$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a6c5cf3-c966-338b-8d59-7a50091c1f4f.roa File: 2a6c5cf3-c966-338b-8d59-7a50091c1f4f.roa (raw, json) Hash identifier: nsTIwUZgm/HcnFenjrFsvZrJYBSxZdM/W2WsHbFR5ZE= Subject key identifier: B6:AB:BA:60:DD:C5:A3:70:94:78:DD:72:85:A9:38:58:5A:31:33:B3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A9FDFC0A1DB73E37DF9796200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a6c5cf3-c966-338b-8d59-7a50091c1f4f.roa Signing time: Thu 24 Jul 2025 12:05:07 +0000 ROA not before: Thu 24 Jul 2025 12:05:07 +0000 ROA not after: Wed 22 Oct 2025 12:05:07 +0000 asID: 151373 IP address blocks: 66.253.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:df:c0:a1:db:73:e3:7d:f9:79:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 24 12:05:07 2025 GMT Not After : Oct 22 12:05:07 2025 GMT Subject: CN=6fff9a4f-88f2-4873-9f75-5a5a255145a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:d5:65:e7:df:80:50:3c:c2:b6:35:0a:f4: 68:61:00:53:4d:31:e9:92:05:6a:64:0d:f4:be:da: d1:c9:03:c8:f6:aa:ac:84:f3:28:f6:2f:66:71:72: fa:88:80:da:19:36:7c:a2:87:ea:2e:d7:61:a7:9a: ce:16:78:ff:af:53:78:19:02:35:a5:84:bc:e1:c2: 26:d4:13:23:96:59:f2:d6:79:73:70:b2:68:b0:a2: 8a:e1:26:b9:ea:3d:ae:7b:86:08:ce:60:40:a1:51: e2:2c:7c:51:85:4c:da:de:89:83:a6:4f:5e:59:2a: fe:d1:b9:db:88:3b:5a:e0:c8:6e:db:59:98:7c:9f: f0:69:1f:8d:20:f3:c0:6b:b3:c3:03:62:45:a2:8d: 7d:e3:e9:3e:8a:31:f4:86:d2:17:6d:d0:6f:25:cf: 39:8c:6e:83:75:6d:c0:3e:38:b5:14:77:10:40:2a: d2:40:cf:d2:74:b8:3c:c8:2b:e2:ed:45:8a:43:ac: 19:c7:fb:79:48:9e:a6:ef:5e:eb:ae:15:86:45:00: eb:6d:ba:c6:95:e8:e6:fc:1a:ed:54:cb:f2:53:2a: 41:27:41:ee:0e:7e:25:ed:1d:65:3b:a1:f6:40:12: 96:10:79:a5:8c:92:3f:c3:02:7d:de:01:fe:64:6c: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AB:BA:60:DD:C5:A3:70:94:78:DD:72:85:A9:38:58:5A:31:33:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a6c5cf3-c966-338b-8d59-7a50091c1f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:58:d5:c5:8c:a2:c0:aa:59:4e:1f:42:85:30:4f:92:72:71: 70:b5:6e:4f:2d:16:78:15:6f:9a:a7:ad:13:ce:df:a8:03:c5: 9a:34:62:87:7b:9e:b7:b6:d5:9d:c4:cb:29:c1:e6:00:01:12: d8:9a:9d:b4:0f:7f:6d:f8:4b:ff:cb:a1:2f:0f:c1:57:a9:47: 07:e0:05:a7:ee:cd:a9:78:a3:3e:26:8f:ef:16:71:72:a6:3b: 43:97:4b:92:0a:a0:4c:e7:5b:52:6f:81:b9:21:98:23:10:45: e3:3e:38:b4:47:8e:e5:d7:8e:98:76:a9:ba:94:ed:b9:e7:7d: 4a:cc:a8:1c:f1:a7:f1:31:f8:1f:19:04:f4:19:70:22:76:bc: 70:76:0e:b0:e8:18:f4:74:f0:4b:86:50:92:ff:c4:7a:3e:5a: 9d:ac:85:3f:00:04:c2:b0:70:59:e7:67:3d:75:94:62:64:25: 4b:7b:aa:11:84:4e:fc:01:06:c9:e8:5b:47:55:64:f4:b5:61: ba:28:b0:96:17:19:2e:5b:4d:ac:b7:c7:d4:7f:a3:a9:a7:d3: 6b:12:f6:dd:3f:55:ef:8d:44:e4:65:f7:18:ea:e1:90:99:a6: 10:00:43:9f:4b:59:2e:d1:ab:ee:5a:22:67:44:02:11:1a:7a: 87:46:49:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf38Ch23Pjffl5YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNDEyMDUwN1oXDTI1MTAyMjEyMDUwN1owLzEtMCsGA1UEAxMk NmZmZjlhNGYtODhmMi00ODczLTlmNzUtNWE1YTI1NTE0NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7fVZeffgFA8wrY1CvRoYQBTTTHpkgVqZA30 vtrRyQPI9qqshPMo9i9mcXL6iIDaGTZ8oofqLtdhp5rOFnj/r1N4GQI1pYS84cIm 1BMjllny1nlzcLJosKKK4Sa56j2ue4YIzmBAoVHiLHxRhUza3omDpk9eWSr+0bnb iDta4Mhu21mYfJ/waR+NIPPAa7PDA2JFoo194+k+ijH0htIXbdBvJc85jG6DdW3A Pji1FHcQQCrSQM/SdLg8yCvi7UWKQ6wZx/t5SJ6m717rrhWGRQDrbbrGlejm/Brt VMvyUypBJ0HuDn4l7R1lO6H2QBKWEHmljJI/wwJ93gH+ZGzAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLarumDdxaNwlHjdcoWpOFhaMTOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmE2YzVjZjMtYzk2Ni0z MzhiLThkNTktN2E1MDA5MWMxZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVY1cWMosCqWU4fQoUwT5JycXC1bk8tFngVb5qnrRPO36gDxZo0Yod7 nre21Z3EyynB5gABEtianbQPf234S//LoS8PwVepRwfgBafuzal4oz4mj+8WcXKm O0OXS5IKoEznW1JvgbkhmCMQReM+OLRHjuXXjph2qbqU7bnnfUrMqBzxp/Ex+B8Z BPQZcCJ2vHB2DrDoGPR08EuGUJL/xHo+Wp2shT8ABMKwcFnnZz11lGJkJUt7qhGE TvwBBsnoW0dVZPS1YboosJYXGS5bTay3x9R/o6mn02sS9t0/Ve+NRORl9xjq4ZCZ phAAQ59LWS7Rq+5aImdEAhEaeodGSXo= -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:41 2025 by rpki-client