$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/0a35db87-2432-3ac3-b01b-0962829a8bab.roa File: 0a35db87-2432-3ac3-b01b-0962829a8bab.roa (raw, json) Hash identifier: rCXdGJ1jDcHLZaTt3TLs0lBYAuEJiTDTc4xZr//BQmo= Subject key identifier: D5:A1:CC:14:02:E1:87:68:6B:C3:36:6F:38:AD:8C:24:F9:55:E5:3C Certificate issuer: /CN=2752199c-de37-4b0c-89a9-511d26205f69 Certificate serial: 010D0C9F4328584AD312BCF4E808F48B2659A700 Authority key identifier: 34:0A:98:3F:5F:59:BF:5B:4F:BC:77:15:33:8D:52:85:43:B7:26:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/0a35db87-2432-3ac3-b01b-0962829a8bab.roa Signing time: Mon 11 Aug 2025 20:14:05 +0000 ROA not before: Mon 11 Aug 2025 20:14:05 +0000 ROA not after: Sun 09 Nov 2025 21:14:05 +0000 asID: 11257 IP address blocks: 142.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:12:bc:f4:e8:08:f4:8b:26:59:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2752199c-de37-4b0c-89a9-511d26205f69 Validity Not Before: Aug 11 20:14:05 2025 GMT Not After : Nov 9 21:14:05 2025 GMT Subject: CN=9c904381-f566-44df-aeb0-e75f20f4cb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:58:1e:d4:c9:cc:f2:b2:18:f7:e9:fd:c1: 78:5a:36:c1:dd:f6:3b:55:a6:5f:86:2c:00:31:79: e5:be:3a:23:7e:23:11:5a:f9:30:3f:67:9f:7d:5e: 2b:53:a4:fd:99:1b:73:a6:13:b8:92:fb:0c:4f:7c: 98:db:4c:23:42:db:df:d2:6b:ee:b7:9c:60:87:a2: 61:ec:58:bf:96:cd:12:ee:cc:65:c6:59:63:18:8b: 91:46:bf:3c:d6:3a:42:0f:65:cb:0e:66:06:4f:3e: bf:3c:2a:42:e2:15:ae:7a:86:29:c3:42:c4:e0:72: 01:eb:55:d8:6c:03:5e:15:8b:20:a8:c2:af:5a:db: 31:37:05:3e:b3:19:8b:21:1d:28:24:3b:9a:29:ba: 92:c6:d8:86:02:ca:50:51:08:4a:fb:42:68:e9:c3: 4d:8e:c8:5e:ea:93:e6:d0:e0:47:c6:9c:79:eb:26: bc:b8:b4:ae:12:b0:e0:2a:9f:87:9e:f5:46:25:e1: e0:48:73:be:b0:f2:54:28:a9:f4:1f:84:8d:bb:3d: 96:22:73:42:3d:35:13:15:1b:eb:4a:5d:4c:5d:71: 4b:28:15:8e:b0:e6:a2:ae:3b:ed:df:c9:18:01:5c: 51:07:c4:c4:93:e1:b1:80:d9:53:c4:89:64:36:09: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:CC:14:02:E1:87:68:6B:C3:36:6F:38:AD:8C:24:F9:55:E5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/0a35db87-2432-3ac3-b01b-0962829a8bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.crl X509v3 Authority Key Identifier: keyid:34:0A:98:3F:5F:59:BF:5B:4F:BC:77:15:33:8D:52:85:43:B7:26:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer sbgp-ipAddrBlock: critical IPv4: 142.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:5b:30:84:56:7b:42:43:fd:96:ea:fc:ff:55:fb:31:76: 72:66:d8:49:6d:f0:31:2e:48:64:b2:6c:72:65:68:21:1e:ea: 46:4a:81:82:4b:75:7d:97:2c:73:da:60:55:d5:e2:44:d1:77: 9f:bd:00:01:57:ab:7b:6a:3d:35:30:c6:8b:db:4c:01:21:4d: ad:5a:1f:a1:1e:4f:39:94:12:03:b1:d4:3c:9a:a6:94:35:d5: 97:33:08:ff:56:7d:3d:f5:9e:59:59:af:53:ec:57:c3:32:60: 88:ce:f9:20:d8:10:60:bc:d2:1c:d2:8a:fa:4a:89:a6:82:95: 42:49:31:2a:aa:71:10:05:df:ca:6c:d4:0d:ad:dd:94:59:3c: 01:a4:1d:1c:4a:7c:89:92:8a:d3:3c:c5:01:61:81:f9:86:78: 06:20:9c:2d:61:c0:25:2b:7b:7a:2c:60:c2:2e:00:fa:12:91: 6d:cf:19:33:2c:94:b9:0e:d5:5d:4c:1f:95:c3:8e:97:30:84: ee:42:04:ea:d3:b6:19:0c:43:c5:3d:3f:31:d8:3a:ff:28:79: ee:71:e4:ea:74:ba:85:1c:8c:9b:85:27:84:a0:89:c4:ba:ce: e3:d3:2a:3c:02:0e:af:ee:6c:14:7f:a3:25:08:29:f2:2e:70: 56:14:bb:14 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErTErz06Aj0iyZZpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc1MjE5OWMtZGUzNy00YjBjLTg5YTktNTExZDI2MjA1 ZjY5MB4XDTI1MDgxMTIwMTQwNVoXDTI1MTEwOTIxMTQwNVowLzEtMCsGA1UEAxMk OWM5MDQzODEtZjU2Ni00NGRmLWFlYjAtZTc1ZjIwZjRjYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvRYHtTJzPKyGPfp/cF4WjbB3fY7VaZfhiwA MXnlvjojfiMRWvkwP2effV4rU6T9mRtzphO4kvsMT3yY20wjQtvf0mvut5xgh6Jh 7Fi/ls0S7sxlxlljGIuRRr881jpCD2XLDmYGTz6/PCpC4hWueoYpw0LE4HIB61XY bANeFYsgqMKvWtsxNwU+sxmLIR0oJDuaKbqSxtiGAspQUQhK+0Jo6cNNjshe6pPm 0OBHxpx56ya8uLSuErDgKp+HnvVGJeHgSHO+sPJUKKn0H4SNuz2WInNCPTUTFRvr Sl1MXXFLKBWOsOairjvt38kYAVxRB8TEk+GxgNlTxIlkNgnoKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNWhzBQC4Ydoa8M2bzitjCT5VeU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNzUy MTk5Yy1kZTM3LTRiMGMtODlhOS01MTFkMjYyMDVmNjkvMGEzNWRiODctMjQzMi0z YWMzLWIwMWItMDk2MjgyOWE4YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjc1MjE5OWMtZGUzNy00YjBjLTg5 YTktNTExZDI2MjA1ZjY5LzI3NTIxOTljLWRlMzctNGIwYy04OWE5LTUxMWQyNjIw NWY2OS5jcmwwHwYDVR0jBBgwFoAUNAqYP19Zv1tPvHcVM41ShUO3JgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNzUyMTk5Yy1kZTM3LTRiMGMtODlhOS01MTFk MjYyMDVmNjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALgtbMIRWe0JD/Zbq/P9V+zF2cmbYSW3wMS5IZLJscmVoIR7qRkqBgkt1 fZcsc9pgVdXiRNF3n70AAVere2o9NTDGi9tMASFNrVofoR5POZQSA7HUPJqmlDXV lzMI/1Z9PfWeWVmvU+xXwzJgiM75INgQYLzSHNKK+kqJpoKVQkkxKqpxEAXfymzU Da3dlFk8AaQdHEp8iZKK0zzFAWGB+YZ4BiCcLWHAJSt7eixgwi4A+hKRbc8ZMyyU uQ7VXUwflcOOlzCE7kIE6tO2GQxDxT0/Mdg6/yh57nHk6nS6hRyMm4UnhKCJxLrO 49MqPAIOr+5sFH+jJQgp8i5wVhS7FA== -----END CERTIFICATE-----Generated at Wed Aug 20 03:36:00 2025 by rpki-client