$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7a27fb0d-a836-379d-930b-d9b9790e2907.roa File: 7a27fb0d-a836-379d-930b-d9b9790e2907.roa (raw, json) Hash identifier: Cow80Iu3ZlzHeXYpyhG+qqYDZt1xQM+s0dQgu6V2noQ= Subject key identifier: B2:CE:84:CB:B8:2C:DA:F0:69:E4:99:F1:4E:7A:92:D6:FC:2E:A2:10 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC5D9012FB80E08AF6CED680 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7a27fb0d-a836-379d-930b-d9b9790e2907.roa Signing time: Wed 20 Aug 2025 21:40:03 +0000 ROA not before: Wed 20 Aug 2025 21:40:03 +0000 ROA not after: Tue 18 Nov 2025 22:40:03 +0000 asID: 23473 IP address blocks: 66.253.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:5d:90:12:fb:80:e0:8a:f6:ce:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 21:40:03 2025 GMT Not After : Nov 18 22:40:03 2025 GMT Subject: CN=b4b5db29-e210-4411-b66b-9f4f04fbdbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:84:9c:c0:38:25:60:1b:5d:97:f9:55:e9: ba:30:6d:08:0c:5c:74:cb:45:4f:76:d9:60:bb:ae: 79:42:34:6e:1d:94:7b:2f:d8:bd:64:4f:9a:d3:28: 1d:31:b3:4d:e1:c5:a7:8b:ae:de:eb:19:ee:46:63: 64:2d:bb:96:72:b1:13:98:5e:42:aa:02:72:70:e9: a0:02:9e:b3:ab:3f:39:de:48:6b:e3:f1:88:96:65: 25:b8:71:0d:4e:31:95:b7:0e:ed:7a:70:35:36:30: 1a:22:a7:c2:71:db:e0:93:df:dd:c4:fb:e8:68:8e: 27:af:55:eb:d7:ed:0f:2b:35:81:8d:23:76:27:01: 0e:98:d5:07:3a:da:01:e7:fc:e3:ed:b4:68:22:20: 23:13:75:42:e1:67:e7:62:e4:46:0a:6e:52:3b:86: e0:47:57:9f:7f:bf:87:c8:b9:c0:52:c0:87:bb:7b: a9:ab:bb:2c:c7:19:c9:aa:49:13:5b:8f:73:b9:ea: d4:ae:03:f9:68:ae:f0:68:d4:80:e2:4e:6b:3c:cc: 04:ba:a3:05:47:cc:64:b2:46:0c:54:5c:84:45:e0: d2:6a:c7:fe:13:22:bf:d9:14:b8:ef:81:e7:42:e2: 28:3c:00:42:92:6c:2c:1a:44:95:86:d6:74:94:d6: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:84:CB:B8:2C:DA:F0:69:E4:99:F1:4E:7A:92:D6:FC:2E:A2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7a27fb0d-a836-379d-930b-d9b9790e2907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f2:0d:fd:58:67:4d:dd:fc:26:cc:5a:6e:2d:42:d2:5c:9c: 18:4c:fc:ce:76:f2:3b:20:b6:7a:2b:b9:4d:8d:8f:a8:17:fb: a4:98:b9:80:d3:db:9c:76:9a:45:a6:60:ae:e5:6b:3e:5c:e1: cf:83:fc:8f:c0:e3:2a:34:91:dc:0c:49:35:2d:71:30:10:78: f5:8d:0f:93:ca:f2:34:5e:90:3f:58:ca:ff:1f:36:84:ac:85: ad:41:8a:93:bb:6f:8f:1c:2f:44:77:c6:42:76:f9:24:44:0d: 9f:67:0e:2a:85:e7:07:18:f2:91:94:99:eb:84:6e:ee:99:b8: f0:28:f7:3f:38:96:5b:f4:f7:77:ca:3c:87:b5:1b:f5:b1:36: f6:bd:d9:99:89:16:86:5c:9a:77:9d:47:21:fb:81:cc:bc:5b: 93:cf:8a:86:f3:ba:dd:90:3d:9c:3e:17:c3:9d:41:5a:ed:3b: cc:00:b5:e3:5c:70:c2:aa:72:99:84:19:8e:8b:75:75:32:3b: ea:b0:08:f7:37:10:16:8d:32:7b:9f:7c:b6:d5:cc:d7:15:aa: 3b:82:37:8a:41:36:44:c4:19:20:4f:42:ed:24:fb:5d:9b:4a: 6c:f6:94:08:63:45:1d:6d:ca:a7:19:0e:a2:7e:b4:38:cd:b7: 9d:23:74:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsXZAS+4DgivbO1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIxNDAwM1oXDTI1MTExODIyNDAwM1owLzEtMCsGA1UEAxMk YjRiNWRiMjktZTIxMC00NDExLWI2NmItOWY0ZjA0ZmJkYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5uEnMA4JWAbXZf5Vem6MG0IDFx0y0VPdtlg u655QjRuHZR7L9i9ZE+a0ygdMbNN4cWni67e6xnuRmNkLbuWcrETmF5CqgJycOmg Ap6zqz853khr4/GIlmUluHENTjGVtw7tenA1NjAaIqfCcdvgk9/dxPvoaI4nr1Xr 1+0PKzWBjSN2JwEOmNUHOtoB5/zj7bRoIiAjE3VC4WfnYuRGCm5SO4bgR1eff7+H yLnAUsCHu3upq7ssxxnJqkkTW49zuerUrgP5aK7waNSA4k5rPMwEuqMFR8xkskYM VFyEReDSasf+EyK/2RS474HnQuIoPABCkmwsGkSVhtZ0lNbDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLOhMu4LNrwaeSZ8U56ktb8LqIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvN2EyN2ZiMGQtYTgzNi0z NzlkLTkzMGItZDliOTc5MGUyOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfyDf1YZ03d/CbMWm4tQtJcnBhM/M528jsgtnoruU2Nj6gX+6SYuYDT 25x2mkWmYK7laz5c4c+D/I/A4yo0kdwMSTUtcTAQePWND5PK8jRekD9Yyv8fNoSs ha1BipO7b48cL0R3xkJ2+SREDZ9nDiqF5wcY8pGUmeuEbu6ZuPAo9z84llv093fK PIe1G/WxNva92ZmJFoZcmnedRyH7gcy8W5PPiobzut2QPZw+F8OdQVrtO8wAteNc cMKqcpmEGY6LdXUyO+qwCPc3EBaNMnuffLbVzNcVqjuCN4pBNkTEGSBPQu0k+12b Smz2lAhjRR1tyqcZDqJ+tDjNt50jdO0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:20 2025 by rpki-client