$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa File: 1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa (raw, json) Hash identifier: sOS8vp3ZS/HVgXIwXnf6xbnPt8Lni75kbe6lZSSXbWM= Subject key identifier: AD:29:D4:C9:69:79:C4:39:67:2B:96:B2:99:CD:33:CF:4D:8E:8A:00 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584ABD4B749395B826E1A66A1800 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 14618 IP address blocks: 66.22.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:74:93:95:b8:26:e1:a6:6a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=c1c04fdc-a967-49bf-bd4b-253494ca2b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:5d:44:e8:0c:63:fa:93:16:55:54:38:37: 63:37:ec:1e:05:e4:f6:e0:9e:ba:29:5c:94:9a:fc: 71:ef:d6:ed:9d:49:05:c6:59:69:5c:f5:8c:ee:7b: 1d:88:35:53:3a:f1:99:82:28:66:ea:30:b9:c8:af: 6b:3c:51:06:2d:fb:9b:a5:52:77:7c:4b:9a:13:af: 1e:64:60:d1:bc:ef:c0:b6:0b:68:4a:ef:06:b7:02: 0b:5f:ca:82:de:45:11:21:f5:9a:26:aa:f7:4c:9c: 45:6b:c4:d0:2a:f7:78:b0:eb:bd:51:8f:20:e3:ba: 88:03:ba:81:4e:fe:74:0f:61:b3:48:1d:25:07:7f: ec:75:36:ea:8d:b1:e1:ce:be:36:63:cb:70:3d:06: 75:fd:99:cd:99:05:0f:b0:ae:9d:15:78:bf:c9:56: 69:0b:9e:a0:ef:40:25:da:8e:8f:26:ae:98:3a:77: 32:45:9d:e5:d0:f8:06:97:37:19:71:9f:d4:30:52: c7:6c:fb:08:b6:78:ef:23:92:fa:37:e1:ee:77:12: 01:ec:35:28:4b:ee:a1:3a:6e:c7:dc:12:01:4a:fb: e3:fa:64:cf:2f:b7:fc:09:1b:0b:96:2c:f1:9f:40: 58:1d:e6:02:a9:32:8c:81:0f:30:a5:77:dc:52:10: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:29:D4:C9:69:79:C4:39:67:2B:96:B2:99:CD:33:CF:4D:8E:8A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 66.22.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:55:0d:2a:2b:91:f1:c7:17:d5:7e:79:84:ff:da:ff:03:3b: a3:6d:3c:3e:3e:e1:9f:e3:c7:8b:65:7b:68:3e:55:13:63:b8: e5:93:09:76:48:6c:8c:cc:06:74:54:6e:4c:b9:e6:03:55:5d: 30:fe:1a:58:2f:5f:d4:d0:5d:e8:9e:d7:73:84:dd:69:7e:de: f1:6f:83:33:a5:80:98:ac:80:d4:9b:3a:1c:77:99:87:d1:7e: 62:f0:9c:53:76:e9:a8:34:2c:46:5d:d4:01:1d:42:15:ff:c3: 33:44:b8:ee:bb:45:e5:25:b9:e7:7f:7b:a2:60:72:ad:bd:64: 95:14:5a:4b:fe:15:d5:3b:0e:e0:ee:17:be:4f:bb:c1:5d:36: 32:e9:af:fb:b6:33:ce:ee:61:3e:4c:88:a4:cf:5b:8a:db:96: 1e:f0:9a:ce:c3:5a:c1:50:d1:30:4f:2f:33:48:7d:ae:d0:be: 0e:50:6e:77:94:d3:aa:07:ed:ba:28:2d:20:b5:53:be:5e:83: 12:56:50:ae:51:07:fc:d1:25:9c:40:16:a0:59:7c:3c:d7:16: e1:14:b8:d1:4a:42:5e:7b:70:9f:9d:f0:e2:03:e5:f6:82:3b: 8b:68:d1:e5:70:0a:ac:b9:d7:db:4d:c9:27:15:b8:34:f9:d0: 16:d5:82:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3STlbgm4aZqGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzFjMDRmZGMtYTk2Ny00OWJmLWJkNGItMjUzNDk0Y2EyYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIFdROgMY/qTFlVUODdjN+weBeT24J66KVyU mvxx79btnUkFxllpXPWM7nsdiDVTOvGZgihm6jC5yK9rPFEGLfubpVJ3fEuaE68e ZGDRvO/AtgtoSu8GtwILX8qC3kURIfWaJqr3TJxFa8TQKvd4sOu9UY8g47qIA7qB Tv50D2GzSB0lB3/sdTbqjbHhzr42Y8twPQZ1/ZnNmQUPsK6dFXi/yVZpC56g70Al 2o6PJq6YOncyRZ3l0PgGlzcZcZ/UMFLHbPsItnjvI5L6N+HudxIB7DUoS+6hOm7H 3BIBSvvj+mTPL7f8CRsLlizxn0BYHeYCqTKMgQ8wpXfcUhAmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0p1MlpecQ5ZyuWspnNM89NjooAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWY2NGU5M2EtOTU0ZC0z YTliLTllZWQtN2IzOTY4ZThjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFVDSorkfHHF9V+eYT/2v8DO6NtPD4+4Z/jx4tle2g+VRNjuOWTCXZI bIzMBnRUbky55gNVXTD+GlgvX9TQXeie13OE3Wl+3vFvgzOlgJisgNSbOhx3mYfR fmLwnFN26ag0LEZd1AEdQhX/wzNEuO67ReUlued/e6Jgcq29ZJUUWkv+FdU7DuDu F75Pu8FdNjLpr/u2M87uYT5MiKTPW4rblh7wms7DWsFQ0TBPLzNIfa7Qvg5QbneU 06oH7booLSC1U75egxJWUK5RB/zRJZxAFqBZfDzXFuEUuNFKQl57cJ+d8OID5faC O4to0eVwCqy519tNyScVuDT50BbVgk4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:14 2025 by rpki-client