$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa File: 5af1468e-e773-37fd-8eae-6322af02b768.roa (raw, json) Hash identifier: JD0GjvhYszp48ABMli3bLxj4i7q8pFgDMjEUpX6pN5A= Subject key identifier: C3:24:C6:59:BF:B3:36:8E:86:CD:AA:90:53:4A:C6:44:D3:1D:BE:EF Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584A9FFBA69E89E99820445A9D80 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33139 IP address blocks: 66.49.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a6:9e:89:e9:98:20:44:5a:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=0f0a777f-ea4c-4e72-a924-cdcf3347ed65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:4f:3b:37:dc:be:49:f4:86:48:80:79:5f: a5:40:ac:68:65:a3:3b:65:b2:c1:f7:4d:39:7e:47: 02:9d:61:8a:94:11:aa:9e:f3:04:09:0a:62:2a:6e: 78:24:bc:8e:eb:c3:41:89:dc:95:18:79:18:4c:73: 79:62:f0:00:99:7b:ab:62:d3:60:f5:d9:54:88:0b: 63:09:19:47:f0:65:4c:5f:d5:91:ff:ac:c7:9c:22: 51:79:7e:0a:13:61:61:d4:ec:34:78:b7:f4:44:b8: 51:f0:38:32:45:9f:6e:31:2e:a1:e8:24:51:9f:8a: d1:4f:3f:d5:1f:60:20:fd:1b:43:da:6f:5a:31:7f: 94:14:78:43:7a:e1:de:43:8d:92:f9:a3:aa:e4:78: 9d:b1:67:b9:6c:bd:7f:0e:62:c6:6f:04:f6:1e:1a: f0:cb:01:46:80:bc:ed:ad:2d:25:aa:cd:54:ce:7b: 70:d5:e0:ec:3b:de:89:04:fe:ee:48:dc:22:7c:f4: c2:a0:fc:07:4e:15:65:ed:cd:42:a5:81:16:ed:14: 9b:f5:b7:ed:f7:06:1f:b7:cc:42:b4:28:90:62:dd: f7:5a:87:38:89:55:f3:29:45:1a:32:e6:5f:3a:68: ce:7d:3b:07:be:6b:01:9b:d8:a8:29:5f:5f:c3:83: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:C6:59:BF:B3:36:8E:86:CD:AA:90:53:4A:C6:44:D3:1D:BE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0b:bc:d3:7f:52:f7:97:26:76:75:62:dd:b3:a1:e5:2c:4e: e3:f1:36:5e:36:93:0c:bb:58:61:b2:96:ec:9a:1f:b6:8b:74: f5:f0:c5:c8:d4:59:4d:90:17:c7:45:68:02:23:08:66:21:d5: c0:2b:9c:bc:11:55:76:85:19:8e:fb:ba:2b:90:69:6b:79:b3: 16:df:ab:83:5e:8f:34:4f:97:1f:9f:bc:87:5c:54:88:c3:2f: e9:41:00:f0:ee:c0:2c:ab:22:bf:18:ea:a8:79:2b:61:25:e7: ad:94:96:fa:a3:19:ee:23:98:05:15:f6:18:e5:70:80:b2:a3: 53:de:e9:11:c5:e0:3a:de:38:bd:10:04:e3:9f:ab:a7:68:73: 2b:ce:ab:93:ab:9b:de:74:f9:48:2a:72:73:b4:6b:d8:1b:b9: 44:bc:50:91:a4:66:b3:60:c6:1f:f2:95:a2:3e:4b:7b:67:57: 15:f3:98:ea:42:b7:4a:11:b8:68:f6:f4:76:44:d1:1b:3f:56: a8:a5:58:00:e8:49:c9:24:04:c6:9a:a8:83:f4:4a:9c:f0:39: 4a:ad:5c:96:69:ab:86:53:8b:6a:74:48:27:0f:b2:39:30:ae: b9:4b:9b:05:e7:52:a2:07:29:53:3a:19:1e:59:23:62:80:30: fc:9e:aa:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6aeiemYIERanYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MGYwYTc3N2YtZWE0Yy00ZTcyLWE5MjQtY2RjZjMzNDdlZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja9POzfcvkn0hkiAeV+lQKxoZaM7ZbLB9005 fkcCnWGKlBGqnvMECQpiKm54JLyO68NBidyVGHkYTHN5YvAAmXurYtNg9dlUiAtj CRlH8GVMX9WR/6zHnCJReX4KE2Fh1Ow0eLf0RLhR8DgyRZ9uMS6h6CRRn4rRTz/V H2Ag/RtD2m9aMX+UFHhDeuHeQ42S+aOq5HidsWe5bL1/DmLGbwT2HhrwywFGgLzt rS0lqs1Uzntw1eDsO96JBP7uSNwifPTCoPwHThVl7c1CpYEW7RSb9bft9wYft8xC tCiQYt33Woc4iVXzKUUaMuZfOmjOfTsHvmsBm9ioKV9fw4PspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMkxlm/szaOhs2qkFNKxkTTHb7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNWFmMTQ2OGUtZTc3My0z N2ZkLThlYWUtNjMyMmFmMDJiNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8LvNN/UveXJnZ1Yt2zoeUsTuPxNl42kwy7WGGyluyaH7aLdPXwxcjU WU2QF8dFaAIjCGYh1cArnLwRVXaFGY77uiuQaWt5sxbfq4NejzRPlx+fvIdcVIjD L+lBAPDuwCyrIr8Y6qh5K2El562UlvqjGe4jmAUV9hjlcICyo1Pe6RHF4DreOL0Q BOOfq6docyvOq5Orm950+UgqcnO0a9gbuUS8UJGkZrNgxh/ylaI+S3tnVxXzmOpC t0oRuGj29HZE0Rs/VqilWADoSckkBMaaqIP0SpzwOUqtXJZpq4ZTi2p0SCcPsjkw rrlLmwXnUqIHKVM6GR5ZI2KAMPyequU= -----END CERTIFICATE-----Generated at Sat Aug 9 05:37:33 2025 by rpki-client