$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa File: e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json) Hash identifier: zqHAxAqv9UDEU71INC75sF+sn0F+7bhNy+0qNSD/anU= Subject key identifier: 6B:FB:BF:31:3F:C8:48:E6:48:4B:F3:EE:2F:0F:B5:A2:27:9F:85:C8 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F4328584ABD4BA47FE21EE80D95A0E880 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16509 IP address blocks: 66.33.34.0/24 maxlen: 24 66.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a4:7f:e2:1e:e8:0d:95:a0:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=cd993593-58cf-469e-9e62-e9ef65caac93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:de:54:b1:83:ed:6d:6b:3a:ad:70:61:95:fe: 44:7c:b5:39:e2:70:3d:e7:c8:ef:24:98:35:bc:02: 74:e0:32:ff:36:a8:89:8b:35:1e:9d:da:c1:76:d6: 69:f1:ca:9e:85:53:86:11:9c:a0:1d:40:c5:4b:57: 0a:00:11:76:d9:9f:4a:a9:34:6e:fa:52:57:eb:f0: 18:dd:a5:08:d6:21:03:d6:c6:66:7c:dc:10:aa:55: a4:2d:d9:d4:fb:75:51:27:5a:50:e2:6d:c8:fd:a1: 4b:6d:bc:ab:63:02:d3:92:53:49:ce:95:40:86:e3: 1d:49:87:ea:84:24:ca:d7:13:71:e0:2e:0c:c6:a4: 39:f1:3e:b1:1e:f0:3e:1a:cc:ad:65:52:5b:6d:b6: 5b:40:3e:8c:60:fc:ca:2a:98:87:25:26:ea:08:c9: 12:89:5a:b4:b3:b6:d8:92:cb:c4:76:5c:1f:73:62: 94:13:e3:34:18:51:63:2a:cd:86:38:27:f8:de:6f: cc:a0:c7:a0:cb:77:da:0e:0a:07:8b:63:c1:9c:af: 9e:0a:bd:3a:99:c9:09:1d:fc:e9:ef:17:b8:6c:ef: b9:25:e1:75:8b:30:b2:ae:97:2c:7c:80:25:85:31: 81:d4:3e:5b:2f:a9:7d:e0:89:88:56:2e:dc:24:6c: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:BF:31:3F:C8:48:E6:48:4B:F3:EE:2F:0F:B5:A2:27:9F:85:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:66:43:71:b7:a1:d9:5d:7f:8d:60:ba:c2:e3:d0:f4:df:bf: c3:09:35:ed:57:74:7f:ec:59:ba:ff:61:fb:1a:45:b1:b9:16: de:d0:ed:da:83:ee:36:c3:b0:ed:82:35:82:0d:7c:92:3e:9a: 6e:cb:9a:12:de:35:15:53:9e:49:f6:1d:f5:4e:9d:2e:a1:8d: 80:a6:e7:09:bf:1f:35:9b:b5:cf:f6:58:5e:ba:95:15:1f:50: e9:89:d2:ae:65:48:59:60:c8:e7:8a:08:e0:ad:c4:61:a1:03: e8:c2:15:b9:1c:6c:b4:aa:2d:30:e3:4a:0b:4c:cb:85:15:50: dc:c5:bc:31:f7:ae:fe:8d:28:0e:43:ad:57:68:83:fb:f8:5c: 60:7c:9d:65:24:a6:af:27:25:a4:3d:96:e2:b4:66:8e:e8:a8: 76:c8:15:be:fb:98:72:48:85:e8:65:3b:2c:f9:9f:3c:db:5d: 9b:ce:a3:02:8e:25:c4:95:63:dc:51:ed:d5:16:40:ac:63:61: b5:aa:70:53:0f:28:03:4b:a5:a4:92:5a:70:d7:e4:64:a4:cf: 11:31:82:e2:9c:67:71:05:c4:a5:33:a9:e3:09:3a:8e:16:f4: b5:7e:ed:e2:da:c3:cc:2c:51:5e:f3:74:df:11:b9:42:90:40: 6e:e8:8d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6R/4h7oDZWg6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk Y2Q5OTM1OTMtNThjZi00NjllLTllNjItZTllZjY1Y2FhYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd5UsYPtbWs6rXBhlf5EfLU54nA958jvJJg1 vAJ04DL/NqiJizUendrBdtZp8cqehVOGEZygHUDFS1cKABF22Z9KqTRu+lJX6/AY 3aUI1iED1sZmfNwQqlWkLdnU+3VRJ1pQ4m3I/aFLbbyrYwLTklNJzpVAhuMdSYfq hCTK1xNx4C4MxqQ58T6xHvA+GsytZVJbbbZbQD6MYPzKKpiHJSbqCMkSiVq0s7bY ksvEdlwfc2KUE+M0GFFjKs2GOCf43m/MoMegy3faDgoHi2PBnK+eCr06mckJHfzp 7xe4bO+5JeF1izCyrpcsfIAlhTGB1D5bL6l94ImIVi7cJGw7jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv7vzE/yEjmSEvz7i8PtaInn4XIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvZTk3YjNlZWEtMGM4MC0z MWZlLTgyMWUtNWE1MWIxMDUxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1mQ3G3odldf41gusLj0PTfv8MJNe1XdH/sWbr/YfsaRbG5Ft7Q7dqD 7jbDsO2CNYINfJI+mm7LmhLeNRVTnkn2HfVOnS6hjYCm5wm/HzWbtc/2WF66lRUf UOmJ0q5lSFlgyOeKCOCtxGGhA+jCFbkcbLSqLTDjSgtMy4UVUNzFvDH3rv6NKA5D rVdog/v4XGB8nWUkpq8nJaQ9luK0Zo7oqHbIFb77mHJIhehlOyz5nzzbXZvOowKO JcSVY9xR7dUWQKxjYbWqcFMPKANLpaSSWnDX5GSkzxExguKcZ3EFxKUzqeMJOo4W 9LV+7eLaw8wsUV7zdN8RuUKQQG7ojcY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:40:49 2025 by rpki-client