$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa File: c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa (raw, json) Hash identifier: qzhwr3ZsqU4b49h+BR8+DC0c1M0FeFMtJemTyViBiVw= Subject key identifier: 1A:31:C7:38:71:D7:12:82:2D:71:22:F4:5B:1F:18:FD:A5:A6:19:D7 Certificate issuer: /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Certificate serial: 010D0C9F4328584A8840A0FE68F7691A49567900 Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 36221 IP address blocks: 66.241.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a0:fe:68:f7:69:1a:49:56:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=107a2acd-6d4f-49be-9836-f3bf58bf5768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:60:20:f7:fc:a9:93:c8:a7:86:e4:2d:34: 35:79:46:fa:42:f2:30:70:55:0e:0c:38:5d:c1:a5: f2:a5:e6:d5:8a:ac:5a:5c:c4:f0:e6:d4:c6:ed:37: c8:5a:21:4a:76:54:de:e1:ef:11:6d:f0:2e:01:b7: c8:20:11:30:c0:7f:cd:a7:72:75:97:b2:69:74:40: 77:8e:a9:4e:4c:13:00:32:c1:27:6d:06:38:25:31: 01:38:94:cc:25:51:c5:50:e5:f3:02:d2:e1:5f:e0: 90:12:96:b2:39:a5:29:be:09:ef:a6:4a:81:c5:85: 1b:fa:2b:ad:7a:6d:64:9b:00:4f:67:bc:08:61:9e: 6a:8f:20:92:af:71:dc:ed:d7:09:28:e4:78:44:5b: 11:0e:8d:68:7a:04:68:47:c6:6a:1b:ae:90:46:2d: fa:69:a8:8c:2a:e0:34:42:24:17:58:28:55:56:18: bd:2c:cf:f8:75:19:05:95:53:39:32:ea:13:81:26: a4:10:ea:2f:6a:d7:08:17:10:8f:0d:80:b2:10:cb: 30:1e:2d:9f:4a:d2:80:0b:47:0f:09:03:25:c5:f3: f8:9d:df:90:ab:2e:95:b8:d2:58:96:32:26:07:ac: 20:54:fa:6f:13:0b:f4:6c:f8:f2:3d:fc:cd:be:da: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:31:C7:38:71:D7:12:82:2D:71:22:F4:5B:1F:18:FD:A5:A6:19:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl X509v3 Authority Key Identifier: keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer sbgp-ipAddrBlock: critical IPv4: 66.241.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:41:8f:c3:40:6c:22:03:72:58:b9:d5:65:5d:ba:4e:66:b5: 0a:0a:3a:de:5f:2b:7f:b8:37:c4:59:47:06:54:15:63:ae:17: 2c:97:4e:50:dd:d5:da:75:f2:a4:65:58:96:0f:e6:a4:f5:9a: f4:5f:d2:f0:a7:1d:3e:e2:a9:08:6b:b9:80:bf:22:d9:66:1a: ed:4f:45:cf:d9:75:4b:fe:38:5f:1f:bf:d0:0b:0e:2c:5b:22: 3b:77:cf:c7:7d:9f:e7:1d:d5:e8:78:d7:06:37:06:18:8d:a9: 90:b4:0f:9a:5a:64:2c:13:9f:13:3e:df:39:32:51:8a:8c:74: 3c:52:a0:93:24:6b:a9:3e:02:17:32:e0:a1:b6:56:5e:bc:85: 7d:ad:e5:83:71:f2:2c:2c:1f:1c:6a:53:ab:14:e4:69:7c:d1: 37:50:1e:5c:8c:39:08:80:80:23:f3:25:13:6d:22:a8:6e:43: 12:8a:bb:cc:b5:1f:89:1a:8c:5b:7b:28:87:28:8d:16:70:9d: 8e:45:bc:35:d5:aa:f1:f3:23:84:56:43:e6:d2:86:83:ed:76: 70:be:04:08:88:3a:25:76:09:5a:ae:57:8e:56:cc:c1:c1:db: c9:44:4a:a3:6a:4e:8b:a0:85:fc:57:af:97:a0:39:64:34:88: d6:79:bb:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKD+aPdpGklWeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJjOTIyZjUtZDJmZS00NGUzLTk1NDEtODRjNDZjN2Q4 MzQ4MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MTA3YTJhY2QtNmQ0Zi00OWJlLTk4MzYtZjNiZjU4YmY1NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRhgIPf8qZPIp4bkLTQ1eUb6QvIwcFUODDhd waXypebViqxaXMTw5tTG7TfIWiFKdlTe4e8RbfAuAbfIIBEwwH/Np3J1l7JpdEB3 jqlOTBMAMsEnbQY4JTEBOJTMJVHFUOXzAtLhX+CQEpayOaUpvgnvpkqBxYUb+iut em1kmwBPZ7wIYZ5qjyCSr3Hc7dcJKOR4RFsRDo1oegRoR8ZqG66QRi36aaiMKuA0 QiQXWChVVhi9LM/4dRkFlVM5MuoTgSakEOovatcIFxCPDYCyEMswHi2fStKAC0cP CQMlxfP4nd+Qqy6VuNJYljImB6wgVPpvEwv0bPjyPfzNvto/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoxxzhx1xKCLXEi9FsfGP2lphnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5 MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0NmM3ZDgzNDgvYzRlMGYwNjUtYjUxOC0z NTBiLWEwZTUtZTk0ODY1ZTZjYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTJjOTIyZjUtZDJmZS00NGUzLTk1 NDEtODRjNDZjN2Q4MzQ4LzEyYzkyMmY1LWQyZmUtNDRlMy05NTQxLTg0YzQ2Yzdk ODM0OC5jcmwwHwYDVR0jBBgwFoAU/gzZERlPbkSIaK/Z4atNjEZ3QrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0 NmM3ZDgzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1Bj8NAbCIDcli51WVduk5mtQoKOt5fK3+4N8RZRwZUFWOuFyyXTlDd 1dp18qRlWJYP5qT1mvRf0vCnHT7iqQhruYC/ItlmGu1PRc/ZdUv+OF8fv9ALDixb Ijt3z8d9n+cd1eh41wY3BhiNqZC0D5paZCwTnxM+3zkyUYqMdDxSoJMka6k+Ahcy 4KG2Vl68hX2t5YNx8iwsHxxqU6sU5Gl80TdQHlyMOQiAgCPzJRNtIqhuQxKKu8y1 H4kajFt7KIcojRZwnY5FvDXVqvHzI4RWQ+bShoPtdnC+BAiIOiV2CVquV45WzMHB 28lESqNqToughfxXr5egOWQ0iNZ5u74= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:42 2025 by rpki-client