$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json) Hash identifier: kMnbrdfPAnsVOVCBXgUWP6XW6HBCY8GKgglVRJOXlio= Subject key identifier: 8D:0D:AF:E3:53:01:4C:08:6C:F1:4A:F7:53:35:BF:35:F6:54:06:CB Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584A9FFBA68CA85F2FA0CBB7D080 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33139 IP address blocks: 66.49.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a6:8c:a8:5f:2f:a0:cb:b7:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=e0caf24b-28d0-4a8b-b7aa-60d0c3e8e54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:85:6e:eb:24:c4:f4:a2:80:73:ef:d8:c7:c6: 6f:d5:d3:18:57:dd:0f:c8:69:7f:d4:cf:fd:c3:91: d5:2e:47:15:a9:b5:76:09:59:a1:44:80:25:68:0a: 9c:a2:a2:55:b7:46:1a:dc:bd:d8:e8:be:5c:83:2c: 26:42:56:76:3f:25:27:ec:ca:ba:6b:5b:86:f4:fc: a6:78:14:59:9e:de:d2:09:4c:09:c9:51:17:09:7b: 4e:eb:cc:7d:95:c8:0d:4d:29:a3:0e:b3:f8:e6:e1: 37:50:cf:e0:a5:25:73:d7:d2:a1:bf:fe:8b:9b:ba: c9:4e:e2:ef:d1:16:04:9e:44:79:ee:5f:14:3c:b1: 1c:65:04:20:4a:7f:77:b8:24:a2:02:bd:1d:c2:a1: ad:ea:6a:b8:5c:7c:fc:4c:e9:d5:47:b2:b4:6c:56: a1:be:65:30:a5:45:b1:e0:b0:b8:62:a7:69:49:73: 24:d7:4f:4c:d9:f6:c9:c9:6b:f0:d3:4c:3f:44:60: cb:d0:57:dd:27:98:19:67:c4:e8:d9:81:76:49:ee: 79:74:a0:b0:03:9b:e5:07:fa:05:f9:d1:c0:a0:47: 77:69:e9:2d:af:89:65:66:fa:c2:41:d5:c6:c9:d8: 36:e0:fd:bb:d9:3a:87:70:1e:8e:f2:b2:3f:8b:a2: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0D:AF:E3:53:01:4C:08:6C:F1:4A:F7:53:35:BF:35:F6:54:06:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4a:6a:0d:be:75:61:83:66:3e:98:87:89:a3:2c:cf:bb:72: 43:8a:fc:f1:b1:9d:31:cf:48:dd:a3:25:b6:cb:21:c8:85:eb: 0d:bf:b2:d4:1c:41:74:39:50:af:f8:92:12:77:ff:70:c5:75: 60:27:04:23:43:6e:f1:78:be:fd:a8:3c:c3:9b:56:70:16:79: fa:59:c0:e8:77:17:5e:f9:ae:27:9b:ef:8d:75:0f:15:98:50: 26:2b:c5:86:70:6d:f2:d9:df:3a:71:e8:22:91:2e:39:75:5e: 1c:cc:b2:8a:5e:bb:b1:c0:8e:71:b5:d4:85:19:4e:02:52:b1: cd:2d:32:01:25:74:38:a7:cd:7f:4a:e6:1a:9f:bd:66:1b:01: f5:54:82:15:e1:18:6a:9d:1e:36:ea:5c:36:74:f8:92:3e:ce: 05:a5:eb:97:20:28:71:3e:d5:d8:73:e6:c7:ec:d6:5a:c4:a1: 73:24:35:94:8a:a9:ae:b6:67:51:c4:70:c1:ac:8b:e9:a1:5a: af:10:4d:d2:4e:fe:fa:a1:a9:b3:d7:7a:7e:c7:88:24:0d:43: 72:7c:5f:75:a0:9d:52:45:1a:73:84:cc:a1:bf:e4:e2:7f:ab: 42:a6:ab:bd:ed:6a:31:a6:21:54:0b:98:a8:a7:3d:cc:6a:45: f6:1a:a2:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6aMqF8voMu30IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTBjYWYyNGItMjhkMC00YThiLWI3YWEtNjBkMGMzZThlNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Vu6yTE9KKAc+/Yx8Zv1dMYV90PyGl/1M/9 w5HVLkcVqbV2CVmhRIAlaAqcoqJVt0Ya3L3Y6L5cgywmQlZ2PyUn7Mq6a1uG9Pym eBRZnt7SCUwJyVEXCXtO68x9lcgNTSmjDrP45uE3UM/gpSVz19Khv/6Lm7rJTuLv 0RYEnkR57l8UPLEcZQQgSn93uCSiAr0dwqGt6mq4XHz8TOnVR7K0bFahvmUwpUWx 4LC4YqdpSXMk109M2fbJyWvw00w/RGDL0FfdJ5gZZ8To2YF2Se55dKCwA5vlB/oF +dHAoEd3aektr4llZvrCQdXGydg24P272TqHcB6O8rI/i6JfpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Nr+NTAUwIbPFK91M1vzX2VAbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvM2ExNjI4OGEtYzQ0MS0z MTNhLWE0MDAtMjRmOWQ1NDRjZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFKag2+dWGDZj6Yh4mjLM+7ckOK/PGxnTHPSN2jJbbLIciF6w2/stQc QXQ5UK/4khJ3/3DFdWAnBCNDbvF4vv2oPMObVnAWefpZwOh3F175rieb7411DxWY UCYrxYZwbfLZ3zpx6CKRLjl1XhzMsopeu7HAjnG11IUZTgJSsc0tMgEldDinzX9K 5hqfvWYbAfVUghXhGGqdHjbqXDZ0+JI+zgWl65cgKHE+1dhz5sfs1lrEoXMkNZSK qa62Z1HEcMGsi+mhWq8QTdJO/vqhqbPXen7HiCQNQ3J8X3WgnVJFGnOEzKG/5OJ/ q0Kmq73tajGmIVQLmKinPcxqRfYaouI= -----END CERTIFICATE-----Generated at Thu Aug 7 14:49:25 2025 by rpki-client