$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa File: 66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa (raw, json) Hash identifier: 0lNgLQ18W4GTxeiGcmv6ZyUBIPGCxml2FVCm862moSM= Subject key identifier: D0:A3:79:34:10:90:3F:4A:B2:C4:C6:36:C0:C0:4E:BC:35:DA:A5:26 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584A9FFB92F5AFB5C67561CBBD80 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 21928 IP address blocks: 100.128.0.0/9 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:92:f5:af:b5:c6:75:61:cb:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=86dce7fd-9821-44c6-91a3-c4b40cf13206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:18:d4:36:bc:be:9e:8a:7c:54:44:1b:16: e9:94:4b:b2:61:dd:d9:10:93:50:28:7d:86:92:ae: 51:e3:f5:3d:62:e3:9e:e2:06:8b:b4:33:c3:34:4c: 59:dd:79:3f:ed:c9:23:64:83:42:0f:83:75:d8:e4: c5:5b:76:13:50:2c:d4:ea:bc:40:c2:6a:e8:b0:9f: a6:46:ec:03:1e:02:e6:02:4a:94:29:c8:91:f4:cd: f0:47:bf:8c:9d:02:b6:6c:82:c8:aa:54:fe:dd:5c: 41:b2:54:67:ae:92:da:fb:e6:4c:c3:86:30:2f:1e: 64:e8:71:d3:d8:e2:73:b3:88:64:e2:8d:ed:fd:90: 95:b0:cb:19:2c:76:89:88:bf:13:8b:9e:ae:3f:44: de:a3:26:37:f6:f6:9a:f8:18:c5:eb:c2:15:e9:56: 81:c7:39:9d:85:b0:4a:77:0e:7e:2c:2e:58:f9:18: 31:c8:2d:41:8b:04:e4:b1:ad:0d:5b:1a:be:16:39: 4e:25:9e:91:5a:6d:f9:35:92:e3:16:f7:e7:e4:43: f6:98:ec:c3:82:5a:35:45:61:f9:23:28:61:62:7b: 9a:3a:d3:98:1f:a1:f4:42:e0:af:2b:62:27:6e:26: 45:db:e2:74:0d:a0:42:c7:0a:54:78:c4:60:8a:19: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:79:34:10:90:3F:4A:B2:C4:C6:36:C0:C0:4E:BC:35:DA:A5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 100.128.0.0/9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b1:60:26:df:59:ec:46:18:d8:71:4d:b1:f9:91:07:d3:09: b3:3e:9a:ac:ac:ea:39:e2:0e:71:81:e2:57:46:32:b5:65:1b: ba:03:f5:e3:75:21:aa:54:a4:ec:2e:4d:5f:38:2f:8b:68:6e: 73:d1:b6:12:82:83:29:06:91:bd:cc:c1:13:9f:51:7d:7f:26: 70:c0:50:3d:fc:24:a3:88:87:ae:76:d4:bf:15:4f:3f:bf:be: b1:74:52:92:fe:08:59:84:9e:a2:9d:5c:d4:f4:04:80:41:34: ff:27:72:aa:87:bb:fe:cd:df:6a:82:d0:c4:28:bd:9a:20:52: 18:fe:f8:d8:55:41:c0:99:20:4b:65:32:3d:9b:ab:3b:92:cf: 03:54:b8:e4:6a:bf:da:a4:65:79:5d:15:e0:29:09:8a:49:63: 2a:1c:c8:27:cb:43:f8:2b:22:d6:e3:72:5b:36:82:62:52:a0: 61:86:07:9a:72:89:43:13:22:fc:e1:91:65:af:d0:b3:f9:d6: e0:66:4d:31:38:c8:9c:4c:fd:01:f0:2e:d5:61:bc:23:c3:e9: 2d:18:f5:dc:06:d4:16:9a:22:2d:67:23:40:c6:e3:ba:28:0d: c1:5f:a7:1d:08:4c:42:e1:58:2a:19:3d:80:0e:ec:5d:0e:20: 8e:64:e9:27 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqf+5L1r7XGdWHLvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ODZkY2U3ZmQtOTgyMS00NGM2LTkxYTMtYzRiNDBjZjEzMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVEY1Da8vp6KfFREGxbplEuyYd3ZEJNQKH2G kq5R4/U9YuOe4gaLtDPDNExZ3Xk/7ckjZINCD4N12OTFW3YTUCzU6rxAwmrosJ+m RuwDHgLmAkqUKciR9M3wR7+MnQK2bILIqlT+3VxBslRnrpLa++ZMw4YwLx5k6HHT 2OJzs4hk4o3t/ZCVsMsZLHaJiL8Ti56uP0TeoyY39vaa+BjF68IV6VaBxzmdhbBK dw5+LC5Y+RgxyC1BiwTksa0NWxq+FjlOJZ6RWm35NZLjFvfn5EP2mOzDglo1RWH5 IyhhYnuaOtOYH6H0QuCvK2InbiZF2+J0DaBCxwpUeMRgihkp7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNCjeTQQkD9KssTGNsDATrw12qUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvNjY2MzdlYzctYTU3Ni0z ZGNkLTljZmUtZDljMTY2YTNmZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMHZIAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALbFgJt9Z7EYY2HFNsfmRB9MJsz6arKzqOeIOcYHiV0YytWUbugP143Uh qlSk7C5NXzgvi2huc9G2EoKDKQaRvczBE59RfX8mcMBQPfwko4iHrnbUvxVPP7++ sXRSkv4IWYSeop1c1PQEgEE0/ydyqoe7/s3faoLQxCi9miBSGP742FVBwJkgS2Uy PZurO5LPA1S45Gq/2qRleV0V4CkJikljKhzIJ8tD+Csi1uNyWzaCYlKgYYYHmnKJ QxMi/OGRZa/Qs/nW4GZNMTjInEz9AfAu1WG8I8PpLRj13AbUFpoiLWcjQMbjuigN wV+nHQhMQuFYKhk9gA7sXQ4gjmTpJw== -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:35 2025 by rpki-client