$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba36c079-6dfc-35c1-b030-cc8c84dbfb6d.roa File: ba36c079-6dfc-35c1-b030-cc8c84dbfb6d.roa (raw, json) Hash identifier: RYm9YLx6CAvoABPwha0CO0RMg3rNyrqhj2QBKOxjkoY= Subject key identifier: 8A:77:79:D5:B6:28:8F:A8:CC:3A:F4:20:B3:9F:CC:88:F9:BE:77:6B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AEE591E47B4607615DD4AA380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba36c079-6dfc-35c1-b030-cc8c84dbfb6d.roa Signing time: Thu 21 Aug 2025 14:42:43 +0000 ROA not before: Thu 21 Aug 2025 14:42:43 +0000 ROA not after: Wed 19 Nov 2025 15:42:43 +0000 asID: 4766 IP address blocks: 66.253.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:59:1e:47:b4:60:76:15:dd:4a:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 21 14:42:43 2025 GMT Not After : Nov 19 15:42:43 2025 GMT Subject: CN=5e6e870c-d416-40c6-bef2-e5d4f3b26bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:ab:d9:5f:c6:57:07:d4:36:a6:22:2a:ab: 6e:74:df:66:f2:05:67:27:9d:62:0e:4d:86:7b:d7: f8:60:80:9c:d4:08:21:74:87:07:8a:be:64:fe:59: be:46:80:f4:c2:ee:6e:6a:2c:3f:35:83:ef:f1:b6: 39:e9:fb:26:f1:47:aa:69:76:82:35:c9:b6:f9:f6: 51:fe:40:29:98:5a:47:15:82:b7:63:fa:a3:84:4c: 2d:f6:e6:42:d6:b0:95:0f:46:94:93:b2:ed:fc:66: 3f:56:73:04:81:17:ce:e7:47:08:5e:ac:a3:2f:05: 23:ae:8c:30:d5:ba:dd:9b:c0:18:8e:35:db:04:4f: 94:38:b7:78:cc:d7:e7:1c:d4:65:4d:fd:5d:9c:65: 54:c5:05:c6:1e:ac:15:12:5d:54:62:34:19:82:00: 4c:27:dd:8d:96:87:c2:75:6c:ab:98:26:86:61:d2: 1d:fc:a2:aa:7b:8c:d1:d1:0a:40:c0:f3:31:8c:f3: 61:3c:d6:fb:ee:40:a3:71:ac:5f:ff:2f:e3:bc:84: 25:be:ab:f1:f8:59:d0:76:00:4c:ef:87:a9:de:01: 70:cb:7e:c0:4c:84:16:b5:ce:b2:d7:b1:32:5e:25: 0b:c7:68:dd:92:25:a5:28:4d:fa:e5:64:76:96:16: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:77:79:D5:B6:28:8F:A8:CC:3A:F4:20:B3:9F:CC:88:F9:BE:77:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba36c079-6dfc-35c1-b030-cc8c84dbfb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d1:44:57:9d:52:7d:1b:8b:b0:60:e3:fb:78:bf:fa:13:16: bb:bf:e6:df:41:17:51:f0:a9:ca:05:7c:0f:08:a2:fe:52:6e: 1e:e5:f7:ea:f6:24:09:c4:34:29:77:1a:c7:cb:ed:02:21:28: c8:95:40:05:5d:a3:49:71:b4:3e:c7:84:08:5b:e2:ef:0c:f9: 71:0d:2c:04:35:3c:85:35:dd:8d:a4:ab:e6:0a:a9:4f:47:1d: a1:d0:51:20:8c:9b:8c:5c:18:69:9e:75:22:7c:97:78:f3:4f: 71:a8:f9:bd:4c:c2:0a:56:12:22:a5:d6:c9:38:ac:19:19:27: 59:4f:fc:d1:b6:d5:f5:f7:d0:4c:d6:77:79:d2:0e:af:5b:52: 93:a2:4a:9f:8f:4a:5c:78:17:27:cc:b8:33:cb:01:05:9a:88: c9:a0:1f:2f:70:15:cd:ad:e5:70:1a:b8:e1:7e:fc:de:37:7f: 15:63:cf:61:14:d0:d0:0a:b3:30:a6:52:f3:e6:ff:e0:fd:de: 72:88:07:90:bb:ed:18:9c:28:33:8a:bb:dd:91:13:23:7f:f9: ec:cd:03:e8:1f:a8:11:16:dd:31:4c:cd:a6:6f:86:95:dc:79: 0b:02:19:59:49:6d:c6:97:35:22:ae:1b:2f:88:e7:b9:ce:aa: 38:e2:a8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruWR5HtGB2Fd1Ko4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyMTE0NDI0M1oXDTI1MTExOTE1NDI0M1owLzEtMCsGA1UEAxMk NWU2ZTg3MGMtZDQxNi00MGM2LWJlZjItZTVkNGYzYjI2YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kWr2V/GVwfUNqYiKqtudN9m8gVnJ51iDk2G e9f4YICc1AghdIcHir5k/lm+RoD0wu5uaiw/NYPv8bY56fsm8UeqaXaCNcm2+fZR /kApmFpHFYK3Y/qjhEwt9uZC1rCVD0aUk7Lt/GY/VnMEgRfO50cIXqyjLwUjroww 1brdm8AYjjXbBE+UOLd4zNfnHNRlTf1dnGVUxQXGHqwVEl1UYjQZggBMJ92NlofC dWyrmCaGYdId/KKqe4zR0QpAwPMxjPNhPNb77kCjcaxf/y/jvIQlvqvx+FnQdgBM 74ep3gFwy37ATIQWtc6y17EyXiULx2jdkiWlKE365WR2lhaj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIp3edW2KI+ozDr0ILOfzIj5vndrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmEzNmMwNzktNmRmYy0z NWMxLWIwMzAtY2M4Yzg0ZGJmYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTRRFedUn0bi7Bg4/t4v/oTFru/5t9BF1HwqcoFfA8Iov5Sbh7l9+r2 JAnENCl3GsfL7QIhKMiVQAVdo0lxtD7HhAhb4u8M+XENLAQ1PIU13Y2kq+YKqU9H HaHQUSCMm4xcGGmedSJ8l3jzT3Go+b1MwgpWEiKl1sk4rBkZJ1lP/NG21fX30EzW d3nSDq9bUpOiSp+PSlx4FyfMuDPLAQWaiMmgHy9wFc2t5XAauOF+/N43fxVjz2EU 0NAKszCmUvPm/+D93nKIB5C77RicKDOKu92REyN/+ezNA+gfqBEW3TFMzaZvhpXc eQsCGVlJbcaXNSKuGy+I57nOqjjiqCU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:21 2025 by rpki-client