$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json) Hash identifier: xz6UoaugdYpeGKBGrQG+QpWMuTmMfSNqnKMNWR1LOAE= Subject key identifier: 46:0D:3C:C3:52:09:2C:70:3E:64:28:2A:61:FD:2F:FA:13:92:32:FB Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584A9FFBA0044455574A833F1380 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 5511 IP address blocks: 66.112.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a0:04:44:55:57:4a:83:3f:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=f72cf918-e4ec-411d-98cb-cae72abde1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:0e:f6:2c:59:fd:d0:15:81:eb:5d:cb:44: 41:d0:e5:2d:82:bc:2f:8a:39:d7:90:6f:e3:e7:e0: e2:a8:fc:04:80:c5:cc:cd:67:3e:cf:21:d2:71:f8: 2a:d1:90:4f:c5:69:89:d4:e3:2c:6c:28:32:aa:d4: 51:98:32:36:60:8d:f0:ac:e0:6d:82:ca:f1:d8:68: 92:c0:e5:75:41:34:c8:e7:c0:94:2b:96:49:ef:25: 0f:e6:f0:f6:f2:ca:5b:a2:fb:78:61:f8:09:2a:44: 25:a9:55:65:28:bd:80:4c:b1:64:a4:8e:dd:b5:85: 8f:82:b2:17:c8:b5:9d:ff:93:a0:7b:36:85:38:1c: 51:2b:20:28:18:e1:2e:47:25:ce:31:74:b5:91:b6: 0f:97:1f:bc:1a:24:82:21:0d:92:42:76:56:6f:17: e0:72:ba:ed:46:68:dd:0e:b3:94:90:59:fb:05:be: 3d:83:73:da:f0:37:0b:b6:4d:82:c0:4c:39:6a:24: 3b:fc:9c:5b:f1:97:84:2b:8e:b0:8f:2a:08:be:6d: f5:f9:a5:35:57:6e:08:c0:8b:18:da:ee:85:4b:73: 0a:13:7f:09:73:8d:2e:c4:4f:fe:de:7e:33:51:4e: 8f:7b:48:52:8c:d8:cd:0d:6f:d5:48:75:bb:00:b1: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:3C:C3:52:09:2C:70:3E:64:28:2A:61:FD:2F:FA:13:92:32:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:ad:fe:56:f2:f7:9f:8e:04:d5:65:a7:7d:fb:13:eb:95: 1d:b9:b3:35:d3:4e:ce:8b:9e:10:47:d0:de:f7:c7:2d:29:f9: 8a:bf:10:dd:0d:89:e2:9d:3e:48:9a:3a:3a:78:5a:a9:4e:84: 5f:44:98:d8:64:cc:75:d6:d8:28:d5:2a:f7:f5:65:22:f0:74: d2:3e:c7:73:f3:25:f5:53:55:f0:23:ba:62:45:0b:98:dc:97: f5:46:5c:a5:16:34:77:ab:08:5c:21:1f:2c:37:a1:39:f0:99: b2:c1:04:a8:1f:49:ed:67:96:9c:af:1a:4b:38:93:41:be:b6: 56:2a:71:aa:e1:a7:85:92:f7:c3:0a:9e:c1:36:fc:f4:76:0a: ac:41:b8:41:e3:9c:e9:50:ac:b1:8a:9c:29:b2:0f:a2:55:d3: 5d:a8:be:b9:9d:56:a5:84:57:71:6f:23:63:49:4a:06:38:3b: e5:43:7e:30:0c:49:ba:02:95:bd:82:4c:97:45:e1:04:89:fd: 69:0f:d0:9a:75:62:ba:41:23:ce:3d:85:da:34:40:ca:0a:04: 04:fa:c2:36:9d:9c:66:3f:e6:8f:8e:57:35:f5:b4:4d:e1:8c: 67:bf:ab:5f:99:5a:0e:90:2e:75:16:8b:6f:1b:00:e4:8d:b7: b4:4c:e3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6AERFVXSoM/E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZjcyY2Y5MTgtZTRlYy00MTFkLTk4Y2ItY2FlNzJhYmRlMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOsO9ixZ/dAVgetdy0RB0OUtgrwvijnXkG/j 5+DiqPwEgMXMzWc+zyHScfgq0ZBPxWmJ1OMsbCgyqtRRmDI2YI3wrOBtgsrx2GiS wOV1QTTI58CUK5ZJ7yUP5vD28spbovt4YfgJKkQlqVVlKL2ATLFkpI7dtYWPgrIX yLWd/5OgezaFOBxRKyAoGOEuRyXOMXS1kbYPlx+8GiSCIQ2SQnZWbxfgcrrtRmjd DrOUkFn7Bb49g3Pa8DcLtk2CwEw5aiQ7/Jxb8ZeEK46wjyoIvm31+aU1V24IwIsY 2u6FS3MKE38Jc40uxE/+3n4zUU6Pe0hSjNjNDW/VSHW7ALGD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYNPMNSCSxwPmQoKmH9L/oTkjL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmFhZjk0ODgtNzVhNy0z NjEyLWI1YjYtYTY1YTllNGY2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB9rf5W8vefjgTVZad9+xPrlR25szXTTs6LnhBH0N73xy0p+Yq/EN0N ieKdPkiaOjp4WqlOhF9EmNhkzHXW2CjVKvf1ZSLwdNI+x3PzJfVTVfAjumJFC5jc l/VGXKUWNHerCFwhHyw3oTnwmbLBBKgfSe1nlpyvGks4k0G+tlYqcarhp4WS98MK nsE2/PR2CqxBuEHjnOlQrLGKnCmyD6JV012ovrmdVqWEV3FvI2NJSgY4O+VDfjAM SboClb2CTJdF4QSJ/WkP0Jp1YrpBI849hdo0QMoKBAT6wjadnGY/5o+OVzX1tE3h jGe/q1+ZWg6QLnUWi28bAOSNt7RM4ww= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:13 2025 by rpki-client