$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa File: b0d64248-0620-3fb2-b31b-e4ff4326842d.roa (raw, json) Hash identifier: AAbWXJ1ZFOGAwjse8sw2OlkEFIuwQT9ELA0gh1jBljA= Subject key identifier: 7F:76:AF:A9:8C:C0:9D:1B:61:D9:2A:58:C7:C5:74:88:A5:96:6F:96 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B127163F21FA1D10599F06D40 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 21947 IP address blocks: 66.109.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:63:f2:1f:a1:d1:05:99:f0:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=5be81890-51e9-4480-877e-ae945b0f4f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:fa:58:50:4f:e7:8f:b0:4f:f2:71:1d:79: 6e:23:ba:a2:b5:1c:b6:72:96:5d:eb:92:dd:80:03: 9c:18:bf:34:3f:98:c3:6b:8d:79:7a:17:cf:55:75: c6:ad:ef:a2:bb:53:dc:a8:47:fc:a6:0c:fd:d4:7b: 68:e5:53:d1:6e:37:f7:8c:01:26:74:9e:f2:d4:0e: 75:23:90:01:aa:a6:52:f9:71:a3:f5:10:d7:b2:c6: 7c:0d:47:dd:b9:3c:0e:89:f0:d1:f2:69:38:85:a8: f6:37:b5:96:5a:38:b9:65:b0:a7:00:c9:89:b5:a8: 93:0b:90:e1:12:8a:c2:cd:61:93:bb:22:d8:9b:72: df:d0:58:37:8a:08:ab:9a:72:8d:7a:b1:d0:a5:15: c3:85:ca:44:c8:f7:67:a6:e0:44:67:65:38:60:e4: a6:a1:5d:f4:38:be:3a:2c:bb:aa:c2:76:ab:28:ce: 54:61:05:c3:bb:70:d7:fa:cb:3a:cb:5e:95:58:e4: 7f:f0:a4:8b:b6:e4:30:5d:25:09:b6:cc:ec:fa:a2: a1:82:74:dc:e4:b1:52:e4:fa:96:de:ca:1f:0e:20: 45:28:19:fc:13:7c:62:4f:35:b7:04:67:f3:e8:8d: 96:f2:38:86:58:eb:eb:d9:b8:6e:25:30:38:05:b9: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:76:AF:A9:8C:C0:9D:1B:61:D9:2A:58:C7:C5:74:88:A5:96:6F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f2:9d:68:89:a0:8a:ac:6c:23:b9:e6:62:37:bd:34:aa:ed: ad:f1:c2:32:01:48:0c:19:8f:7e:03:cc:f8:3a:da:0e:22:8b: 60:60:7a:fc:9c:9a:24:53:a5:c0:f9:e6:2c:84:e8:67:bb:8f: f2:07:31:be:e3:9e:6b:cd:91:2a:6c:6c:00:e3:85:75:cf:19: e2:15:b2:03:21:7d:fd:86:37:cb:6d:11:3b:29:8b:3d:ae:82: 5b:6b:b5:dc:2d:9c:bf:07:44:04:28:98:b3:e1:bf:53:71:e9: 4f:53:4f:2f:97:ad:fa:a8:02:b6:3b:80:cf:05:d2:34:a4:ce: 94:4e:48:ce:f7:43:d0:59:7e:46:1c:4c:17:6c:f3:9a:5d:6a: 0b:15:0b:01:63:5f:bd:84:23:81:1e:1f:e4:cc:41:80:0e:e2: f8:b3:1e:c3:0b:ce:48:dd:c0:30:7a:fb:8b:af:0c:d1:b2:a8: 02:59:95:cc:ff:1e:39:23:d3:9c:dd:0f:c7:0c:3f:05:ae:bc: c7:c7:e9:30:c1:a3:14:e8:46:26:da:62:ed:1e:69:04:9c:75: 9a:a7:0f:ac:a7:5c:36:70:b4:83:d0:60:a4:e2:2f:68:5f:66: e6:bc:21:a3:08:eb:56:e2:24:84:56:fc:90:3b:d1:3e:60:56: af:ab:5c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWPyH6HRBZnwbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk NWJlODE4OTAtNTFlOS00NDgwLTg3N2UtYWU5NDViMGY0ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2b6WFBP54+wT/JxHXluI7qitRy2cpZd65Ld gAOcGL80P5jDa415ehfPVXXGre+iu1PcqEf8pgz91Hto5VPRbjf3jAEmdJ7y1A51 I5ABqqZS+XGj9RDXssZ8DUfduTwOifDR8mk4haj2N7WWWji5ZbCnAMmJtaiTC5Dh EorCzWGTuyLYm3Lf0Fg3igirmnKNerHQpRXDhcpEyPdnpuBEZ2U4YOSmoV30OL46 LLuqwnarKM5UYQXDu3DX+ss6y16VWOR/8KSLtuQwXSUJtszs+qKhgnTc5LFS5PqW 3sofDiBFKBn8E3xiTzW3BGfz6I2W8jiGWOvr2bhuJTA4BblsiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH92r6mMwJ0bYdkqWMfFdIillm+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjBkNjQyNDgtMDYyMC0z ZmIyLWIzMWItZTRmZjQzMjY4NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQm2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7ynWiJoIqsbCO55mI3vTSq7a3xwjIBSAwZj34DzPg62g4ii2Bgevyc miRTpcD55iyE6Ge7j/IHMb7jnmvNkSpsbADjhXXPGeIVsgMhff2GN8ttETspiz2u gltrtdwtnL8HRAQomLPhv1Nx6U9TTy+XrfqoArY7gM8F0jSkzpROSM73Q9BZfkYc TBds85pdagsVCwFjX72EI4EeH+TMQYAO4vizHsMLzkjdwDB6+4uvDNGyqAJZlcz/ Hjkj05zdD8cMPwWuvMfH6TDBoxToRibaYu0eaQScdZqnD6ynXDZwtIPQYKTiL2hf Zua8IaMI61biJIRW/JA70T5gVq+rXJE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:14 2025 by rpki-client