$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa File: 4f857680-6d43-32b8-9d58-a4dfa622acf3.roa (raw, json) Hash identifier: zG3m0M4mDyk/YCGNgenOCOJBtEmn+xBzObjRo+zxwEY= Subject key identifier: 12:BD:0C:5A:1F:28:A7:4F:6C:1C:0B:35:B0:96:0E:CC:F8:29:84:A9 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584AC2E0DE719A0AEAC115CE8F00 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 66.178.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:de:71:9a:0a:ea:c1:15:ce:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=86fa65ed-c63b-48db-bbb7-05869fb6543f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:15:b3:3e:ab:2b:22:82:06:ea:dd:fe:94: 6e:75:45:06:ea:2e:0f:b7:db:96:81:fd:be:04:41: 76:88:08:eb:fa:4a:cf:21:82:47:37:a3:b9:43:ce: 5c:09:98:8f:59:52:bc:e9:a7:5a:4c:b5:fb:93:5d: 2c:b4:45:fb:5b:7f:84:73:b2:6d:84:d3:5a:25:0d: ad:40:7d:64:1f:f3:07:9e:ea:0c:c5:73:9e:92:7f: 17:b5:2d:6c:50:ec:cf:13:42:fe:2c:91:38:44:96: 84:28:37:0c:b0:aa:0c:57:39:02:07:ab:1b:71:65: 65:d9:02:ec:b6:e6:ae:92:50:d8:a4:41:a2:70:f3: c7:25:4e:3a:4b:c4:81:28:ff:f9:29:e0:d6:91:e7: 97:a4:d8:7d:ba:89:ec:5e:1f:4a:be:f6:46:96:ec: 91:2c:aa:74:00:ef:df:d9:2f:37:91:36:36:aa:a1: 5e:f3:e2:24:ab:50:9c:88:c1:a1:4a:0b:92:a6:39: b7:c2:f4:6d:f7:14:1f:63:c1:8a:f9:e1:7a:1c:12: ae:9a:b2:11:f9:66:ee:17:92:8a:3e:8d:63:d5:e4: 7c:95:63:8f:08:28:b3:64:11:c5:6d:2b:dd:8f:84: 4d:be:5b:52:c0:e9:29:89:23:8c:cd:c6:99:f4:64: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:0C:5A:1F:28:A7:4F:6C:1C:0B:35:B0:96:0E:CC:F8:29:84:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fb:bf:0e:b9:3a:82:34:7d:85:a4:79:25:ed:91:f0:43:a2: 49:5b:75:19:46:60:1e:06:9a:bc:85:36:26:b4:e0:11:79:03: d5:39:c5:6c:ce:1e:d3:22:b6:38:36:1c:ec:41:ca:04:ca:f3: 29:15:62:36:91:0b:f0:a7:39:ed:18:c3:f7:5f:9d:a9:3a:a3: 19:ee:9b:1e:f6:a6:d6:8d:94:6a:0c:be:79:41:1a:c9:58:50: 9a:0f:ed:f7:b8:82:ce:52:04:8c:64:f5:d4:ab:56:91:77:b7: 42:d6:2c:33:7b:33:c0:55:63:d0:59:d6:39:6d:2c:ef:1a:8b: 1c:ae:c8:ce:ad:fc:b0:a0:91:a2:c1:b3:66:05:f7:3c:59:80: 57:5a:74:97:ec:37:66:7f:b0:c7:c7:3b:45:98:69:3b:06:15: d8:16:23:d8:4e:c7:46:3c:18:ba:6a:9e:96:9d:f0:a3:98:74: 20:6d:4e:7c:ae:eb:0b:dd:ae:48:32:03:45:ac:8b:a2:15:5e: 65:11:91:a0:90:4a:b7:53:d4:5a:79:50:4f:80:40:53:c9:15: 9e:59:9b:c2:cb:03:b6:ed:6e:42:6b:d7:38:29:9b:7d:aa:bb: ac:eb:63:8b:5c:f0:6b:25:fa:79:c7:7d:57:f5:8c:d6:99:15: c7:03:4f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4N5xmgrqwRXOjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODZmYTY1ZWQtYzYzYi00OGRiLWJiYjctMDU4NjlmYjY1NDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AEVsz6rKyKCBurd/pRudUUG6i4Pt9uWgf2+ BEF2iAjr+krPIYJHN6O5Q85cCZiPWVK86adaTLX7k10stEX7W3+Ec7JthNNaJQ2t QH1kH/MHnuoMxXOekn8XtS1sUOzPE0L+LJE4RJaEKDcMsKoMVzkCB6sbcWVl2QLs tuauklDYpEGicPPHJU46S8SBKP/5KeDWkeeXpNh9uonsXh9KvvZGluyRLKp0AO/f 2S83kTY2qqFe8+Ikq1CciMGhSguSpjm3wvRt9xQfY8GK+eF6HBKumrIR+WbuF5KK Po1j1eR8lWOPCCizZBHFbSvdj4RNvltSwOkpiSOMzcaZ9GQlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK9DFofKKdPbBwLNbCWDsz4KYSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvNGY4NTc2ODAtNmQ0My0z MmI4LTlkNTgtYTRkZmE2MjJhY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr7vw65OoI0fYWkeSXtkfBDoklbdRlGYB4GmryFNia04BF5A9U5xWzO HtMitjg2HOxBygTK8ykVYjaRC/CnOe0Yw/dfnak6oxnumx72ptaNlGoMvnlBGslY UJoP7fe4gs5SBIxk9dSrVpF3t0LWLDN7M8BVY9BZ1jltLO8aixyuyM6t/LCgkaLB s2YF9zxZgFdadJfsN2Z/sMfHO0WYaTsGFdgWI9hOx0Y8GLpqnpad8KOYdCBtTnyu 6wvdrkgyA0Wsi6IVXmURkaCQSrdT1Fp5UE+AQFPJFZ5Zm8LLA7btbkJr1zgpm32q u6zrY4tc8Gsl+nnHfVf1jNaZFccDT8Y= -----END CERTIFICATE-----Generated at Wed Aug 6 16:06:05 2025 by rpki-client