$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa File: 66b96ba3-a619-320e-96a1-c3dfb3782abd.roa (raw, json) Hash identifier: jO1rT/unz8vE/Mj2Aj0BftjF3STiHS7XPogYe8CBo5M= Subject key identifier: A3:0F:C0:F6:1F:FE:4E:F9:B1:B8:E5:04:E3:C5:22:6F:DB:42:48:3D Certificate issuer: /CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Certificate serial: 010D0C9F4328584ABD4B7E87FAA6BC2B693083E0 Authority key identifier: 2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 398982 IP address blocks: 172.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7e:87:fa:a6:bc:2b:69:30:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=d31b88ba-38b5-438a-b5b4-98193ba88d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:56:e9:01:88:1e:44:dd:17:82:57:c6:34: 64:d8:65:25:52:91:a3:b5:54:62:1d:26:53:fe:23: 8b:0a:4a:55:84:bc:c9:de:d9:92:3c:b4:b2:e6:6a: 87:e4:9c:bd:13:7e:7d:f6:21:56:6a:3c:dd:b6:e4: d2:92:b8:1b:83:d0:4b:80:0e:53:57:e1:08:50:b7: 57:1f:32:7b:4d:13:9a:0b:6f:c0:97:23:a8:9f:fc: 04:dc:c6:75:f3:ba:8c:a2:ba:79:63:78:dc:96:62: e2:0c:4f:0c:a2:06:8c:03:18:f8:57:0f:a2:fc:5a: 7e:6d:07:21:38:03:e7:2d:f7:0c:19:d6:86:02:72: d9:6b:1b:49:fb:b5:d9:f7:37:99:3f:23:4b:11:8d: 8f:56:99:57:91:45:c6:1d:fe:7e:b8:d3:f7:f5:ab: f8:90:aa:72:32:e3:1b:1e:a7:d5:e5:91:6b:4b:7c: 76:d0:01:3b:56:57:12:96:44:bb:b6:4a:ae:7b:37: 94:5f:76:1a:e3:2c:e4:0a:6a:c1:7a:54:4d:96:67: 5f:42:03:7a:87:a5:4c:80:fc:32:19:8a:a5:77:ea: 76:bd:ee:a7:79:73:eb:b0:ac:04:a8:4b:46:e0:43: 9a:25:49:d2:15:bc:b0:e8:5f:66:7d:0a:f5:a2:85: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0F:C0:F6:1F:FE:4E:F9:B1:B8:E5:04:E3:C5:22:6F:DB:42:48:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl X509v3 Authority Key Identifier: keyid:2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:2b:90:5f:73:a1:07:1c:3c:59:23:af:bd:22:29:f3:07:e2: f8:f5:57:2e:cd:8e:b0:89:18:2e:2f:a7:42:fb:86:eb:10:ec: a6:0e:d2:80:91:33:7e:31:45:cd:1e:5f:c6:e5:dd:f9:00:1e: f4:b8:5c:f5:8b:4f:34:9f:9c:1a:fc:74:9a:ec:90:14:2c:f8: 99:5a:db:5c:c8:2f:98:5f:51:44:94:6c:ec:c5:4c:eb:eb:5b: f6:16:ae:02:72:8c:fd:6f:5b:b1:6c:fe:7d:84:64:e2:51:c7: 2b:58:de:a3:92:6a:96:c5:98:d8:63:51:f0:92:39:aa:69:0c: f0:49:d0:d0:bb:56:67:43:70:76:ee:71:63:3f:30:80:e3:e1: 70:f5:d3:6a:82:f4:73:11:74:50:f0:1a:99:cd:99:36:31:27: 6c:e8:5f:18:fe:38:54:3f:4a:fc:b4:2d:dc:04:9a:3f:56:21: c3:ae:1d:cd:db:61:e9:6f:e7:33:d4:b4:1e:28:79:ac:94:39: 36:5a:5c:1d:0e:39:c7:ef:07:67:cc:b7:3d:65:7d:9e:3c:b7: 13:97:03:80:01:2b:b9:d5:03:f9:2a:3e:d5:25:ef:23:20:a6: 0d:45:bd:d9:c9:a3:32:ad:16:70:44:af:a0:52:fa:be:17:1d: 0c:aa:98:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S36H+qa8K2kwg+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3ZjNlZDAtY2E4ZS00MDliLWI2YWQtNGY0MzE3NDNj OTBhMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZDMxYjg4YmEtMzhiNS00MzhhLWI1YjQtOTgxOTNiYTg4ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznZW6QGIHkTdF4JXxjRk2GUlUpGjtVRiHSZT /iOLCkpVhLzJ3tmSPLSy5mqH5Jy9E3599iFWajzdtuTSkrgbg9BLgA5TV+EIULdX HzJ7TROaC2/AlyOon/wE3MZ187qMorp5Y3jclmLiDE8MogaMAxj4Vw+i/Fp+bQch OAPnLfcMGdaGAnLZaxtJ+7XZ9zeZPyNLEY2PVplXkUXGHf5+uNP39av4kKpyMuMb HqfV5ZFrS3x20AE7VlcSlkS7tkquezeUX3Ya4yzkCmrBelRNlmdfQgN6h6VMgPwy GYqld+p2ve6neXPrsKwEqEtG4EOaJUnSFbyw6F9mfQr1ooW9pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMPwPYf/k75sbjlBOPFIm/bQkg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdm M2VkMC1jYThlLTQwOWItYjZhZC00ZjQzMTc0M2M5MGEvNjZiOTZiYTMtYTYxOS0z MjBlLTk2YTEtYzNkZmIzNzgyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY3ZjNlZDAtY2E4ZS00MDliLWI2 YWQtNGY0MzE3NDNjOTBhLzFmN2YzZWQwLWNhOGUtNDA5Yi1iNmFkLTRmNDMxNzQz YzkwYS5jcmwwHwYDVR0jBBgwFoAULnk8fLh7iCFhGXQjaJ45WRXQ4PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdmM2VkMC1jYThlLTQwOWItYjZhZC00ZjQz MTc0M2M5MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8rkF9zoQccPFkjr70iKfMH4vj1Vy7NjrCJGC4vp0L7husQ7KYO0oCR M34xRc0eX8bl3fkAHvS4XPWLTzSfnBr8dJrskBQs+Jla21zIL5hfUUSUbOzFTOvr W/YWrgJyjP1vW7Fs/n2EZOJRxytY3qOSapbFmNhjUfCSOappDPBJ0NC7VmdDcHbu cWM/MIDj4XD102qC9HMRdFDwGpnNmTYxJ2zoXxj+OFQ/Svy0LdwEmj9WIcOuHc3b Yelv5zPUtB4oeayUOTZaXB0OOcfvB2fMtz1lfZ48txOXA4ABK7nVA/kqPtUl7yMg pg1FvdnJozKtFnBEr6BS+r4XHQyqmPc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:26:44 2025 by rpki-client