$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa File: 43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa (raw, json) Hash identifier: 3lIGqPImMkW7twvG7sIkUIYY/fK6wR23aTp2M7oEwOo= Subject key identifier: FE:38:C9:C3:68:F3:DC:E8:C8:88:8F:90:D7:D9:CD:2D:AD:1B:E0:10 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F4328584AC01654B0029CF2C696E8C820 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 14434 IP address blocks: 66.185.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:54:b0:02:9c:f2:c6:96:e8:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=72844382-0d05-4698-95ac-8e2d3f8f1192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:50:0b:87:76:96:2d:08:d5:92:05:7e:5e: 97:74:43:11:5e:0a:99:a0:fb:67:80:8a:5c:b5:c1: 74:25:10:55:20:b9:e4:3f:71:c7:a5:ac:48:85:12: 70:bb:bf:19:43:2b:16:0a:32:ae:27:3d:47:a3:ab: fd:31:f4:34:2f:36:86:f3:ff:6b:ba:e1:25:9c:8d: 21:2a:63:98:c4:9d:4e:60:c3:09:ab:1f:a0:3b:1d: 26:83:98:05:1c:8b:b8:cf:bb:e2:f6:ab:cd:96:e2: 8f:e4:96:19:bf:7b:31:7a:94:00:37:6c:d8:0d:5c: f9:42:9f:33:4a:fd:a1:7c:50:8c:b3:fa:75:9b:e1: 46:f6:a2:46:d7:23:79:01:e3:08:2c:48:50:35:36: 1e:c6:74:2a:fe:7c:ce:8b:40:18:e5:e5:c0:4b:f1: f1:83:83:c1:c9:6b:59:52:01:7e:bc:1c:3a:3d:04: 41:8d:bd:64:ec:1d:ad:07:98:b8:3a:c5:37:c0:c3: 6b:84:10:f2:ac:d0:61:f4:4a:c0:8f:8c:ca:c2:ab: 47:0a:01:18:0e:b6:d1:5f:22:4d:9d:d0:ed:44:a0: fe:35:fc:04:77:80:64:7b:8d:88:d0:b9:48:a5:95: 64:da:49:ab:93:2e:d7:6a:7b:3b:c6:63:26:de:34: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:C9:C3:68:F3:DC:E8:C8:88:8F:90:D7:D9:CD:2D:AD:1B:E0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv4: 66.185.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c5:71:40:53:53:d2:1c:e4:06:64:38:08:77:de:1a:9f:a9: 5a:ff:38:4f:7d:40:14:12:54:40:2e:a4:aa:7c:fb:65:0f:08: 41:5a:bb:a5:c1:08:54:eb:ac:c9:e0:b3:89:54:ea:99:dc:73: 28:26:43:44:c3:09:3d:ef:f2:e1:c7:78:46:14:bf:18:7a:9b: 40:66:9e:f5:74:75:c9:d8:72:d7:c2:cf:e4:7b:f4:54:ed:a9: 1d:55:31:02:1a:5c:ae:7c:d4:86:85:aa:91:8d:eb:e6:c4:88: 06:14:2f:55:5b:50:49:46:ef:6f:61:6f:48:5c:ec:ef:a0:e3: ae:7f:df:a7:53:43:ee:aa:5f:e3:73:4f:e0:bf:b3:19:27:51: f8:0b:98:08:17:09:05:73:64:ca:ed:32:15:ef:ef:2f:c0:3b: 18:ee:44:dc:fe:e6:75:5f:4a:f1:b0:31:9c:1f:d7:df:17:b3: 02:72:a0:e8:1f:06:eb:bb:25:4b:76:9f:c6:af:2f:75:54:ef: 1c:31:61:78:5b:3e:b1:93:22:0e:1e:bb:fb:48:8e:d5:bc:11: 81:d0:3e:5d:fc:d6:7c:7f:cb:53:5f:17:46:14:2a:a8:3c:6b: 03:c8:05:90:e0:39:89:19:ee:55:17:4d:34:6e:6e:d5:eb:d3: 01:92:99:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFlSwApzyxpboyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NzI4NDQzODItMGQwNS00Njk4LTk1YWMtOGUyZDNmOGYxMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EZQC4d2li0I1ZIFfl6XdEMRXgqZoPtngIpc tcF0JRBVILnkP3HHpaxIhRJwu78ZQysWCjKuJz1Ho6v9MfQ0LzaG8/9ruuElnI0h KmOYxJ1OYMMJqx+gOx0mg5gFHIu4z7vi9qvNluKP5JYZv3sxepQAN2zYDVz5Qp8z Sv2hfFCMs/p1m+FG9qJG1yN5AeMILEhQNTYexnQq/nzOi0AY5eXAS/Hxg4PByWtZ UgF+vBw6PQRBjb1k7B2tB5i4OsU3wMNrhBDyrNBh9ErAj4zKwqtHCgEYDrbRXyJN ndDtRKD+NfwEd4Bke42I0LlIpZVk2kmrky7Xans7xmMm3jRW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP44ycNo89zoyIiPkNfZzS2tG+AQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvNDNjZjU2ZTItNWJkZS0z ZGJlLWE2YTMtNDA4MmMwNGM0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjFcUBTU9Ic5AZkOAh33hqfqVr/OE99QBQSVEAupKp8+2UPCEFau6XB CFTrrMngs4lU6pnccygmQ0TDCT3v8uHHeEYUvxh6m0BmnvV0dcnYctfCz+R79FTt qR1VMQIaXK581IaFqpGN6+bEiAYUL1VbUElG729hb0hc7O+g465/36dTQ+6qX+Nz T+C/sxknUfgLmAgXCQVzZMrtMhXv7y/AOxjuRNz+5nVfSvGwMZwf198XswJyoOgf Buu7JUt2n8avL3VU7xwxYXhbPrGTIg4eu/tIjtW8EYHQPl381nx/y1NfF0YUKqg8 awPIBZDgOYkZ7lUXTTRubtXr0wGSmYM= -----END CERTIFICATE-----Generated at Sun Aug 24 09:36:10 2025 by rpki-client