$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa File: f9c30950-1899-3256-a75e-ccfa35eea089.roa (raw, json) Hash identifier: zHBEUzazOexVf0CksZYPTVISbq/zFz7m3cLhWQyApww= Subject key identifier: FB:EF:DA:D4:8C:87:4D:CA:69:4B:8A:73:4C:11:F4:29:68:CD:C3:DF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC6424FE80301D2AC4808A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa Signing time: Wed 20 Aug 2025 21:53:19 +0000 ROA not before: Wed 20 Aug 2025 21:53:19 +0000 ROA not after: Tue 18 Nov 2025 22:53:19 +0000 asID: 23473 IP address blocks: 66.253.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:64:24:fe:80:30:1d:2a:c4:80:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 21:53:19 2025 GMT Not After : Nov 18 22:53:19 2025 GMT Subject: CN=e0af2fdc-fd73-4f57-863a-a47c16aab3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:71:53:bd:87:1b:82:f2:c3:93:5a:7f:71: 04:29:b5:1c:01:23:44:94:1e:1f:ac:12:20:84:01: f5:45:6d:be:62:b3:f6:42:6f:c3:cd:23:b0:6e:e7: 03:b7:50:38:3d:3f:3e:f8:02:66:5e:35:56:e7:86: 52:90:69:b2:7b:b0:39:08:43:81:92:b0:16:49:6f: bd:bc:0d:8e:6a:de:30:68:71:77:0e:8d:d7:e0:1c: a6:24:2f:2d:cd:80:9c:1f:e0:b1:d4:9e:c8:cb:5b: 5d:4f:3e:04:1c:12:4f:c0:c1:02:2d:79:4d:b3:ae: 46:a3:26:b1:51:8c:08:7c:61:38:43:61:58:b6:d6: 26:ac:e2:dc:77:f3:13:ba:4c:02:d0:03:02:12:d1: 6b:80:61:9f:27:7a:fb:96:7e:35:59:e6:74:bb:e2: 72:65:e3:67:20:37:ab:ea:9a:42:17:5b:19:a6:c0: 59:3f:94:52:5b:eb:8f:2b:c2:a1:ba:98:81:95:a5: 3d:2b:37:43:d1:04:7f:72:d0:85:36:df:c7:55:7e: dd:02:6e:f8:6b:7a:cd:4f:b3:28:a7:a4:88:08:9a: 24:da:97:1e:26:1b:c2:4b:8e:77:ac:22:3b:d7:6a: a6:3f:4a:36:06:0b:bb:61:f8:87:2f:2f:b8:56:6c: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EF:DA:D4:8C:87:4D:CA:69:4B:8A:73:4C:11:F4:29:68:CD:C3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:be:61:9e:34:c7:e5:9d:07:76:7b:59:d0:5a:b7:a6:bf:f5: a7:93:2c:7f:db:73:05:80:54:8a:35:27:a4:28:db:ab:ad:bd: 33:dc:18:d6:ab:e3:78:ab:6b:40:5f:3e:8d:14:70:e0:52:47: fb:41:a5:94:ae:21:8d:a7:13:4f:ff:9d:06:37:d7:0f:f2:3f: 40:15:d8:6c:fc:36:c3:58:fb:2d:5e:48:fc:fa:43:2c:4b:43: 2a:9d:78:d0:19:2f:5c:c4:86:8d:61:0c:a7:36:ae:86:20:1c: 74:26:66:56:7a:20:66:65:2e:5e:7a:8c:32:4e:fd:45:85:58: 21:00:02:9f:69:3d:ba:2c:5a:f7:a6:a2:75:27:a9:80:96:ed: a6:da:1d:cf:89:73:1a:da:28:bc:c3:f0:ed:e1:f2:2f:f3:99: 6c:9e:3e:58:3a:4b:d4:af:32:f5:32:16:82:24:c3:a3:ef:d2: 01:e5:53:53:76:50:2e:ca:2d:23:e0:e0:01:3d:74:88:37:04: 1e:aa:28:a6:96:cf:04:17:d3:ec:e0:66:09:a3:10:b1:a2:82: c1:5e:0f:11:78:37:cf:6f:56:af:48:e3:e8:1d:f8:5e:59:86: e2:64:6a:e4:68:93:88:7e:5f:91:e8:83:8a:19:1a:eb:a4:e1: 11:91:48:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsZCT+gDAdKsSAioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIxNTMxOVoXDTI1MTExODIyNTMxOVowLzEtMCsGA1UEAxMk ZTBhZjJmZGMtZmQ3My00ZjU3LTg2M2EtYTQ3YzE2YWFiM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRlxU72HG4Lyw5Naf3EEKbUcASNElB4frBIg hAH1RW2+YrP2Qm/DzSOwbucDt1A4PT8++AJmXjVW54ZSkGmye7A5CEOBkrAWSW+9 vA2Oat4waHF3Do3X4BymJC8tzYCcH+Cx1J7Iy1tdTz4EHBJPwMECLXlNs65Goyax UYwIfGE4Q2FYttYmrOLcd/MTukwC0AMCEtFrgGGfJ3r7ln41WeZ0u+JyZeNnIDer 6ppCF1sZpsBZP5RSW+uPK8KhupiBlaU9KzdD0QR/ctCFNt/HVX7dAm74a3rNT7Mo p6SICJok2pceJhvCS453rCI712qmP0o2Bgu7YfiHLy+4VmxMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvv2tSMh03KaUuKc0wR9ClozcPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjljMzA5NTAtMTg5OS0z MjU2LWE3NWUtY2NmYTM1ZWVhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa+YZ40x+WdB3Z7WdBat6a/9aeTLH/bcwWAVIo1J6Qo26utvTPcGNar 43ira0BfPo0UcOBSR/tBpZSuIY2nE0//nQY31w/yP0AV2Gz8NsNY+y1eSPz6QyxL QyqdeNAZL1zEho1hDKc2roYgHHQmZlZ6IGZlLl56jDJO/UWFWCEAAp9pPbosWvem onUnqYCW7abaHc+JcxraKLzD8O3h8i/zmWyePlg6S9SvMvUyFoIkw6Pv0gHlU1N2 UC7KLSPg4AE9dIg3BB6qKKaWzwQX0+zgZgmjELGigsFeDxF4N89vVq9I4+gd+F5Z huJkauRok4h+X5Hog4oZGuuk4RGRSNs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:38 2025 by rpki-client