$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3fc0868f-e013-3737-8610-9c5982861b4e.roa File: 3fc0868f-e013-3737-8610-9c5982861b4e.roa (raw, json) Hash identifier: EPLNmcu3CFYQWRJGrHLyJY+PYaPZ02WZdxrlkxL2ehU= Subject key identifier: 04:A5:87:0B:31:6A:9C:4E:6B:FF:72:2C:9B:FE:A6:C7:FF:7B:F4:5D Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584AECC14361042698D7E6A7EA00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3fc0868f-e013-3737-8610-9c5982861b4e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 12083 IP address blocks: 66.216.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:43:61:04:26:98:d7:e6:a7:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=eb9fabe9-88b7-4805-bd6b-40e3a3216e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:d0:b5:d3:c1:27:c9:23:20:19:ec:ed:d7: e7:78:29:d6:b2:55:76:c9:b1:ef:63:25:af:f5:5f: bc:2e:9f:b4:96:f0:e5:d5:6d:b2:18:8f:49:c2:98: 14:1b:05:19:61:01:e0:1a:ed:aa:70:f0:cd:1f:c6: 8b:6b:ea:63:49:b3:f4:c2:d7:1e:a8:d4:2c:de:26: 97:c9:a4:5f:d9:97:a0:f5:2f:5f:30:13:ef:2c:24: dc:59:c0:52:f2:1f:d9:f2:7a:d9:24:af:b1:eb:81: 44:ad:61:a7:fb:7c:6b:91:07:a5:25:0f:9e:5b:8b: 40:6c:c8:0b:7a:fd:9f:4c:63:8a:c2:62:9d:6f:56: 7c:8b:f3:c4:55:1a:d6:c6:27:fe:9c:64:6b:1c:46: 98:52:98:26:26:7d:49:8d:5b:21:47:e3:0c:38:48: 44:25:f4:05:64:93:1f:e2:fa:6b:81:af:b6:1d:f7: 2d:20:a4:3b:8b:3e:21:2a:5a:80:b2:cc:c2:11:4c: 6c:46:b1:67:93:51:a8:27:99:4d:70:56:b8:31:f0: a7:1b:20:2f:b5:02:46:3d:40:87:24:66:17:39:3a: f3:87:39:44:70:bf:3e:29:44:78:f4:ea:e5:32:c9: 4b:40:82:10:80:bc:5e:5f:d1:3e:d5:04:fc:bc:0a: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:87:0B:31:6A:9C:4E:6B:FF:72:2C:9B:FE:A6:C7:FF:7B:F4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3fc0868f-e013-3737-8610-9c5982861b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 66.216.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b4:e3:11:b0:f8:84:c2:1f:c7:b8:b5:4c:84:b5:28:d3:9a: c1:43:61:a0:fc:7b:0f:2a:30:fa:ec:cc:36:d7:33:02:b4:3a: 3b:30:e3:0a:6d:c1:f9:b3:5a:f9:a6:85:23:5c:05:7b:f8:dc: 72:49:30:fb:f9:2e:df:6c:b6:fb:33:36:44:87:74:31:bc:4e: cd:df:b9:3d:9e:a2:e6:e6:62:46:b4:8a:1f:c3:d5:9c:8e:77: 40:78:20:5a:8e:0f:6c:0f:1c:b2:42:55:19:1f:f2:a8:62:0e: 1a:ae:d7:3f:f4:f0:1d:23:e3:90:de:f0:a5:5e:d6:56:7c:75: 03:87:de:d7:51:01:a3:f3:4b:c8:5a:dd:6e:a0:31:3d:ef:f2: 68:b7:23:fd:ce:09:1d:f3:ab:88:33:79:11:b7:1c:fd:0f:39: c4:82:7f:8b:cd:5e:30:77:5d:0f:f5:aa:ff:4b:34:09:da:01: 0c:b3:c3:66:6d:17:22:7b:53:2b:0c:4d:7b:73:95:0e:c3:78: f1:df:de:71:3a:aa:2a:00:49:72:e9:47:86:26:d2:43:da:74: 19:24:6b:34:00:41:56:e3:6b:1d:16:63:f8:83:c0:6d:e5:af: 76:6d:71:d8:7f:25:81:17:ac:37:cb:6d:c3:c9:b7:b4:7c:db: 6e:fb:c7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUNhBCaY1+an6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWI5ZmFiZTktODhiNy00ODA1LWJkNmItNDBlM2EzMjE2ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKDQtdPBJ8kjIBns7dfneCnWslV2ybHvYyWv 9V+8Lp+0lvDl1W2yGI9JwpgUGwUZYQHgGu2qcPDNH8aLa+pjSbP0wtceqNQs3iaX yaRf2Zeg9S9fMBPvLCTcWcBS8h/Z8nrZJK+x64FErWGn+3xrkQelJQ+eW4tAbMgL ev2fTGOKwmKdb1Z8i/PEVRrWxif+nGRrHEaYUpgmJn1JjVshR+MMOEhEJfQFZJMf 4vprga+2HfctIKQ7iz4hKlqAsszCEUxsRrFnk1GoJ5lNcFa4MfCnGyAvtQJGPUCH JGYXOTrzhzlEcL8+KUR49OrlMslLQIIQgLxeX9E+1QT8vAq5PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASlhwsxapxOa/9yLJv+psf/e/RdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ZjMDg2OGYtZTAxMy0z NzM3LTg2MTAtOWM1OTgyODYxYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtjFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD204xGw+ITCH8e4tUyEtSjTmsFDYaD8ew8qMPrszDbXMwK0Ojsw4wpt wfmzWvmmhSNcBXv43HJJMPv5Lt9stvszNkSHdDG8Ts3fuT2eoubmYka0ih/D1ZyO d0B4IFqOD2wPHLJCVRkf8qhiDhqu1z/08B0j45De8KVe1lZ8dQOH3tdRAaPzS8ha 3W6gMT3v8mi3I/3OCR3zq4gzeRG3HP0POcSCf4vNXjB3XQ/1qv9LNAnaAQyzw2Zt FyJ7UysMTXtzlQ7DePHf3nE6qioASXLpR4Ym0kPadBkkazQAQVbjax0WY/iDwG3l r3Ztcdh/JYEXrDfLbcPJt7R82277x2o= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:15 2025 by rpki-client