51:a5:2d:c9:0a:6f:0d:33: 06:37:44:a1:d1:04:89:40:6a:bd:c4:6f:da:95:68: 79:6a:70:8f:92:9a:29:d8:19:8d:18:e9:87:76:6c: f1:b2:61:4c:f8:e0:c5:5d:1d:33:87:2f:1d:84:e0: 51:af:16:60:49:28:de:2d:b5:a5:8d:bd:bd:04:33: 93:17:6c:c1:12:b2:42:ae:ae:81:32:8c:9b:ad:1f: 33:a7:49:c2:c1:0a:f5:82:82:b4:fd:10:09:95:0f: f8:0f:4b:e5:87:e1:4a:3f:c0:6d:0a:71:11:fc:3d: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AA:97:75:FC:67:6B:F0:60:F3:0C:57:43:A8:F9:1F:FA:DF:FB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/e845493f-cad9-30ca-9aea-6b3a1c677423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl X509v3 Authority Key Identifier: keyid:CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer sbgp-ipAddrBlock: critical IPv4: 66.150.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:88:2b:14:dc:33:50:01:ea:78:a1:53:61:b6:82:9f:1e:1c: 64:59:74:8c:b3:14:e3:21:af:09:2b:7b:2d:26:55:a9:2d:d8: f4:4c:b0:49:2d:20:1e:67:10:06:fa:47:d4:49:05:69:17:99: a8:f2:7d:e0:6d:5e:44:4a:c4:99:69:a7:d1:99:05:8f:6f:83: c2:dc:c0:86:81:10:84:f9:89:41:2a:3c:85:05:cc:e7:ae:a2: 97:5b:f9:1f:24:a7:97:e5:d4:f7:49:2d:45:42:c6:70:6c:a2: b1:cf:aa:f9:16:df:2e:99:62:19:d1:04:e9:e7:e2:65:88:cf: 8c:4e:12:70:ad:66:67:e0:11:91:41:22:f8:48:06:48:82:c0: 5a:38:5e:bb:4f:0b:2f:2e:fe:60:43:d2:58:a3:b3:a0:67:47: 43:ab:d0:66:1b:54:30:38:89:60:fc:a7:f8:6e:0a:54:9b:53: 2f:c9:a3:7f:45:39:8d:b8:03:48:57:a5:04:4f:ae:93:63:58: f0:f7:3f:fd:48:54:1b:92:52:81:30:55:52:12:36:c6:62:3d: 2e:55:c0:cb:29:0d:26:1c:9c:4d:53:d4:e9:6d:62:91:3a:93: f9:83:c4:b2:54:93:be:c0:ce:93:6f:dc:46:4f:d6:1e:da:b6: b4:08:76:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlxtYw2e3XqMgZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjYTMyN2EtNzFiOS00N2U1LWI3MTgtNTM3ODhjMzhl ODZjMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YmNmMjFlM2MtMzc0NS00ZjI0LWE1ZDQtODJhYTUyZTY1YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kA9FO53X8XNel5sImPnFAmcj2tx7hS9PknK +nAvPpPnf1NUzx6ZqjrIOWlOY9a6tUc9X6QVXhdzCezv8+QgBoBusMejF7kuUfjO qd7U+ckqRBsFL+lH9fjYGD/Xt0pVog8mJ/eL1QBDOo/fsLpqzc3NdmK2uT+gLpUO xlRIQ/2x4q1Uf4jqwM5gF/6HUaUtyQpvDTMGN0Sh0QSJQGq9xG/alWh5anCPkpop 2BmNGOmHdmzxsmFM+ODFXR0zhy8dhOBRrxZgSSjeLbWljb29BDOTF2zBErJCrq6B MoybrR8zp0nCwQr1goK0/RAJlQ/4D0vlh+FKP8BtCnER/D03owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGql3X8Z2vwYPMMV0Oo+R/63/uoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jMWNh MzI3YS03MWI5LTQ3ZTUtYjcxOC01Mzc4OGMzOGU4NmMvZTg0NTQ5M2YtY2FkOS0z MGNhLTlhZWEtNmIzYTFjNjc3NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzFjYTMyN2EtNzFiOS00N2U1LWI3 MTgtNTM3ODhjMzhlODZjL2MxY2EzMjdhLTcxYjktNDdlNS1iNzE4LTUzNzg4YzM4 ZTg2Yy5jcmwwHwYDVR0jBBgwFoAUzEihtiYbHxx9y9mplUuuEsc/mZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jMWNhMzI3YS03MWI5LTQ3ZTUtYjcxOC01Mzc4 OGMzOGU4NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQpaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmIKxTcM1AB6nihU2G2gp8eHGRZdIyzFOMhrwkrey0mVakt2PRMsEkt IB5nEAb6R9RJBWkXmajyfeBtXkRKxJlpp9GZBY9vg8LcwIaBEIT5iUEqPIUFzOeu opdb+R8kp5fl1PdJLUVCxnBsorHPqvkW3y6ZYhnRBOnn4mWIz4xOEnCtZmfgEZFB IvhIBkiCwFo4XrtPCy8u/mBD0lijs6BnR0Or0GYbVDA4iWD8p/huClSbUy/Jo39F OY24A0hXpQRPrpNjWPD3P/1IVBuSUoEwVVISNsZiPS5VwMspDSYcnE1T1OltYpE6 k/mDxLJUk77AzpNv3EZP1h7atrQIdoI= -----END CERTIFICATE-----Generated at Fri Aug 22 03:05:55 2025 by rpki-client