$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa File: 60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa (raw, json) Hash identifier: x3sarX5ZN66o0NUlupDlQSgkliIKzYylNBqZ9jMtibM= Subject key identifier: 3C:D2:D9:77:52:B1:45:A4:1E:A6:2A:BF:7A:24:B9:04:24:8C:BB:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB708D38BF6AC3399DDEB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 66.208.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:08:d3:8b:f6:ac:33:99:dd:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a8c2abff-59d0-4156-b714-af120dd86ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:65:73:ea:9d:47:f1:fc:2b:d2:37:05:63: e8:90:ea:b0:cc:0b:b2:aa:99:2f:62:a2:2e:b1:38: 47:fe:6a:5e:c7:1c:0c:33:b7:a7:88:80:f3:85:3e: 5c:2f:3e:27:ab:f4:3d:43:46:ee:19:5a:50:ad:62: cd:74:8d:ee:a8:84:f6:f0:96:b2:bd:7a:6f:ff:91: 0e:91:6f:31:94:92:43:91:c2:18:6f:bb:16:77:e9: a8:9e:e1:af:00:0b:cd:62:3b:fa:78:8e:2b:73:33: fc:10:34:e6:91:ab:c1:ed:cc:09:18:25:59:0e:96: 6f:1c:33:66:1d:73:df:42:a6:04:2f:e1:fd:df:00: ad:a0:8a:c2:78:36:d1:b8:07:6a:8d:8f:d9:c2:52: 0e:16:4a:91:50:28:cf:4c:81:56:28:5e:df:c0:3e: da:23:65:7c:03:95:69:a4:d3:bc:0e:cf:6a:57:52: 9f:c3:8d:66:89:99:df:65:50:2f:7d:53:50:c4:66: ed:e3:a5:84:58:92:ad:a1:65:b8:72:ce:45:56:18: 91:5b:19:10:c6:3c:45:6c:0a:62:55:2e:2c:f9:25: a6:bb:ce:1a:e4:32:d0:32:04:d2:ab:81:50:7c:92: 34:34:78:ed:56:1e:4a:85:6c:10:5e:fb:49:c3:5e: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D2:D9:77:52:B1:45:A4:1E:A6:2A:BF:7A:24:B9:04:24:8C:BB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60618a0d-722d-3e7a-8a62-a2ce3e2d7cb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.208.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a0:2b:f6:6c:b0:ac:22:6d:c6:f2:35:ed:94:bd:6b:37:50: ed:da:be:09:1a:60:93:0a:fb:ce:8d:06:df:4e:a6:44:94:a5: 37:38:47:e0:77:8f:c6:b3:a4:3c:cc:1f:d5:83:fd:69:ac:5c: a7:0e:5f:49:c6:5c:af:bd:78:33:18:56:95:98:8d:35:ef:d1: 3c:ae:03:7c:04:22:ab:cd:4d:3d:13:9f:3b:8c:6d:e9:7c:8c: e7:88:28:ba:b2:e3:d2:d5:96:b9:83:5c:28:b8:a3:f3:d6:2c: 6b:11:4d:35:e9:c1:8d:b9:03:e6:c9:07:8e:7c:77:10:91:d8: 44:de:50:ee:29:e1:9a:ee:20:a9:a5:f3:27:c5:15:ad:b4:ba: 6f:f2:29:68:9b:8b:d0:f8:87:0c:b2:53:4a:9c:5b:47:12:81: 1f:98:c4:95:5b:e4:be:60:78:f2:e5:a2:08:d1:90:dc:27:19: c1:63:57:df:23:77:91:c9:85:71:f6:2f:4e:e4:ea:d2:d2:ae: 15:fd:72:62:7d:7f:2c:c6:1c:37:bd:cd:2a:3d:00:12:89:96: 93:76:db:ec:b7:51:0c:61:d4:53:39:79:29:8e:7b:65:bb:38: 45:20:72:4d:38:13:32:b6:7a:af:bb:2e:43:65:21:ab:98:0d: 2f:5d:39:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twjTi/asM5nd64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YThjMmFiZmYtNTlkMC00MTU2LWI3MTQtYWYxMjBkZDg2Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOhlc+qdR/H8K9I3BWPokOqwzAuyqpkvYqIu sThH/mpexxwMM7eniIDzhT5cLz4nq/Q9Q0buGVpQrWLNdI3uqIT28JayvXpv/5EO kW8xlJJDkcIYb7sWd+monuGvAAvNYjv6eI4rczP8EDTmkavB7cwJGCVZDpZvHDNm HXPfQqYEL+H93wCtoIrCeDbRuAdqjY/ZwlIOFkqRUCjPTIFWKF7fwD7aI2V8A5Vp pNO8Ds9qV1Kfw41miZnfZVAvfVNQxGbt46WEWJKtoWW4cs5FVhiRWxkQxjxFbApi VS4s+SWmu84a5DLQMgTSq4FQfJI0NHjtVh5KhWwQXvtJw14ALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzS2XdSsUWkHqYqv3okuQQkjLvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA2MThhMGQtNzIyZC0z ZTdhLThhNjItYTJjZTNlMmQ3Y2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSgK/ZssKwibcbyNe2UvWs3UO3avgkaYJMK+86NBt9OpkSUpTc4R+B3 j8azpDzMH9WD/WmsXKcOX0nGXK+9eDMYVpWYjTXv0TyuA3wEIqvNTT0TnzuMbel8 jOeIKLqy49LVlrmDXCi4o/PWLGsRTTXpwY25A+bJB458dxCR2ETeUO4p4ZruIKml 8yfFFa20um/yKWibi9D4hwyyU0qcW0cSgR+YxJVb5L5gePLlogjRkNwnGcFjV98j d5HJhXH2L07k6tLSrhX9cmJ9fyzGHDe9zSo9ABKJlpN22+y3UQxh1FM5eSmOe2W7 OEUgck04EzK2eq+7LkNlIauYDS9dOSs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:18 2025 by rpki-client