$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/24ed5071-e536-3813-a276-a681610c03d8.roa File: 24ed5071-e536-3813-a276-a681610c03d8.roa (raw, json) Hash identifier: V/35/WO668ngSNddPhjJmyl2hSXwxSeMIrqjKz/dDQk= Subject key identifier: BF:3D:F8:DD:45:65:4E:2A:85:10:E6:ED:ED:39:1F:B1:04:8D:08:01 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584AE0311AF869AAF8A1B350CDBC Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/24ed5071-e536-3813-a276-a681610c03d8.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 66.114.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:1a:f8:69:aa:f8:a1:b3:50:cd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=d4c8bceb-71bb-49ae-a199-74b6fc1f3027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:87:5d:34:58:36:f7:5a:c0:f8:5c:ed:d7: 3f:2c:d9:a8:c9:ce:1b:e1:44:c8:29:22:74:a5:db: 90:35:2e:c6:84:38:81:c7:5b:75:56:ce:3d:61:0c: 81:60:b0:1d:20:64:a3:1c:81:a7:bf:4f:b2:ea:ad: 69:7b:3a:6f:8e:a1:e3:a1:44:6d:fa:19:f8:40:05: e6:f7:df:64:02:2a:63:58:bf:3c:44:0f:2d:96:ea: d7:6e:1d:2c:83:3b:8a:b2:9a:22:c0:2f:29:52:ed: e1:55:65:31:39:b7:d6:8a:9d:f7:65:f2:fe:60:fc: 61:6e:ba:77:11:ee:46:00:a2:33:3a:36:f0:e7:8c: 54:08:32:eb:b1:9b:20:08:8e:b0:18:0e:85:6b:26: 4d:a6:bf:0f:49:93:eb:4f:52:af:68:84:f5:7f:4e: 27:df:9e:b2:6e:c2:30:47:73:f6:f8:0f:0a:16:cc: 85:b9:fe:c0:78:06:55:97:77:f6:6b:f8:1c:06:b5: 87:3b:3f:61:e7:2b:c8:81:43:20:b7:42:d0:26:b3: f1:de:9b:f3:6f:d9:f3:b1:96:48:07:f6:b4:8c:ce: c0:e1:54:c4:ac:e4:c5:55:be:79:4b:04:66:f4:8a: c8:96:1c:e8:ab:36:b2:4e:f5:c0:ba:5c:9d:92:0f: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3D:F8:DD:45:65:4E:2A:85:10:E6:ED:ED:39:1F:B1:04:8D:08:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/24ed5071-e536-3813-a276-a681610c03d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 66.114.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:de:56:7e:dd:33:71:59:ad:22:e5:fa:43:ca:ec:0f:74:9a: 12:6e:bf:72:a2:a5:84:c4:21:42:5f:28:41:1e:68:8c:c7:be: 8d:8c:02:a5:94:8b:a1:94:21:b2:28:96:94:ee:86:00:dc:64: 9c:9e:28:0c:16:d7:c0:7a:f2:7d:b4:54:e4:91:87:a2:d8:2b: f3:de:df:6a:96:09:5a:50:79:6f:db:de:56:f2:0f:9e:8d:60: 6e:0f:93:6f:32:5a:b6:2f:45:c5:50:34:62:7d:05:d7:54:de: 3c:e3:2b:81:03:9a:8d:10:d7:95:1b:9d:1d:b6:ec:ca:20:52: 28:2e:0b:80:60:da:82:02:e7:09:0d:15:1b:dc:18:33:a0:52: b0:53:11:93:4b:69:6d:ca:fd:6b:da:0d:a4:30:43:07:e7:22: 62:60:f9:f1:4c:bf:a6:a6:03:16:85:7a:27:49:98:00:12:58: 04:d3:79:7e:6e:92:82:83:4c:b2:18:91:7a:d5:9b:ef:d0:0d: d5:9e:c1:86:8a:d3:45:36:95:8c:3b:0e:98:d1:7a:b1:83:21: df:5e:9c:74:b9:8e:14:49:fb:53:52:da:84:2d:40:e9:04:64: 43:f9:f5:d5:57:c7:05:9c:72:b3:17:6b:71:21:34:66:23:b1: a8:6b:3f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRr4aar4obNQzbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZDRjOGJjZWItNzFiYi00OWFlLWExOTktNzRiNmZjMWYzMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31uHXTRYNvdawPhc7dc/LNmoyc4b4UTIKSJ0 pduQNS7GhDiBx1t1Vs49YQyBYLAdIGSjHIGnv0+y6q1pezpvjqHjoURt+hn4QAXm 999kAipjWL88RA8tlurXbh0sgzuKspoiwC8pUu3hVWUxObfWip33ZfL+YPxhbrp3 Ee5GAKIzOjbw54xUCDLrsZsgCI6wGA6FayZNpr8PSZPrT1KvaIT1f04n356ybsIw R3P2+A8KFsyFuf7AeAZVl3f2a/gcBrWHOz9h5yvIgUMgt0LQJrPx3pvzb9nzsZZI B/a0jM7A4VTErOTFVb55SwRm9IrIlhzoqzayTvXAulydkg80WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL89+N1FZU4qhRDm7e05H7EEjQgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvMjRlZDUwNzEtZTUzNi0z ODEzLWEyNzYtYTY4MTYxMGMwM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDeVn7dM3FZrSLl+kPK7A90mhJuv3KipYTEIUJfKEEeaIzHvo2MAqWU i6GUIbIolpTuhgDcZJyeKAwW18B68n20VOSRh6LYK/Pe32qWCVpQeW/b3lbyD56N YG4Pk28yWrYvRcVQNGJ9BddU3jzjK4EDmo0Q15UbnR227MogUiguC4Bg2oIC5wkN FRvcGDOgUrBTEZNLaW3K/WvaDaQwQwfnImJg+fFMv6amAxaFeidJmAASWATTeX5u koKDTLIYkXrVm+/QDdWewYaK00U2lYw7DpjRerGDId9enHS5jhRJ+1NS2oQtQOkE ZEP59dVXxwWccrMXa3EhNGYjsahrP4M= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:07 2025 by rpki-client