$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3892e32d-8417-3d0c-bdb6-14c814ef21db.roa File: 3892e32d-8417-3d0c-bdb6-14c814ef21db.roa (raw, json) Hash identifier: nz5w8vyor+fpZIg1hBXFvktRO1eQIJHIuccHZdYgo0E= Subject key identifier: E5:B0:1B:B4:48:65:B5:9C:C9:80:3D:C9:E8:F1:DF:CF:97:2D:A6:BD Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584AA2C6449C67BE7DF6683E02C0 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3892e32d-8417-3d0c-bdb6-14c814ef21db.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 13487 IP address blocks: 66.103.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:44:9c:67:be:7d:f6:68:3e:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=4b0b0a0a-f21d-4de0-9aea-f2fe5cf58fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:18:a1:64:7a:9c:72:92:72:2d:60:ac:9e:b2: 10:5f:c6:01:50:35:5d:7f:f8:e4:6c:fc:cc:b3:86: c7:bf:43:3a:dc:35:b8:63:0d:b1:d9:03:31:de:61: b2:37:1e:39:b8:33:aa:ab:9d:f3:50:4a:7c:e8:b4: 14:19:ba:e7:f6:43:02:14:05:2c:0b:b4:a7:d6:b0: 81:21:ee:22:53:52:4d:bb:ce:13:e6:d2:4b:ad:3c: 08:3a:39:9d:72:5f:20:4d:0d:20:8d:7d:25:1c:77: 30:05:3d:c5:a9:ad:0a:14:24:25:30:2f:d2:ba:fb: cc:92:f4:b3:18:cc:ff:2b:a8:ed:44:ec:5e:5e:dd: 3b:9d:96:13:4a:94:04:d3:a5:a0:be:bc:43:89:4a: db:b3:22:20:67:38:e8:99:87:24:21:a7:75:14:a0: e4:b9:fc:f9:15:f4:5b:9f:18:c0:fb:b0:9d:43:50: af:42:70:ee:3e:ad:8b:c5:a0:cd:6f:b6:58:13:df: cf:06:be:41:9f:8b:b9:14:f1:a7:5d:40:e9:e0:56: da:17:98:3d:6f:b9:2d:be:1e:1b:73:de:72:c2:bc: 2e:a6:67:cb:48:b2:2d:79:80:ef:fa:9c:f0:f4:ec: f4:49:90:f9:18:af:00:8c:88:5c:c5:80:23:e4:85: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B0:1B:B4:48:65:B5:9C:C9:80:3D:C9:E8:F1:DF:CF:97:2D:A6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/3892e32d-8417-3d0c-bdb6-14c814ef21db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 66.103.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:54:5f:34:73:c0:68:d7:94:ab:a1:37:bb:ed:39:7c:21:53: ae:03:00:fe:5b:08:ca:b5:b7:2b:d8:e5:41:e3:1b:23:58:bc: e6:13:ac:c0:93:60:62:aa:32:13:6a:ae:40:79:f8:d7:46:f8: 10:90:d6:ec:63:25:c2:15:89:70:b3:4b:c7:52:eb:0c:4b:49: 08:17:76:9b:ea:2a:fa:d0:8e:85:b9:df:a4:2b:88:e4:ae:0f: 97:5b:dd:19:5c:5b:d0:3d:cc:48:e7:14:21:3a:c4:e7:7d:dd: 30:45:8b:de:a4:48:54:4e:6e:00:17:f8:73:a1:c1:e7:2e:bb: c5:e1:a1:54:e6:d5:ae:85:1f:c8:4c:a6:62:ad:51:3d:1c:44: 7e:5b:63:8e:9e:da:8a:be:04:ed:35:e3:a8:ea:8a:72:3a:ef: 28:79:df:79:2b:4c:0b:c7:95:ed:08:d5:14:87:b2:84:fa:b4: 0c:48:3b:3a:40:78:09:55:ff:58:ed:72:1f:9a:f1:af:ac:88: 8c:fe:1d:17:97:38:8f:ab:37:e9:04:ab:8a:14:1c:1d:aa:85: e3:87:2f:db:0d:0c:20:f5:2f:0e:50:f0:b3:7d:02:78:94:a9: 6b:4c:f7:29:93:4c:5a:84:07:26:25:86:04:29:9c:7f:5d:9f: 7a:e4:7f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixkScZ7599mg+AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk NGIwYjBhMGEtZjIxZC00ZGUwLTlhZWEtZjJmZTVjZjU4ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RihZHqccpJyLWCsnrIQX8YBUDVdf/jkbPzM s4bHv0M63DW4Yw2x2QMx3mGyNx45uDOqq53zUEp86LQUGbrn9kMCFAUsC7Sn1rCB Ie4iU1JNu84T5tJLrTwIOjmdcl8gTQ0gjX0lHHcwBT3Fqa0KFCQlMC/SuvvMkvSz GMz/K6jtROxeXt07nZYTSpQE06WgvrxDiUrbsyIgZzjomYckIad1FKDkufz5FfRb nxjA+7CdQ1CvQnDuPq2LxaDNb7ZYE9/PBr5Bn4u5FPGnXUDp4FbaF5g9b7ktvh4b c95ywrwupmfLSLIteYDv+pzw9Oz0SZD5GK8AjIhcxYAj5IVKAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWwG7RIZbWcyYA9yejx38+XLaa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvMzg5MmUzMmQtODQxNy0z ZDBjLWJkYjYtMTRjODE0ZWYyMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJUXzRzwGjXlKuhN7vtOXwhU64DAP5bCMq1tyvY5UHjGyNYvOYTrMCT YGKqMhNqrkB5+NdG+BCQ1uxjJcIViXCzS8dS6wxLSQgXdpvqKvrQjoW536QriOSu D5db3RlcW9A9zEjnFCE6xOd93TBFi96kSFRObgAX+HOhwecuu8XhoVTm1a6FH8hM pmKtUT0cRH5bY46e2oq+BO0146jqinI67yh533krTAvHle0I1RSHsoT6tAxIOzpA eAlV/1jtch+a8a+siIz+HReXOI+rN+kEq4oUHB2qheOHL9sNDCD1Lw5Q8LN9AniU qWtM9ymTTFqEByYlhgQpnH9dn3rkfz4= -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:53 2025 by rpki-client