$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa File: 38b0deb3-ebb4-3576-86af-67255c5388ed.roa (raw, json) Hash identifier: pboa49FuFHDEUqc7202l5z/VXZrN+EevZ8wBkwLT1qw= Subject key identifier: 13:4A:1E:10:FB:65:F7:DC:E1:4A:CE:B0:27:07:BB:D3:76:96:BA:7B Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584BA39D00CB5616B7A5F88D0D80 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 32181 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:00:cb:56:16:b7:a5:f8:8d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=85b71fcf-efde-47d0-8ad3-d0ea05f4f105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:52:4f:4c:6c:5b:4b:0b:29:b2:8b:cc:50: 88:cd:02:45:f6:b0:63:24:b0:15:69:44:cd:a5:d6: b3:64:35:04:5c:d0:bc:9d:d3:be:1c:66:20:e6:1e: fc:bd:fc:b2:99:1f:fe:71:dd:9b:e8:53:b9:66:0c: 18:17:8d:58:ff:00:3b:c2:98:8c:7f:e3:44:b3:2c: 00:bb:e9:db:8a:da:bb:7a:89:e4:53:e5:77:07:68: 27:2a:7b:11:98:74:91:c2:f3:85:f3:be:bc:91:01: 3b:49:5a:22:22:b0:3e:fd:13:e5:91:24:a0:76:56: 24:6c:7d:83:4b:d5:40:6c:c7:51:3b:cb:81:8a:b6: 34:10:d8:14:bf:37:1b:d6:63:c4:80:a4:64:ac:70: eb:07:a2:ba:ed:a5:fb:da:a0:00:84:c7:b4:17:9f: 70:23:26:cf:b1:50:83:f6:18:0c:92:3d:bf:af:d0: 59:d8:c1:66:06:ef:d1:91:47:ae:95:85:07:e4:93: f5:17:b4:69:dd:dd:1d:5a:e0:3a:fe:22:25:ea:ad: c1:e1:a6:a8:84:67:76:d4:54:45:d5:06:7c:44:64: 0b:50:58:fa:e0:ed:f1:ad:6b:57:36:59:9a:77:68: 6f:cb:4d:26:89:d2:40:64:57:ad:1a:43:04:19:91: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4A:1E:10:FB:65:F7:DC:E1:4A:CE:B0:27:07:BB:D3:76:96:BA:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f8:dc:2e:79:16:dd:53:b7:fa:14:81:a6:90:23:2c:10:3e: 50:8f:d8:af:44:bc:89:db:8a:c4:55:5b:48:37:b5:8f:88:b4: 6f:03:d1:55:b2:5a:5f:6c:47:a2:9e:d4:27:48:3a:55:55:b2: 7f:28:3a:eb:73:6f:20:34:18:2e:6b:75:94:a1:60:1f:23:d4: b2:d6:6d:46:f2:57:ad:af:29:87:bf:c2:7e:66:68:d1:e7:74: 1b:0c:81:b6:3c:fa:59:58:a8:64:58:fb:dd:0e:e2:45:99:96: 3b:55:cd:b9:29:1e:eb:b8:e5:96:9b:49:60:fd:e8:a1:e7:e0: 2a:df:66:fe:d8:da:33:ef:36:c8:0f:ba:38:9e:28:da:3c:7f: fb:9d:ab:69:d9:14:53:13:42:1b:77:9b:a9:46:c4:f2:80:a3: d1:02:76:62:ca:d9:7a:c1:5f:aa:8b:72:6f:1a:f8:f5:af:e1: 2b:9c:69:ba:79:fe:d8:ee:48:a1:e1:a8:1e:2b:52:2c:2c:52: 65:e3:13:00:5b:ac:7a:cd:55:7f:ce:cd:ac:83:20:93:b5:8a: 5d:7e:dc:7d:de:49:cb:67:19:d1:6e:30:1f:79:c3:15:60:b1: 6d:dd:f9:c4:17:d6:df:c4:e0:6c:04:4b:24:e7:f9:49:09:c2: cc:24:3b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQDLVha3pfiNDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODViNzFmY2YtZWZkZS00N2QwLThhZDMtZDBlYTA1ZjRmMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ZST0xsW0sLKbKLzFCIzQJF9rBjJLAVaUTN pdazZDUEXNC8ndO+HGYg5h78vfyymR/+cd2b6FO5ZgwYF41Y/wA7wpiMf+NEsywA u+nbitq7eonkU+V3B2gnKnsRmHSRwvOF8768kQE7SVoiIrA+/RPlkSSgdlYkbH2D S9VAbMdRO8uBirY0ENgUvzcb1mPEgKRkrHDrB6K67aX72qAAhMe0F59wIybPsVCD 9hgMkj2/r9BZ2MFmBu/RkUeulYUH5JP1F7Rp3d0dWuA6/iIl6q3B4aaohGd21FRF 1QZ8RGQLUFj64O3xrWtXNlmad2hvy00midJAZFetGkMEGZFaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNKHhD7Zffc4UrOsCcHu9N2lrp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMzhiMGRlYjMtZWJiNC0z NTc2LTg2YWYtNjcyNTVjNTM4OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ743C55Ft1Tt/oUgaaQIywQPlCP2K9EvInbisRVW0g3tY+ItG8D0VWy Wl9sR6Ke1CdIOlVVsn8oOutzbyA0GC5rdZShYB8j1LLWbUbyV62vKYe/wn5maNHn dBsMgbY8+llYqGRY+90O4kWZljtVzbkpHuu45ZabSWD96KHn4CrfZv7Y2jPvNsgP ujieKNo8f/udq2nZFFMTQht3m6lGxPKAo9ECdmLK2XrBX6qLcm8a+PWv4Sucabp5 /tjuSKHhqB4rUiwsUmXjEwBbrHrNVX/OzayDIJO1il1+3H3eSctnGdFuMB95wxVg sW3d+cQX1t/E4GwESyTn+UkJwswkO6E= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:59 2025 by rpki-client