$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/b5998c25-9393-3239-994d-a0b2169acaed.roa File: b5998c25-9393-3239-994d-a0b2169acaed.roa (raw, json) Hash identifier: 7TzfAQBPlc+Qb1IEo+o0MHG/aXjj4L3VSDhqeu3FTME= Subject key identifier: D3:55:09:3B:F8:44:5E:67:30:F3:C9:02:ED:C0:98:36:B4:31:4C:D8 Certificate issuer: /CN=16564b80-06fa-4597-9f31-8d1b758675ab Certificate serial: 010D0C9F4328584B79BCB86F87852FA54CEC1080 Authority key identifier: 9B:87:45:65:6C:F6:39:96:61:20:F6:A3:64:E6:E7:5F:82:3F:71:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/b5998c25-9393-3239-994d-a0b2169acaed.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3657 IP address blocks: 66.7.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/16564b80-06fa-4597-9f31-8d1b758675ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/16564b80-06fa-4597-9f31-8d1b758675ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b8:6f:87:85:2f:a5:4c:ec:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16564b80-06fa-4597-9f31-8d1b758675ab Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=5d37a4c5-1438-4664-ad93-e5a5736c01fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:04:9f:73:6e:a6:85:25:99:15:f9:ff:6b: e5:44:6e:51:a0:e9:31:03:91:13:04:53:f2:e6:be: ab:7e:7a:5b:aa:5f:68:99:c2:b0:13:bd:28:27:83: 81:43:64:4a:b2:d1:b0:f2:3d:99:12:19:d0:4e:76: 60:f0:c9:98:42:84:f3:8d:4f:01:d4:78:68:b9:28: bb:aa:6e:1a:f0:2b:19:09:8d:25:7a:5b:7e:37:fc: 08:52:5a:0c:12:bf:6b:73:50:41:9f:ea:59:b2:8c: f8:bd:02:58:d9:8b:11:62:93:3c:c6:85:b5:12:23: b2:45:b5:04:1e:60:a2:10:d0:36:51:3a:19:95:5d: 08:f0:bb:bb:10:77:27:65:69:2a:ac:1b:df:1a:a4: 85:e5:3f:a5:32:e0:44:17:67:5c:3c:eb:29:4a:1f: a5:07:0a:f5:d0:ed:24:d4:11:21:e3:be:90:ce:3e: eb:2f:b6:38:1f:04:2c:1b:c1:cd:c8:08:70:1a:a1: 0a:89:08:64:d3:48:c3:02:ea:a0:e2:b4:c6:5a:51: 84:cc:70:22:88:73:8c:fa:40:24:70:02:e7:b5:f7: b1:b8:e0:cc:c1:7d:8a:00:be:00:a2:50:40:60:ec: b5:2a:9c:13:6a:e4:85:dd:f6:0d:6c:90:93:70:32: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:55:09:3B:F8:44:5E:67:30:F3:C9:02:ED:C0:98:36:B4:31:4C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/b5998c25-9393-3239-994d-a0b2169acaed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab/16564b80-06fa-4597-9f31-8d1b758675ab.crl X509v3 Authority Key Identifier: keyid:9B:87:45:65:6C:F6:39:96:61:20:F6:A3:64:E6:E7:5F:82:3F:71:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/16564b80-06fa-4597-9f31-8d1b758675ab.cer sbgp-ipAddrBlock: critical IPv4: 66.7.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a1:9a:01:ae:ee:1b:52:db:3a:e9:74:21:7b:0e:d4:86:5b: 6a:17:c6:c5:e5:84:2b:04:7f:bc:e9:31:23:df:b1:90:e9:9e: 32:f7:fa:a0:95:f9:3f:09:23:5d:ae:88:66:a9:ae:f5:28:e0: 06:34:83:9f:32:d4:82:e9:df:a7:39:1c:e6:3c:8b:d5:4e:79: 4a:b8:ad:75:ef:4d:1d:74:d5:eb:1e:7c:19:cb:28:27:19:42: 33:3f:84:f5:2f:d9:d3:a0:43:00:b8:1a:d5:81:bf:3b:c7:26: 3e:1c:cf:a9:bd:95:64:79:7d:49:1a:49:c1:d3:08:4d:1a:91: 3b:4f:fe:a1:73:d7:00:15:56:af:1a:73:1d:bd:e6:5e:e5:53: 00:9a:74:53:40:db:aa:31:41:f8:92:17:58:ac:39:12:da:a7: e9:9e:f5:bb:39:d6:8e:42:c1:eb:30:01:67:49:3b:63:2f:e0: 36:ad:43:2b:5c:2c:1d:b1:f5:fa:3d:72:a7:3b:a0:06:df:03: 3b:25:63:f8:c7:3c:c7:f3:cc:d9:11:dc:49:cd:0a:09:bf:3d: c0:44:93:66:a3:df:09:01:d4:49:6b:59:41:e6:61:e0:e3:c5: e3:cf:90:6d:8d:54:f8:86:ec:2c:bb:5b:69:9e:0f:42:26:39: 6a:ff:c3:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLhvh4UvpUzsEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTY1NjRiODAtMDZmYS00NTk3LTlmMzEtOGQxYjc1ODY3 NWFiMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NWQzN2E0YzUtMTQzOC00NjY0LWFkOTMtZTVhNTczNmMwMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAQEn3NupoUlmRX5/2vlRG5RoOkxA5ETBFPy 5r6rfnpbql9omcKwE70oJ4OBQ2RKstGw8j2ZEhnQTnZg8MmYQoTzjU8B1HhouSi7 qm4a8CsZCY0lelt+N/wIUloMEr9rc1BBn+pZsoz4vQJY2YsRYpM8xoW1EiOyRbUE HmCiENA2UToZlV0I8Lu7EHcnZWkqrBvfGqSF5T+lMuBEF2dcPOspSh+lBwr10O0k 1BEh476Qzj7rL7Y4HwQsG8HNyAhwGqEKiQhk00jDAuqg4rTGWlGEzHAiiHOM+kAk cALntfexuODMwX2KAL4AolBAYOy1KpwTauSF3fYNbJCTcDLp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNVCTv4RF5nMPPJAu3AmDa0MUzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNjU2 NGI4MC0wNmZhLTQ1OTctOWYzMS04ZDFiNzU4Njc1YWIvYjU5OThjMjUtOTM5My0z MjM5LTk5NGQtYTBiMjE2OWFjYWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTY1NjRiODAtMDZmYS00NTk3LTlm MzEtOGQxYjc1ODY3NWFiLzE2NTY0YjgwLTA2ZmEtNDU5Ny05ZjMxLThkMWI3NTg2 NzVhYi5jcmwwHwYDVR0jBBgwFoAUm4dFZWz2OZZhIPajZObnX4I/cWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNjU2NGI4MC0wNmZhLTQ1OTctOWYzMS04ZDFi NzU4Njc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIShmgGu7htS2zrpdCF7DtSGW2oXxsXlhCsEf7zpMSPfsZDpnjL3+qCV +T8JI12uiGaprvUo4AY0g58y1ILp36c5HOY8i9VOeUq4rXXvTR101esefBnLKCcZ QjM/hPUv2dOgQwC4GtWBvzvHJj4cz6m9lWR5fUkaScHTCE0akTtP/qFz1wAVVq8a cx295l7lUwCadFNA26oxQfiSF1isORLap+me9bs51o5CweswAWdJO2Mv4DatQytc LB2x9fo9cqc7oAbfAzslY/jHPMfzzNkR3EnNCgm/PcBEk2aj3wkB1ElrWUHmYeDj xePPkG2NVPiG7Cy7W2meD0ImOWr/w+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:26 2025 by rpki-client