$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa File: 4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa (raw, json) Hash identifier: 0vGW+FtQq9Kt3Bey8UsW1/H343Jyy7dMHJFIhLGpeRg= Subject key identifier: 3F:A0:18:89:00:8D:56:F5:AB:B1:43:3C:A2:A0:04:C2:DD:6F:99:18 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584AA42B86E8146624B4DC6BE890 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 35847 IP address blocks: 66.33.120.0/21 maxlen: 24 66.132.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:86:e8:14:66:24:b4:dc:6b:e8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=57e91508-27ab-4442-900c-e0d4b4ed7727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ab:38:af:16:74:1b:95:d2:7c:28:21:76:98: f4:5f:a1:57:13:c8:f8:34:41:30:26:07:cf:a7:ce: c8:ac:60:42:b5:ee:66:44:2b:63:80:2e:25:92:58: 3f:f2:19:55:15:51:38:ae:05:de:a7:cd:38:22:78: be:d1:51:92:db:4c:65:c5:f6:04:40:5c:1e:6a:0a: 5b:db:1c:eb:f7:d2:e3:c6:bf:1d:09:ed:62:95:34: 5c:de:31:a3:eb:c6:c9:03:aa:8b:ef:58:e7:f0:05: 34:0e:30:ac:b0:37:3e:d1:b0:9d:39:1c:92:30:c6: b0:2a:bd:da:f2:7f:39:f3:09:8a:87:1c:29:b1:d3: cf:8f:9d:cf:e7:40:94:72:c9:29:4a:5e:f3:ca:69: 0b:7f:02:08:4d:81:8f:e9:9d:22:24:05:e4:75:03: 84:1a:96:47:4b:80:1e:b1:97:75:57:cd:16:78:8b: d3:0c:7b:81:83:20:f7:b5:35:21:b1:88:72:b9:8d: f2:9f:a2:57:46:29:d7:6d:9a:0b:63:b8:05:ba:a0: 35:24:36:2a:0e:57:12:3e:a4:ca:02:5e:d3:90:38: 85:c3:ab:84:e3:a9:b7:a5:50:45:68:32:f0:57:ab: c1:dc:1e:43:46:fa:b8:f9:cf:89:49:ae:f5:c2:83: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A0:18:89:00:8D:56:F5:AB:B1:43:3C:A2:A0:04:C2:DD:6F:99:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 66.33.120.0/21 66.132.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:90:c3:7c:58:d1:6e:45:ba:02:28:92:59:bf:c0:34:b5:b5: eb:f1:c4:70:2f:47:f4:20:a6:54:b2:1c:90:b9:c0:ea:5c:80: 7b:77:44:d7:ff:5f:8d:c8:ac:8e:83:5f:b2:ae:f2:90:8c:71: c6:b8:f9:31:9a:1c:c2:59:95:d9:de:dc:63:39:46:b4:f0:25: 44:41:e2:fe:47:08:41:7f:e3:8b:de:97:bb:b2:23:b1:9b:33: 2d:f1:41:ce:69:ca:13:0e:fd:b1:40:0e:60:3f:73:95:8f:20: a2:68:51:c0:1b:7d:d9:6c:71:73:0b:e1:4e:5a:b8:bb:a5:39: 28:f6:14:c4:1b:a5:ab:a1:0c:21:41:fa:83:4e:10:a7:39:b0: 00:22:31:ff:cd:af:26:7b:e4:ce:3c:e6:a5:5d:40:f0:d5:a4: 84:d8:63:eb:2a:1a:16:fc:98:37:98:21:82:1c:25:6e:ce:23: 46:07:9d:8f:26:a8:73:13:30:62:31:d8:0d:44:8f:07:f9:19: ef:57:59:61:aa:96:3f:98:d4:2e:83:e3:a5:57:a6:e3:5f:fe: dd:93:02:0d:53:65:85:40:7c:83:5b:55:fb:f0:c8:41:f7:91: 5b:55:09:6c:2e:25:47:3f:8a:5b:0c:a7:5c:09:76:50:10:64: 1f:5e:e8:e2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqkK4boFGYktNxr6JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NTdlOTE1MDgtMjdhYi00NDQyLTkwMGMtZTBkNGI0ZWQ3NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqs4rxZ0G5XSfCghdpj0X6FXE8j4NEEwJgfP p87IrGBCte5mRCtjgC4lklg/8hlVFVE4rgXep804Ini+0VGS20xlxfYEQFweagpb 2xzr99Ljxr8dCe1ilTRc3jGj68bJA6qL71jn8AU0DjCssDc+0bCdORySMMawKr3a 8n858wmKhxwpsdPPj53P50CUcskpSl7zymkLfwIITYGP6Z0iJAXkdQOEGpZHS4Ae sZd1V80WeIvTDHuBgyD3tTUhsYhyuY3yn6JXRinXbZoLY7gFuqA1JDYqDlcSPqTK Al7TkDiFw6uE46m3pVBFaDLwV6vB3B5DRvq4+c+JSa71woMKdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD+gGIkAjVb1q7FDPKKgBMLdb5kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvNGQ4ZTkwZDUtMGVkNS0z NzJhLWEzNDAtZmQxODJiNmUzZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQiF4AwQD QoSgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABGQw3xY0W5FugIoklm/wDS1tevxxHAvR/QgplSyHJC5wOpc gHt3RNf/X43IrI6DX7Ku8pCMcca4+TGaHMJZldne3GM5RrTwJURB4v5HCEF/44ve l7uyI7GbMy3xQc5pyhMO/bFADmA/c5WPIKJoUcAbfdlscXML4U5auLulOSj2FMQb pauhDCFB+oNOEKc5sAAiMf/NryZ75M485qVdQPDVpITYY+sqGhb8mDeYIYIcJW7O I0YHnY8mqHMTMGIx2A1Ejwf5Ge9XWWGqlj+Y1C6D46VXpuNf/t2TAg1TZYVAfINb VfvwyEH3kVtVCWwuJUc/ilsMp1wJdlAQZB9e6OI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:00 2025 by rpki-client