$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/678654bf-e28f-37f4-9d89-5903be587e8f.roa File: 678654bf-e28f-37f4-9d89-5903be587e8f.roa (raw, json) Hash identifier: EzZpW7Pu/YqAH6j7CQIyoRnLtC6P0Gn1Hwm79vVSdhU= Subject key identifier: 34:4F:FC:55:E7:5D:6A:70:69:38:E9:01:00:47:AF:C5:6B:DE:E1:78 Certificate issuer: /CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561 Certificate serial: 010D0C9F4328584AAEA11DF91C4E27173004B280 Authority key identifier: CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/678654bf-e28f-37f4-9d89-5903be587e8f.roa Signing time: Tue 29 Jul 2025 01:13:43 +0000 ROA not before: Tue 29 Jul 2025 01:13:43 +0000 ROA not after: Mon 27 Oct 2025 01:13:43 +0000 asID: 33490 IP address blocks: 66.187.2.0/24 maxlen: 24 199.233.14.0/24 maxlen: 24 2604:1960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:a1:1d:f9:1c:4e:27:17:30:04:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561 Validity Not Before: Jul 29 01:13:43 2025 GMT Not After : Oct 27 01:13:43 2025 GMT Subject: CN=213b9c60-2ab3-4024-8455-18e622f25055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:14:72:63:5f:33:46:c8:5b:6a:42:a4:49: 01:a1:75:77:d5:e6:cc:b9:31:2e:b7:0b:38:8e:8d: 7d:ea:69:7b:a4:91:ae:c2:8d:80:77:bf:e6:c2:d9: 9c:09:52:25:9d:f4:25:00:e6:82:b4:fe:0c:d7:cf: 91:ce:5a:74:c2:e2:43:8a:3e:99:5a:c1:48:cc:56: 59:e1:98:8f:f3:85:17:8c:fa:91:81:be:b5:fe:f5: 88:a1:ee:13:04:7c:25:ce:cd:13:6c:e5:f2:fa:55: 21:f4:c8:58:6d:45:b2:c3:a5:d7:9d:38:8c:69:1d: a6:de:4d:d3:ca:3d:1f:22:d0:ac:61:9f:a3:1a:3e: 6e:a0:68:dc:47:25:a8:ab:a8:64:4b:4c:93:ef:16: 7c:d9:69:d8:5d:f0:62:44:8c:38:35:cf:5e:68:a4: 65:40:ca:3e:b7:17:ac:be:dd:a6:80:aa:be:d9:d6: 40:b9:4d:aa:1a:e6:19:36:f1:36:72:5e:17:f6:51: dd:d6:2f:45:38:fc:b0:5a:a6:fd:19:d7:5b:19:19: 97:8b:f4:02:3e:0b:23:43:fc:ab:8e:63:45:cb:24: f3:9c:e7:8c:8a:af:03:bf:31:73:12:70:90:f2:82: 5c:e9:4a:89:e5:b5:71:f5:a8:dd:f4:47:b8:eb:25: 34:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:FC:55:E7:5D:6A:70:69:38:E9:01:00:47:AF:C5:6B:DE:E1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/678654bf-e28f-37f4-9d89-5903be587e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl X509v3 Authority Key Identifier: keyid:CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer sbgp-ipAddrBlock: critical IPv4: 66.187.2.0/24 199.233.14.0/24 IPv6: 2604:1960::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:37:9d:51:96:e8:e4:78:91:a1:d0:ab:dd:39:0b:11:5d:e1: db:41:eb:89:e1:61:f0:87:52:dd:58:9a:3f:7c:fb:63:ae:7d: 3b:b7:16:ce:fc:8b:b0:3a:39:26:ef:cc:19:ea:7c:e2:3c:70: 50:46:73:bb:72:a1:bc:a4:5e:46:31:14:5e:16:d9:79:91:6f: 3a:d9:a0:9c:40:42:fb:5e:52:8c:52:fa:99:6a:6b:f1:b1:f9: aa:c5:63:7f:df:2e:a1:55:b4:f2:02:e0:b5:9a:3f:f2:13:51: e0:b8:0e:5c:e8:8e:e6:ef:72:6b:79:b5:ea:b8:4f:16:74:1d: 93:81:21:e7:70:48:6e:22:a4:fa:c3:3b:a8:37:82:33:56:b0: 63:92:63:4d:cb:5f:43:05:e8:f1:83:53:33:88:7a:1d:88:a8: 9d:db:ad:24:e3:dd:cd:f6:50:21:4c:1c:2f:2c:cf:bf:62:cf: f4:b7:8f:9c:92:7b:bc:e1:b6:f8:7f:33:41:7e:bf:17:e0:e3: 39:6b:4e:c2:d5:6a:d9:6b:94:cb:08:fd:dc:6e:5c:d9:48:7b: cb:e8:61:5a:19:7e:d1:57:cd:0a:23:0d:e2:32:d7:4f:02:79: fa:40:8c:5d:a2:34:21:d7:b0:2b:30:d3:d7:c6:60:91:42:08: f1:fa:a1:77 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEquoR35HE4nFzAEsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVjYjdkNjQtMmY5OS00NTA0LWJmYmEtY2RkY2Q2YmRm NTYxMB4XDTI1MDcyOTAxMTM0M1oXDTI1MTAyNzAxMTM0M1owLzEtMCsGA1UEAxMk MjEzYjljNjAtMmFiMy00MDI0LTg0NTUtMThlNjIyZjI1MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2EUcmNfM0bIW2pCpEkBoXV31ebMuTEutws4 jo196ml7pJGuwo2Ad7/mwtmcCVIlnfQlAOaCtP4M18+Rzlp0wuJDij6ZWsFIzFZZ 4ZiP84UXjPqRgb61/vWIoe4TBHwlzs0TbOXy+lUh9MhYbUWyw6XXnTiMaR2m3k3T yj0fItCsYZ+jGj5uoGjcRyWoq6hkS0yT7xZ82WnYXfBiRIw4Nc9eaKRlQMo+txes vt2mgKq+2dZAuU2qGuYZNvE2cl4X9lHd1i9FOPywWqb9GddbGRmXi/QCPgsjQ/yr jmNFyyTznOeMiq8DvzFzEnCQ8oJc6UqJ5bVx9ajd9Ee46yU0AwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDRP/FXnXWpwaTjpAQBHr8Vr3uF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85NWNi N2Q2NC0yZjk5LTQ1MDQtYmZiYS1jZGRjZDZiZGY1NjEvNjc4NjU0YmYtZTI4Zi0z N2Y0LTlkODktNTkwM2JlNTg3ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTVjYjdkNjQtMmY5OS00NTA0LWJm YmEtY2RkY2Q2YmRmNTYxLzk1Y2I3ZDY0LTJmOTktNDUwNC1iZmJhLWNkZGNkNmJk ZjU2MS5jcmwwHwYDVR0jBBgwFoAUz58BUPJhehCiWrvMC5qAZo+dEOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NWNiN2Q2NC0yZjk5LTQ1MDQtYmZiYS1jZGRj ZDZiZGY1NjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAQrsCAwQA x+kOMA0EAgACMAcDBQAmBBlgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGc3nVGW6OR4kaHQq905CxFd4dtB 64nhYfCHUt1Ymj98+2OufTu3Fs78i7A6OSbvzBnqfOI8cFBGc7tyobykXkYxFF4W 2XmRbzrZoJxAQvteUoxS+plqa/Gx+arFY3/fLqFVtPIC4LWaP/ITUeC4Dlzojubv cmt5teq4TxZ0HZOBIedwSG4ipPrDO6g3gjNWsGOSY03LX0MF6PGDUzOIeh2IqJ3b rSTj3c32UCFMHC8sz79iz/S3j5ySe7zhtvh/M0F+vxfg4zlrTsLVatlrlMsI/dxu XNlIe8voYVoZftFXzQojDeIy108CefpAjF2iNCHXsCsw09fGYJFCCPH6oXc= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:05 2025 by rpki-client