$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa File: 8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json) Hash identifier: +SV5U4yRz8xyAa0CDz19G1JesuiY9DGss3e9C6HtRl8= Subject key identifier: 71:2F:BD:8A:FD:5C:92:F9:23:4E:9A:34:45:77:64:1F:52:84:7E:0F Certificate issuer: /CN=de8b5430-108d-4deb-960f-6c438a23adc4 Certificate serial: 010D0C9F4328584A77808EAC659D57174FF74800 Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 66.132.138.0/24 maxlen: 24 198.73.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8e:ac:65:9d:57:17:4f:f7:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=1ad896ec-ca28-4872-99c0-3a0ca27d1864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:fd:f3:db:13:d1:da:a6:52:97:ec:84:51: c2:42:b0:4d:84:fa:52:d6:0f:97:0b:69:f4:10:67: 9d:d9:26:9e:b2:40:38:85:75:9d:41:b7:da:b0:c3: c8:12:99:48:95:96:d9:3b:4f:eb:97:69:8f:8b:b9: 9e:22:80:c4:94:80:57:f8:a5:0d:72:ec:4f:12:82: 11:1a:68:75:16:ad:39:35:f4:7b:5b:b7:3d:88:93: 0e:ca:a2:9b:4e:cc:98:15:3c:77:f5:1a:01:2e:16: 8c:30:19:cc:3c:31:cf:ee:a8:90:82:38:4c:72:3c: c9:83:fc:57:26:2f:fb:71:3f:dd:e5:60:73:ba:72: ee:c8:fe:75:91:a1:70:ca:02:59:23:79:92:06:95: 38:58:62:cc:3b:b7:72:cc:2d:36:a2:28:99:16:d1: 29:cb:86:1d:51:6f:17:81:72:36:34:83:25:4e:a8: 37:20:64:11:60:d8:59:c8:3f:ec:ea:49:7f:f2:a2: bb:4d:3c:74:99:ed:66:66:89:9b:2a:10:56:c4:d6: c3:3d:63:79:2d:29:b4:ca:9b:d2:30:69:c9:8d:de: 3c:80:04:1d:0e:6a:a9:c7:bd:e4:78:19:5d:97:7d: 94:09:75:10:d9:4e:46:7a:84:cf:82:4c:73:5a:8b: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:BD:8A:FD:5C:92:F9:23:4E:9A:34:45:77:64:1F:52:84:7E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl X509v3 Authority Key Identifier: keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer sbgp-ipAddrBlock: critical IPv4: 66.132.138.0/24 198.73.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c0:51:5d:be:38:b5:24:43:d4:84:74:4f:d7:5b:a4:3e:b6: e2:fc:58:ba:63:77:e6:b8:11:a0:59:7b:09:34:72:84:8e:f3: 82:1d:79:ae:16:14:f8:ec:bf:42:84:48:35:33:89:c6:24:89: 6b:6b:aa:26:cc:38:8f:ee:c1:06:9c:0d:96:08:cf:94:bf:ee: 2c:fb:29:1a:49:97:fa:c3:27:ee:24:a5:b1:f5:82:07:5b:05: ea:06:6c:35:4f:9b:7f:94:6a:41:0e:f3:8f:68:4d:64:24:fc: 0b:05:8e:bc:fe:7c:f2:09:c4:c4:77:a2:4e:bc:0f:2e:e2:fe: fd:cb:6d:e3:cc:0a:04:be:00:b5:88:26:fa:96:87:db:34:e5: e3:bc:5d:63:bb:31:b3:17:7c:24:95:42:c6:ea:51:0c:f4:77: 69:97:c9:e0:6d:b4:c3:a7:a6:32:ab:d2:78:a8:f6:93:d9:0b: 50:b8:7f:22:06:66:69:4e:67:f7:97:ab:6d:ba:ae:88:5c:c0: f1:37:dc:7b:ee:db:40:15:83:c5:eb:82:bb:b3:6b:9e:f2:2f: b4:5d:0e:20:69:c9:eb:4b:95:4f:18:c7:d5:d5:df:2e:f6:ca: ca:56:e1:dc:ef:cf:5b:1c:56:83:55:2b:f0:9f:33:a1:c2:4a: 05:5e:4b:79 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEp3gI6sZZ1XF0/3SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh ZGM0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MWFkODk2ZWMtY2EyOC00ODcyLTk5YzAtM2EwY2EyN2QxODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbj989sT0dqmUpfshFHCQrBNhPpS1g+XC2n0 EGed2SaeskA4hXWdQbfasMPIEplIlZbZO0/rl2mPi7meIoDElIBX+KUNcuxPEoIR Gmh1Fq05NfR7W7c9iJMOyqKbTsyYFTx39RoBLhaMMBnMPDHP7qiQgjhMcjzJg/xX Ji/7cT/d5WBzunLuyP51kaFwygJZI3mSBpU4WGLMO7dyzC02oiiZFtEpy4YdUW8X gXI2NIMlTqg3IGQRYNhZyD/s6kl/8qK7TTx0me1mZombKhBWxNbDPWN5LSm0ypvS MGnJjd48gAQdDmqpx73keBldl32UCXUQ2U5GeoTPgkxzWoss7QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHEvvYr9XJL5I06aNEV3ZB9ShH4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvOGY5OTc3YjQtYmYzZC0z ODg2LTg2ZDItMmU1NzRmZjE2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2 MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz OGEyM2FkYzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQoSKAwQA xkk1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJrAUV2+OLUkQ9SEdE/XW6Q+tuL8WLpjd+a4EaBZewk0coSO 84Idea4WFPjsv0KESDUzicYkiWtrqibMOI/uwQacDZYIz5S/7iz7KRpJl/rDJ+4k pbH1ggdbBeoGbDVPm3+UakEO849oTWQk/AsFjrz+fPIJxMR3ok68Dy7i/v3LbePM CgS+ALWIJvqWh9s05eO8XWO7MbMXfCSVQsbqUQz0d2mXyeBttMOnpjKr0nio9pPZ C1C4fyIGZmlOZ/eXq226rohcwPE33Hvu20AVg8Xrgruza57yL7RdDiBpyetLlU8Y x9XV3y72yspW4dzvz1scVoNVK/CfM6HCSgVeS3k= -----END CERTIFICATE-----Generated at Tue Aug 5 20:03:38 2025 by rpki-client