$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa File: 70c8300b-3f8c-3cac-af15-749f60c97054.roa (raw, json) Hash identifier: HBup/2vkeNd6KCSXsEjLRzWJbMtiSDe/wn32yE464oo= Subject key identifier: AB:05:E4:7F:5F:4B:C9:AE:C4:22:7D:78:CF:7D:C1:20:F4:F3:00:9D Certificate issuer: /CN=b40428c0-ba21-44c7-86bd-39d34a17e438 Certificate serial: 010D0C9F4328584B98724613B86B3E2A15F73A00 Authority key identifier: 62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 66.33.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:46:13:b8:6b:3e:2a:15:f7:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40428c0-ba21-44c7-86bd-39d34a17e438 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=9968948d-9545-49d7-8e77-1438e4d7329d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:aa:e5:fd:20:e5:e3:ea:a3:4a:e3:e5:0f:3d: 17:f9:20:10:67:83:e5:ac:6a:a5:ce:ad:0e:32:8f: 70:f6:d4:9d:a6:b6:54:0e:a8:8f:82:d9:0e:a6:14: ba:0f:ca:33:c2:7e:6b:42:00:27:fa:2f:ff:10:c5: 52:28:6b:c2:d5:8b:22:a9:91:d5:2e:69:c4:9f:5a: 9f:f9:fe:10:db:4e:eb:90:db:7b:69:f4:7a:9c:b0: 75:00:ee:a2:f4:a6:6a:77:fa:5c:9e:a0:cf:7a:c6: 6f:24:04:51:3a:99:a1:04:11:95:3e:0a:c8:c4:e4: dd:79:b5:8d:34:e5:63:c0:be:15:dc:cc:0f:6e:b2: 73:f3:7a:e8:5c:e1:1d:3a:6d:ff:fd:0e:d6:cd:de: e3:2d:bb:22:e0:1f:18:35:39:36:28:cf:c6:be:be: b1:fa:60:41:a3:92:9e:d0:51:0c:10:92:69:2a:0a: 53:b9:42:72:52:37:4d:e7:25:32:70:23:47:d0:ed: 4c:2e:59:6d:eb:b5:bf:57:06:dc:0c:ba:42:70:2f: 54:40:b8:57:31:36:90:c5:4b:ef:0e:fa:92:5d:6c: 99:91:c2:c6:83:1d:62:73:4a:ce:34:87:91:50:ac: 8c:13:f9:57:66:5a:06:8a:54:dd:8a:59:05:56:28: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:05:E4:7F:5F:4B:C9:AE:C4:22:7D:78:CF:7D:C1:20:F4:F3:00:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl X509v3 Authority Key Identifier: keyid:62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer sbgp-ipAddrBlock: critical IPv4: 66.33.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:17:80:53:5c:59:2f:21:cf:e2:5e:8c:01:ae:98:47:f2:c0: f1:44:0c:e0:7e:82:82:b6:2d:1d:a6:55:ad:c4:7b:d7:71:25: 93:f7:d0:09:ce:6b:32:d6:55:da:1f:6f:27:54:a7:28:54:05: 96:07:d2:23:78:28:05:40:3e:d9:d1:c9:d0:ca:0a:d5:07:de: 28:a8:12:68:58:8d:f4:90:1d:91:4c:5f:39:90:b1:c8:cf:7f: 29:25:91:63:ac:de:f6:a5:71:4a:12:6c:6b:5e:be:17:4a:91: a1:a0:1b:f1:e5:de:10:19:9c:f1:4c:31:06:df:46:fd:1c:7c: f4:29:02:91:96:8e:23:94:9f:8e:be:09:0b:65:a7:21:42:33: 53:27:d3:c3:18:6f:e2:ec:7b:a6:38:a0:e0:94:72:da:1f:25: 79:8b:e3:1e:bd:11:80:5d:ea:b6:a9:7d:b5:0a:2c:d2:bc:5a: 64:e6:45:74:ca:ed:8c:0c:e3:b1:2c:9a:d2:3f:02:4a:e9:a4: f1:1f:07:fc:22:68:e3:72:24:d3:54:2d:2a:41:78:b8:2c:b2: 02:06:08:94:d8:05:5b:71:f1:af:ad:8c:5f:dd:78:2a:7d:c1: 8f:4f:39:69:1f:f7:e1:e5:33:12:f5:4a:75:ba:36:54:1d:69: f7:cb:4c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckYTuGs+KhX3OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDI4YzAtYmEyMS00NGM3LTg2YmQtMzlkMzRhMTdl NDM4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OTk2ODk0OGQtOTU0NS00OWQ3LThlNzctMTQzOGU0ZDczMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKrl/SDl4+qjSuPlDz0X+SAQZ4PlrGqlzq0O Mo9w9tSdprZUDqiPgtkOphS6D8ozwn5rQgAn+i//EMVSKGvC1YsiqZHVLmnEn1qf +f4Q207rkNt7afR6nLB1AO6i9KZqd/pcnqDPesZvJARROpmhBBGVPgrIxOTdebWN NOVjwL4V3MwPbrJz83roXOEdOm3//Q7Wzd7jLbsi4B8YNTk2KM/Gvr6x+mBBo5Ke 0FEMEJJpKgpTuUJyUjdN5yUycCNH0O1MLllt67W/VwbcDLpCcC9UQLhXMTaQxUvv DvqSXWyZkcLGgx1ic0rONIeRUKyME/lXZloGilTdilkFVihbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsF5H9fS8muxCJ9eM99wSD08wCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNDA0 MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQzNGExN2U0MzgvNzBjODMwMGItM2Y4Yy0z Y2FjLWFmMTUtNzQ5ZjYwYzk3MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjQwNDI4YzAtYmEyMS00NGM3LTg2 YmQtMzlkMzRhMTdlNDM4L2I0MDQyOGMwLWJhMjEtNDRjNy04NmJkLTM5ZDM0YTE3 ZTQzOC5jcmwwHwYDVR0jBBgwFoAUYii1ecqVTkstiLpdYZmWySaiBK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNDA0MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQz NGExN2U0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAXgFNcWS8hz+JejAGumEfywPFEDOB+goK2LR2mVa3Ee9dxJZP30AnO azLWVdofbydUpyhUBZYH0iN4KAVAPtnRydDKCtUH3iioEmhYjfSQHZFMXzmQscjP fyklkWOs3valcUoSbGtevhdKkaGgG/Hl3hAZnPFMMQbfRv0cfPQpApGWjiOUn46+ CQtlpyFCM1Mn08MYb+Lse6Y4oOCUctofJXmL4x69EYBd6rapfbUKLNK8WmTmRXTK 7YwM47EsmtI/AkrppPEfB/wiaONyJNNULSpBeLgssgIGCJTYBVtx8a+tjF/deCp9 wY9POWkf9+HlMxL1SnW6NlQdaffLTEY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:01 2025 by rpki-client