$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e41b7b35-91b4-36c6-b732-90d9e7c61f43.roa File: e41b7b35-91b4-36c6-b732-90d9e7c61f43.roa (raw, json) Hash identifier: 9nMJWTxnLS+0wqLJBx4cziEIG+Iqeloz/lp22ZXIMQ8= Subject key identifier: 81:1A:67:10:BC:B0:8D:31:9D:8C:AB:9D:B3:48:8F:0B:1B:48:1B:08 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AA32FC87C3E95B27860D54F80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e41b7b35-91b4-36c6-b732-90d9e7c61f43.roa Signing time: Fri 25 Jul 2025 16:33:48 +0000 ROA not before: Fri 25 Jul 2025 16:33:48 +0000 ROA not after: Thu 23 Oct 2025 16:33:48 +0000 asID: 23473 IP address blocks: 66.253.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a3:2f:c8:7c:3e:95:b2:78:60:d5:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 25 16:33:48 2025 GMT Not After : Oct 23 16:33:48 2025 GMT Subject: CN=5c6825bc-1ef8-4b88-a6c2-72b17d095161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:2b:ae:87:c7:f5:58:b2:37:72:99:ca:ed: d5:88:72:fc:75:c6:6b:56:ce:ea:eb:42:c1:78:1f: 1a:35:c8:b7:ce:0f:05:75:a1:27:82:58:ee:a5:3e: e9:a7:01:c6:a0:e0:6f:31:0a:72:57:ea:37:3e:60: a6:50:b6:d2:25:9a:97:bf:c9:bd:b7:b6:54:8c:28: 50:8e:37:f8:a7:a9:59:3c:48:10:f4:05:33:7f:07: af:58:d3:1e:14:47:67:fa:49:ff:21:a6:48:fe:de: de:32:f6:f2:2e:69:37:e7:36:f4:10:7d:00:9b:e0: bf:e2:06:69:99:d3:bd:93:46:71:f9:65:9b:09:c0: 13:c7:0d:e6:ba:e8:59:92:ab:ff:f8:ee:65:96:94: 4e:6f:8e:06:53:29:28:5a:e8:ab:66:ea:0a:b3:ee: 23:37:13:e4:2d:be:4d:f2:f0:68:2c:43:f1:1c:12: 41:6e:6c:40:12:5b:99:55:d1:92:c9:8f:80:77:77: 87:13:6b:b4:0e:63:12:8f:a3:48:3c:87:a9:80:b7: ba:ee:31:bf:f3:c1:75:54:0b:8b:dc:6c:85:7b:15: 86:bf:a0:8c:4d:d2:3a:2b:0a:ba:7f:7b:e2:99:33: 33:a1:7b:93:55:1a:50:c3:07:84:8d:e7:97:cf:08: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1A:67:10:BC:B0:8D:31:9D:8C:AB:9D:B3:48:8F:0B:1B:48:1B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e41b7b35-91b4-36c6-b732-90d9e7c61f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:55:b4:8f:70:ff:69:a4:f0:e6:ed:e5:33:94:ba:d2:a9:4f: cc:a9:6e:9c:af:6e:d1:1a:dc:f7:fd:78:8a:6f:f5:dd:a4:b2: 04:01:4e:e3:e1:74:27:74:05:12:34:58:ff:c4:8b:1f:87:58: db:10:6d:5d:4f:9a:57:ed:ed:c2:ec:7a:f6:af:4b:70:78:7f: 76:1b:7f:c1:ad:ec:1c:a1:a3:a6:7f:2f:42:54:3c:8b:e7:e3: de:85:21:e3:5b:1d:d0:6f:fa:03:fb:66:13:13:9c:89:df:7b: 8b:d5:b5:d9:51:5c:c8:43:a5:36:60:9a:a8:a4:25:f3:6c:cc: f2:7b:85:e7:66:6c:25:5a:71:16:cd:1b:59:82:08:eb:b6:41: 22:94:de:62:d9:e4:4c:07:70:5f:dd:de:42:81:60:ea:22:f9: 38:d9:ac:1b:de:42:ef:8b:b1:45:7e:ea:bc:2a:13:93:0e:e1: be:9a:5d:fa:90:d1:55:4e:15:f8:76:9e:cf:e7:6a:20:f0:8a: a5:5c:41:fa:08:77:f1:cc:8a:87:5f:2a:55:44:63:98:90:40: b9:82:b7:a4:48:b2:52:49:82:5e:34:9e:d6:8a:42:b3:40:83: 03:17:0c:05:1e:dc:70:b9:83:fb:f4:f4:b3:9a:29:aa:b8:17: 78:85:80:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqjL8h8PpWyeGDVT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDcyNTE2MzM0OFoXDTI1MTAyMzE2MzM0OFowLzEtMCsGA1UEAxMk NWM2ODI1YmMtMWVmOC00Yjg4LWE2YzItNzJiMTdkMDk1MTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3grrofH9ViyN3KZyu3ViHL8dcZrVs7q60LB eB8aNci3zg8FdaEngljupT7ppwHGoOBvMQpyV+o3PmCmULbSJZqXv8m9t7ZUjChQ jjf4p6lZPEgQ9AUzfwevWNMeFEdn+kn/IaZI/t7eMvbyLmk35zb0EH0Am+C/4gZp mdO9k0Zx+WWbCcATxw3muuhZkqv/+O5llpROb44GUykoWuirZuoKs+4jNxPkLb5N 8vBoLEPxHBJBbmxAEluZVdGSyY+Ad3eHE2u0DmMSj6NIPIepgLe67jG/88F1VAuL 3GyFexWGv6CMTdI6Kwq6f3vimTMzoXuTVRpQwweEjeeXzwjI7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEaZxC8sI0xnYyrnbNIjwsbSBsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZTQxYjdiMzUtOTFiNC0z NmM2LWI3MzItOTBkOWU3YzYxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtVtI9w/2mk8Obt5TOUutKpT8ypbpyvbtEa3Pf9eIpv9d2ksgQBTuPh dCd0BRI0WP/Eix+HWNsQbV1Pmlft7cLsevavS3B4f3Ybf8Gt7Byho6Z/L0JUPIvn 496FIeNbHdBv+gP7ZhMTnInfe4vVtdlRXMhDpTZgmqikJfNszPJ7hedmbCVacRbN G1mCCOu2QSKU3mLZ5EwHcF/d3kKBYOoi+TjZrBveQu+LsUV+6rwqE5MO4b6aXfqQ 0VVOFfh2ns/naiDwiqVcQfoId/HMiodfKlVEY5iQQLmCt6RIslJJgl40ntaKQrNA gwMXDAUe3HC5g/v09LOaKaq4F3iFgIw= -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:24 2025 by rpki-client