$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa File: 02fc3568-a294-3f7b-a040-efba2cd76305.roa (raw, json) Hash identifier: sbdAPHKEtGwogX2r7BVTX4jQ6H+eLAXzJH+sOgLHweY= Subject key identifier: D4:18:85:3D:53:12:59:F4:F5:DA:D7:5C:C2:22:14:62:0F:66:F5:11 Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294 Certificate serial: 010D0C9F4328584AB91BA8F9C57B8C97E3B850F8 Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 8075 IP address blocks: 67.210.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a8:f9:c5:7b:8c:97:e3:b8:50:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=455ad938-2249-4591-a8bd-f540d269a3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:2b:58:0a:93:13:59:e6:f4:be:09:18:0a: cf:e6:6b:b1:43:f7:40:47:22:15:2e:46:1c:a1:72: f6:4e:f0:03:19:95:85:e0:70:3d:61:45:fc:71:27: d5:3e:dd:08:c2:4b:af:70:92:be:59:ab:3e:fb:b4: 7c:f4:2f:d5:f9:bc:e1:0b:67:1e:c6:11:51:43:80: 48:7a:b8:3a:79:d6:9a:65:90:47:31:ab:5f:69:58: 5c:ff:95:26:f3:2b:55:13:50:5d:d2:5e:44:9a:6d: 8e:f9:0f:9a:34:e2:44:de:3b:26:cb:5e:36:14:59: 94:5b:91:c1:d5:cb:15:17:67:77:5f:4a:12:09:21: f2:e0:6f:7c:c1:2d:85:0a:9e:5d:d1:a8:01:d0:ca: d2:35:4a:dc:35:bd:5c:bf:3d:91:0f:75:94:0a:8b: 7a:ab:c8:18:6c:36:67:4a:29:55:aa:63:5c:85:c8: 54:37:56:07:82:1c:18:c5:fd:8d:e0:46:c6:0d:76: e0:59:93:1b:f7:ef:b5:31:6e:be:ea:05:97:05:63: 7c:22:35:b7:34:8f:82:18:47:99:40:99:b4:f7:a3: 47:ea:66:87:f4:ca:dc:bb:68:3d:5a:23:a2:e3:74: c9:57:b6:96:cb:95:0c:5b:27:f0:62:46:73:50:9e: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:18:85:3D:53:12:59:F4:F5:DA:D7:5C:C2:22:14:62:0F:66:F5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl X509v3 Authority Key Identifier: keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer sbgp-ipAddrBlock: critical IPv4: 67.210.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a4:1d:3f:9f:38:6b:59:77:9e:53:bb:b5:f6:ce:86:59:e8: e7:9e:78:23:68:57:74:0c:c2:7d:a4:83:20:83:c5:99:6c:2a: f1:e0:19:7c:38:e0:7d:f0:af:c5:a7:47:72:94:d5:c2:6a:86: 15:49:e3:6e:f5:2a:37:78:14:d6:11:10:e5:05:db:d8:32:4c: c1:86:c7:bf:49:a5:07:6b:24:b6:50:d7:4c:79:0a:aa:6a:27: 15:85:cd:de:31:39:11:a3:67:dc:a9:93:99:ec:b1:83:1c:80: 8e:89:77:09:3a:72:2d:03:dd:1e:03:11:58:f7:94:00:a9:2e: e1:7a:0d:12:a5:c0:58:57:26:35:98:a4:79:d9:52:bd:a3:5e: ed:b5:25:2f:1b:93:7e:bb:24:0f:c4:4a:0e:56:fb:46:a1:65: 91:cf:70:ec:81:4b:03:b3:ca:6d:42:70:e4:08:a3:ed:37:c4: 79:cc:8e:ae:77:91:7c:43:1c:70:a6:1f:35:16:e4:d1:80:dd: df:86:c0:6c:70:b0:f1:c0:9d:c5:7c:bf:8c:40:64:1b:b3:8d: 0d:8f:c7:f0:c7:80:17:07:b1:40:13:f9:90:c2:af:97:da:f4: 32:00:88:0e:83:21:19:d4:d6:a5:b6:9e:78:cd:f1:78:07:3f: b5:9c:65:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6j5xXuMl+O4UPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY2YjJkZjQtMGYwYS00Yjg0LTllYjctYzE4NTI1OGY1 Mjk0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDU1YWQ5MzgtMjI0OS00NTkxLWE4YmQtZjU0MGQyNjlhM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEYrWAqTE1nm9L4JGArP5muxQ/dARyIVLkYc oXL2TvADGZWF4HA9YUX8cSfVPt0IwkuvcJK+Was++7R89C/V+bzhC2cexhFRQ4BI erg6edaaZZBHMatfaVhc/5Um8ytVE1Bd0l5Emm2O+Q+aNOJE3jsmy142FFmUW5HB 1csVF2d3X0oSCSHy4G98wS2FCp5d0agB0MrSNUrcNb1cvz2RD3WUCot6q8gYbDZn SilVqmNchchUN1YHghwYxf2N4EbGDXbgWZMb9++1MW6+6gWXBWN8IjW3NI+CGEeZ QJm096NH6maH9Mrcu2g9WiOi43TJV7aWy5UMWyfwYkZzUJ5XHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQYhT1TEln09drXXMIiFGIPZvURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NjZi MmRmNC0wZjBhLTRiODQtOWViNy1jMTg1MjU4ZjUyOTQvMDJmYzM1NjgtYTI5NC0z ZjdiLWEwNDAtZWZiYTJjZDc2MzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODY2YjJkZjQtMGYwYS00Yjg0LTll YjctYzE4NTI1OGY1Mjk0Lzg2NmIyZGY0LTBmMGEtNGI4NC05ZWI3LWMxODUyNThm NTI5NC5jcmwwHwYDVR0jBBgwFoAUlXZb8dwS0UD6rVvU62UXQha+WnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NjZiMmRmNC0wZjBhLTRiODQtOWViNy1jMTg1 MjU4ZjUyOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGkHT+fOGtZd55Tu7X2zoZZ6OeeeCNoV3QMwn2kgyCDxZlsKvHgGXw4 4H3wr8WnR3KU1cJqhhVJ4271Kjd4FNYREOUF29gyTMGGx79JpQdrJLZQ10x5Cqpq JxWFzd4xORGjZ9ypk5nssYMcgI6Jdwk6ci0D3R4DEVj3lACpLuF6DRKlwFhXJjWY pHnZUr2jXu21JS8bk367JA/ESg5W+0ahZZHPcOyBSwOzym1CcOQIo+03xHnMjq53 kXxDHHCmHzUW5NGA3d+GwGxwsPHAncV8v4xAZBuzjQ2Px/DHgBcHsUAT+ZDCr5fa 9DIAiA6DIRnU1qW2nnjN8XgHP7WcZf0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:22 2025 by rpki-client