$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa File: 7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa (raw, json) Hash identifier: 6U6/KROEJVBlCeNEmzWPt8cC9ZGGmUQDYARWVXpOic4= Subject key identifier: C2:7B:0E:F8:65:FF:8D:27:15:F6:77:D6:3C:CA:15:6F:09:93:80:49 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584ABD4B746098447170EBB8D6F8 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16509 IP address blocks: 66.22.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:74:60:98:44:71:70:eb:b8:d6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=958f68cc-371d-466e-8c1e-6000c13bbb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:6a:25:8b:ed:a3:79:09:a6:ac:61:5c:f5: 30:bc:c8:55:5f:43:2f:b0:a8:4a:02:4c:c7:df:2d: 5f:80:3e:c1:26:d6:04:b0:85:c7:20:d8:01:9d:ac: de:6a:d4:5b:46:0f:9d:57:80:be:03:b1:30:70:c8: fb:ed:8a:53:df:5d:10:97:a7:f1:5e:45:be:97:b8: e2:47:49:1d:6b:2e:84:a0:fd:77:0a:72:91:2a:9a: 42:b2:14:92:96:90:2b:a4:81:bc:83:08:16:70:03: 28:0f:62:2a:32:03:59:51:d7:12:d0:72:31:82:ae: af:40:28:1b:10:8c:fe:a1:e1:43:9f:3e:2b:57:54: be:fa:0b:4c:c5:13:0c:f4:0a:5e:eb:1b:20:58:2d: 6a:58:c8:ea:53:e7:ae:e3:ac:e5:25:39:80:12:fc: 84:6c:c9:9d:21:df:5a:35:de:21:8d:ab:4d:b3:f8: 97:c1:78:91:c2:61:07:c0:08:82:d7:56:c0:b0:e0: 3b:d7:0d:b1:83:7e:28:94:41:09:5c:91:32:80:e5: 93:3e:06:92:59:fb:07:29:fa:44:ed:c3:a8:7d:7d: 2b:b6:23:61:31:1a:58:64:d0:1c:44:6c:1d:b3:35: c6:e0:24:9e:45:f8:d7:85:94:0a:a9:c3:e9:f3:9d: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7B:0E:F8:65:FF:8D:27:15:F6:77:D6:3C:CA:15:6F:09:93:80:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 66.22.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:46:2d:7b:3a:da:98:ab:cc:15:60:49:56:40:44:85:fb:6f: cb:9c:b8:f9:c7:14:0a:88:58:25:6a:d4:07:eb:92:00:d2:98: e6:41:c7:be:11:17:56:fa:ee:34:89:9b:e8:7c:3c:45:53:b4: 95:44:f5:38:22:da:54:88:dd:1d:96:d9:14:a9:5c:8b:18:60: d9:85:fc:b7:eb:db:29:19:53:df:6c:32:4d:f0:6b:f7:3f:99: a5:00:6c:f8:5e:e6:5a:06:2a:0c:0c:a9:1f:93:6f:2b:02:62: 34:55:38:72:93:3a:e9:28:d3:29:bb:ec:67:d0:dc:3c:6b:8a: a1:38:b1:fd:7d:65:ed:fd:7b:f2:5e:13:a5:1a:19:59:a9:3e: fa:c6:b0:44:44:0d:50:3f:65:c5:0c:03:8e:41:e4:3d:37:dd: d8:82:9c:07:40:91:f4:91:ec:45:6f:43:36:5e:1a:a8:37:f9: 8c:b6:87:a0:2b:63:19:8b:84:78:94:ab:02:63:26:e2:19:41: 79:76:55:ed:55:20:b8:1e:b6:73:ed:27:da:53:91:ca:0c:66: 2e:86:de:4a:48:b1:65:c8:e9:da:3f:8c:b1:5e:32:3f:fc:72: 31:c3:7f:b9:d8:1a:e6:4b:02:cd:57:37:7a:d7:46:e7:1a:79: 61:26:22:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3RgmERxcOu41vgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTU4ZjY4Y2MtMzcxZC00NjZlLThjMWUtNjAwMGMxM2JiYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRNqJYvto3kJpqxhXPUwvMhVX0MvsKhKAkzH 3y1fgD7BJtYEsIXHINgBnazeatRbRg+dV4C+A7EwcMj77YpT310Ql6fxXkW+l7ji R0kday6EoP13CnKRKppCshSSlpArpIG8gwgWcAMoD2IqMgNZUdcS0HIxgq6vQCgb EIz+oeFDnz4rV1S++gtMxRMM9Ape6xsgWC1qWMjqU+eu46zlJTmAEvyEbMmdId9a Nd4hjatNs/iXwXiRwmEHwAiC11bAsOA71w2xg34olEEJXJEygOWTPgaSWfsHKfpE 7cOofX0rtiNhMRpYZNAcRGwdszXG4CSeRfjXhZQKqcPp8529rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ7Dvhl/40nFfZ31jzKFW8Jk4BJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvN2Y4NDRmYjItY2MzZC0z N2U0LWI1YTgtODU5NTg1ZjJjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQha8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1GLXs62pirzBVgSVZARIX7b8ucuPnHFAqIWCVq1AfrkgDSmOZBx74R F1b67jSJm+h8PEVTtJVE9Tgi2lSI3R2W2RSpXIsYYNmF/Lfr2ykZU99sMk3wa/c/ maUAbPhe5loGKgwMqR+TbysCYjRVOHKTOuko0ym77GfQ3DxriqE4sf19Ze39e/Je E6UaGVmpPvrGsEREDVA/ZcUMA45B5D033diCnAdAkfSR7EVvQzZeGqg3+Yy2h6Ar YxmLhHiUqwJjJuIZQXl2Ve1VILgetnPtJ9pTkcoMZi6G3kpIsWXI6do/jLFeMj/8 cjHDf7nYGuZLAs1XN3rXRucaeWEmIlg= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:47 2025 by rpki-client