$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa File: 3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa (raw, json) Hash identifier: 7iaoG0p5ZaujPWvVqZYUVrRL12W7rSS3fFZA9yJnT6A= Subject key identifier: 46:DD:10:80:3B:56:94:BF:8D:13:87:3C:A8:5D:BD:E1:B2:9F:DB:09 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584ACAE406307E987F26463EF4C0 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa Signing time: Fri 08 Aug 2025 21:53:29 +0000 ROA not before: Fri 08 Aug 2025 21:53:29 +0000 ROA not after: Thu 06 Nov 2025 22:53:29 +0000 asID: 16557 IP address blocks: 66.103.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:e4:06:30:7e:98:7f:26:46:3e:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 8 21:53:29 2025 GMT Not After : Nov 6 22:53:29 2025 GMT Subject: CN=47b9f20d-235b-45e6-bb47-60ce90c56d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:08:9c:e6:7b:3c:2d:02:40:c0:b6:47:d6: 0b:10:f6:94:c7:ee:f6:2f:1f:82:74:5e:54:1e:d1: ac:e2:42:62:50:18:31:93:f9:e9:dc:80:2c:d5:b5: 12:e0:73:f6:0c:9c:f6:02:3e:83:0f:37:06:04:8d: a6:af:fc:b3:31:26:46:a8:b4:37:7b:1e:9c:5a:46: fc:4a:a1:46:dd:b7:ca:7f:11:67:f0:b8:9d:e5:58: e6:dc:d3:37:8a:21:b6:31:46:13:44:b4:ce:96:99: 95:a5:e2:91:7a:d7:16:2c:3a:ae:b2:c1:4d:98:25: 38:53:48:d2:41:65:be:92:4a:c9:5b:7c:cf:63:67: 39:db:99:42:c4:c9:1c:21:19:ca:bc:10:bd:cd:62: 32:46:b1:bb:83:6a:95:7e:a2:7d:81:ad:a0:78:6e: 31:c7:52:2e:99:43:89:f9:fd:19:3b:1f:58:6f:46: ff:59:7e:c0:f9:55:6c:d9:d8:16:95:0a:de:8b:a6: 9f:20:1a:52:e2:30:84:64:c3:ff:54:bf:77:14:7e: 5b:09:d4:9a:9f:3a:74:57:2a:6c:25:24:ba:10:3a: 26:b1:17:0a:07:7a:79:01:c9:e6:ac:a2:57:2b:ec: 2c:66:bd:dd:85:26:ac:fa:61:79:d7:b6:b2:d8:c5: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DD:10:80:3B:56:94:BF:8D:13:87:3C:A8:5D:BD:E1:B2:9F:DB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 66.103.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8c:ef:94:da:2a:f0:bf:db:ce:94:e4:78:32:87:65:53:fd: 0a:e6:cf:0d:0b:cd:35:e4:97:a0:48:d9:df:b1:fb:cc:4c:33: 6b:d6:9e:6b:bf:d0:31:81:61:63:62:4d:6e:ee:08:ef:aa:72: cf:51:73:76:e4:14:8f:29:d1:ba:5a:6b:9f:98:25:ed:d8:ba: d0:ce:e0:fa:52:81:6a:7f:0a:fe:77:d6:6b:f3:73:96:b7:07: 8a:07:1e:97:73:12:b2:1e:09:ef:1e:9d:1f:e9:31:71:af:be: 52:8a:a1:05:5a:7a:c8:2c:ff:19:63:21:59:4c:60:66:a5:e8: b5:72:25:f6:30:f9:1a:80:b2:d2:c5:04:be:8e:33:37:97:88: 10:60:1c:59:6e:6b:34:f3:93:c6:4d:cc:d1:f6:27:a0:a9:87: 54:64:af:70:a8:51:10:e0:2b:44:e6:11:e4:f7:a4:7c:5a:01: 78:d4:0c:4a:2b:30:1a:c1:38:43:64:3a:ba:5b:f1:1d:eb:29: 3e:a1:9b:96:0d:20:04:2f:92:07:01:bf:15:66:6e:64:51:d8: 27:d1:19:15:0d:41:08:c8:b2:aa:f9:5a:99:74:c9:41:82:e3: 0c:de:0d:d0:fb:8a:39:dd:cd:47:aa:95:b3:2e:92:92:11:0a: 47:e5:d1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErK5AYwfph/JkY+9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MDgwODIxNTMyOVoXDTI1MTEwNjIyNTMyOVowLzEtMCsGA1UEAxMk NDdiOWYyMGQtMjM1Yi00NWU2LWJiNDctNjBjZTkwYzU2ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM4InOZ7PC0CQMC2R9YLEPaUx+72Lx+CdF5U HtGs4kJiUBgxk/np3IAs1bUS4HP2DJz2Aj6DDzcGBI2mr/yzMSZGqLQ3ex6cWkb8 SqFG3bfKfxFn8Lid5Vjm3NM3iiG2MUYTRLTOlpmVpeKRetcWLDqussFNmCU4U0jS QWW+kkrJW3zPY2c525lCxMkcIRnKvBC9zWIyRrG7g2qVfqJ9ga2geG4xx1IumUOJ +f0ZOx9Yb0b/WX7A+VVs2dgWlQrei6afIBpS4jCEZMP/VL93FH5bCdSanzp0Vyps JSS6EDomsRcKB3p5AcnmrKJXK+wsZr3dhSas+mF517ay2MU09QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbdEIA7VpS/jROHPKhdveGyn9sJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvM2NmNjFkM2YtYmM3NC0z ZDA0LTliMWUtZjMzYzE5NzA5YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6M75TaKvC/286U5Hgyh2VT/Qrmzw0LzTXkl6BI2d+x+8xMM2vWnmu/ 0DGBYWNiTW7uCO+qcs9Rc3bkFI8p0bpaa5+YJe3YutDO4PpSgWp/Cv531mvzc5a3 B4oHHpdzErIeCe8enR/pMXGvvlKKoQVaesgs/xljIVlMYGal6LVyJfYw+RqAstLF BL6OMzeXiBBgHFluazTzk8ZNzNH2J6Cph1Rkr3CoURDgK0TmEeT3pHxaAXjUDEor MBrBOENkOrpb8R3rKT6hm5YNIAQvkgcBvxVmbmRR2CfRGRUNQQjIsqr5Wpl0yUGC 4wzeDdD7ijndzUeqlbMukpIRCkfl0XU= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:20 2025 by rpki-client