$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa File: 33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa (raw, json) Hash identifier: jIR35S7djx0bIN2HTZTl0T4uHfyDdIPFwaQQ1MYoPUc= Subject key identifier: A1:9B:75:AF:5F:23:1D:6C:73:09:BF:D8:A2:35:9D:DA:CE:39:E5:44 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584B76F25D1CA1E8F7901AE1C080 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 174 IP address blocks: 65.166.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5d:1c:a1:e8:f7:90:1a:e1:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7a3e242e-bc0a-44bb-8766-e0ea4940e39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:ff:fc:0d:35:16:33:da:3d:64:ef:d9:03: 16:fc:82:03:6a:77:18:8e:f2:2c:1f:14:28:c8:2f: de:6a:f4:3f:a9:00:fb:59:54:f5:32:4b:db:f0:f2: 30:88:29:14:2c:d9:04:88:b4:ed:7f:75:14:85:9c: 47:5f:6d:77:8a:8b:50:b3:1b:17:d0:b3:47:b5:0e: 88:b8:61:97:97:95:0d:a8:3f:25:1c:55:ce:25:83: 85:76:0c:62:a4:bb:76:1a:b1:38:92:a5:da:b6:c3: 17:c6:ba:96:2b:ca:03:47:67:f8:77:ed:3a:3f:59: 0e:ff:d6:0d:2c:40:bd:2b:ae:71:e9:60:27:52:a3: ff:fd:d8:91:31:1f:82:09:21:0c:a3:d6:82:bf:20: f2:67:cb:8b:1d:67:a8:9a:8a:59:f8:72:14:d2:7a: 26:41:e0:72:76:d9:fd:a0:f2:bc:c4:ab:97:86:30: 1b:6d:bf:82:1e:c5:6a:55:c5:fb:0f:eb:03:5c:f7: 6e:e3:b0:75:15:dc:19:91:b0:ff:25:d8:67:07:95: 74:20:21:c9:79:74:ae:dd:6c:88:4a:3a:9c:a1:13: 34:19:35:50:fc:c8:f2:11:e4:08:6a:ac:f5:f6:70: 8b:ff:ec:d8:7d:ca:90:c0:64:0c:a6:c8:c6:9a:3d: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9B:75:AF:5F:23:1D:6C:73:09:BF:D8:A2:35:9D:DA:CE:39:E5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 65.166.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:60:da:3f:01:a2:5f:55:b0:38:64:23:9a:1d:12:68:e4:74: 01:7a:4b:6f:4f:fc:29:0e:b3:28:65:ed:3f:f0:46:52:2a:47: 87:7f:0f:75:db:3e:a1:70:84:78:9c:f4:25:ef:81:6b:77:2f: 46:55:e9:98:31:93:31:9f:4e:02:8d:aa:6e:a1:ab:68:51:b3: b9:55:5d:a3:41:6b:2d:f5:7e:41:d3:02:2f:5e:f7:63:93:77: e6:e2:a1:d7:2a:ec:87:9e:f8:94:9f:0f:32:bc:e3:a2:b9:f8: 12:e1:83:84:57:df:93:c9:2f:62:c2:ca:53:1a:25:45:69:de: 58:d4:33:2b:c5:b6:67:aa:de:b6:38:c7:ed:4e:fe:45:0c:e5: 48:e9:d7:0f:4b:03:48:53:a9:7a:96:1e:18:df:f5:01:f1:1f: 80:35:a9:b4:00:ac:3a:1e:27:89:13:5c:ad:ab:a7:cd:f5:ce: df:d6:33:02:d0:66:0f:e6:ea:0d:b5:34:f2:27:c9:4c:db:d4: 9d:ba:1e:1c:ca:08:b6:e6:e3:6d:f0:65:51:61:53:67:3e:af: a2:d6:13:a3:01:52:66:af:f5:55:47:52:6c:ac:68:fe:91:d8: e4:e2:12:f4:d7:36:96:b3:48:ed:ff:27:96:4e:6d:74:61:40: 9b:c0:79:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28l0coej3kBrhwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2EzZTI0MmUtYmMwYS00NGJiLTg3NjYtZTBlYTQ5NDBlMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzH//A01FjPaPWTv2QMW/IIDancYjvIsHxQo yC/eavQ/qQD7WVT1Mkvb8PIwiCkULNkEiLTtf3UUhZxHX213iotQsxsX0LNHtQ6I uGGXl5UNqD8lHFXOJYOFdgxipLt2GrE4kqXatsMXxrqWK8oDR2f4d+06P1kO/9YN LEC9K65x6WAnUqP//diRMR+CCSEMo9aCvyDyZ8uLHWeomopZ+HIU0nomQeBydtn9 oPK8xKuXhjAbbb+CHsVqVcX7D+sDXPdu47B1FdwZkbD/JdhnB5V0ICHJeXSu3WyI SjqcoRM0GTVQ/MjyEeQIaqz19nCL/+zYfcqQwGQMpsjGmj1VqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGbda9fIx1scwm/2KI1ndrOOeVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMzNjNzlkMGQtYmZiYS0z ZTlmLWEzMTQtNmVhYjE2ZmQ0ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpg2j8Bol9VsDhkI5odEmjkdAF6S29P/CkOsyhl7T/wRlIqR4d/D3Xb PqFwhHic9CXvgWt3L0ZV6ZgxkzGfTgKNqm6hq2hRs7lVXaNBay31fkHTAi9e92OT d+biodcq7Iee+JSfDzK846K5+BLhg4RX35PJL2LCylMaJUVp3ljUMyvFtmeq3rY4 x+1O/kUM5Ujp1w9LA0hTqXqWHhjf9QHxH4A1qbQArDoeJ4kTXK2rp831zt/WMwLQ Zg/m6g21NPInyUzb1J26HhzKCLbm423wZVFhU2c+r6LWE6MBUmav9VVHUmysaP6R 2OTiEvTXNpazSO3/J5ZObXRhQJvAeX0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:25:49 2025 by rpki-client