$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa File: 7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa (raw, json) Hash identifier: 6yPKy4YaaCe4UJ25F15pPJtnq7STC2V4Owuv8TtLcW0= Subject key identifier: 24:B9:02:C8:AB:91:55:10:6F:CF:83:1F:65:F0:DE:E3:B8:46:37:0F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AD23BD35CF1CED2854A820900 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 13576 IP address blocks: 66.128.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d3:5c:f1:ce:d2:85:4a:82:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=415053e4-91dc-4939-b581-bde92bb4871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:c9:c2:c8:8c:73:ec:46:1d:b9:22:53:77: 88:19:c2:64:f4:da:2c:78:d4:b4:cb:fd:f4:a0:32: 75:ac:4f:55:75:d3:eb:e2:f2:ea:3a:b0:6e:7f:c6: 63:ed:38:3c:71:39:6f:ce:ea:be:24:0b:ea:98:3b: 6f:8a:32:61:4d:ac:d6:58:e1:87:ac:37:28:5a:1e: b9:8e:45:59:e1:a7:e5:07:3c:93:c0:bb:d4:07:46: 2c:f5:77:9a:8f:ed:79:50:03:1a:ce:90:b8:70:1d: c4:05:e4:e7:00:63:c9:1a:70:71:c9:d1:3e:fc:57: 4a:e3:08:bf:1b:89:b8:4c:91:6c:7b:f4:db:7d:b0: d3:83:7c:08:d2:cc:82:82:b9:7d:86:10:96:9d:08: 9e:58:3e:0d:51:61:eb:fd:45:cb:14:3e:c0:1f:7b: 0f:e4:05:13:07:51:57:02:18:97:a2:0b:57:b2:5b: c5:d1:e7:05:ce:55:28:21:de:ff:57:f1:3d:61:14: 71:ea:9a:bc:4b:f7:de:d3:a4:c7:c8:cd:1c:32:bf: 50:43:c0:40:8a:d3:4e:66:83:f5:5e:9d:3c:33:d5: f5:35:c2:9c:23:2f:80:52:1d:bf:ff:a0:ed:59:36: 32:58:1c:dd:82:06:f4:6d:53:bf:e0:50:68:9f:a7: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B9:02:C8:AB:91:55:10:6F:CF:83:1F:65:F0:DE:E3:B8:46:37:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7d22f0bd-ad0b-3bd2-afbf-2205f50fa692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:75:21:ae:52:e3:25:55:19:a9:53:bd:52:c6:6e:cc:19:14: f8:7d:6d:39:1d:41:6f:fe:90:67:cc:ae:a3:d7:cf:06:3a:43: 52:e6:8e:ee:12:7d:07:26:06:c3:a8:0c:37:3d:96:14:b9:dc: 96:9e:90:b6:9b:d9:37:46:04:67:ee:40:f6:0f:a2:6d:d3:1d: d0:18:71:51:7b:00:48:dc:bb:22:3c:75:6c:7a:0f:1c:e0:c8: 2b:34:f3:23:3a:10:71:37:53:23:a2:69:18:ef:31:37:6d:b2: d6:7b:44:2f:51:3d:52:d1:f4:da:d7:d3:e4:26:20:7c:88:77: c6:d4:9a:97:bc:3c:f4:f5:99:8d:b1:a9:8d:f5:fe:ab:3d:c1: 09:ac:e3:d1:b7:37:cf:a0:b5:1c:61:7a:cf:a2:a8:9c:bb:41: 46:90:de:97:6e:c1:45:b2:33:62:70:3c:cd:70:78:db:2e:f4: 32:4d:67:ea:d4:65:23:1a:72:9f:65:3e:10:35:3e:8c:32:10: 7e:16:d7:a6:3c:f9:2d:d5:03:ff:b5:d9:cf:04:07:5a:39:b7: a3:10:01:2c:6a:cc:67:1b:bb:51:52:9e:3e:ea:2b:0b:b2:05: 2a:35:1a:72:5e:40:39:c5:48:50:2c:aa:dc:5c:7d:6c:cb:bd: 4a:fa:70:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9Nc8c7ShUqCCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDE1MDUzZTQtOTFkYy00OTM5LWI1ODEtYmRlOTJiYjQ4NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXjJwsiMc+xGHbkiU3eIGcJk9NoseNS0y/30 oDJ1rE9VddPr4vLqOrBuf8Zj7Tg8cTlvzuq+JAvqmDtvijJhTazWWOGHrDcoWh65 jkVZ4aflBzyTwLvUB0Ys9Xeaj+15UAMazpC4cB3EBeTnAGPJGnBxydE+/FdK4wi/ G4m4TJFse/TbfbDTg3wI0syCgrl9hhCWnQieWD4NUWHr/UXLFD7AH3sP5AUTB1FX AhiXogtXslvF0ecFzlUoId7/V/E9YRRx6pq8S/fe06THyM0cMr9QQ8BAitNOZoP1 Xp08M9X1NcKcIy+AUh2//6DtWTYyWBzdggb0bVO/4FBon6cfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS5AsirkVUQb8+DH2Xw3uO4RjcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2QyMmYwYmQtYWQwYi0z YmQyLWFmYmYtMjIwNWY1MGZhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ1Ia5S4yVVGalTvVLGbswZFPh9bTkdQW/+kGfMrqPXzwY6Q1Lmju4S fQcmBsOoDDc9lhS53JaekLab2TdGBGfuQPYPom3THdAYcVF7AEjcuyI8dWx6Dxzg yCs08yM6EHE3UyOiaRjvMTdtstZ7RC9RPVLR9NrX0+QmIHyId8bUmpe8PPT1mY2x qY31/qs9wQms49G3N8+gtRxhes+iqJy7QUaQ3pduwUWyM2JwPM1weNsu9DJNZ+rU ZSMacp9lPhA1PowyEH4W16Y8+S3VA/+12c8EB1o5t6MQASxqzGcbu1FSnj7qKwuy BSo1GnJeQDnFSFAsqtxcfWzLvUr6cOQ= -----END CERTIFICATE-----Generated at Thu Aug 21 00:52:32 2025 by rpki-client