$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json) Hash identifier: G9c0PAEEudcldmBOAAMvzRSaZ11awn6XRnkYYoaWflU= Subject key identifier: FD:F4:54:58:B6:BB:25:BC:A2:72:A4:12:ED:42:BA:E2:53:A2:89:8A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584AC5AB8C71C5CF0455AD0AFC00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8c:71:c5:cf:04:55:ad:0a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=df8220d8-f163-4845-a232-2a040d3862b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:51:bf:dc:4e:67:63:2b:89:53:d6:17:cb: fe:05:4f:2b:5b:35:df:a0:42:ca:d0:dd:b3:0c:a3: 44:a3:20:d0:ce:aa:d5:38:fb:ab:f5:eb:7d:86:cc: c0:5b:63:f0:81:cf:08:1c:e1:5f:49:28:f2:50:9b: 8f:20:b7:fd:ac:bc:b3:d1:a2:f1:b8:94:46:e9:d2: ee:10:a0:66:75:7a:c0:9a:e6:90:5f:fe:e5:96:48: 39:18:0b:59:af:00:3f:d1:be:50:bd:e1:8a:09:a5: 78:f6:4c:ac:e3:14:9f:07:83:7f:de:0b:89:ea:fd: 1f:05:6a:a6:39:bd:f8:3b:5f:bb:30:e7:aa:da:ad: 60:49:6a:9e:2b:c5:fe:04:81:b5:06:0b:15:5f:e0: de:44:2a:09:5e:14:39:4f:0b:81:3c:e1:82:e7:fe: 5e:8e:85:7f:d1:68:06:ce:06:25:14:1b:0d:e3:75: 02:c7:40:37:9b:d7:80:1d:30:4d:2e:79:63:22:3a: 8f:aa:1e:58:00:4f:ac:2f:d0:17:b1:73:09:30:81: c7:19:27:37:40:c5:61:15:a2:0a:2b:1c:1c:81:f2: f8:0d:a2:dc:95:d6:55:5d:26:0d:72:da:eb:1c:f6: 46:e0:e3:6c:6b:78:b0:8b:68:a4:1d:f4:bc:a8:2c: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F4:54:58:B6:BB:25:BC:A2:72:A4:12:ED:42:BA:E2:53:A2:89:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d1:4a:59:96:99:c9:b5:f6:04:9f:50:8c:64:39:29:e7:22: af:fc:ab:ab:e4:6d:30:b3:37:6f:bc:2e:2f:9d:eb:20:fe:81: 2f:13:b8:1e:fe:5d:07:40:67:82:60:7f:3c:98:2e:53:b3:ba: 23:f4:61:95:d9:68:80:01:bd:36:2b:02:41:63:f6:74:f7:87: 3f:b6:40:ff:12:89:cd:c7:40:96:cf:4f:c9:ce:1b:80:ee:3d: 8f:06:05:07:32:9a:5a:b4:79:46:da:b2:43:b5:bf:a0:8a:e1: db:6c:03:25:f5:72:b8:31:a6:32:88:6b:ac:70:54:a1:61:3f: 4d:d7:cc:ca:9a:7f:9b:03:82:eb:6f:31:4e:59:c6:60:96:32: 33:04:b9:07:a7:d7:73:58:b6:e2:aa:66:16:40:12:1e:59:95: 03:85:f7:d3:f5:0e:56:32:79:2a:d3:64:ca:02:f7:74:f5:a0: 94:99:18:f1:b7:95:15:65:a9:a6:66:36:7f:19:97:47:b5:86: ec:47:1d:8c:47:92:00:72:6d:2c:3a:24:bf:96:46:de:ad:a4: 0b:99:68:c6:08:e5:be:6f:0d:b1:2d:c7:14:a0:01:67:d0:97: 1a:53:ff:39:b9:d9:37:67:75:7f:09:25:37:64:12:50:83:91: 38:41:77:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4xxxc8EVa0K/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGY4MjIwZDgtZjE2My00ODQ1LWEyMzItMmEwNDBkMzg2MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01xRv9xOZ2MriVPWF8v+BU8rWzXfoELK0N2z DKNEoyDQzqrVOPur9et9hszAW2Pwgc8IHOFfSSjyUJuPILf9rLyz0aLxuJRG6dLu EKBmdXrAmuaQX/7llkg5GAtZrwA/0b5QveGKCaV49kys4xSfB4N/3guJ6v0fBWqm Ob34O1+7MOeq2q1gSWqeK8X+BIG1BgsVX+DeRCoJXhQ5TwuBPOGC5/5ejoV/0WgG zgYlFBsN43UCx0A3m9eAHTBNLnljIjqPqh5YAE+sL9AXsXMJMIHHGSc3QMVhFaIK KxwcgfL4DaLcldZVXSYNctrrHPZG4ONsa3iwi2ikHfS8qCxbiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP30VFi2uyW8onKkEu1CuuJToomKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYTcxYmYzOTktNGIxYi0z NzAwLTg5OTYtNjVlYWM2Y2M0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzRSlmWmcm19gSfUIxkOSnnIq/8q6vkbTCzN2+8Li+d6yD+gS8TuB7+ XQdAZ4JgfzyYLlOzuiP0YZXZaIABvTYrAkFj9nT3hz+2QP8Sic3HQJbPT8nOG4Du PY8GBQcymlq0eUbaskO1v6CK4dtsAyX1crgxpjKIa6xwVKFhP03XzMqaf5sDgutv MU5ZxmCWMjMEuQen13NYtuKqZhZAEh5ZlQOF99P1DlYyeSrTZMoC93T1oJSZGPG3 lRVlqaZmNn8Zl0e1huxHHYxHkgBybSw6JL+WRt6tpAuZaMYI5b5vDbEtxxSgAWfQ lxpT/zm52TdndX8JJTdkElCDkThBd6s= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:20 2025 by rpki-client