$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa File: af07d9a3-0774-3d53-9e00-35661826a9bc.roa (raw, json) Hash identifier: ArQSdiEd3n7wbT3LVFePXrJBPEBgih2zkjxuL4b+SDk= Subject key identifier: 77:47:06:C0:57:81:10:21:D2:7B:B3:DD:D4:CC:3B:04:9A:E1:66:A0 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584B80B76194BBBD5FEF693AB600 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 6505 IP address blocks: 66.96.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:61:94:bb:bd:5f:ef:69:3a:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=131e1e53-1577-4f9d-9b6e-099159a65b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:d7:23:88:85:93:90:b5:d4:2c:b4:21:24: 1b:c0:e8:62:02:95:8c:98:f1:74:20:3e:e8:70:e0: 62:89:37:83:70:9e:9d:50:b6:80:92:dd:aa:9c:a1: a1:61:c0:c3:7a:5b:75:93:f2:f4:95:75:ef:02:3f: 0b:4c:08:f7:46:d5:d5:95:db:d0:9b:2e:2b:42:36: c1:7f:f2:fe:1e:32:0a:e3:39:96:2d:ba:6e:9b:cd: 0f:06:d9:62:ca:d6:3e:ab:66:aa:86:83:65:c1:10: be:9f:62:b9:5d:88:9d:3d:99:77:20:95:90:97:5b: 75:f5:94:4f:6b:28:4e:58:cd:d5:71:cf:85:54:fa: e5:32:f1:0c:16:6d:ab:d0:3a:38:3f:71:51:2f:4a: 27:ae:f0:c0:ac:91:6f:a5:01:d7:38:27:e4:1b:35: 7d:4f:71:bd:81:bd:66:95:73:f4:65:15:a1:b0:f9: 98:95:4d:82:52:3c:1e:6b:1c:11:c2:29:4d:b7:c7: 3b:0f:f7:26:1e:8f:03:40:8d:8d:56:da:f9:29:f3: 24:24:17:4a:bf:b8:51:34:3f:37:d6:bf:45:59:93: 1a:1b:63:78:b5:98:0d:ff:ae:da:43:e8:82:db:99: c1:4f:4f:b1:89:91:e3:80:65:85:d9:23:8b:71:24: be:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:47:06:C0:57:81:10:21:D2:7B:B3:DD:D4:CC:3B:04:9A:E1:66:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.96.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:55:46:ae:ab:2a:1b:a3:db:9f:97:53:8c:d6:66:db:6a:3d: 49:df:5a:4e:70:0d:77:72:ec:77:81:26:0c:90:b2:0d:16:90: dd:b7:c4:fc:a0:8f:09:01:56:66:a9:16:8a:6d:20:f9:fc:87: 27:fd:bc:8b:67:f2:4d:36:ac:3e:22:ca:26:ac:d9:cd:34:6f: 67:4d:98:66:33:84:99:fb:1d:a5:4e:e2:33:67:63:d4:ed:7b: 53:6b:e2:a3:0b:18:d6:7b:a7:40:b5:97:91:94:39:8f:92:79: e4:60:f3:ff:77:1d:c6:49:34:d1:93:6d:fc:b2:13:3c:b6:95: f7:59:58:8d:44:86:c2:58:6e:34:0f:af:f1:3b:cb:46:46:88: d6:2d:1c:d2:db:62:a4:1f:8e:26:71:8d:9b:2d:06:9d:7d:51: a5:28:69:ff:a8:7e:3e:7a:d4:27:c2:7e:2b:41:e7:0f:d2:c4: d9:38:81:dd:19:4c:1b:04:ec:de:cd:43:6c:2d:81:f1:a3:76: f2:94:92:e6:99:71:88:06:f5:57:ec:54:1a:2c:ce:96:5e:19: 8f:cf:5d:aa:c2:05:07:5f:9a:e6:01:06:62:56:ee:9b:1d:db: 48:ac:dd:ad:bf:48:d2:b1:60:a8:2e:5f:3f:83:12:d9:bd:23: 2a:58:2c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2GUu71f72k6tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MTMxZTFlNTMtMTU3Ny00ZjlkLTliNmUtMDk5MTU5YTY1YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVXXI4iFk5C11Cy0ISQbwOhiApWMmPF0ID7o cOBiiTeDcJ6dULaAkt2qnKGhYcDDelt1k/L0lXXvAj8LTAj3RtXVldvQmy4rQjbB f/L+HjIK4zmWLbpum80PBtliytY+q2aqhoNlwRC+n2K5XYidPZl3IJWQl1t19ZRP ayhOWM3Vcc+FVPrlMvEMFm2r0Do4P3FRL0onrvDArJFvpQHXOCfkGzV9T3G9gb1m lXP0ZRWhsPmYlU2CUjweaxwRwilNt8c7D/cmHo8DQI2NVtr5KfMkJBdKv7hRND83 1r9FWZMaG2N4tZgN/67aQ+iC25nBT0+xiZHjgGWF2SOLcSS+eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdHBsBXgRAh0nuz3dTMOwSa4WagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYWYwN2Q5YTMtMDc3NC0z ZDUzLTllMDAtMzU2NjE4MjZhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQmAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtVRq6rKhuj25+XU4zWZttqPUnfWk5wDXdy7HeBJgyQsg0WkN23xPyg jwkBVmapFoptIPn8hyf9vItn8k02rD4iyias2c00b2dNmGYzhJn7HaVO4jNnY9Tt e1Nr4qMLGNZ7p0C1l5GUOY+SeeRg8/93HcZJNNGTbfyyEzy2lfdZWI1EhsJYbjQP r/E7y0ZGiNYtHNLbYqQfjiZxjZstBp19UaUoaf+ofj561CfCfitB5w/SxNk4gd0Z TBsE7N7NQ2wtgfGjdvKUkuaZcYgG9VfsVBoszpZeGY/PXarCBQdfmuYBBmJW7psd 20is3a2/SNKxYKguXz+DEtm9IypYLIA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:59:23 2025 by rpki-client