$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/7b58af2d-4a2e-34a2-af38-f56144bfadbc.roa File: 7b58af2d-4a2e-34a2-af38-f56144bfadbc.roa (raw, json) Hash identifier: XkpNwiTLarRCvKcW4FMZ9fgVqpkJ+PuOJrbhCxl8sr0= Subject key identifier: CD:E9:93:23:2E:CF:42:B1:12:33:36:1A:F7:1F:D4:C0:B0:9C:DE:7D Certificate issuer: /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Certificate serial: 010D0C9F4328584AFAB689A224B06E3B91F96080 Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/7b58af2d-4a2e-34a2-af38-f56144bfadbc.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 30361 IP address blocks: 66.254.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:89:a2:24:b0:6e:3b:91:f9:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=2468861b-d2d8-4d99-978a-90bfa62a6a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:c5:e3:3e:c6:41:d4:22:d3:d1:0e:55:fb: 6c:64:a0:c1:54:d5:da:12:40:76:67:58:e7:61:6a: 2c:72:71:eb:da:6e:03:4a:35:d8:bf:9f:78:4c:c6: 00:71:9c:e9:79:cd:8e:22:b3:e4:b6:7b:1a:dc:c2: 77:19:01:05:0b:cf:58:e6:33:38:c2:9f:48:e2:84: 32:9f:06:4d:96:9c:c2:20:c2:56:70:67:a3:72:e1: 6a:16:b5:f4:b8:0e:4b:51:ce:2a:2d:14:ee:94:df: 58:80:0e:8c:b7:22:a9:67:5a:19:f2:11:b4:bb:eb: 77:e8:fc:42:1d:ee:82:e1:97:61:96:c8:bd:49:01: 0b:74:f5:24:d4:23:92:26:4b:d2:49:1c:2b:f3:a9: bf:47:aa:5b:50:8d:8b:40:13:fb:1a:57:77:fc:8b: 32:ec:c7:b8:cd:11:6e:a4:74:05:bb:80:56:f2:2f: d2:94:59:67:4e:c1:32:d1:17:a7:ea:85:5c:c0:e2: 06:f2:5b:9f:20:10:87:50:98:c0:05:0d:88:06:a7: fd:2a:4f:0b:02:65:07:a9:5e:af:9d:05:75:db:1d: b6:0d:16:60:70:0a:a4:45:6b:96:b8:c0:d6:80:c5: 88:5f:8a:b5:78:73:e6:d9:7b:7f:14:93:99:76:50: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E9:93:23:2E:CF:42:B1:12:33:36:1A:F7:1F:D4:C0:B0:9C:DE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/7b58af2d-4a2e-34a2-af38-f56144bfadbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl X509v3 Authority Key Identifier: keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer sbgp-ipAddrBlock: critical IPv4: 66.254.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:79:43:96:c0:6a:de:a5:89:ea:d8:b1:f2:93:89:fe:20:85: 72:71:75:c0:9d:b0:d3:e4:c4:15:5c:59:3f:ed:76:82:c9:21: 3d:6a:f2:6e:c0:d6:97:e2:dd:12:ab:f7:27:fb:84:2d:bd:92: 44:d1:c7:6a:b1:d2:86:c8:04:c7:fb:9a:7c:d4:e5:e8:fc:2d: 05:47:0d:24:99:b1:ef:f3:cf:59:c9:f8:49:3e:fc:b5:fe:ce: 5d:08:c6:97:12:95:ed:64:19:26:a3:25:f9:d1:80:9b:2e:15: 0e:ab:12:1a:5f:db:fb:1d:6f:56:03:94:a4:e1:5c:b6:d9:97: 12:e5:0d:37:c9:53:cd:dc:4a:a8:88:60:29:f3:8a:89:31:df: 89:ae:3e:48:77:d8:47:8e:9c:d0:90:8a:ef:9a:fc:2c:37:2a: 27:08:59:e7:b8:45:a1:42:77:63:d5:1a:1a:b7:23:bc:e2:fe: 83:e0:2e:be:1e:39:1f:71:99:ae:f9:99:a5:a0:bd:1c:db:47: 59:ec:5e:fb:64:0e:cc:a1:48:e0:19:db:02:c5:a8:6b:a4:c4: 2b:ff:df:17:09:f7:75:19:9e:c4:85:ca:14:17:0b:5f:d0:65: da:40:21:21:ac:a2:cd:10:fe:8a:8f:32:c5:96:f0:67:a8:20: e4:9e:c6:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6tomiJLBuO5H5YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2 YTljMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MjQ2ODg2MWItZDJkOC00ZDk5LTk3OGEtOTBiZmE2MmE2YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJLF4z7GQdQi09EOVftsZKDBVNXaEkB2Z1jn YWoscnHr2m4DSjXYv594TMYAcZzpec2OIrPktnsa3MJ3GQEFC89Y5jM4wp9I4oQy nwZNlpzCIMJWcGejcuFqFrX0uA5LUc4qLRTulN9YgA6MtyKpZ1oZ8hG0u+t36PxC He6C4Zdhlsi9SQELdPUk1COSJkvSSRwr86m/R6pbUI2LQBP7Gld3/Isy7Me4zRFu pHQFu4BW8i/SlFlnTsEy0Ren6oVcwOIG8lufIBCHUJjABQ2IBqf9Kk8LAmUHqV6v nQV12x22DRZgcAqkRWuWuMDWgMWIX4q1eHPm2Xt/FJOZdlAabQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3pkyMuz0KxEjM2Gvcf1MCwnN59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvN2I1OGFmMmQtNGEyZS0z NGEyLWFmMzgtZjU2MTQ0YmZhZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv5zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI95Q5bAat6lierYsfKTif4ghXJxdcCdsNPkxBVcWT/tdoLJIT1q8m7A 1pfi3RKr9yf7hC29kkTRx2qx0obIBMf7mnzU5ej8LQVHDSSZse/zz1nJ+Ek+/LX+ zl0IxpcSle1kGSajJfnRgJsuFQ6rEhpf2/sdb1YDlKThXLbZlxLlDTfJU83cSqiI YCnziokx34muPkh32EeOnNCQiu+a/Cw3KicIWee4RaFCd2PVGhq3I7zi/oPgLr4e OR9xma75maWgvRzbR1nsXvtkDsyhSOAZ2wLFqGukxCv/3xcJ93UZnsSFyhQXC1/Q ZdpAISGsos0Q/oqPMsWW8GeoIOSexmA= -----END CERTIFICATE-----Generated at Tue Aug 26 09:40:12 2025 by rpki-client