$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa File: ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa (raw, json) Hash identifier: L0hZRFQvgp+eLKH7WO5BoXqEeqtoY1D7Lntp/SZ8v1s= Subject key identifier: A5:F7:49:58:89:0B:97:49:52:8E:CF:77:F4:20:FF:AB:42:C7:A7:E7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AB91BA439D613E51F51AB93FC Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 6312 IP address blocks: 66.115.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a4:39:d6:13:e5:1f:51:ab:93:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=cc99f7f2-2959-4bb2-83fa-ea579bad7c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:f2:9c:8c:6f:e7:21:99:f7:4d:4e:f0:9c: ba:b3:a1:57:3b:25:3b:c5:4f:44:a4:e5:7d:f4:98: 87:90:74:45:c1:0f:b4:61:f1:28:14:68:b4:4a:db: 4b:2f:74:af:af:90:61:94:38:8a:42:35:01:58:c6: 7e:3a:13:47:0e:a3:63:71:57:b4:19:31:80:ea:1e: 5e:b0:56:51:3d:c5:3a:6e:42:67:cd:6a:f7:db:2b: 90:3b:97:81:04:fa:be:cb:49:e9:50:99:ac:95:58: 95:8a:00:11:20:1d:5f:42:60:65:78:f4:d3:ab:7d: b5:37:12:9b:33:42:35:b8:74:43:5a:20:da:a8:e4: 8b:af:a7:00:2d:09:37:50:30:d2:ca:10:4d:f6:d4: 47:75:fd:c9:2a:42:88:a3:c5:60:6d:08:49:b2:4c: 94:02:7e:b3:37:e4:92:4e:7a:9b:a6:dc:2f:88:24: e7:6c:b1:c6:1d:1a:23:75:f9:47:11:2b:7d:35:66: 13:18:be:8c:b1:47:1b:a4:25:58:ac:95:c4:35:72: b4:85:a5:f0:de:cd:1a:e3:cd:f4:0f:0e:c0:48:31: e1:dd:d2:9a:85:6d:27:29:32:ed:0c:a7:18:a6:dc: e5:5e:1e:0c:80:d8:f5:ab:41:72:67:35:33:e0:b9: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F7:49:58:89:0B:97:49:52:8E:CF:77:F4:20:FF:AB:42:C7:A7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:33:be:b3:a3:8d:a0:c7:1b:42:0a:7c:11:fa:70:58:05:98: f0:63:0d:6d:4c:b1:6d:cc:97:f2:2e:38:e0:88:08:d7:13:37: 06:4b:a6:2d:5e:d0:40:59:d2:c6:98:e2:a6:06:a6:b9:b6:ab: 95:a7:a0:6c:c9:91:20:78:df:a4:ad:7e:c0:ee:2e:38:63:14: e7:84:ca:ef:c8:9a:6e:0a:64:03:c4:d5:4c:51:9b:23:66:79: c1:97:06:03:e9:62:4a:04:8e:8e:66:c3:2e:e8:1c:28:eb:cd: 8d:a1:b1:a1:3e:43:8b:ed:4e:01:7f:be:de:de:a5:e6:14:a6: 15:c7:3e:72:3b:56:52:cd:93:0e:6d:63:79:2f:49:ab:07:d3: 8e:6b:5b:55:1b:80:e6:51:c8:8a:f4:e1:6c:e1:81:5f:fb:55: 3b:e5:c5:3c:29:e3:c5:54:99:3c:33:d3:a4:6a:17:fb:36:13: 99:4a:0a:e9:b3:00:99:8c:9b:f8:8a:33:5f:d8:77:43:2a:dd: 43:8d:90:69:cf:08:6f:57:d3:7d:48:30:8b:ac:8c:ec:d3:ac: 1b:d6:4b:e3:73:54:d1:43:92:25:99:c5:db:b7:3e:41:68:a2: 4f:20:6a:95:19:27:19:02:80:8e:46:86:86:a0:1f:fe:d8:43: 87:2b:23:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6Q51hPlH1Grk/wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2M5OWY3ZjItMjk1OS00YmIyLTgzZmEtZWE1NzliYWQ3YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonjynIxv5yGZ901O8Jy6s6FXOyU7xU9EpOV9 9JiHkHRFwQ+0YfEoFGi0SttLL3Svr5BhlDiKQjUBWMZ+OhNHDqNjcVe0GTGA6h5e sFZRPcU6bkJnzWr32yuQO5eBBPq+y0npUJmslViVigARIB1fQmBlePTTq321NxKb M0I1uHRDWiDaqOSLr6cALQk3UDDSyhBN9tRHdf3JKkKIo8VgbQhJskyUAn6zN+SS TnqbptwviCTnbLHGHRojdflHESt9NWYTGL6MsUcbpCVYrJXENXK0haXw3s0a4830 Dw7ASDHh3dKahW0nKTLtDKcYptzlXh4MgNj1q0FyZzUz4LmjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX3SViJC5dJUo7Pd/Qg/6tCx6fnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2E1MjFlZjEtMjNkNi0z YzhlLTg1YzYtM2ZkZTJmNTA0MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAczvrOjjaDHG0IKfBH6cFgFmPBjDW1MsW3Ml/IuOOCICNcTNwZLpi1e 0EBZ0saY4qYGprm2q5WnoGzJkSB436StfsDuLjhjFOeEyu/Imm4KZAPE1UxRmyNm ecGXBgPpYkoEjo5mwy7oHCjrzY2hsaE+Q4vtTgF/vt7epeYUphXHPnI7VlLNkw5t Y3kvSasH045rW1UbgOZRyIr04WzhgV/7VTvlxTwp48VUmTwz06RqF/s2E5lKCumz AJmMm/iKM1/Yd0Mq3UONkGnPCG9X031IMIusjOzTrBvWS+NzVNFDkiWZxdu3PkFo ok8gapUZJxkCgI5GhoagH/7YQ4crIwI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:01:45 2025 by rpki-client