$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa File: 2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa (raw, json) Hash identifier: qiviubVx6bKsoyaq5XcCn73ph+lKRozQE87qn9Njk+w= Subject key identifier: 2A:43:D9:F3:7C:DE:79:DA:2D:5B:44:C8:52:5C:DD:1E:A8:66:65:74 Certificate issuer: /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb Certificate serial: 010D0C9F4328584B2A2C3D4724816AE9FA82D4C0 Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 17378 IP address blocks: 134.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3d:47:24:81:6a:e9:fa:82:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=84c4e0f8-559a-48c7-8fc3-c4d728845a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:df:b4:32:0a:c6:d5:30:23:55:f1:54:12: c5:d6:44:49:e6:89:5d:5e:80:40:23:c1:f3:17:c3: a8:df:5a:24:aa:f7:34:0a:8e:8e:d9:74:9d:09:85: 60:2b:0a:84:92:12:49:b1:12:81:79:f8:21:f1:b2: 70:56:73:65:3f:bb:52:d9:37:ae:43:83:9e:15:af: 3f:b8:c1:62:a6:12:6c:e7:a1:03:a8:70:5d:dd:2c: 13:17:88:00:67:76:92:a9:ca:65:4b:fd:d2:18:99: e6:ea:9f:65:ed:cf:40:51:32:62:a4:ff:05:29:52: 80:bf:e6:56:d3:32:a0:89:5e:d6:1e:29:d4:22:9f: f5:3d:c4:2e:04:39:88:59:6f:03:5a:82:12:06:54: c0:62:e0:c3:21:68:ad:28:01:10:b0:89:ae:a5:d6: 1e:4e:d7:29:82:27:e1:14:c1:c7:74:5d:b2:57:51: 03:c1:db:de:07:18:90:98:a3:c0:78:49:44:f5:cc: 38:23:72:4e:bd:76:89:26:79:de:de:74:bc:63:bb: 1b:d1:2e:c9:28:b6:86:6c:9e:9e:79:d5:37:de:f8: d7:cd:41:7b:31:81:be:da:f5:76:42:0f:37:e9:95: fe:86:13:26:15:d4:16:97:ca:4d:41:51:ba:b5:52: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:D9:F3:7C:DE:79:DA:2D:5B:44:C8:52:5C:DD:1E:A8:66:65:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl X509v3 Authority Key Identifier: keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer sbgp-ipAddrBlock: critical IPv4: 134.172.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:dd:0d:31:45:20:e9:fa:48:c9:76:8a:78:13:e3:36:0f:d8: f7:46:ef:2f:16:55:5b:13:2e:63:2c:b6:f8:50:0c:e6:68:fe: 22:79:ec:d3:b0:c5:14:a3:a4:0e:54:c9:3d:8e:3a:b6:e7:2f: ff:7b:67:3f:6c:5f:ef:17:91:a3:0c:79:09:c7:d6:67:ad:e9: f4:5e:52:bf:53:f9:e4:24:b9:8a:ca:05:67:99:c1:b9:3a:b2: 99:e9:d7:86:f5:09:a0:26:f5:46:33:6f:0b:00:a7:2f:e9:5f: ba:ad:fb:28:e3:ad:f1:a4:00:be:54:a1:a8:56:c2:13:58:5b: 2d:95:56:13:58:c6:de:96:94:6c:15:5b:e0:e3:1d:77:71:3f: ec:cd:88:f9:75:16:19:ad:bf:ff:ed:06:05:42:8e:08:b9:3d: 75:73:b6:61:5c:53:8d:e8:9b:58:0e:31:97:df:88:a3:dd:b0: d1:be:c0:00:f8:29:52:db:7a:1d:bd:66:d3:e2:83:f9:09:2d: 0c:dd:52:c3:df:ea:f9:b8:94:b9:82:bc:27:21:6e:41:a8:61: bc:f8:b6:32:c3:c9:e0:b1:56:2e:49:82:9b:91:36:b4:3e:ae: 44:7b:1e:5c:00:72:ec:8b:76:26:44:8a:60:df:56:da:f0:76: d5:b3:c3:cb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsqLD1HJIFq6fqC1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjOTkzYmQtMDk5Ny00M2E5LWE1ODQtOWJmZTkzZTVi M2NiMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODRjNGUwZjgtNTU5YS00OGM3LThmYzMtYzRkNzI4ODQ1YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6jftDIKxtUwI1XxVBLF1kRJ5oldXoBAI8Hz F8Oo31okqvc0Co6O2XSdCYVgKwqEkhJJsRKBefgh8bJwVnNlP7tS2TeuQ4OeFa8/ uMFiphJs56EDqHBd3SwTF4gAZ3aSqcplS/3SGJnm6p9l7c9AUTJipP8FKVKAv+ZW 0zKgiV7WHinUIp/1PcQuBDmIWW8DWoISBlTAYuDDIWitKAEQsImupdYeTtcpgifh FMHHdF2yV1EDwdveBxiQmKPAeElE9cw4I3JOvXaJJnne3nS8Y7sb0S7JKLaGbJ6e edU33vjXzUF7MYG+2vV2Qg836ZX+hhMmFdQWl8pNQVG6tVJllQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCpD2fN83nnaLVtEyFJc3R6oZmV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NmM5 OTNiZC0wOTk3LTQzYTktYTU4NC05YmZlOTNlNWIzY2IvMjk0MWYwYjYtYzZmNS0z OWEwLWI1YTktNzcwYWMzMWViMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjZjOTkzYmQtMDk5Ny00M2E5LWE1 ODQtOWJmZTkzZTViM2NiLzY2Yzk5M2JkLTA5OTctNDNhOS1hNTg0LTliZmU5M2U1 YjNjYi5jcmwwHwYDVR0jBBgwFoAUrjDj0bUDG5tpQrlroRDHrAeaC4gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NmM5OTNiZC0wOTk3LTQzYTktYTU4NC05YmZl OTNlNWIzY2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhqwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXd0NMUUg6fpIyXaKeBPjNg/Y90bvLxZVWxMuYyy2+FAM5mj+Inns07DF FKOkDlTJPY46tucv/3tnP2xf7xeRowx5CcfWZ63p9F5Sv1P55CS5isoFZ5nBuTqy menXhvUJoCb1RjNvCwCnL+lfuq37KOOt8aQAvlShqFbCE1hbLZVWE1jG3paUbBVb 4OMdd3E/7M2I+XUWGa2//+0GBUKOCLk9dXO2YVxTjeibWA4xl9+Io92w0b7AAPgp Utt6Hb1m0+KD+QktDN1Sw9/q+biUuYK8JyFuQahhvPi2MsPJ4LFWLkmCm5E2tD6u RHseXABy7It2JkSKYN9W2vB21bPDyw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:50 2025 by rpki-client