$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa File: 976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json) Hash identifier: 40RQYrig+3s5cZXEaiASRxLlJ/VvzWt392MDtrFfObo= Subject key identifier: 51:05:50:5E:BC:EE:D3:AB:AE:34:E5:B9:04:75:09:68:8C:D4:D1:17 Certificate issuer: /CN=957264f8-0474-43d0-9a3b-5f53ce28790d Certificate serial: 010D0C9F4328584AADF10BE2B915EB9289E8C980 Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 15344 IP address blocks: 66.212.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0b:e2:b9:15:eb:92:89:e8:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=d0fe4660-d8d5-4f25-a753-4a12ffacf02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:66:a1:9d:ac:fd:ec:b1:c1:43:3c:85:aa:f3: 37:d2:9a:80:4b:43:5b:2b:35:9e:6b:cf:8a:f8:97: eb:5f:e1:30:ae:7c:b9:c1:5c:5f:b8:5c:cb:06:ca: be:02:d1:fa:60:34:fb:cd:66:7f:97:2b:6f:42:3e: 1c:bb:c0:fc:20:2e:0a:16:64:cc:65:24:58:21:17: cc:e1:a1:9f:f1:2a:48:d2:c3:80:16:e8:d5:5b:d4: 30:5b:26:b0:70:d3:52:95:1f:a4:5b:b6:f1:76:84: 72:fb:fa:33:be:08:0a:3d:fe:dd:08:ab:1f:ef:52: 78:4a:76:14:13:99:89:f1:ef:b1:10:48:97:7e:be: 5f:82:a3:af:ca:04:1a:ef:4f:24:0b:09:96:1f:6e: 0f:dc:a0:a8:30:f1:29:89:64:15:0a:59:ac:ec:bd: f8:43:88:32:0f:77:4d:8b:fc:08:31:be:c1:c8:94: cd:cf:d1:f9:bd:f9:98:c9:7e:76:2a:3b:dd:3c:cb: 3f:a0:cf:4f:bc:c7:3b:f8:90:7c:a5:ca:e2:e3:f2: fc:66:92:73:76:c0:3d:f9:6f:30:1e:e9:77:61:29: 2b:88:45:90:53:c4:ee:f7:31:fe:f4:18:c9:bd:ee: c1:02:d7:da:e3:f7:79:19:4a:b2:f1:84:ad:b9:b9: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:05:50:5E:BC:EE:D3:AB:AE:34:E5:B9:04:75:09:68:8C:D4:D1:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl X509v3 Authority Key Identifier: keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer sbgp-ipAddrBlock: critical IPv4: 66.212.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cb:26:32:c3:cc:42:a9:4e:7f:5c:07:c6:b6:35:02:c0:77: 28:cf:48:94:72:65:f5:03:d3:c4:f5:6f:9f:d6:dd:dd:68:49: ca:c9:f0:d2:d7:9a:03:6a:8e:01:29:65:e0:61:3c:f9:95:9f: fd:f5:60:d8:e7:7c:0f:e9:3d:52:1b:4f:55:da:10:25:3c:58: 18:2b:69:31:f1:5d:94:77:cd:d1:08:af:1d:39:55:d1:7d:60: 0e:cc:5f:74:00:5f:77:53:6b:92:f2:ac:c3:5a:16:91:61:b2: ff:c9:13:e4:0c:37:65:4a:ca:39:83:68:ad:8e:07:7c:06:30: 3f:06:00:b4:5d:34:9c:82:f0:16:bf:cc:19:cb:50:23:2f:75: 87:d7:55:27:fc:6d:81:09:b2:9e:65:bf:36:c4:14:cb:3a:71: e0:90:e2:1a:bd:96:db:e8:3b:ea:fc:a7:7d:4f:2f:de:79:c0: 9a:f9:33:29:3d:8a:34:12:11:eb:35:ed:fa:01:05:65:e7:8d: d5:19:ac:3f:e7:ff:f5:29:2b:25:dd:e9:5a:ed:ac:14:56:0f: f2:c8:0e:d4:6a:da:09:53:b0:2d:ae:0d:63:78:52:cf:a4:4c: ad:0e:a9:2b:98:ed:0e:6c:fa:52:b0:24:df:61:c4:2c:3a:14: cf:b5:a7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QviuRXrkonoyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3 OTBkMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZDBmZTQ2NjAtZDhkNS00ZjI1LWE3NTMtNGExMmZmYWNmMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mahnaz97LHBQzyFqvM30pqAS0NbKzWea8+K +JfrX+Ewrny5wVxfuFzLBsq+AtH6YDT7zWZ/lytvQj4cu8D8IC4KFmTMZSRYIRfM 4aGf8SpI0sOAFujVW9QwWyawcNNSlR+kW7bxdoRy+/ozvggKPf7dCKsf71J4SnYU E5mJ8e+xEEiXfr5fgqOvygQa708kCwmWH24P3KCoMPEpiWQVClms7L34Q4gyD3dN i/wIMb7ByJTNz9H5vfmYyX52KjvdPMs/oM9PvMc7+JB8pcri4/L8ZpJzdsA9+W8w Hul3YSkriEWQU8Tu9zH+9BjJve7BAtfa4/d5GUqy8YStubmKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEFUF687tOrrjTluQR1CWiM1NEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvOTc2YmZmNjEtZThiZi0z NzExLTg4ZGMtYTRhYjljOThiNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4 NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz Y2UyODc5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtQ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzLJjLDzEKpTn9cB8a2NQLAdyjPSJRyZfUD08T1b5/W3d1oScrJ8NLX mgNqjgEpZeBhPPmVn/31YNjnfA/pPVIbT1XaECU8WBgraTHxXZR3zdEIrx05VdF9 YA7MX3QAX3dTa5LyrMNaFpFhsv/JE+QMN2VKyjmDaK2OB3wGMD8GALRdNJyC8Ba/ zBnLUCMvdYfXVSf8bYEJsp5lvzbEFMs6ceCQ4hq9ltvoO+r8p31PL955wJr5Myk9 ijQSEes17foBBWXnjdUZrD/n//UpKyXd6VrtrBRWD/LIDtRq2glTsC2uDWN4Us+k TK0OqSuY7Q5s+lKwJN9hxCw6FM+1pwQ= -----END CERTIFICATE-----Generated at Tue Aug 5 16:45:58 2025 by rpki-client