$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa File: ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa (raw, json) Hash identifier: xgGpxG262oehn6zLFnFIHqVGHq12IGJTq5RuAP6ABlo= Subject key identifier: D3:DA:3F:46:D1:5C:6C:89:B4:50:F6:31:0A:E5:E3:D2:C1:10:31:9A Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Certificate serial: 010D0C9F4328584A9900C8FC40A36377B0AC7220 Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 21723 IP address blocks: 66.163.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:fc:40:a3:63:77:b0:ac:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=064bd5a5-4c18-4da5-8586-bcd1e4952115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:e6:de:42:2e:e2:12:0b:cc:09:12:ad:01: ab:2b:2d:0b:99:1b:6f:8d:c6:51:3f:49:b7:95:74: a9:3e:7f:b8:2e:6d:e0:8f:6c:9f:1b:a0:09:d8:9a: 67:95:68:b0:73:53:f2:af:66:d2:fa:67:b0:46:02: 65:26:1e:15:bb:1b:86:2a:67:58:23:41:08:d4:df: dc:43:6d:38:6c:08:1d:72:b9:4b:98:d3:58:b9:26: d1:69:5b:ae:ef:08:2c:6f:65:08:b7:40:9c:9d:f4: 14:5a:3b:f7:31:48:c7:0b:cf:68:e6:40:a3:64:0b: db:a7:8f:6c:b3:fe:f9:c3:b9:69:bf:a6:fb:29:67: 22:93:b1:8a:31:fd:26:b2:0c:e5:eb:3c:2b:83:b6: 2f:b2:0c:36:4b:a8:57:28:da:18:70:eb:7b:88:af: 60:14:59:c5:be:86:04:4a:0b:38:18:08:43:e0:97: b5:c6:19:c3:6c:cb:c2:5a:65:6a:49:8d:96:ff:cf: bc:75:7d:f2:d2:dd:6f:1c:4e:c6:c5:07:4c:d0:8d: 66:c2:a0:55:40:ec:9d:26:b8:6a:b9:ed:6f:7e:b7: 83:28:1d:b0:af:53:2c:98:17:17:dd:37:3a:ae:f8: 8d:ce:a2:f4:34:b9:0b:ba:7a:31:34:c2:74:96:7f: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:3F:46:D1:5C:6C:89:B4:50:F6:31:0A:E5:E3:D2:C1:10:31:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl X509v3 Authority Key Identifier: keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer sbgp-ipAddrBlock: critical IPv4: 66.163.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7d:09:4a:39:72:71:0b:a5:31:c0:a7:41:2e:14:45:ab:c0: aa:f8:89:09:ec:08:85:ba:db:0b:62:44:a9:1b:9a:96:4d:92: b8:1e:e6:6b:f4:33:af:2a:d7:44:a9:70:80:7c:0b:58:a5:c7: 82:a7:05:fc:62:55:61:05:5b:63:3a:8b:48:e9:cb:b2:e0:2a: 24:f0:ac:7e:71:2e:df:e2:98:22:31:0b:bb:6f:82:c4:94:0f: 7a:33:4b:c0:ad:23:4b:c7:ef:85:2a:3f:0e:4a:e9:00:f9:9b: 0a:ab:ee:16:0b:f5:97:3d:d1:9b:e7:40:4b:5b:f4:d8:9e:58: 98:3c:02:d7:7a:21:ff:2d:9e:0c:fe:1e:fb:0f:95:b5:88:8a: e1:09:5d:7f:9a:f3:36:1e:bf:1d:30:f8:bf:c6:e5:d6:f4:fc: 9b:67:63:85:e8:1a:b2:23:62:09:07:a5:60:0e:83:15:3b:a0: af:09:37:9d:dc:ef:09:51:34:d4:f1:1a:b0:5e:fd:78:b3:59: 5b:29:34:4a:a7:22:32:dc:fc:73:13:ef:f0:d2:dc:f4:91:82: 17:0a:c2:03:bb:eb:26:02:f8:6b:a6:7d:57:40:47:e6:22:bf: 9e:ea:87:23:e4:29:57:9d:63:20:dd:19:42:2e:04:f4:8e:68: 1c:7c:bf:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMj8QKNjd7CsciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh MzJjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MDY0YmQ1YTUtNGMxOC00ZGE1LTg1ODYtYmNkMWU0OTUyMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIzm3kIu4hILzAkSrQGrKy0LmRtvjcZRP0m3 lXSpPn+4Lm3gj2yfG6AJ2JpnlWiwc1Pyr2bS+mewRgJlJh4VuxuGKmdYI0EI1N/c Q204bAgdcrlLmNNYuSbRaVuu7wgsb2UIt0CcnfQUWjv3MUjHC89o5kCjZAvbp49s s/75w7lpv6b7KWcik7GKMf0msgzl6zwrg7Yvsgw2S6hXKNoYcOt7iK9gFFnFvoYE Sgs4GAhD4Je1xhnDbMvCWmVqSY2W/8+8dX3y0t1vHE7GxQdM0I1mwqBVQOydJrhq ue1vfreDKB2wr1MsmBcX3Tc6rviNzqL0NLkLunoxNMJ0ln8aPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPaP0bRXGyJtFD2MQrl49LBEDGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4 ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvZmYxZjdkMjctYzdkMi0z ZmEzLTg5MzQtYjg3MTcxZGFjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2 YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0 MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl9CUo5cnELpTHAp0EuFEWrwKr4iQnsCIW62wtiRKkbmpZNkrge5mv0 M68q10SpcIB8C1ilx4KnBfxiVWEFW2M6i0jpy7LgKiTwrH5xLt/imCIxC7tvgsSU D3ozS8CtI0vH74UqPw5K6QD5mwqr7hYL9Zc90ZvnQEtb9NieWJg8Atd6If8tngz+ HvsPlbWIiuEJXX+a8zYevx0w+L/G5db0/JtnY4XoGrIjYgkHpWAOgxU7oK8JN53c 7wlRNNTxGrBe/XizWVspNEqnIjLc/HMT7/DS3PSRghcKwgO76yYC+GumfVdAR+Yi v57qhyPkKVedYyDdGUIuBPSOaBx8v58= -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:42 2025 by rpki-client