$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa File: cfa20e25-bed2-3567-961a-5bbdbe881853.roa (raw, json) Hash identifier: U5K/L4DtJNXYzyzL4O8v4CaXHb6p7kjgb9Kt7Zf1ATs= Subject key identifier: 92:AB:1B:AC:93:E6:91:BC:1D:FC:E6:E8:AA:4B:EA:09:4A:52:14:03 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584A8C70C78D985B4EDD26DBD800 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 26703 IP address blocks: 66.102.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c7:8d:98:5b:4e:dd:26:db:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=425fefd6-3a7b-41fd-94b3-fd2b90ffaeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:dd:0b:d2:e8:34:27:55:ae:dd:b4:cf:1b: 11:9e:8d:e0:39:c5:9d:c3:dc:14:4d:0d:c3:77:74: b0:56:f0:41:b2:cb:72:9d:12:12:7d:1f:71:16:a5: b7:e1:5e:50:8b:ec:09:a7:89:f7:8d:0c:9c:d0:4a: bb:64:4c:38:b2:d9:d3:7e:e5:3f:98:f6:b2:d9:26: fd:25:35:14:5e:96:fa:17:cd:41:18:e1:65:3b:84: d3:ab:be:a5:41:3d:98:5d:aa:14:70:bb:d8:be:97: da:35:d1:ad:ff:61:16:22:e1:ea:8d:a0:45:e8:f7: 09:fd:85:57:20:0b:f4:c9:78:97:12:1b:73:77:11: bb:87:e5:09:ef:38:ff:86:13:19:84:09:c9:30:63: 0c:63:60:13:16:75:fe:9b:c0:00:fc:cf:e0:9d:11: 1e:57:e3:83:57:14:10:1a:e2:14:5e:18:16:f2:65: 5e:36:69:22:78:73:70:fe:c2:fb:40:68:97:8c:2c: 7c:e0:7d:90:a3:15:66:fb:2b:07:1f:0e:a1:c1:09: 5e:91:ca:63:e2:eb:d2:05:27:40:5e:20:62:aa:c9: de:11:66:23:3f:46:68:e9:27:14:38:5a:04:0b:b7: 8d:24:c7:45:be:e4:e8:09:1d:56:b4:32:46:78:c7: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AB:1B:AC:93:E6:91:BC:1D:FC:E6:E8:AA:4B:EA:09:4A:52:14:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:13:d2:a6:c5:33:db:b4:9a:91:56:c5:8f:de:63:91:ee:98: 71:6c:90:04:78:d5:c5:1f:de:1a:76:9a:b0:ff:67:4d:9c:0d: 81:cd:a4:0a:af:fb:1b:fe:79:b5:e6:a5:34:e8:cd:b6:f3:56: 17:b0:16:c9:20:17:70:32:ad:1d:86:39:0b:bf:cf:47:ef:1b: f3:53:79:53:8c:9b:7d:4d:9c:27:60:a8:6a:04:1b:83:e6:99: 73:7c:0f:c3:54:6d:a4:2b:64:d9:5d:76:88:fa:10:3d:65:52: a0:4c:32:10:0d:3d:33:a9:fa:6e:e8:dd:9c:6f:ed:0d:2b:5f: e0:bf:d5:c9:a8:99:1b:8e:74:99:84:91:06:b9:2e:3c:13:6f: c0:5b:0e:a8:f7:56:71:07:b2:f1:16:dd:5f:1e:a1:78:9e:2d: 5c:92:73:1f:58:a3:3a:f3:18:57:2b:1d:ed:1d:95:03:e3:8d: 16:b2:ac:72:c2:99:1d:f8:0a:26:92:8e:ef:72:49:42:6b:28: dc:96:22:7e:ba:d7:72:4b:51:38:a1:31:ac:39:be:2e:e9:8a: 2a:c4:48:6d:3e:3c:3e:00:b7:6c:a7:c0:14:0f:57:38:e6:50: d7:c6:91:a3:e6:45:16:ca:e0:00:f1:de:2c:05:71:98:0b:68: c2:25:08:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMeNmFtO3Sbb2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NDI1ZmVmZDYtM2E3Yi00MWZkLTk0YjMtZmQyYjkwZmZhZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvndC9LoNCdVrt20zxsRno3gOcWdw9wUTQ3D d3SwVvBBsstynRISfR9xFqW34V5Qi+wJp4n3jQyc0Eq7ZEw4stnTfuU/mPay2Sb9 JTUUXpb6F81BGOFlO4TTq76lQT2YXaoUcLvYvpfaNdGt/2EWIuHqjaBF6PcJ/YVX IAv0yXiXEhtzdxG7h+UJ7zj/hhMZhAnJMGMMY2ATFnX+m8AA/M/gnREeV+ODVxQQ GuIUXhgW8mVeNmkieHNw/sL7QGiXjCx84H2QoxVm+ysHHw6hwQlekcpj4uvSBSdA XiBiqsneEWYjP0Zo6ScUOFoEC7eNJMdFvuToCR1WtDJGeMcHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKrG6yT5pG8Hfzm6KpL6glKUhQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvY2ZhMjBlMjUtYmVkMi0z NTY3LTk2MWEtNWJiZGJlODgxODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0T0qbFM9u0mpFWxY/eY5HumHFskAR41cUf3hp2mrD/Z02cDYHNpAqv +xv+ebXmpTTozbbzVhewFskgF3AyrR2GOQu/z0fvG/NTeVOMm31NnCdgqGoEG4Pm mXN8D8NUbaQrZNlddoj6ED1lUqBMMhANPTOp+m7o3Zxv7Q0rX+C/1cmomRuOdJmE kQa5LjwTb8BbDqj3VnEHsvEW3V8eoXieLVyScx9YozrzGFcrHe0dlQPjjRayrHLC mR34CiaSju9ySUJrKNyWIn6613JLUTihMaw5vi7piirESG0+PD4At2ynwBQPVzjm UNfGkaPmRRbK4ADx3iwFcZgLaMIlCBo= -----END CERTIFICATE-----Generated at Wed Aug 6 04:16:17 2025 by rpki-client