$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3881a099-4b5c-3429-b6d4-3e01f7ab149d.roa File: 3881a099-4b5c-3429-b6d4-3e01f7ab149d.roa (raw, json) Hash identifier: LnRqNWaw6+c+azmMgREzClTvt+KahUUBHmkgaZSOvEk= Subject key identifier: 36:18:4E:EA:40:8D:3F:B0:F4:42:B2:B1:AD:96:04:F1:D0:97:BF:28 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE1107997CAD5E544F9160800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3881a099-4b5c-3429-b6d4-3e01f7ab149d.roa Signing time: Sat 16 Aug 2025 20:30:50 +0000 ROA not before: Sat 16 Aug 2025 20:30:50 +0000 ROA not after: Fri 14 Nov 2025 21:30:50 +0000 asID: 7029 IP address blocks: 66.253.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:10:79:97:ca:d5:e5:44:f9:16:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 20:30:50 2025 GMT Not After : Nov 14 21:30:50 2025 GMT Subject: CN=bdf62c2c-1eca-47b7-a147-a1c60573f9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:84:2d:f9:78:67:e2:28:97:c9:d4:00:87: da:a2:b4:55:16:b5:79:22:66:4d:55:4c:e3:6a:72: 4d:10:35:45:89:f3:b2:3d:a3:32:5c:4b:bb:38:dd: 75:ef:af:f5:39:d6:b5:10:cc:96:df:ad:a7:6a:a3: 65:b8:45:04:de:54:d7:75:c2:f0:9d:73:af:6d:9b: 0f:a7:0e:a7:fe:11:b5:74:f1:08:45:b6:08:b6:49: 8a:b4:1d:58:d0:e3:30:2f:f1:58:8e:8b:6f:0f:41: bf:f7:1d:6e:50:72:14:5a:1c:ed:05:e7:c0:23:2b: 65:a1:6f:ae:da:37:d8:fc:8a:20:9b:0e:29:5f:8c: fb:ef:55:a6:40:73:f8:c4:40:9c:28:9f:5d:2e:08: f0:a4:a3:45:c7:25:be:dc:bf:26:d7:1b:46:21:de: b4:5b:39:53:15:05:41:63:7b:83:9b:a5:e6:17:51: d1:5b:21:f1:09:ed:e5:50:4a:3d:9b:ac:f7:73:6d: 6e:19:0e:a5:4f:53:5c:bb:ae:15:6c:0a:fb:17:48: 41:ef:b8:e7:d6:d3:05:f9:39:60:86:7b:ac:f6:1d: fc:57:7f:75:a8:5d:91:fa:40:ee:f5:46:8e:0e:d7: c5:ee:e6:e3:fc:b9:91:0b:1d:f5:a2:e8:bf:d4:53: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:18:4E:EA:40:8D:3F:B0:F4:42:B2:B1:AD:96:04:F1:D0:97:BF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3881a099-4b5c-3429-b6d4-3e01f7ab149d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:bd:48:b3:c9:19:28:d4:2c:11:fe:ff:17:d2:1d:d2:02:db: f9:57:8e:46:72:1c:51:c5:10:de:af:f9:f8:9d:74:23:28:0e: b9:62:2e:2e:6f:4a:9d:53:1b:7a:43:a9:1a:6c:e6:fe:59:ed: b4:b2:55:96:52:1b:26:cb:c7:b1:b2:b3:3b:6a:5d:62:b8:16: 86:43:37:69:48:ed:72:8c:26:25:e9:ac:4a:9e:94:8f:81:27: d4:68:50:14:d9:4b:05:46:43:2d:69:b4:f6:f8:43:2d:94:11: 4d:1a:3a:61:78:63:ee:14:c7:b2:a5:df:91:61:eb:65:f4:e9: 69:d4:95:44:97:2c:da:bb:ec:de:19:79:3f:1c:d7:c2:5f:ba: 42:3f:88:ba:fa:1e:51:53:90:84:ad:ea:b7:b4:06:ed:83:69: 3e:3f:fa:d1:63:d3:18:79:09:2d:17:88:f2:ce:bd:64:b3:1c: f8:8f:4a:14:9b:6b:e0:ef:0a:57:7d:8b:5c:18:78:db:ef:35: 03:2f:ea:e5:93:7e:a9:80:a1:a8:b3:d1:52:f5:a3:85:4e:2c: 07:e7:45:83:0d:8e:37:d2:ec:c8:2d:e7:d3:f0:14:28:c9:71: d7:d4:f6:34:e8:5c:8a:f5:46:af:42:2e:8c:cd:dd:1e:93:6c: 8d:8f:42:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhEHmXytXlRPkWCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNjIwMzA1MFoXDTI1MTExNDIxMzA1MFowLzEtMCsGA1UEAxMk YmRmNjJjMmMtMWVjYS00N2I3LWExNDctYTFjNjA1NzNmOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8KELfl4Z+Iol8nUAIfaorRVFrV5ImZNVUzj anJNEDVFifOyPaMyXEu7ON1176/1Oda1EMyW362naqNluEUE3lTXdcLwnXOvbZsP pw6n/hG1dPEIRbYItkmKtB1Y0OMwL/FYjotvD0G/9x1uUHIUWhztBefAIytloW+u 2jfY/Iogmw4pX4z771WmQHP4xECcKJ9dLgjwpKNFxyW+3L8m1xtGId60WzlTFQVB Y3uDm6XmF1HRWyHxCe3lUEo9m6z3c21uGQ6lT1Ncu64VbAr7F0hB77jn1tMF+Tlg hnus9h38V391qF2R+kDu9UaODtfF7ubj/LmRCx31oui/1FOqEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYYTupAjT+w9EKysa2WBPHQl78oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzg4MWEwOTktNGI1Yy0z NDI5LWI2ZDQtM2UwMWY3YWIxNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQv1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ29SLPJGSjULBH+/xfSHdIC2/lXjkZyHFHFEN6v+fiddCMoDrliLi5v Sp1TG3pDqRps5v5Z7bSyVZZSGybLx7GysztqXWK4FoZDN2lI7XKMJiXprEqelI+B J9RoUBTZSwVGQy1ptPb4Qy2UEU0aOmF4Y+4Ux7Kl35Fh62X06WnUlUSXLNq77N4Z eT8c18JfukI/iLr6HlFTkISt6re0Bu2DaT4/+tFj0xh5CS0XiPLOvWSzHPiPShSb a+DvCld9i1wYeNvvNQMv6uWTfqmAoaiz0VL1o4VOLAfnRYMNjjfS7Mgt59PwFCjJ cdfU9jToXIr1Rq9CLozN3R6TbI2PQgM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:46:09 2025 by rpki-client