$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa File: df833a82-7a66-3fb2-86c2-e24767894bdc.roa (raw, json) Hash identifier: MMLqCxKm5TqDzbmHCwSVONZQF15daHlzHH2qdoF322A= Subject key identifier: E5:AA:5E:A2:9E:96:22:6E:29:BB:FD:F9:87:B9:F7:66:FD:3C:3D:38 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AADF1258C6C6B1B24240B2D80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16696 IP address blocks: 66.255.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:25:8c:6c:6b:1b:24:24:0b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=94ff9d36-4898-4f38-95b8-46d349b9f1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:46:48:9a:a2:69:56:39:c3:f0:7d:66:04:15: c1:ab:d5:3b:a2:a0:36:94:a5:c7:1b:0d:d6:fb:2e: 0a:75:2b:a2:69:25:6d:67:89:e0:a7:a9:16:84:df: 6c:17:77:79:33:c7:9a:b3:c1:1b:c5:f0:42:11:7b: 39:f8:14:87:12:e3:94:fc:71:16:4b:e4:76:7f:16: e1:44:8c:63:87:1f:e5:23:85:17:de:b7:38:45:95: bd:65:f6:a1:79:51:49:e3:55:e3:61:6c:61:c1:80: d5:5c:53:3b:9a:98:ca:d8:3d:8d:0c:c4:81:a7:9f: f1:c9:0f:15:34:e3:5e:76:6b:d3:d6:a6:15:ce:00: 20:cf:c0:0d:0d:e3:90:1c:cc:52:56:47:b3:ab:15: bf:eb:ef:f2:60:3f:d4:0a:16:fa:4b:f8:ae:43:01: 06:5a:7b:01:19:c4:f2:b9:d5:49:00:bf:50:e4:f9: 6e:1b:00:75:14:94:86:d0:95:44:a2:c5:b9:97:c2: 53:d2:65:ea:71:d7:3a:6f:eb:e1:2c:14:51:44:db: 6a:41:43:03:fb:b4:2e:47:a0:dd:42:0d:91:41:d4: 96:b9:d3:09:ac:f6:34:d9:aa:5c:bf:92:e5:31:a9: 62:a1:3d:dc:32:66:28:b0:ef:89:25:47:19:98:9a: 61:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:5E:A2:9E:96:22:6E:29:BB:FD:F9:87:B9:F7:66:FD:3C:3D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 66.255.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:39:03:0f:5e:bb:4f:20:ef:12:dc:9b:2c:e2:80:c2:d0:1b: 65:5d:22:7b:fb:3f:ad:fb:d6:d8:6f:3f:8e:ad:07:7e:21:1b: d0:a2:d4:a9:b8:08:35:85:23:3e:f0:35:b0:b1:7f:64:ad:cb: 96:4a:bd:d3:2c:42:bc:83:b5:64:ea:15:df:5a:8d:65:48:60: ff:e1:80:88:93:c2:be:89:c3:82:17:5f:02:9e:0f:f3:2b:a5: 2b:e2:60:61:62:65:5a:37:cd:de:75:0d:cf:26:6d:67:4b:a3: ac:7c:a5:5d:10:b5:7b:8b:99:b4:6b:72:67:7d:4e:88:2d:ac: 69:83:2c:0f:7f:70:1c:41:76:15:68:8d:af:bc:e3:21:8f:90: c2:9e:e1:a8:4c:fd:2b:61:d4:47:8c:fe:5a:bd:33:82:03:41: 87:b5:9d:14:04:aa:e2:a9:96:70:ba:20:4a:29:eb:6f:53:15: 37:6d:07:26:8e:a4:b1:4d:05:63:19:d4:0d:11:bf:70:0b:9d: d3:59:42:98:bd:d3:61:39:9b:a9:ed:00:b9:7c:eb:3a:27:3e: 2d:d8:98:38:14:e7:b9:ff:bb:7a:e0:f4:8f:90:0a:e6:41:46: 96:88:64:a5:62:0d:08:f1:46:d3:c0:66:75:63:5c:46:7a:82: 7e:f2:83:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SWMbGsbJCQLLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OTRmZjlkMzYtNDg5OC00ZjM4LTk1YjgtNDZkMzQ5YjlmMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEZImqJpVjnD8H1mBBXBq9U7oqA2lKXHGw3W +y4KdSuiaSVtZ4ngp6kWhN9sF3d5M8eas8EbxfBCEXs5+BSHEuOU/HEWS+R2fxbh RIxjhx/lI4UX3rc4RZW9ZfaheVFJ41XjYWxhwYDVXFM7mpjK2D2NDMSBp5/xyQ8V NONedmvT1qYVzgAgz8ANDeOQHMxSVkezqxW/6+/yYD/UChb6S/iuQwEGWnsBGcTy udVJAL9Q5PluGwB1FJSG0JVEosW5l8JT0mXqcdc6b+vhLBRRRNtqQUMD+7QuR6Dd Qg2RQdSWudMJrPY02apcv5LlMalioT3cMmYosO+JJUcZmJph+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWqXqKeliJuKbv9+Ye592b9PD04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MzNhODItN2E2Ni0z ZmIyLTg2YzItZTI0NzY3ODk0YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM5Aw9eu08g7xLcmyzigMLQG2VdInv7P6371thvP46tB34hG9Ci1Km4 CDWFIz7wNbCxf2Sty5ZKvdMsQryDtWTqFd9ajWVIYP/hgIiTwr6Jw4IXXwKeD/Mr pSviYGFiZVo3zd51Dc8mbWdLo6x8pV0QtXuLmbRrcmd9TogtrGmDLA9/cBxBdhVo ja+84yGPkMKe4ahM/Sth1EeM/lq9M4IDQYe1nRQEquKplnC6IEop629TFTdtByaO pLFNBWMZ1A0Rv3ALndNZQpi902E5m6ntALl86zonPi3YmDgU57n/u3rg9I+QCuZB RpaIZKViDQjxRtPAZnVjXEZ6gn7yg4I= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:11 2025 by rpki-client