$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/75c34556-e431-38eb-b849-494d0766444b.roa File: 75c34556-e431-38eb-b849-494d0766444b.roa (raw, json) Hash identifier: e68iXRWcoGsmF0VEbR1HEXB/sM6WuOTcvag/IZVOSpM= Subject key identifier: 48:2F:A3:14:6C:1A:FA:F0:D3:57:F6:63:01:39:65:E2:3B:DA:71:85 Certificate issuer: /CN=4bb96a0d-945a-427f-bdc4-a9da310cb3a5 Certificate serial: 010D0C9F4328584AAB26500087A6846E55A4FA80 Authority key identifier: 27:5D:11:4A:E3:1B:79:F7:53:84:2C:B4:36:4E:BD:E7:6F:94:87:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/75c34556-e431-38eb-b849-494d0766444b.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 2635 IP address blocks: 66.6.32.0/20 maxlen: 24 2620:109:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:50:00:87:a6:84:6e:55:a4:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb96a0d-945a-427f-bdc4-a9da310cb3a5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=d0905485-631f-433d-a203-a5d8d677ef91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:f6:2a:b7:aa:36:89:48:1b:fb:2e:53:f4: 07:5f:c2:4d:2c:a8:8e:a9:15:c6:57:77:93:1d:b5: 26:4c:7a:32:af:da:d6:82:03:47:d4:64:83:a8:49: 54:1d:d8:cd:93:0f:6a:27:48:4b:4c:3b:31:54:3c: e5:d9:12:fc:3c:7c:52:9f:ea:ad:81:cc:a2:a2:35: 51:66:bc:83:15:f7:fa:87:93:c6:3b:d1:22:1b:f2: ad:e4:65:57:8f:bb:a8:c6:9c:f0:0b:57:c4:1e:7b: 7f:4e:26:4e:06:a9:56:b8:07:54:ca:6f:b3:56:b9: 22:22:f7:82:b8:d9:78:94:27:9d:2e:5c:0c:13:b5: f1:59:6c:19:61:d5:c9:f2:84:6f:24:8d:dc:ee:a7: 6e:47:fb:09:54:62:06:e6:fc:a5:18:1d:df:4e:b9: 93:dd:7a:e2:70:4b:3f:5f:5a:57:b1:84:42:9e:1e: 99:55:45:24:cc:e3:92:50:17:88:70:7c:a1:46:91: d1:aa:b0:24:aa:b3:48:45:5f:d5:73:9e:26:eb:e4: 96:82:b2:e6:36:69:1f:8c:08:31:e2:e1:3e:6b:a0: 4e:20:b2:7a:80:3e:5c:69:f3:16:fa:ec:9a:be:ff: 5a:72:cf:66:e1:fa:86:01:32:c2:3d:bd:42:18:d6: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2F:A3:14:6C:1A:FA:F0:D3:57:F6:63:01:39:65:E2:3B:DA:71:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/75c34556-e431-38eb-b849-494d0766444b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.crl X509v3 Authority Key Identifier: keyid:27:5D:11:4A:E3:1B:79:F7:53:84:2C:B4:36:4E:BD:E7:6F:94:87:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer sbgp-ipAddrBlock: critical IPv4: 66.6.32.0/20 IPv6: 2620:109:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e4:ed:d3:53:9d:ee:5e:3d:0f:02:be:a3:29:6a:8b:98:3e: 7d:f3:99:f4:41:19:b3:f5:b2:1d:57:f8:fc:42:31:c8:65:83: b0:3f:0d:9e:b2:ec:7d:d8:1f:5a:bd:00:8c:60:76:30:bb:59: 25:77:be:52:a8:cd:dc:5e:6a:7b:ee:0d:65:0c:1c:71:38:2a: 90:17:48:02:0d:06:0f:c4:ac:26:78:79:10:14:97:70:2b:98: c7:c2:91:14:a9:5e:3c:5b:02:df:52:86:0f:d3:c6:e9:46:e6: c6:8e:e8:35:ed:06:8e:26:8a:04:45:58:18:66:67:f5:ea:0d: 8c:49:da:b3:9e:a8:a2:53:ba:3d:a6:0d:bd:73:9c:39:80:f9: 76:fe:26:8c:04:75:4d:87:47:dd:b4:1a:83:b5:bc:94:19:08: 0f:89:02:fc:5f:fa:a9:2d:a8:3e:ed:ce:3c:ae:c8:37:5e:77: cf:b5:11:7a:84:49:f5:ea:ff:11:96:5e:bd:6f:9d:5b:c9:e6: 7f:80:5e:77:03:e2:02:5e:6b:69:67:29:09:0d:20:7e:6a:7d: d1:8c:92:10:cf:53:e7:41:0f:7e:d3:1d:d1:9d:f1:43:2c:f8: b2:fe:cb:c0:05:f9:d3:06:b3:02:9b:61:6f:43:b7:6d:32:d9: 2d:23:85:44 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqrJlAAh6aEblWk+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiOTZhMGQtOTQ1YS00MjdmLWJkYzQtYTlkYTMxMGNi M2E1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZDA5MDU0ODUtNjMxZi00MzNkLWEyMDMtYTVkOGQ2NzdlZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicH2KreqNolIG/suU/QHX8JNLKiOqRXGV3eT HbUmTHoyr9rWggNH1GSDqElUHdjNkw9qJ0hLTDsxVDzl2RL8PHxSn+qtgcyiojVR ZryDFff6h5PGO9EiG/Kt5GVXj7uoxpzwC1fEHnt/TiZOBqlWuAdUym+zVrkiIveC uNl4lCedLlwME7XxWWwZYdXJ8oRvJI3c7qduR/sJVGIG5vylGB3fTrmT3XricEs/ X1pXsYRCnh6ZVUUkzOOSUBeIcHyhRpHRqrAkqrNIRV/Vc54m6+SWgrLmNmkfjAgx 4uE+a6BOILJ6gD5cafMW+uyavv9acs9m4fqGATLCPb1CGNbY2wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEgvoxRsGvrw01f2YwE5ZeI72nGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmI5 NmEwZC05NDVhLTQyN2YtYmRjNC1hOWRhMzEwY2IzYTUvNzVjMzQ1NTYtZTQzMS0z OGViLWI4NDktNDk0ZDA3NjY0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJiOTZhMGQtOTQ1YS00MjdmLWJk YzQtYTlkYTMxMGNiM2E1LzRiYjk2YTBkLTk0NWEtNDI3Zi1iZGM0LWE5ZGEzMTBj YjNhNS5jcmwwHwYDVR0jBBgwFoAUJ10RSuMbefdThCy0Nk6952+UhxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmI5NmEwZC05NDVhLTQyN2YtYmRjNC1hOWRh MzEwY2IzYTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEQgYgMA8E AgACMAkDBwQmIAEJsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkuTt01Od7l49DwK+oylqi5g+ffOZ9EEZ s/WyHVf4/EIxyGWDsD8NnrLsfdgfWr0AjGB2MLtZJXe+UqjN3F5qe+4NZQwccTgq kBdIAg0GD8SsJnh5EBSXcCuYx8KRFKlePFsC31KGD9PG6Ubmxo7oNe0GjiaKBEVY GGZn9eoNjEnas56oolO6PaYNvXOcOYD5dv4mjAR1TYdH3bQag7W8lBkID4kC/F/6 qS2oPu3OPK7IN153z7UReoRJ9er/EZZevW+dW8nmf4BedwPiAl5raWcpCQ0gfmp9 0YySEM9T50EPftMd0Z3xQyz4sv7LwAX50wazApthb0O3bTLZLSOFRA== -----END CERTIFICATE-----Generated at Wed Aug 6 00:43:57 2025 by rpki-client