$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f341171e-7485-36a0-a4b5-f4bc5fe0b3ad.roa File: f341171e-7485-36a0-a4b5-f4bc5fe0b3ad.roa (raw, json) Hash identifier: otiG7dxug/xWfxhAn34cqpbUIS007W3FuboEqvdCNfE= Subject key identifier: CE:CA:AC:4B:35:97:E5:27:C6:EE:06:DA:86:B3:0F:AF:3F:1D:32:07 Certificate issuer: /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Certificate serial: 010D0C9F4328584AA42B85E2C9B5734B48DC5280 Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f341171e-7485-36a0-a4b5-f4bc5fe0b3ad.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 203020 IP address blocks: 66.118.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:85:e2:c9:b5:73:4b:48:dc:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=72b54215-05d6-41fa-90a5-5a7480c8c0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:d4:d1:ef:97:04:11:01:59:2e:93:55:bd: fd:f6:59:b6:21:d1:c2:6a:16:74:5b:21:c0:17:61: 29:3a:b7:c4:32:e7:15:84:a4:d9:50:45:31:02:75: bc:96:91:fb:c3:08:e9:5a:16:a2:ad:58:81:da:f8: 4b:26:57:f9:96:ec:4e:80:1e:12:97:08:c1:f0:06: a0:23:ec:81:6e:bc:48:d0:6d:3f:64:38:88:d3:b8: 7e:5c:da:7c:8d:a2:4c:fb:f8:d3:c7:93:2f:db:c8: e0:3d:81:d2:39:e9:f6:a4:bf:ea:51:ea:4b:7f:6a: ea:75:6e:b0:7d:cc:d4:4b:ea:67:e8:37:a3:22:30: f2:7f:2d:1f:38:68:20:43:3c:2d:8e:6b:8c:86:c1: 9d:fd:b7:65:c1:b3:4e:4e:d3:0a:2e:61:19:72:f0: a1:3c:61:d9:bf:f5:fc:2b:67:bf:9b:76:c1:51:b7: e4:b3:f1:d5:a6:1f:93:8e:05:d9:5c:b4:82:6f:7c: b5:22:9c:b2:23:32:17:35:80:f0:35:05:65:aa:45: 95:4c:23:a3:fb:34:e2:1e:c9:0c:12:bc:d2:cd:fe: 81:22:65:52:ab:c7:72:45:25:5d:36:6b:0c:60:8a: b2:f7:85:59:fa:0b:26:7b:02:31:84:36:5a:29:db: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:AC:4B:35:97:E5:27:C6:EE:06:DA:86:B3:0F:AF:3F:1D:32:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f341171e-7485-36a0-a4b5-f4bc5fe0b3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl X509v3 Authority Key Identifier: keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer sbgp-ipAddrBlock: critical IPv4: 66.118.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ee:00:15:2d:bd:e3:18:85:11:a3:45:da:ae:33:84:ea:0b: f3:67:de:e0:81:5c:23:a6:c9:8d:34:fa:52:9b:7a:50:5f:76: e9:11:f4:25:27:48:dd:3e:b1:e4:ce:f2:cb:ea:5a:71:48:ab: 09:36:62:01:41:87:bc:97:ef:8f:ed:ae:73:88:8a:9c:88:7d: f1:57:44:fb:19:07:b4:75:de:68:57:32:a4:57:fb:77:11:3e: c5:21:80:a8:d0:03:0a:8a:41:3a:fd:c8:60:4f:42:d8:53:ba: 61:7d:c2:33:3b:1d:95:c4:3e:d0:28:e0:35:05:45:15:0c:10: b2:ae:a2:7c:a7:d5:30:06:6e:d7:4a:aa:4f:23:bf:da:75:95: b9:40:af:4b:f1:ce:be:a1:82:2d:95:a5:48:73:77:d7:60:4c: 7e:a1:65:87:7a:cd:2e:26:22:b1:b0:54:3e:a5:3d:f5:ed:f2: b4:f0:e8:9f:26:b5:93:46:fe:dd:b2:71:71:f7:a2:c8:6b:bc: db:5a:cd:0f:5f:8c:a2:7b:95:4c:a8:08:85:3e:92:52:1e:b4: 81:2d:97:f1:e5:c6:b7:3e:e8:c8:3b:3b:bb:23:d0:bc:5c:a4: a8:78:f9:b4:50:13:fd:8a:5b:dc:0c:56:a5:cb:01:87:42:89: 92:e4:62:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4XiybVzS0jcUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgzMjZlYWEtNWFkMi00NmMxLTg0MjMtYmNmMThiNmQ0 MjgzMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NzJiNTQyMTUtMDVkNi00MWZhLTkwYTUtNWE3NDgwYzhjMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhrU0e+XBBEBWS6TVb399lm2IdHCahZ0WyHA F2EpOrfEMucVhKTZUEUxAnW8lpH7wwjpWhairViB2vhLJlf5luxOgB4SlwjB8Aag I+yBbrxI0G0/ZDiI07h+XNp8jaJM+/jTx5Mv28jgPYHSOen2pL/qUepLf2rqdW6w fczUS+pn6DejIjDyfy0fOGggQzwtjmuMhsGd/bdlwbNOTtMKLmEZcvChPGHZv/X8 K2e/m3bBUbfks/HVph+TjgXZXLSCb3y1IpyyIzIXNYDwNQVlqkWVTCOj+zTiHskM ErzSzf6BImVSq8dyRSVdNmsMYIqy94VZ+gsmewIxhDZaKdshtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7KrEs1l+Unxu4G2oazD68/HTIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ODMy NmVhYS01YWQyLTQ2YzEtODQyMy1iY2YxOGI2ZDQyODMvZjM0MTE3MWUtNzQ4NS0z NmEwLWE0YjUtZjRiYzVmZTBiM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDgzMjZlYWEtNWFkMi00NmMxLTg0 MjMtYmNmMThiNmQ0MjgzLzQ4MzI2ZWFhLTVhZDItNDZjMS04NDIzLWJjZjE4YjZk NDI4My5jcmwwHwYDVR0jBBgwFoAULuF8x2a3birw8/zUbjH4M+xRvF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ODMyNmVhYS01YWQyLTQ2YzEtODQyMy1iY2Yx OGI2ZDQyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7uABUtveMYhRGjRdquM4TqC/Nn3uCBXCOmyY00+lKbelBfdukR9CUn SN0+seTO8svqWnFIqwk2YgFBh7yX74/trnOIipyIffFXRPsZB7R13mhXMqRX+3cR PsUhgKjQAwqKQTr9yGBPQthTumF9wjM7HZXEPtAo4DUFRRUMELKuonyn1TAGbtdK qk8jv9p1lblAr0vxzr6hgi2VpUhzd9dgTH6hZYd6zS4mIrGwVD6lPfXt8rTw6J8m tZNG/t2ycXH3oshrvNtazQ9fjKJ7lUyoCIU+klIetIEtl/Hlxrc+6Mg7O7sj0Lxc pKh4+bRQE/2KW9wMVqXLAYdCiZLkYv4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:09 2025 by rpki-client