$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/d6f91222-4726-3109-b2b9-fd550d72b49f.roa File: d6f91222-4726-3109-b2b9-fd550d72b49f.roa (raw, json) Hash identifier: 3QhhYiECrApENkk4uQFO4ZlxEU7ia3mmPUmrmtvOdT4= Subject key identifier: 5A:E1:AF:77:46:CB:14:46:5F:9E:1F:E4:AB:6A:8E:79:74:80:AB:9F Certificate issuer: /CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561 Certificate serial: 010D0C9F4328584AAEA0F156B3790B0C4EE89600 Authority key identifier: CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/d6f91222-4726-3109-b2b9-fd550d72b49f.roa Signing time: Tue 29 Jul 2025 01:06:44 +0000 ROA not before: Tue 29 Jul 2025 01:06:44 +0000 ROA not after: Mon 27 Oct 2025 01:06:44 +0000 asID: 20055 IP address blocks: 66.187.2.0/24 maxlen: 24 199.233.14.0/24 maxlen: 24 2604:1960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:a0:f1:56:b3:79:0b:0c:4e:e8:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561 Validity Not Before: Jul 29 01:06:44 2025 GMT Not After : Oct 27 01:06:44 2025 GMT Subject: CN=e3d593dd-175e-439b-8842-4a52650ceb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:5e:2b:4b:52:fc:ea:92:06:42:81:2a:5f: 96:06:a0:30:85:9f:11:09:ad:36:58:8f:1c:15:f4: 13:cd:fd:3b:7e:64:2e:20:9b:db:fb:cc:59:da:bb: af:a9:71:6a:c7:38:61:09:e2:74:12:c1:c4:df:c7: d4:ce:5e:fd:d6:ec:87:8c:d8:9b:d8:5b:8a:8d:75: 4b:eb:38:ae:33:f3:e1:71:ac:21:aa:fd:9c:ee:01: 2c:cf:81:3c:cb:0f:c6:83:e3:e3:c0:33:82:fd:79: ec:f0:b2:db:30:51:ea:57:e5:a4:e0:b8:27:0e:61: cf:f2:36:1b:5b:a7:dc:3a:b2:75:ba:0f:c3:cd:df: 1b:f6:ca:41:1f:86:5e:15:9a:a1:04:bd:f0:65:bb: 76:e6:1f:33:8a:0f:23:7b:24:6d:8e:7a:66:76:04: 76:dc:ec:c8:e0:46:63:26:ed:fb:ff:3c:18:d5:d8: ca:e0:2c:2f:1a:48:8c:46:9f:1a:cb:0b:32:ae:fc: 5a:62:b8:0a:4f:43:ca:79:c1:ae:2b:51:bd:03:77: 85:4a:1b:98:2d:cd:c1:3e:77:a2:7d:11:bb:e4:38: af:a5:24:fb:52:60:80:0b:bf:24:8c:f4:f4:18:7e: 87:e0:e6:fa:3b:be:4f:9b:40:68:b5:9f:37:61:96: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:AF:77:46:CB:14:46:5F:9E:1F:E4:AB:6A:8E:79:74:80:AB:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/d6f91222-4726-3109-b2b9-fd550d72b49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl X509v3 Authority Key Identifier: keyid:CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer sbgp-ipAddrBlock: critical IPv4: 66.187.2.0/24 199.233.14.0/24 IPv6: 2604:1960::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e1:87:19:6b:58:93:be:57:ee:5b:5c:79:95:86:52:43:5d: 06:45:3f:18:50:be:e5:2e:2b:85:17:3c:7d:c8:93:7c:79:28: f7:13:28:35:b9:58:da:a7:4d:86:5f:74:e1:57:78:57:6d:b6: 47:31:30:d2:8d:50:7e:60:36:c2:95:8d:2f:57:c6:c1:81:b0: db:43:d0:9c:ca:19:df:42:dc:a5:01:74:53:34:29:ef:62:72: ff:04:ac:6e:12:85:bb:62:e4:d9:49:09:be:c0:ab:8d:71:26: f6:f4:ec:ee:08:b8:2b:d4:55:6e:b0:13:8e:d7:5e:d3:35:b5: 85:02:50:47:6d:10:7b:cb:4a:5c:1e:15:67:03:79:de:f4:ca: 80:ec:d0:73:6e:34:a0:d4:6d:50:f5:49:d1:09:26:5a:9a:60: 84:09:fa:53:e9:ef:c4:5f:73:be:76:fa:9f:94:0f:50:5f:3c: a9:aa:ca:ee:99:3e:99:53:fc:db:a7:c8:b8:5f:e6:40:56:44: dd:ed:e6:e2:91:a2:82:c1:ae:a2:a9:ec:32:ef:6a:f5:3e:ce: be:47:1b:b0:42:f4:a1:ad:53:fa:f9:be:0e:ef:2a:74:24:00: 7b:cf:9a:e1:44:71:2c:d7:35:64:7c:8a:13:0a:47:43:fb:20: 0b:76:34:bf -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEquoPFWs3kLDE7olgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVjYjdkNjQtMmY5OS00NTA0LWJmYmEtY2RkY2Q2YmRm NTYxMB4XDTI1MDcyOTAxMDY0NFoXDTI1MTAyNzAxMDY0NFowLzEtMCsGA1UEAxMk ZTNkNTkzZGQtMTc1ZS00MzliLTg4NDItNGE1MjY1MGNlYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoVeK0tS/OqSBkKBKl+WBqAwhZ8RCa02WI8c FfQTzf07fmQuIJvb+8xZ2ruvqXFqxzhhCeJ0EsHE38fUzl791uyHjNib2FuKjXVL 6ziuM/Phcawhqv2c7gEsz4E8yw/Gg+PjwDOC/Xns8LLbMFHqV+Wk4LgnDmHP8jYb W6fcOrJ1ug/Dzd8b9spBH4ZeFZqhBL3wZbt25h8zig8jeyRtjnpmdgR23OzI4EZj Ju37/zwY1djK4CwvGkiMRp8aywsyrvxaYrgKT0PKecGuK1G9A3eFShuYLc3BPnei fRG75DivpST7UmCAC78kjPT0GH6H4Ob6O75Pm0BotZ83YZYFVwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFrhr3dGyxRGX54f5Ktqjnl0gKufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85NWNi N2Q2NC0yZjk5LTQ1MDQtYmZiYS1jZGRjZDZiZGY1NjEvZDZmOTEyMjItNDcyNi0z MTA5LWIyYjktZmQ1NTBkNzJiNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTVjYjdkNjQtMmY5OS00NTA0LWJm YmEtY2RkY2Q2YmRmNTYxLzk1Y2I3ZDY0LTJmOTktNDUwNC1iZmJhLWNkZGNkNmJk ZjU2MS5jcmwwHwYDVR0jBBgwFoAUz58BUPJhehCiWrvMC5qAZo+dEOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NWNiN2Q2NC0yZjk5LTQ1MDQtYmZiYS1jZGRj ZDZiZGY1NjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAQrsCAwQA x+kOMA0EAgACMAcDBQAmBBlgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACXhhxlrWJO+V+5bXHmVhlJDXQZF PxhQvuUuK4UXPH3Ik3x5KPcTKDW5WNqnTYZfdOFXeFdttkcxMNKNUH5gNsKVjS9X xsGBsNtD0JzKGd9C3KUBdFM0Ke9icv8ErG4Shbti5NlJCb7Aq41xJvb07O4IuCvU VW6wE47XXtM1tYUCUEdtEHvLSlweFWcDed70yoDs0HNuNKDUbVD1SdEJJlqaYIQJ +lPp78Rfc752+p+UD1BfPKmqyu6ZPplT/NunyLhf5kBWRN3t5uKRooLBrqKp7DLv avU+zr5HG7BC9KGtU/r5vg7vKnQkAHvPmuFEcSzXNWR8ihMKR0P7IAt2NL8= -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:47 2025 by rpki-client