$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa File: 66b96ba3-a619-320e-96a1-c3dfb3782abd.roa (raw, json) Hash identifier: KKYDDB0Eu4l8+mUB9KB1+y1OzrTgQjPAPiG4+y5DNrY= Subject key identifier: A1:D1:6E:7D:5F:9D:5E:43:2B:77:1A:40:67:24:C3:34:B8:D6:A4:4B Certificate issuer: /CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Certificate serial: 010D0C9F4328584B9E079EF2D2FF1244629E3B80 Authority key identifier: 2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 398982 IP address blocks: 172.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9e:f2:d2:ff:12:44:62:9e:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2d87ddbc-cf00-47cb-b073-f441da9a990e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:0c:29:81:e1:b4:eb:b1:c4:21:c4:d7:c8: 2b:fc:03:9d:e4:69:1f:44:1b:61:ad:93:35:45:06: f4:26:79:33:92:32:71:97:a9:6f:6a:d5:e2:73:b3: 90:6a:ff:28:68:54:66:29:a5:08:3e:45:56:f8:e3: a9:6e:ad:fe:9a:eb:ed:a1:15:b4:af:c9:14:6e:da: 89:31:5a:4a:71:5f:60:9e:da:28:8a:7e:5b:c1:6b: ca:2d:e5:68:b7:5a:3c:e2:58:0f:c2:7d:e9:8e:66: cc:07:23:3a:90:8c:f3:d8:de:2d:ca:03:9f:90:5f: fa:13:6a:38:fe:b1:f1:08:21:b2:11:cd:df:eb:76: c1:5a:42:0f:f1:36:fb:28:ee:2e:bc:05:5f:9a:6c: 3b:59:99:fd:32:b0:38:c2:c5:39:24:ea:29:26:12: da:af:6b:90:dd:8a:28:38:66:1f:b2:2c:f3:f3:40: d8:0a:ae:60:1d:82:68:2f:8c:0b:94:f2:be:ac:65: ed:48:ae:3d:ac:64:ef:a8:2f:a2:92:20:02:dd:ad: 57:31:8a:ff:e5:cf:58:97:27:d5:a3:dc:68:54:03: a2:d5:8b:8b:a2:2f:e5:0d:dd:cb:47:6c:eb:78:ad: e3:e4:b0:8f:c0:8d:04:63:e9:0b:eb:ca:b4:27:0d: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D1:6E:7D:5F:9D:5E:43:2B:77:1A:40:67:24:C3:34:B8:D6:A4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl X509v3 Authority Key Identifier: keyid:2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e7:90:bc:7f:11:19:05:db:a8:59:23:e9:e3:70:df:c4:27: d4:0f:d4:5f:dc:4e:be:41:18:ee:ff:d0:a1:4c:29:c7:bd:11: ae:f3:33:f7:87:63:e9:13:5d:f2:33:e3:06:37:49:7f:ec:5c: cc:88:60:2f:99:c8:27:74:dc:db:7a:22:29:f4:e9:6e:e2:e8: b8:be:05:0c:5e:1a:31:bd:e2:ed:cc:2e:94:cb:4c:23:3e:c2: 55:84:cc:42:17:db:79:cb:97:6b:1f:ef:f4:fa:08:f1:dc:a0: 6e:1e:fa:ee:55:99:bf:f0:04:e0:88:2a:8e:4d:78:05:02:62: 67:ed:9a:18:59:aa:ab:30:00:0c:7c:89:ca:dc:61:09:55:bb: 53:36:75:a9:67:11:0a:70:d3:29:d9:4e:45:65:ff:78:14:78: 7a:c8:52:ed:49:ec:a5:38:7a:a6:ac:33:19:ca:57:51:13:2a: 32:dc:c9:2d:60:38:8e:86:91:88:e7:bd:05:02:25:45:b7:e4: 1e:32:48:a5:f9:3c:e4:95:bc:b8:0d:1d:db:15:95:1f:1a:14: 33:f5:eb:c3:55:ac:a5:61:74:39:47:2d:a0:f0:96:ac:ad:89: a7:4e:12:f4:68:d0:dd:c6:1a:cf:5b:a6:57:8e:a3:24:91:06: aa:a3:2f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB57y0v8SRGKeO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3ZjNlZDAtY2E4ZS00MDliLWI2YWQtNGY0MzE3NDNj OTBhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmQ4N2RkYmMtY2YwMC00N2NiLWIwNzMtZjQ0MWRhOWE5OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7isMKYHhtOuxxCHE18gr/AOd5GkfRBthrZM1 RQb0JnkzkjJxl6lvatXic7OQav8oaFRmKaUIPkVW+OOpbq3+muvtoRW0r8kUbtqJ MVpKcV9gntooin5bwWvKLeVot1o84lgPwn3pjmbMByM6kIzz2N4tygOfkF/6E2o4 /rHxCCGyEc3f63bBWkIP8Tb7KO4uvAVfmmw7WZn9MrA4wsU5JOopJhLar2uQ3Yoo OGYfsizz80DYCq5gHYJoL4wLlPK+rGXtSK49rGTvqC+ikiAC3a1XMYr/5c9YlyfV o9xoVAOi1YuLoi/lDd3LR2zreK3j5LCPwI0EY+kL68q0Jw24OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHRbn1fnV5DK3caQGckwzS41qRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdm M2VkMC1jYThlLTQwOWItYjZhZC00ZjQzMTc0M2M5MGEvNjZiOTZiYTMtYTYxOS0z MjBlLTk2YTEtYzNkZmIzNzgyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY3ZjNlZDAtY2E4ZS00MDliLWI2 YWQtNGY0MzE3NDNjOTBhLzFmN2YzZWQwLWNhOGUtNDA5Yi1iNmFkLTRmNDMxNzQz YzkwYS5jcmwwHwYDVR0jBBgwFoAULnk8fLh7iCFhGXQjaJ45WRXQ4PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdmM2VkMC1jYThlLTQwOWItYjZhZC00ZjQz MTc0M2M5MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7nkLx/ERkF26hZI+njcN/EJ9QP1F/cTr5BGO7/0KFMKce9Ea7zM/eH Y+kTXfIz4wY3SX/sXMyIYC+ZyCd03Nt6Iin06W7i6Li+BQxeGjG94u3MLpTLTCM+ wlWEzEIX23nLl2sf7/T6CPHcoG4e+u5Vmb/wBOCIKo5NeAUCYmftmhhZqqswAAx8 icrcYQlVu1M2dalnEQpw0ynZTkVl/3gUeHrIUu1J7KU4eqasMxnKV1ETKjLcyS1g OI6GkYjnvQUCJUW35B4ySKX5POSVvLgNHdsVlR8aFDP168NVrKVhdDlHLaDwlqyt iadOEvRo0N3GGs9bpleOoySRBqqjL/o= -----END CERTIFICATE-----Generated at Wed Nov 5 14:39:48 2025 by rpki-client