$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa File: 178e3f6b-18ff-371a-826d-1da0e83a30a3.roa (raw, json) Hash identifier: 5iOS8gdsUuaCbqSoIH4mezpmfaXqj1ncouJj1pIHkD4= Subject key identifier: B6:48:CD:97:1B:A7:12:CC:89:A5:1B:67:87:AF:84:04:50:28:A0:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A9FDF12B12379DC68D4846700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa Signing time: Thu 24 Jul 2025 12:03:45 +0000 ROA not before: Thu 24 Jul 2025 12:03:45 +0000 ROA not after: Wed 22 Oct 2025 12:03:45 +0000 asID: 151373 IP address blocks: 66.253.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:df:12:b1:23:79:dc:68:d4:84:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 24 12:03:45 2025 GMT Not After : Oct 22 12:03:45 2025 GMT Subject: CN=6b6706ec-e4c3-4400-8c78-0e295bec93f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:2a:69:7f:e1:7c:6f:b6:4e:71:1c:44:17: 23:17:cc:a8:e0:a8:ff:6f:cb:b4:3d:a6:fd:57:25: 38:74:e9:f2:40:4f:5e:bc:2b:3e:6e:06:02:4e:64: 44:df:1d:13:19:3a:50:4f:8c:f3:fa:84:45:f4:5c: f0:99:26:4e:10:61:f3:2e:ed:14:83:cf:4c:60:98: 0c:56:fb:dd:2c:b1:f6:28:16:eb:b8:2f:1a:2c:60: 5e:1b:88:8e:a3:42:c0:6b:39:39:6f:70:4f:ee:2a: 05:26:99:98:cc:e5:71:c4:6d:16:2a:ef:63:5d:5e: 5e:1f:1c:7e:19:1b:04:22:ac:34:df:54:02:b4:b4: 3c:67:fb:e9:53:04:39:65:82:88:92:57:e1:6c:15: 64:0a:00:98:85:b5:05:08:23:7f:a4:e0:ed:cf:48: e1:c1:0a:1d:9e:d7:4b:81:c5:e3:07:e9:9b:a1:49: 45:61:57:f2:31:04:bb:f9:56:8a:37:89:f6:65:d2: 54:cf:19:14:96:8c:2f:6e:24:34:df:42:cd:aa:73: 6e:69:58:46:65:6a:c4:25:80:fa:f7:38:a8:e2:ab: 8e:e0:e6:8f:93:eb:97:6b:98:39:5d:d1:d7:a4:af: d3:ab:ca:79:82:38:c3:98:1d:a3:0a:2f:4f:e4:32: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:48:CD:97:1B:A7:12:CC:89:A5:1B:67:87:AF:84:04:50:28:A0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:04:c5:85:8a:f8:55:e8:b5:fd:c1:0c:35:c4:a1:af:7c:77: 59:3b:0a:f9:55:fa:11:b0:de:92:9e:ed:02:e5:33:94:65:ce: bf:d4:ed:f0:9d:19:f0:51:a1:fa:86:38:17:f9:64:7a:aa:14: 7d:89:ec:b4:7c:b3:66:16:5a:ae:03:d3:f6:3c:05:51:73:a0: e4:75:77:92:f1:4e:27:af:ca:1f:6e:15:c6:36:4e:d3:fe:04: 24:02:d6:6c:b5:7a:ce:08:8d:59:8f:5c:3d:7e:ad:ea:05:87: ee:74:90:c8:f8:df:07:56:cf:7a:60:a8:a7:0d:e0:83:a7:e0: b0:e3:33:af:fa:6e:b0:79:07:f2:6d:9d:e5:1d:51:48:39:dd: 6c:89:18:2e:d5:1f:56:21:47:0d:14:9d:85:52:7d:43:66:01: 83:6a:cc:9a:36:61:36:34:48:fc:1a:5e:35:20:0d:61:3b:18: 12:c1:85:31:64:1f:52:43:5b:a6:6a:2e:e7:e7:5e:79:38:9f: 6d:c2:dc:a3:fd:96:b1:3b:e4:7a:3e:fc:ea:ca:c5:d5:17:7c: 3e:b1:36:ea:56:35:46:0a:9d:56:34:be:6e:c6:f3:34:26:43: a4:49:a1:38:88:16:f7:4c:fc:dc:1d:06:18:07:b5:d6:38:be: e9:08:9b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf3xKxI3ncaNSEZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNDEyMDM0NVoXDTI1MTAyMjEyMDM0NVowLzEtMCsGA1UEAxMk NmI2NzA2ZWMtZTRjMy00NDAwLThjNzgtMGUyOTViZWM5M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhYqaX/hfG+2TnEcRBcjF8yo4Kj/b8u0Pab9 VyU4dOnyQE9evCs+bgYCTmRE3x0TGTpQT4zz+oRF9FzwmSZOEGHzLu0Ug89MYJgM VvvdLLH2KBbruC8aLGBeG4iOo0LAazk5b3BP7ioFJpmYzOVxxG0WKu9jXV5eHxx+ GRsEIqw031QCtLQ8Z/vpUwQ5ZYKIklfhbBVkCgCYhbUFCCN/pODtz0jhwQodntdL gcXjB+mboUlFYVfyMQS7+VaKN4n2ZdJUzxkUlowvbiQ030LNqnNuaVhGZWrEJYD6 9zio4quO4OaPk+uXa5g5XdHXpK/Tq8p5gjjDmB2jCi9P5DIzuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZIzZcbpxLMiaUbZ4evhARQKKBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTc4ZTNmNmItMThmZi0z NzFhLTgyNmQtMWRhMGU4M2EzMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwExYWK+FXotf3BDDXEoa98d1k7CvlV+hGw3pKe7QLlM5Rlzr/U7fCd GfBRofqGOBf5ZHqqFH2J7LR8s2YWWq4D0/Y8BVFzoOR1d5LxTievyh9uFcY2TtP+ BCQC1my1es4IjVmPXD1+reoFh+50kMj43wdWz3pgqKcN4IOn4LDjM6/6brB5B/Jt neUdUUg53WyJGC7VH1YhRw0UnYVSfUNmAYNqzJo2YTY0SPwaXjUgDWE7GBLBhTFk H1JDW6ZqLufnXnk4n23C3KP9lrE75Ho+/OrKxdUXfD6xNupWNUYKnVY0vm7G8zQm Q6RJoTiIFvdM/NwdBhgHtdY4vukIm3Q= -----END CERTIFICATE-----Generated at Sat Aug 9 23:07:18 2025 by rpki-client