$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa File: d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json) Hash identifier: hLZX8+Glp2YsqT/3/DsHkhaIPTWfao6dEouFucGciPU= Subject key identifier: 2C:7F:67:C0:FE:90:AF:71:E6:91:C5:8B:14:F5:88:AC:AA:EE:0D:1C Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584A9FFB9573BD24A7061727AB00 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 51964 IP address blocks: 66.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:95:73:bd:24:a7:06:17:27:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=0c3e8897-7e31-4105-8b09-c0b090e958dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:17:d9:84:71:da:8c:cb:0d:95:28:02:6a: 05:ca:bb:78:a8:aa:a3:47:c9:10:93:3a:85:23:05: 98:38:44:87:d7:f6:f5:3c:dd:0c:17:05:49:6a:f9: 46:db:1a:71:07:7e:cd:0c:8d:65:5f:83:eb:15:e9: 2a:b8:30:30:be:35:34:d4:90:17:83:30:a2:6f:09: 36:0f:7f:c5:c4:52:50:cd:b7:14:cc:ab:0a:1b:bb: 16:93:80:3e:a4:c2:f0:61:07:a8:82:11:02:d6:dd: 51:0d:d1:64:9c:f6:66:95:e4:4b:8e:8b:99:c3:3c: 99:14:43:7e:66:9c:ce:b6:55:de:8a:e2:dd:bf:ad: cb:06:00:fc:f9:98:6f:8f:34:c7:46:19:e1:58:7a: c3:bd:3c:5a:95:4a:4e:8a:82:48:5c:5f:8a:d7:f4: 7e:f0:b1:47:82:44:19:d5:88:eb:2e:c6:f6:7c:2a: 26:a1:0a:b2:2a:9f:d0:06:67:7b:b8:e9:e0:47:d3: af:7b:cd:a6:85:dc:c0:d2:dd:cd:f3:9e:a0:da:c1: cc:7a:da:ae:8b:9a:31:96:16:81:5a:d4:e8:90:d9: 9b:4d:97:6f:dd:0a:aa:fe:77:34:05:b6:98:4e:91: 91:64:0f:36:ed:7c:2b:19:70:61:a7:de:a7:e0:82: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:67:C0:FE:90:AF:71:E6:91:C5:8B:14:F5:88:AC:AA:EE:0D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:5a:d4:38:e0:d0:ed:bc:b3:bf:4d:cd:61:8a:2a:b8:05:a9: 20:fe:e3:e5:38:4a:ed:5b:0a:57:ff:8f:4b:e6:79:2f:af:72: fd:eb:75:f1:1b:52:d8:74:d9:3b:50:de:3f:41:50:55:80:c0: 59:bd:2e:14:7c:f0:b7:99:91:df:7b:2a:4c:ca:ca:e9:9b:93: 89:1e:48:27:3a:b8:29:09:c7:6e:18:37:ea:9a:e0:97:c9:1d: 93:f3:3f:27:77:78:5e:10:2a:01:d5:2c:21:67:d2:ec:56:22: 83:69:40:6f:1f:1e:23:04:c6:b5:e1:16:8f:e0:85:72:95:6b: b4:9a:42:09:0c:61:50:e7:d6:82:a3:db:22:ba:d0:ab:48:f2: 97:35:fd:7b:41:be:bc:c4:93:cd:1d:22:6e:69:94:d4:60:a5: 64:db:49:22:80:d6:0e:6c:df:83:fc:02:c2:cd:08:e4:8d:f3: 42:31:27:fa:c7:00:a3:e5:7b:6d:f6:93:ee:07:69:cf:64:25: 92:7e:1d:f3:54:ab:b9:5a:8e:26:0e:a9:69:e0:7b:5e:72:db: 78:34:a5:56:ca:c1:4a:1f:7a:c4:c5:ad:1b:80:e6:d5:fc:6b: 35:dd:33:94:0a:99:bb:0b:d4:9b:c2:db:4f:e0:70:c2:d4:42: 4e:a8:ac:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5VzvSSnBhcnqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MGMzZTg4OTctN2UzMS00MTA1LThiMDktYzBiMDkwZTk1OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeUX2YRx2ozLDZUoAmoFyrt4qKqjR8kQkzqF IwWYOESH1/b1PN0MFwVJavlG2xpxB37NDI1lX4PrFekquDAwvjU01JAXgzCibwk2 D3/FxFJQzbcUzKsKG7sWk4A+pMLwYQeoghEC1t1RDdFknPZmleRLjouZwzyZFEN+ ZpzOtlXeiuLdv63LBgD8+ZhvjzTHRhnhWHrDvTxalUpOioJIXF+K1/R+8LFHgkQZ 1YjrLsb2fComoQqyKp/QBmd7uOngR9Ove82mhdzA0t3N856g2sHMetqui5oxlhaB WtTokNmbTZdv3Qqq/nc0BbaYTpGRZA827XwrGXBhp96n4IJK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx/Z8D+kK9x5pHFixT1iKyq7g0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOBa1Djg0O28s79NzWGKKrgFqSD+4+U4Su1bClf/j0vmeS+vcv3rdfEb Uth02TtQ3j9BUFWAwFm9LhR88LeZkd97KkzKyumbk4keSCc6uCkJx24YN+qa4JfJ HZPzPyd3eF4QKgHVLCFn0uxWIoNpQG8fHiMExrXhFo/ghXKVa7SaQgkMYVDn1oKj 2yK60KtI8pc1/XtBvrzEk80dIm5plNRgpWTbSSKA1g5s34P8AsLNCOSN80IxJ/rH AKPle232k+4Hac9kJZJ+HfNUq7lajiYOqWnge15y23g0pVbKwUofesTFrRuA5tX8 azXdM5QKmbsL1JvC20/gcMLUQk6orN0= -----END CERTIFICATE-----Generated at Tue Aug 5 20:01:56 2025 by rpki-client