$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa File: 01e40dda-5eab-3214-9c08-7fdc40175580.roa (raw, json) Hash identifier: ef68zR6YR+9UZK+3Q+l/yOYRrF+ABnpkiK+8+W6QOb4= Subject key identifier: 5C:5C:8A:F1:AB:9D:61:7F:AD:59:08:C9:C9:7E:AE:D7:59:15:36:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB84E2F17C4CBCA60C8D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 66.102.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:84:e2:f1:7c:4c:bc:a6:0c:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d979a269-2a05-42fa-8018-c2107cc57bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ee:42:37:b4:34:58:15:dc:1a:7c:f4:34:2b: 84:fb:34:45:f2:a7:ae:bb:f3:57:ee:28:26:85:3c: db:0a:a2:85:f2:8f:1f:e8:96:1f:5b:d5:8a:41:33: 0a:af:59:da:df:5a:33:4c:45:c8:8e:da:c0:8e:75: 3a:3a:b0:29:95:33:35:b3:4a:96:e2:5e:77:0f:c4: 50:f5:96:0f:5c:d9:01:d5:17:e1:6f:57:d9:1a:5b: 52:27:10:2a:94:0b:0a:a6:5d:21:72:42:f9:df:ae: 59:45:85:09:9b:d8:ff:c1:7c:fb:55:91:57:15:66: 11:42:87:e6:a6:65:2d:3c:fb:86:b4:c1:5e:15:78: ae:c2:73:6d:96:20:9d:a0:4d:c5:13:fb:10:2e:44: b4:19:55:7f:d3:76:af:76:3b:c2:90:19:75:ef:43: 00:2b:f6:66:8e:cf:5f:75:5d:d3:0e:0b:44:c8:e4: cf:b8:57:e6:6e:60:28:96:79:9c:89:73:16:4d:cc: db:e1:f3:33:7b:28:a0:ad:98:0e:9a:ea:b7:9a:63: d2:03:fd:09:71:24:87:b4:cc:16:91:b1:fb:50:11: 08:f1:4b:9b:ae:af:65:ac:3c:42:5c:dd:df:e2:b0: 30:6a:eb:24:2c:2b:8e:30:6e:f1:3a:a7:92:15:6c: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:8A:F1:AB:9D:61:7F:AD:59:08:C9:C9:7E:AE:D7:59:15:36:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:09:0e:ad:47:fe:d7:d6:1f:9e:d6:9b:0a:31:c2:5b:f4:3b: 24:3a:7c:1e:60:ee:9d:4b:8e:71:5b:23:73:04:7d:1a:c6:75: 74:30:19:f0:ee:86:35:94:37:e0:a7:b9:99:25:56:17:a4:ee: d7:68:45:80:01:08:36:02:da:be:28:7d:b8:f8:e4:95:7c:a2: bb:cc:43:8b:c0:59:60:d2:11:30:ff:4d:2c:30:84:cc:12:f7: 35:e3:89:e8:46:d2:32:46:b6:b7:ff:bf:d8:7d:f2:72:83:aa: 64:4a:23:9a:9e:70:57:af:35:a0:46:cc:10:c7:8c:44:26:24: f1:70:11:ad:04:7a:14:dc:e8:f1:78:29:ab:f7:52:59:47:4d: 30:72:98:c6:56:57:d0:77:a0:ae:a4:13:fe:02:18:e1:3e:24: 3e:33:d0:4c:68:f9:f0:13:14:04:8c:f9:68:00:0b:64:15:2c: 2b:7d:9c:7a:b8:9f:b4:e5:8c:5f:f5:6d:e1:6f:15:64:94:80: 79:4c:a6:d8:db:66:b9:ac:bf:2c:de:a7:93:aa:a9:d8:3d:29: b5:66:d5:84:2b:25:f5:4e:0d:28:fa:c0:9b:3a:50:5a:d5:68: e5:23:d6:77:62:28:67:4b:a7:d0:4e:4d:8e:6b:a4:b0:b9:56: 31:fa:44:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24Ti8XxMvKYMjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDk3OWEyNjktMmEwNS00MmZhLTgwMTgtYzIxMDdjYzU3YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+u5CN7Q0WBXcGnz0NCuE+zRF8qeuu/NX7igm hTzbCqKF8o8f6JYfW9WKQTMKr1na31ozTEXIjtrAjnU6OrAplTM1s0qW4l53D8RQ 9ZYPXNkB1Rfhb1fZGltSJxAqlAsKpl0hckL5365ZRYUJm9j/wXz7VZFXFWYRQofm pmUtPPuGtMFeFXiuwnNtliCdoE3FE/sQLkS0GVV/03avdjvCkBl170MAK/Zmjs9f dV3TDgtEyOTPuFfmbmAolnmciXMWTczb4fMzeyigrZgOmuq3mmPSA/0JcSSHtMwW kbH7UBEI8Uubrq9lrDxCXN3f4rAwauskLCuOMG7xOqeSFWz5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxcivGrnWF/rVkIycl+rtdZFTalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFlNDBkZGEtNWVhYi0z MjE0LTljMDgtN2ZkYzQwMTc1NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQmYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgJDq1H/tfWH57Wmwoxwlv0OyQ6fB5g7p1LjnFbI3MEfRrGdXQwGfDu hjWUN+CnuZklVhek7tdoRYABCDYC2r4ofbj45JV8orvMQ4vAWWDSETD/TSwwhMwS 9zXjiehG0jJGtrf/v9h98nKDqmRKI5qecFevNaBGzBDHjEQmJPFwEa0EehTc6PF4 Kav3UllHTTBymMZWV9B3oK6kE/4CGOE+JD4z0Exo+fATFASM+WgAC2QVLCt9nHq4 n7TljF/1beFvFWSUgHlMptjbZrmsvyzep5Oqqdg9KbVm1YQrJfVODSj6wJs6UFrV aOUj1ndiKGdLp9BOTY5rpLC5VjH6RPc= -----END CERTIFICATE-----Generated at Tue Aug 5 20:16:44 2025 by rpki-client