$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa File: 66d28256-cbf5-3b31-910e-e10623aa8600.roa (raw, json) Hash identifier: Cay/T2VOJs60rDPTD12g+szRP+iEwiYHytj4BZZaeiY= Subject key identifier: 4A:E4:97:B8:62:B6:E4:B2:05:C6:74:AF:6B:10:E7:DF:76:F8:96:F0 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584B05E13F30A3726B69E3742518 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 7018 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:3f:30:a3:72:6b:69:e3:74:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=cf499384-b577-4c5b-ab77-d80da16f1b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:4c:7f:de:eb:2a:d4:62:55:90:6f:ad:ac: f7:71:d8:bf:ed:24:cf:cb:cb:e0:45:61:62:36:74: 2c:a9:ae:69:62:2c:79:38:66:a0:75:4c:2e:50:3f: 81:94:a2:d4:54:50:9e:6f:fb:ea:0d:5d:94:9a:14: 18:30:8d:a8:cb:cd:b7:b5:f0:80:ce:3e:12:a9:b8: 44:c8:2c:d4:d3:ef:9a:61:72:f1:b2:75:80:3e:34: 20:69:7a:67:3b:be:ec:fe:59:a5:d7:fa:f0:26:f2: ab:ef:0a:8e:d5:2a:38:01:d6:a6:97:82:7a:35:41: f6:8f:92:32:b5:3a:5c:1f:86:39:c9:31:3d:aa:95: 1d:58:15:6b:d6:ea:d1:c6:5f:e7:c8:a8:f2:4b:53: 39:35:b4:33:bd:5e:9e:f5:3b:cb:17:b4:a3:5f:63: 3f:b6:c8:5e:f6:49:e6:e8:f8:fe:fa:3c:c6:08:c9: d0:fe:97:d9:97:d0:40:7a:c0:18:25:0d:3e:96:72: 1d:bf:3b:46:ea:54:e3:ef:df:81:6e:3c:0b:6f:46: 3b:36:95:d7:3b:1e:54:a1:79:4e:9f:3e:ea:86:0b: df:06:f8:09:19:43:8e:88:a7:ec:e5:53:66:f1:53: d6:29:29:2b:34:32:31:bc:71:8a:0a:06:bb:18:ef: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E4:97:B8:62:B6:E4:B2:05:C6:74:AF:6B:10:E7:DF:76:F8:96:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8b:64:18:b3:a5:59:76:68:75:ac:51:ae:52:95:b7:a8:95: b9:6d:e8:5b:8e:ae:e7:f5:10:fb:dd:8a:99:ba:8e:6b:f7:d5: 29:c0:7f:5f:e0:8b:b4:09:c3:f1:eb:33:28:69:67:8b:19:56: fa:16:42:ae:0e:bd:9f:6c:87:dc:77:08:34:73:96:13:03:d9: 3e:64:79:06:8c:c9:da:27:c1:f5:1f:3a:39:13:56:c0:82:38: 02:df:1f:28:e1:db:14:bc:24:3b:b5:5b:64:f7:fd:65:e3:83: 58:8d:16:34:28:5f:c6:20:76:b6:b1:df:6c:af:23:13:54:97: df:71:6d:0d:da:29:2f:8c:2c:0c:8d:b5:95:c5:bc:74:c8:58: 34:40:3d:2c:fd:f0:5b:e5:4e:1a:ff:44:d6:0e:23:6a:de:57: 37:59:a7:60:96:05:48:2f:cd:20:ae:49:7c:e4:e4:e5:69:59: fd:ce:f0:49:06:7e:16:d9:43:f9:a5:08:86:6b:c7:1d:0e:72: 99:20:0b:0e:a7:e4:47:68:15:f9:25:a2:8c:b1:3a:bd:e0:b7: a7:ce:fe:78:c0:87:6d:4e:d9:f0:39:e6:b6:ed:69:f6:8c:1e: 72:50:57:65:79:50:0a:2e:ec:42:f9:fe:a2:e3:bf:f6:05:65: 63:0a:a3:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4T8wo3JraeN0JRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk Y2Y0OTkzODQtYjU3Ny00YzViLWFiNzctZDgwZGExNmYxYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZNMf97rKtRiVZBvraz3cdi/7STPy8vgRWFi NnQsqa5pYix5OGagdUwuUD+BlKLUVFCeb/vqDV2UmhQYMI2oy823tfCAzj4SqbhE yCzU0++aYXLxsnWAPjQgaXpnO77s/lml1/rwJvKr7wqO1So4Adaml4J6NUH2j5Iy tTpcH4Y5yTE9qpUdWBVr1urRxl/nyKjyS1M5NbQzvV6e9TvLF7SjX2M/tshe9knm 6Pj++jzGCMnQ/pfZl9BAesAYJQ0+lnIdvztG6lTj79+BbjwLb0Y7NpXXOx5UoXlO nz7qhgvfBvgJGUOOiKfs5VNm8VPWKSkrNDIxvHGKCga7GO+h5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErkl7hituSyBcZ0r2sQ5992+JbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjZkMjgyNTYtY2JmNS0z YjMxLTkxMGUtZTEwNjIzYWE4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyLZBizpVl2aHWsUa5Slbeolblt6FuOruf1EPvdipm6jmv31SnAf1/g i7QJw/HrMyhpZ4sZVvoWQq4OvZ9sh9x3CDRzlhMD2T5keQaMydonwfUfOjkTVsCC OALfHyjh2xS8JDu1W2T3/WXjg1iNFjQoX8Ygdrax32yvIxNUl99xbQ3aKS+MLAyN tZXFvHTIWDRAPSz98FvlThr/RNYOI2reVzdZp2CWBUgvzSCuSXzk5OVpWf3O8EkG fhbZQ/mlCIZrxx0OcpkgCw6n5EdoFfklooyxOr3gt6fO/njAh21O2fA55rbtafaM HnJQV2V5UAou7EL5/qLjv/YFZWMKozs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:38 2025 by rpki-client