$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa File: a608f793-5bc4-3f6e-a460-f0e592ab913e.roa (raw, json) Hash identifier: 4JpEuIXahjAu+UE70o4UpAgLKm4SOoTdYcd9P2nZaIE= Subject key identifier: 91:83:8C:41:0B:2A:D2:A1:79:AE:3D:EB:40:25:E5:AE:DC:EC:C5:FE Certificate issuer: /CN=6396ecb5-3b91-4d1e-b787-089230813a23 Certificate serial: 010D0C9F4328584B1C36BD30BBA1E6FCB5372000 Authority key identifier: EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 400777 IP address blocks: 66.59.204.0/24 maxlen: 24 66.59.205.0/24 maxlen: 24 66.59.206.0/24 maxlen: 24 66.59.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:bd:30:bb:a1:e6:fc:b5:37:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6396ecb5-3b91-4d1e-b787-089230813a23 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c1686e0a-4b42-440a-8e54-507d94778acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:5d:87:77:42:ef:10:3e:56:05:9c:f9:21: 2c:46:d7:75:1d:2b:e2:bc:ba:4b:97:6f:06:0c:3d: 73:27:af:98:96:f7:78:73:e4:ad:e0:e2:b0:5b:f3: 3a:44:97:45:13:d8:f6:32:e0:e1:e4:01:73:e0:ce: 5f:63:be:f0:e0:7f:14:87:6a:da:e7:e6:d2:7a:bf: ba:f1:37:e3:7e:09:a7:98:23:88:5f:9c:f0:1c:d4: 4c:ee:5f:d9:72:44:1e:40:08:0d:b0:e1:8a:9f:75: 39:64:ba:e8:23:c4:0e:f9:ff:2c:53:e1:71:2f:b8: fe:62:a8:54:70:d0:36:90:68:5f:70:c9:db:c0:ac: 2a:bf:e2:60:b6:a9:e4:03:7e:79:f9:15:ee:e0:1f: 50:1a:1f:a7:5d:1c:b5:50:06:77:af:89:87:79:6d: 4b:bd:6d:33:9c:29:ea:76:d3:6d:4a:66:10:c1:52: 26:3a:a6:65:7a:88:e4:3f:44:fe:6c:8f:90:49:a9: bd:62:2c:35:bc:8a:58:74:ae:1a:69:84:8e:ed:8e: 52:4e:f7:c7:51:c7:85:70:41:b2:d9:5c:2c:50:5d: ee:27:06:9a:c7:c2:bd:ac:2f:74:86:7b:be:c7:12: 60:d3:d8:3f:ab:8a:26:46:46:15:b5:4f:3e:0a:2a: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:8C:41:0B:2A:D2:A1:79:AE:3D:EB:40:25:E5:AE:DC:EC:C5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl X509v3 Authority Key Identifier: keyid:EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer sbgp-ipAddrBlock: critical IPv4: 66.59.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:06:10:b4:f1:ee:e6:fb:94:2e:25:0c:ff:c8:b3:05:69:98: 01:e8:18:44:f7:52:ab:ee:69:b7:c3:ef:23:64:75:d2:85:9d: 0e:ae:32:dc:80:90:f9:94:8c:da:96:a8:53:92:7c:d0:92:7d: 78:90:3c:9e:fc:04:ef:52:69:3c:c8:0e:7b:bb:c7:05:b7:85: 92:94:28:2d:ee:3c:5c:ec:cd:e9:dc:21:cc:44:36:0c:05:15: ad:b1:7a:42:94:36:36:9e:f0:82:da:74:62:29:31:3d:c2:87: 04:f2:d1:5e:ea:f7:6f:ba:fc:25:9e:72:c5:18:07:c7:b6:d3: fc:1e:17:ac:ab:8e:3e:03:47:3a:5a:45:0d:b9:7a:dc:29:f5: e0:08:2e:e9:7d:be:b2:2e:ba:ba:67:bf:a0:04:df:dd:7b:ef: 57:7e:28:96:3c:11:8f:97:07:55:f5:b4:c6:a1:f7:95:9a:c5: 50:68:3d:21:38:99:57:eb:33:05:fc:56:d3:49:fe:13:ba:73: e7:df:a5:9b:2c:09:51:68:90:78:30:b9:9d:33:26:d4:42:63: 92:bf:4b:c5:f6:22:a7:d0:70:84:63:90:b0:be:dc:02:99:48: d6:e1:e2:c2:3c:29:96:51:21:05:ee:97:d2:62:bb:35:ec:28: 68:35:30:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNr0wu6Hm/LU3IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM5NmVjYjUtM2I5MS00ZDFlLWI3ODctMDg5MjMwODEz YTIzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzE2ODZlMGEtNGI0Mi00NDBhLThlNTQtNTA3ZDk0Nzc4YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6Jdh3dC7xA+VgWc+SEsRtd1HSvivLpLl28G DD1zJ6+Ylvd4c+St4OKwW/M6RJdFE9j2MuDh5AFz4M5fY77w4H8Uh2ra5+bSer+6 8TfjfgmnmCOIX5zwHNRM7l/ZckQeQAgNsOGKn3U5ZLroI8QO+f8sU+FxL7j+YqhU cNA2kGhfcMnbwKwqv+JgtqnkA355+RXu4B9QGh+nXRy1UAZ3r4mHeW1LvW0znCnq dtNtSmYQwVImOqZleojkP0T+bI+QSam9Yiw1vIpYdK4aaYSO7Y5STvfHUceFcEGy 2VwsUF3uJwaax8K9rC90hnu+xxJg09g/q4omRkYVtU8+CirAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGDjEELKtKhea4960Al5a7c7MX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2 ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODkyMzA4MTNhMjMvYTYwOGY3OTMtNWJjNC0z ZjZlLWE0NjAtZjBlNTkyYWI5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjM5NmVjYjUtM2I5MS00ZDFlLWI3 ODctMDg5MjMwODEzYTIzLzYzOTZlY2I1LTNiOTEtNGQxZS1iNzg3LTA4OTIzMDgx M2EyMy5jcmwwHwYDVR0jBBgwFoAU6llvlg/jYCQAKaKkS4JQIwBrFSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODky MzA4MTNhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQGELTx7ub7lC4lDP/IswVpmAHoGET3UqvuabfD7yNkddKFnQ6uMtyA kPmUjNqWqFOSfNCSfXiQPJ78BO9SaTzIDnu7xwW3hZKUKC3uPFzszencIcxENgwF Fa2xekKUNjae8ILadGIpMT3ChwTy0V7q92+6/CWecsUYB8e20/weF6yrjj4DRzpa RQ25etwp9eAILul9vrIuurpnv6AE391771d+KJY8EY+XB1X1tMah95WaxVBoPSE4 mVfrMwX8VtNJ/hO6c+ffpZssCVFokHgwuZ0zJtRCY5K/S8X2IqfQcIRjkLC+3AKZ SNbh4sI8KZZRIQXul9JiuzXsKGg1MAQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:56 2025 by rpki-client