$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa File: 10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa (raw, json) Hash identifier: 4XyqzMeXcmyjjCcBmbkkBlFnVIrUGnRXny23XuaVQXs= Subject key identifier: E3:A7:55:7B:E7:24:A1:60:CC:30:1E:5C:41:68:78:21:3B:2F:A7:DD Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584A9FFBA6AC15E755CBBF2C4200 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33139 IP address blocks: 66.49.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a6:ac:15:e7:55:cb:bf:2c:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=833e0cd1-f007-4e76-914e-318214c13c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:8c:1f:15:0d:29:10:04:9d:e4:8a:0e:79: e7:88:50:c4:ae:a6:bb:fe:7e:f2:29:0b:a4:af:5b: 9f:e1:c9:85:af:3c:5a:33:f5:e6:3b:fc:68:dc:41: 3d:d4:3b:8e:f1:e1:6f:c3:8c:53:94:d1:3a:a7:c0: 48:4f:25:0b:74:f3:94:e5:0b:a5:19:52:4c:9c:23: 39:59:5e:f3:44:9b:ba:bb:4f:48:b9:f5:74:53:e0: 83:35:76:45:9e:f6:8f:6f:71:1b:82:03:8f:1a:24: 4b:0a:13:d3:c5:37:59:ba:9d:6f:ac:a9:59:ea:27: 8d:98:e5:b1:17:03:ce:c8:95:0c:22:a3:df:d0:28: c4:66:49:cd:ef:52:41:6c:33:59:ee:2e:b3:ae:f9: e3:45:e3:c0:95:e5:14:33:5f:14:05:cf:c8:03:40: 0e:32:da:94:0b:3f:47:eb:94:27:97:e3:2d:2c:be: 6b:b7:c7:8e:f3:5d:03:0f:98:af:af:9e:c4:f3:b5: ce:78:35:6d:c7:f7:d4:65:5b:a2:d1:5d:41:c8:3c: f5:29:2f:f9:65:bb:5d:16:9a:e2:47:db:89:78:b5: 14:6a:52:81:66:33:26:51:9a:43:e3:f9:8f:34:43: 6f:24:c7:05:26:e1:5b:54:8d:fe:4a:fa:68:23:6b: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A7:55:7B:E7:24:A1:60:CC:30:1E:5C:41:68:78:21:3B:2F:A7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5a:7b:4f:3e:a6:02:8c:f5:5c:e8:8e:ca:40:f7:98:59:ef: bc:54:ce:6f:eb:34:07:b3:55:c1:a5:a1:35:6f:ac:c5:dc:2c: 1a:d7:3e:c0:14:32:67:8b:89:2f:5c:0d:3a:25:a6:38:dd:b0: c0:0a:a2:fd:5e:a8:10:85:5d:45:83:86:e7:54:b1:c7:13:a6: 1e:3c:67:d0:5b:bc:ec:54:27:05:9e:3e:a7:af:00:a6:ac:86: b1:99:e6:a0:cb:08:e2:2d:ea:ab:ec:bd:72:5b:d3:f0:26:2b: 02:f7:0a:30:2f:02:0a:9b:4a:d5:d8:52:92:a5:4c:21:e2:c1: dc:66:cb:fb:e0:6b:3f:9c:04:47:ea:29:65:0a:92:a1:11:d4: ba:0d:23:eb:0e:9d:ce:9a:ad:be:e4:c0:30:a0:5a:72:be:c3: 2f:0a:60:70:68:c1:61:9b:72:6a:dd:7f:19:f6:f6:fb:3a:9c: b1:fe:c1:89:ff:3e:c1:06:e0:6e:3a:f5:43:47:f3:2b:4b:ed: 1c:5a:3d:77:63:a2:bf:32:2f:2c:d7:0b:43:d4:20:fe:e0:34: 77:7c:8a:4b:e0:34:f1:26:2d:93:d8:0c:1e:a2:24:24:60:6e: a1:0b:f3:61:de:e3:91:3d:f0:27:d1:92:19:1c:cb:d8:86:70: be:64:40:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6asFedVy78sQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ODMzZTBjZDEtZjAwNy00ZTc2LTkxNGUtMzE4MjE0YzEzYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiOMHxUNKRAEneSKDnnniFDErqa7/n7yKQuk r1uf4cmFrzxaM/XmO/xo3EE91DuO8eFvw4xTlNE6p8BITyULdPOU5QulGVJMnCM5 WV7zRJu6u09IufV0U+CDNXZFnvaPb3EbggOPGiRLChPTxTdZup1vrKlZ6ieNmOWx FwPOyJUMIqPf0CjEZknN71JBbDNZ7i6zrvnjRePAleUUM18UBc/IA0AOMtqUCz9H 65Qnl+MtLL5rt8eO810DD5ivr57E87XOeDVtx/fUZVui0V1ByDz1KS/5ZbtdFpri R9uJeLUUalKBZjMmUZpD4/mPNENvJMcFJuFbVI3+SvpoI2tFOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOnVXvnJKFgzDAeXEFoeCE7L6fdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMTBiMzY1OWItOGE5My0z YTg0LTliYTQtYWM3NjdjMmJhNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtae08+pgKM9VzojspA95hZ77xUzm/rNAezVcGloTVvrMXcLBrXPsAU MmeLiS9cDTolpjjdsMAKov1eqBCFXUWDhudUsccTph48Z9BbvOxUJwWePqevAKas hrGZ5qDLCOIt6qvsvXJb0/AmKwL3CjAvAgqbStXYUpKlTCHiwdxmy/vgaz+cBEfq KWUKkqER1LoNI+sOnc6arb7kwDCgWnK+wy8KYHBowWGbcmrdfxn29vs6nLH+wYn/ PsEG4G469UNH8ytL7RxaPXdjor8yLyzXC0PUIP7gNHd8ikvgNPEmLZPYDB6iJCRg bqEL82He45E98CfRkhkcy9iGcL5kQC0= -----END CERTIFICATE-----Generated at Thu Aug 7 11:23:17 2025 by rpki-client