$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/50447fc6-7332-35b6-ac1e-60d55fb59029.roa File: 50447fc6-7332-35b6-ac1e-60d55fb59029.roa (raw, json) Hash identifier: GJa393XPwb/dHbr1xQkSXErm9L81JwCwbLLbPyTrrYY= Subject key identifier: E8:4F:63:87:9B:F1:EB:14:2F:ED:CC:A4:0A:76:05:FC:BA:DF:27:F0 Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584AA85BAEAEFAA3BD42D293A160 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/50447fc6-7332-35b6-ac1e-60d55fb59029.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 2906 IP address blocks: 66.197.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ae:ae:fa:a3:bd:42:d2:93:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=b98ab72c-d76d-40af-a94b-1ddb5043feb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:54:3e:25:a6:85:22:40:b7:ce:41:ff:59:96: 1c:45:99:8c:ed:a3:0b:8c:9a:13:46:9b:a8:2a:13: e1:7d:85:36:62:7d:18:eb:b2:d6:e2:26:44:b4:a7: 11:c9:a2:36:ed:74:cd:40:7c:fe:24:53:01:68:04: 53:08:66:82:14:05:cb:34:3e:50:ef:8f:6b:8c:9a: 58:76:47:9a:82:2e:ce:23:4c:e1:6c:b1:e7:a0:22: e7:f2:ae:f0:64:6e:84:b8:f7:68:0a:d6:5c:1b:ba: 1d:d2:10:01:c8:16:41:4e:73:5e:3a:19:b8:48:52: d5:f9:46:32:79:52:58:b5:a8:76:8b:c7:8f:a9:0e: 96:53:ae:92:88:c3:c1:fb:0c:9f:00:69:48:30:49: 1a:a7:db:2e:33:67:b6:24:bc:1d:c1:01:ad:c5:7c: f9:a8:c6:d7:4a:56:9d:01:1f:95:10:f1:d2:9c:ec: b3:ef:1c:42:39:00:4c:d0:c9:b1:66:13:f7:b0:ea: 73:08:59:83:43:dd:87:91:43:b0:b2:cb:20:d1:7a: 7b:e5:81:3c:48:61:03:fa:2d:2a:20:90:95:ed:c7: 26:69:49:04:eb:ab:58:69:e0:72:d3:cd:1a:eb:b4: 9f:de:1e:82:41:91:05:30:38:0e:88:55:f7:87:8e: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4F:63:87:9B:F1:EB:14:2F:ED:CC:A4:0A:76:05:FC:BA:DF:27:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/50447fc6-7332-35b6-ac1e-60d55fb59029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 66.197.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:91:24:77:a3:e1:38:2d:90:6c:a6:c1:19:80:4d:01:96:51: 1a:4b:19:1e:5b:f6:d3:d6:c7:9f:5c:79:f4:e1:09:69:a7:3d: 96:b6:7d:c1:cb:48:4f:85:14:57:ed:e3:be:c5:0d:af:5b:b5: 1f:28:21:14:03:a9:83:60:6e:f6:cb:23:ab:93:1c:7d:92:3c: e1:c2:2f:bb:8d:c6:dd:61:21:5d:1a:9d:be:15:34:91:26:f3: 44:8f:c8:5e:0a:fc:e6:4e:44:6f:df:95:e6:04:ea:b6:27:99: 70:1d:fa:18:d7:2f:79:d7:9d:41:40:d5:d4:07:92:31:9b:4b: ad:ac:31:dc:00:0e:78:80:98:7b:83:ce:32:a8:19:48:a5:c3: 9d:14:02:ef:39:d9:cc:aa:3e:09:2e:69:fd:54:2e:c2:52:92: 3d:1c:72:e5:00:64:31:39:c1:88:15:3b:d1:d0:5c:a6:b9:62: ac:32:f5:f0:85:f5:06:1f:eb:55:ec:f5:6a:ed:70:fe:b4:b8: 13:97:e4:79:62:55:92:d8:2c:17:d1:69:46:33:37:63:7f:1d: 7e:47:90:07:51:71:96:67:70:2a:66:8b:dc:55:3a:20:67:1b: 69:dd:7f:29:95:7b:5e:e8:d4:9e:1f:c4:26:91:03:9e:6d:54: 21:18:9c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW66u+qO9QtKToWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk Yjk4YWI3MmMtZDc2ZC00MGFmLWE5NGItMWRkYjUwNDNmZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFQ+JaaFIkC3zkH/WZYcRZmM7aMLjJoTRpuo KhPhfYU2Yn0Y67LW4iZEtKcRyaI27XTNQHz+JFMBaARTCGaCFAXLND5Q749rjJpY dkeagi7OI0zhbLHnoCLn8q7wZG6EuPdoCtZcG7od0hAByBZBTnNeOhm4SFLV+UYy eVJYtah2i8ePqQ6WU66SiMPB+wyfAGlIMEkap9suM2e2JLwdwQGtxXz5qMbXSlad AR+VEPHSnOyz7xxCOQBM0MmxZhP3sOpzCFmDQ92HkUOwsssg0Xp75YE8SGED+i0q IJCV7ccmaUkE66tYaeBy080a67Sf3h6CQZEFMDgOiFX3h46sMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhPY4eb8esUL+3MpAp2Bfy63yfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvNTA0NDdmYzYtNzMzMi0z NWI2LWFjMWUtNjBkNTVmYjU5MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQsWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuRJHej4TgtkGymwRmATQGWURpLGR5b9tPWx59cefThCWmnPZa2fcHL SE+FFFft477FDa9btR8oIRQDqYNgbvbLI6uTHH2SPOHCL7uNxt1hIV0anb4VNJEm 80SPyF4K/OZORG/fleYE6rYnmXAd+hjXL3nXnUFA1dQHkjGbS62sMdwADniAmHuD zjKoGUilw50UAu852cyqPgkuaf1ULsJSkj0ccuUAZDE5wYgVO9HQXKa5Yqwy9fCF 9QYf61Xs9WrtcP60uBOX5HliVZLYLBfRaUYzN2N/HX5HkAdRcZZncCpmi9xVOiBn G2ndfymVe17o1J4fxCaRA55tVCEYnJ8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:55 2025 by rpki-client