$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json) Hash identifier: HkjcCNB4x3dhjtLCh7dhwnyjqCTZogoe3xUgMk2CpPc= Subject key identifier: 83:E2:84:D0:A0:E5:80:C2:C4:D2:68:46:3A:4A:33:2B:76:D8:FB:5E Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F4328584A9BCB6AEEC9C8675AB951C2C0 Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 46694 IP address blocks: 66.209.240.0/20 maxlen: 24 192.68.190.0/24 maxlen: 24 2607:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6a:ee:c9:c8:67:5a:b9:51:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=46e328be-bc67-41e5-be2f-a120659c3d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:ff:97:3d:ab:58:45:b7:d6:bc:de:98:bd: 98:e1:ac:10:b6:0f:58:c1:81:af:eb:7c:d8:02:36: e5:e4:d6:7f:3f:9a:38:b9:78:71:3a:95:40:dd:6b: ae:04:91:84:bf:00:c0:25:9a:b1:f2:f9:52:04:16: b2:63:5c:58:2a:81:e5:d2:d8:2b:9f:ca:95:8d:c9: d0:d8:3d:45:26:50:2d:5e:5f:ee:3b:8d:87:c8:aa: 77:18:bc:ba:c2:ac:d7:e1:dc:af:a1:3a:bc:55:16: 22:98:f3:4d:67:a8:8b:74:1c:2e:6f:42:49:77:12: 3e:b8:9d:37:f1:89:cc:ab:dc:52:db:0e:da:b4:a6: 4f:fa:2f:e1:b1:cf:9a:52:ab:be:33:a8:2c:39:e9: ab:10:8c:df:3d:39:7e:ee:aa:a1:c9:9e:17:aa:04: f7:0e:4f:0b:32:8c:9c:70:35:70:dc:3f:2e:c9:53: 02:67:97:26:66:fa:69:33:9a:20:85:a6:a7:67:e4: b9:db:cf:0e:fe:8e:0b:d5:0d:40:c8:de:2c:69:e8: 33:ea:c7:e2:1d:d2:da:29:31:36:d4:3b:9d:7c:d6: 46:db:51:f7:64:ce:d3:e1:5b:9a:90:21:c7:de:68: f3:b9:45:32:11:14:0f:32:29:ed:8f:f2:e9:ed:42: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E2:84:D0:A0:E5:80:C2:C4:D2:68:46:3A:4A:33:2B:76:D8:FB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 192.68.190.0/24 IPv6: 2607:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9b:30:4d:75:96:78:9a:74:9a:f1:ad:60:9c:e8:9d:40:cd: 7b:ca:19:71:64:d2:b7:80:67:fb:83:5e:c5:85:b2:fd:7e:74: ed:2d:cd:f0:67:bd:31:8d:f3:0d:05:ea:76:72:3c:74:61:5a: 6e:0a:e4:d4:6d:ca:de:5d:28:19:ee:3e:96:0a:d6:60:f5:5d: 09:cc:85:75:03:2c:f5:44:ba:15:ce:55:b4:d4:fa:3e:ba:0b: c2:fb:9c:aa:9f:c5:3c:5c:7e:1f:e1:aa:37:79:ec:4b:3a:73: 76:04:ea:8c:c0:6e:e4:2c:b8:26:ad:af:2a:72:fb:1f:a7:d5: ce:ff:e8:78:7b:bd:90:70:d6:e0:9c:3c:bc:9b:a7:bb:60:2e: fa:28:af:70:0d:22:f3:a3:86:1d:1f:42:a5:e6:7f:dc:20:e7: 1a:39:0d:73:33:45:9e:a3:52:77:c5:7b:2b:3c:d7:89:3d:e0: d1:84:cb:85:bf:02:2e:92:e3:b3:e0:2d:ca:80:b5:03:0b:e8: c2:24:a0:54:b7:d7:6d:17:05:b4:47:c9:8a:09:b3:f3:ff:db: 7c:24:f4:df:98:45:e9:d0:e6:35:79:57:d4:a5:fe:64:00:09: 5f:03:49:f0:5f:63:1c:1a:05:fa:ee:dd:79:bd:d1:f2:76:b2: 70:ec:64:fd -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEqby2ruychnWrlRwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk NDZlMzI4YmUtYmM2Ny00MWU1LWJlMmYtYTEyMDY1OWMzZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwT/lz2rWEW31rzemL2Y4awQtg9YwYGv63zY Ajbl5NZ/P5o4uXhxOpVA3WuuBJGEvwDAJZqx8vlSBBayY1xYKoHl0tgrn8qVjcnQ 2D1FJlAtXl/uO42HyKp3GLy6wqzX4dyvoTq8VRYimPNNZ6iLdBwub0JJdxI+uJ03 8YnMq9xS2w7atKZP+i/hsc+aUqu+M6gsOemrEIzfPTl+7qqhyZ4XqgT3Dk8LMoyc cDVw3D8uyVMCZ5cmZvppM5oghaanZ+S5288O/o4L1Q1AyN4saegz6sfiHdLaKTE2 1DudfNZG21H3ZM7T4VuakCHH3mjzuUUyERQPMintj/Lp7UJREwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFIPihNCg5YDCxNJoRjpKMyt22PteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjc3YzllOTQtYzQ1Yi0z NDVjLThhNDAtYTk3NWZhZDhjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQtHwAwQA wES+MA0EAgACMAcDBQAmB2KAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGybME11lniadJrxrWCc6J1AzXvK GXFk0reAZ/uDXsWFsv1+dO0tzfBnvTGN8w0F6nZyPHRhWm4K5NRtyt5dKBnuPpYK 1mD1XQnMhXUDLPVEuhXOVbTU+j66C8L7nKqfxTxcfh/hqjd57Es6c3YE6ozAbuQs uCatrypy+x+n1c7/6Hh7vZBw1uCcPLybp7tgLvoor3ANIvOjhh0fQqXmf9wg5xo5 DXMzRZ6jUnfFeys814k94NGEy4W/Ai6S47PgLcqAtQML6MIkoFS3120XBbRHyYoJ s/P/23wk9N+YRenQ5jV5V9Sl/mQACV8DSfBfYxwaBfru3Xm90fJ2snDsZP0= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:09 2025 by rpki-client