$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa File: afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa (raw, json) Hash identifier: kMCCj7x6mmkT3iioROwlF5RBhofFlm/WC49A0lblQkI= Subject key identifier: 7F:3F:06:FB:9E:8D:C7:37:F2:FF:C0:B6:D4:18:8D:3F:7E:F8:47:E7 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AECC11E26E19C2D593C8D18C0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 398351 IP address blocks: 66.51.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1e:26:e1:9c:2d:59:3c:8d:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5d6cd977-4784-44ff-a26c-416feffe2c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:e7:b1:c3:67:bf:95:8e:e1:d8:41:fd:51: 07:5d:26:e6:af:08:94:5a:00:bc:55:b1:a4:e3:17: 35:55:fa:6d:0f:32:18:4f:1c:67:e4:96:d8:12:f8: 5c:dc:4f:7d:51:c4:90:98:f4:63:05:0f:6d:7f:25: 03:7f:05:9a:6a:27:e0:1c:11:90:31:ce:cb:b4:84: 1d:14:96:e7:8e:bf:8e:bf:9c:ff:cb:25:64:82:be: 14:5c:96:c8:c1:bb:b8:42:0a:a8:07:25:c6:34:6a: a9:74:70:54:88:47:70:3c:3f:05:59:49:f5:e6:79: 4a:b7:c1:23:ef:97:e5:ff:fd:fe:c6:5c:3a:01:81: 56:bb:de:77:e8:72:e7:82:84:93:d2:28:bd:69:7f: a0:b7:41:78:c4:90:fa:41:fa:22:dc:ab:8b:6c:44: 47:3c:0e:95:84:b1:6f:ac:65:1a:fc:0a:23:3d:8c: 3c:6a:43:96:db:a1:c6:fb:6a:b9:28:e6:bd:c7:00: ea:5e:98:f5:47:63:8d:ff:39:bd:31:1e:f0:dc:0a: f3:f9:01:ec:9d:1f:85:15:d2:06:db:5f:5f:b8:fd: ad:6f:0e:21:0e:e5:a0:37:e0:d5:37:b1:f6:7f:58: 56:32:7e:a7:8f:bd:3c:15:68:45:c2:bf:bc:3b:ca: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3F:06:FB:9E:8D:C7:37:F2:FF:C0:B6:D4:18:8D:3F:7E:F8:47:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.51.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c3:8b:70:87:a8:d0:13:ca:76:f2:c1:8e:e5:34:d8:cc:59: 6e:24:d5:11:18:b5:45:c9:5a:e9:c0:bd:1d:c2:c2:94:1d:65: a3:53:d2:7b:d3:0b:71:30:2d:81:17:a9:fc:83:03:8c:f0:a9: 9a:36:ff:d5:62:d4:17:09:f9:b2:88:76:d3:48:be:45:a0:ca: 49:6d:3c:c9:c6:2b:9b:24:c6:6c:0c:9a:11:7b:1b:7f:51:a8: df:a0:56:d1:3c:90:d1:35:4b:26:69:6b:92:13:c7:f9:02:6e: 8e:6a:95:f4:26:b2:68:d7:be:28:2d:30:68:c1:7b:42:c4:ff: 26:92:34:25:f9:34:f6:06:b0:64:f9:3a:74:fe:72:ba:a6:43: 7a:ab:59:4f:8e:b2:8b:e4:05:87:c0:8b:51:40:9b:98:7c:8c: d5:39:77:40:73:69:3c:e7:d5:8f:74:83:73:96:6a:2f:77:68: 1c:53:cd:f2:19:e2:2f:ac:12:13:05:6c:5e:dd:2c:7c:f0:e0: 16:38:f6:4a:30:9f:7a:5b:a3:a5:3e:7b:65:7c:23:7a:f6:ea: d1:3d:41:df:b0:4c:ce:5a:86:c8:2d:a8:e8:b9:d4:ba:6f:76: 3e:4e:59:61:be:89:bc:50:28:18:5f:d8:0a:06:d4:0e:bb:f3: 5c:2f:bf:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswR4m4ZwtWTyNGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWQ2Y2Q5NzctNDc4NC00NGZmLWEyNmMtNDE2ZmVmZmUyYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrbnscNnv5WO4dhB/VEHXSbmrwiUWgC8VbGk 4xc1VfptDzIYTxxn5JbYEvhc3E99UcSQmPRjBQ9tfyUDfwWaaifgHBGQMc7LtIQd FJbnjr+Ov5z/yyVkgr4UXJbIwbu4QgqoByXGNGqpdHBUiEdwPD8FWUn15nlKt8Ej 75fl//3+xlw6AYFWu9536HLngoST0ii9aX+gt0F4xJD6Qfoi3KuLbERHPA6VhLFv rGUa/AojPYw8akOW26HG+2q5KOa9xwDqXpj1R2ON/zm9MR7w3Arz+QHsnR+FFdIG 219fuP2tbw4hDuWgN+DVN7H2f1hWMn6nj708FWhFwr+8O8rCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8/Bvuejcc38v/AttQYjT9++EfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYWZjYzE5NjMtMGI1Yi0z NjY5LThkNWQtNDg1Yjc3YWEzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzDi3CHqNATynbywY7lNNjMWW4k1REYtUXJWunAvR3CwpQdZaNT0nvT C3EwLYEXqfyDA4zwqZo2/9Vi1BcJ+bKIdtNIvkWgykltPMnGK5skxmwMmhF7G39R qN+gVtE8kNE1SyZpa5ITx/kCbo5qlfQmsmjXvigtMGjBe0LE/yaSNCX5NPYGsGT5 OnT+crqmQ3qrWU+OsovkBYfAi1FAm5h8jNU5d0BzaTzn1Y90g3OWai93aBxTzfIZ 4i+sEhMFbF7dLHzw4BY49kown3pbo6U+e2V8I3r26tE9Qd+wTM5ahsgtqOi51Lpv dj5OWWG+ibxQKBhf2AoG1A6781wvvxo= -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:09 2025 by rpki-client