$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa File: ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa (raw, json) Hash identifier: qkgy5wOarasPT6Img92jrl8sB2nRPj/lgEfKvIEuhOo= Subject key identifier: CA:F6:12:32:B6:36:47:90:92:09:52:B7:37:CE:0B:59:59:D7:23:9A Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584A82AB4A2C0C80A7E7B01F1740 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 394002 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4a:2c:0c:80:a7:e7:b0:1f:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=823d36f5-6665-4084-85af-cbfaa3bbb0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:36:ce:35:a2:15:25:2f:9e:de:76:6c:2b:6e: 70:fe:76:0d:28:03:e4:0e:7a:7f:87:93:ee:71:1e: cb:ec:12:28:db:3d:08:ed:d9:af:75:b7:66:22:30: 08:7e:31:15:32:93:53:0b:25:a6:b8:a7:3c:ed:ad: 5f:31:12:de:f2:8d:53:4a:f7:8a:7b:8e:3b:5b:e7: 1b:07:2f:2c:4a:ad:f6:62:0b:54:d7:f7:0b:04:2c: fa:91:b1:e1:dc:2f:6a:f3:ec:c3:fe:b6:02:a9:ce: 75:15:ae:ba:5f:07:3f:18:b1:a9:b3:67:91:e5:eb: 54:d2:c5:17:50:80:af:56:0a:fa:52:3e:2f:b6:6f: 75:97:26:36:0f:cc:24:03:df:d1:50:46:07:d3:9a: ab:69:64:17:46:06:1d:e9:b0:ee:ad:19:ae:d6:e2: 58:59:28:95:09:17:7c:48:d9:3a:14:0c:27:12:f6: da:e1:40:8a:ba:93:d1:2f:dd:50:95:84:ee:41:49: a2:a9:df:9c:63:c1:9f:39:1f:4b:98:4a:ee:00:04: e7:14:e8:6c:33:2d:1f:48:67:39:bb:f6:21:87:2f: 2f:d6:d0:50:a2:b8:31:42:4a:1b:f8:ac:74:67:59: 53:64:e1:ae:9a:e7:b6:b0:d1:b7:db:7b:c2:6f:69: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F6:12:32:B6:36:47:90:92:09:52:B7:37:CE:0B:59:59:D7:23:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:28:6d:68:b1:31:f5:dc:1e:1e:2d:90:9a:ad:77:72:e0:3c: 80:33:46:97:3e:6c:f9:a2:2a:d0:96:57:f0:61:81:af:8c:43: 9a:69:ff:5d:53:e6:68:7e:3d:24:f4:5e:ab:a2:be:a0:03:dc: db:9e:3a:61:47:27:7d:d6:a1:42:71:9c:be:1c:38:16:e6:81: ff:fc:b9:6b:d7:a9:07:78:cd:21:fc:d7:6e:9b:4e:17:2e:99: 44:5d:74:1b:e2:5e:ec:09:ef:72:d4:05:86:45:39:38:b5:13: be:0c:c6:e0:4f:f5:62:94:ca:84:d6:34:c2:68:4d:55:f9:95: 8d:4b:49:45:19:49:4f:2b:48:05:9f:1d:8c:cd:f9:6f:a4:1f: 7c:f1:80:59:8e:db:10:b7:77:a0:d3:4d:eb:75:fb:b8:48:0c: dd:e7:50:43:6e:29:8c:bf:5d:e4:4f:ac:e0:c5:7f:84:47:68: 48:e1:bf:43:c0:0b:a1:49:6c:23:ce:af:ff:4b:40:62:36:67: 5f:0e:c5:63:17:cf:78:d7:ce:f9:4a:1f:85:f9:fa:a0:d1:62: 59:a9:86:79:f8:05:13:55:6f:90:97:fe:65:6d:3c:49:75:dc: 93:ed:66:52:5f:6e:97:38:08:e2:39:cf:7e:3a:57:3c:29:ce: 26:1c:ae:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0osDICn57AfF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ODIzZDM2ZjUtNjY2NS00MDg0LTg1YWYtY2JmYWEzYmJiMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjbONaIVJS+e3nZsK25w/nYNKAPkDnp/h5Pu cR7L7BIo2z0I7dmvdbdmIjAIfjEVMpNTCyWmuKc87a1fMRLe8o1TSveKe447W+cb By8sSq32YgtU1/cLBCz6kbHh3C9q8+zD/rYCqc51Fa66Xwc/GLGps2eR5etU0sUX UICvVgr6Uj4vtm91lyY2D8wkA9/RUEYH05qraWQXRgYd6bDurRmu1uJYWSiVCRd8 SNk6FAwnEvba4UCKupPRL91QlYTuQUmiqd+cY8GfOR9LmEruAATnFOhsMy0fSGc5 u/Yhhy8v1tBQorgxQkob+Kx0Z1lTZOGumue2sNG323vCb2m1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr2EjK2NkeQkglStzfOC1lZ1yOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2EyNzViNTAtMzM2YS0z YWIwLWEwZmEtMzQxMWVkNDhlZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsobWixMfXcHh4tkJqtd3LgPIAzRpc+bPmiKtCWV/Bhga+MQ5pp/11T 5mh+PST0XquivqAD3NueOmFHJ33WoUJxnL4cOBbmgf/8uWvXqQd4zSH8126bThcu mURddBviXuwJ73LUBYZFOTi1E74MxuBP9WKUyoTWNMJoTVX5lY1LSUUZSU8rSAWf HYzN+W+kH3zxgFmO2xC3d6DTTet1+7hIDN3nUENuKYy/XeRPrODFf4RHaEjhv0PA C6FJbCPOr/9LQGI2Z18OxWMXz3jXzvlKH4X5+qDRYlmphnn4BRNVb5CX/mVtPEl1 3JPtZlJfbpc4COI5z346VzwpziYcrkU= -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:50 2025 by rpki-client