$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa File: fade97ca-586d-3ef2-b3b6-9d7106b26189.roa (raw, json) Hash identifier: EAWm6IstU1X3E4rrPMaXJcx48UAUBGL3rvPZAq6JnyU= Subject key identifier: CB:24:F6:9A:47:53:8F:61:E7:B5:0F:69:2E:71:00:DB:B7:5E:68:C2 Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F4328584AF95153416476A4BF6C28E700 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 394772 IP address blocks: 66.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:53:41:64:76:a4:bf:6c:28:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=cb4a4fbf-a19b-4c4b-a718-7207a8fdbc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:53:d5:77:3c:87:57:7a:80:d3:3f:c4:62: 9b:d9:6f:08:4a:14:bb:9b:ee:c8:8d:d9:9d:fe:62: fb:8c:f7:35:83:a9:57:a1:5b:39:38:57:7f:30:2c: 21:9f:26:04:14:dd:c3:03:2d:08:f7:fc:f8:56:ab: 42:34:fc:8b:20:39:8f:96:c7:e6:58:b0:40:51:80: c8:37:3b:3d:99:0b:10:20:b1:d6:fc:58:88:70:36: 74:33:fa:4c:df:73:d4:07:7d:3a:6c:63:74:27:86: d6:af:a3:df:c0:43:68:1a:c6:69:50:42:d1:75:55: 0e:5c:20:46:97:29:c2:8b:ae:a9:8e:4d:30:0c:45: ac:43:19:fd:af:dd:6d:0c:69:4e:66:23:9e:51:97: f8:0b:45:fd:11:86:35:ac:c7:36:fc:e3:20:7d:fb: 6f:04:f2:13:27:6e:94:33:25:91:62:9e:05:38:9a: 4c:55:1e:ce:42:98:af:d6:49:25:e5:51:7f:83:2a: 9e:50:c5:81:26:94:d6:99:8a:6a:94:77:70:8c:f7: b7:91:d2:e4:69:bd:f3:c6:65:ad:88:7e:c6:75:fa: 26:a6:10:28:36:ca:83:c5:bc:10:8a:f5:7e:a6:e4: e4:bd:20:1a:c6:85:15:f4:e8:93:82:d3:96:51:9a: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:24:F6:9A:47:53:8F:61:E7:B5:0F:69:2E:71:00:DB:B7:5E:68:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: 66.223.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:2b:06:86:1d:d2:ad:d1:6d:10:48:7c:24:a5:ba:e9:3c: ce:c1:95:0f:c8:2c:9a:42:69:b5:74:a0:31:30:d7:48:fc:0c: 1d:de:95:ad:49:83:21:10:cb:73:af:8a:87:e5:37:90:2c:df: ce:39:c6:e9:0a:c7:48:86:68:d3:9d:4f:26:f0:6a:0e:32:40: f2:f5:33:90:4d:ad:77:1e:33:62:68:57:52:23:2a:59:3b:2e: 54:99:7f:2d:cb:b4:b0:1c:fa:66:c7:dd:f6:d8:85:36:81:d5: 39:dd:2d:03:46:b6:c1:11:b9:4c:2a:ea:09:d4:85:e8:67:ff: e5:af:80:df:4c:a4:63:4f:f3:19:e1:da:23:f4:20:7f:fb:29: 78:e3:26:b6:61:9c:e3:8a:9c:fa:b7:4b:6c:10:e4:5d:ee:de: 70:f1:81:7a:4e:6a:3a:b0:e6:1d:71:08:f5:e3:d7:04:0f:80: 70:08:92:53:17:f8:d5:34:d9:52:18:78:fc:7a:32:85:fb:67: 1c:58:0d:b5:04:cd:61:e3:8b:3f:f7:20:12:55:e2:f3:ea:11: d5:52:c1:d5:d3:a8:bf:27:49:08:aa:f4:60:86:38:24:4e:39: 60:07:8d:7b:eb:25:1d:40:73:d9:63:fa:d2:29:c2:55:75:58: cd:a3:6c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVNBZHakv2wo5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2I0YTRmYmYtYTE5Yi00YzRiLWE3MTgtNzIwN2E4ZmRiYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngRT1Xc8h1d6gNM/xGKb2W8IShS7m+7Ijdmd /mL7jPc1g6lXoVs5OFd/MCwhnyYEFN3DAy0I9/z4VqtCNPyLIDmPlsfmWLBAUYDI Nzs9mQsQILHW/FiIcDZ0M/pM33PUB306bGN0J4bWr6PfwENoGsZpUELRdVUOXCBG lynCi66pjk0wDEWsQxn9r91tDGlOZiOeUZf4C0X9EYY1rMc2/OMgfftvBPITJ26U MyWRYp4FOJpMVR7OQpiv1kkl5VF/gyqeUMWBJpTWmYpqlHdwjPe3kdLkab3zxmWt iH7GdfomphAoNsqDxbwQivV+puTkvSAaxoUV9OiTgtOWUZqL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsk9ppHU49h57UPaS5xANu3XmjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvZmFkZTk3Y2EtNTg2ZC0z ZWYyLWIzYjYtOWQ3MTA2YjI2MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQt94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH1KwaGHdKt0W0QSHwkpbrpPM7BlQ/ILJpCabV0oDEw10j8DB3ela1J gyEQy3OvioflN5As3845xukKx0iGaNOdTybwag4yQPL1M5BNrXceM2JoV1IjKlk7 LlSZfy3LtLAc+mbH3fbYhTaB1TndLQNGtsERuUwq6gnUhehn/+WvgN9MpGNP8xnh 2iP0IH/7KXjjJrZhnOOKnPq3S2wQ5F3u3nDxgXpOajqw5h1xCPXj1wQPgHAIklMX +NU02VIYePx6MoX7ZxxYDbUEzWHjiz/3IBJV4vPqEdVSwdXTqL8nSQiq9GCGOCRO OWAHjXvrJR1Ac9lj+tIpwlV1WM2jbHg= -----END CERTIFICATE-----Generated at Tue Aug 26 09:53:12 2025 by rpki-client