$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa File: d74b73cb-f7d0-310e-abd3-eb8242554564.roa (raw, json) Hash identifier: mdwfX8nwklKJyXBVx63okUWLJRuyix0h8MVsMRFGfLo= Subject key identifier: AF:59:33:0E:3A:23:7F:3C:C2:E6:11:E3:C4:52:D5:47:34:73:F3:0E Certificate issuer: /CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15 Certificate serial: 010D0C9F4328584AE46145FF7D0F496C1EE76300 Authority key identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 53733 IP address blocks: 148.66.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:45:ff:7d:0f:49:6c:1e:e7:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=c98a2859-4098-40d9-93e3-9f62f1ead894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:76:23:f3:d3:c4:0b:1d:65:a4:61:84:99:07: 8c:07:55:94:fd:4c:cc:81:98:b9:74:55:01:dd:d4: 7f:0c:c6:26:6e:c6:0d:94:b6:2d:26:b4:db:25:74: 53:35:9e:59:fe:44:e9:cb:ac:c2:6d:10:9f:59:06: 09:7d:a3:aa:21:3d:a4:bf:11:d1:49:cd:38:73:b1: cf:ea:18:46:7f:2d:7e:69:9f:07:21:3c:05:4e:47: df:2b:95:dd:f2:d3:10:36:1a:65:22:6c:36:73:c3: 4b:46:15:79:93:81:b2:1a:6a:62:79:60:5a:bd:39: 27:19:48:10:ef:ef:56:d9:24:8f:b9:c9:13:5c:ad: 55:cc:36:53:84:2c:4f:5a:83:bf:c9:83:02:bd:a4: 0b:20:dc:15:6b:76:e8:ed:c0:04:a1:5b:d4:91:a8: 9c:f5:df:c9:aa:fe:ce:05:e5:fb:1e:f8:05:35:36: 82:fa:96:dd:68:b4:07:23:87:37:d9:46:09:8c:e3: 9b:d3:1f:22:ad:21:f5:d1:06:b6:09:6e:0b:0a:04: dc:2c:93:82:bb:47:0f:7e:6b:41:92:05:2c:b5:18: 8b:50:51:2d:f6:07:f9:30:ce:14:51:57:96:96:db: 26:9d:bd:79:3d:b1:67:3b:02:d1:fe:88:31:05:b5: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:59:33:0E:3A:23:7F:3C:C2:E6:11:E3:C4:52:D5:47:34:73:F3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl X509v3 Authority Key Identifier: keyid:D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer sbgp-ipAddrBlock: critical IPv4: 148.66.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:49:86:d4:de:d2:65:5f:df:06:4e:56:1d:e6:15:42:29:4c: 51:03:83:72:c6:17:16:22:5d:5b:21:43:b7:85:94:40:df:18: 1e:8f:9e:c8:68:08:ee:3d:03:f3:5f:fc:35:80:61:a1:42:77: 9e:c5:7c:fa:84:96:ab:11:86:28:e1:0e:b9:a5:68:6a:3b:7e: b0:57:3e:60:f9:2b:fe:10:22:29:fa:0a:86:e3:b7:04:1d:c6: b7:7c:10:de:77:7b:90:42:03:69:34:00:b3:57:fd:38:33:64: af:ee:b6:34:3f:0f:c8:5c:20:4f:ee:16:2a:3a:fe:57:a5:bd: 93:7c:e2:89:a1:26:26:16:d4:c4:f2:75:a2:b1:a9:94:be:bf: 17:9a:fb:1a:78:d8:0d:1b:fb:54:1a:5d:99:72:63:0d:f6:21: 22:3b:6b:67:11:fa:60:7d:56:8d:2c:7f:97:2c:00:cd:74:70: d7:45:8d:3c:17:f2:99:37:87:49:01:b8:7a:ea:4a:c4:9a:a3: b6:60:19:d1:61:b9:6a:45:c1:08:52:12:98:2a:89:99:22:53: 29:c7:6d:1e:f5:bb:50:4f:be:0b:d2:e9:fd:95:7f:26:98:75: 2d:e9:f4:a3:db:6f:6d:16:8a:9f:72:51:b4:84:ce:6f:b1:15: a5:04:77:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUX/fQ9JbB7nYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJmZDkxMjYtYjJlZS00Y2FmLWJiZTUtMzM4N2JjOTAx YzE1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk4YTI4NTktNDA5OC00MGQ5LTkzZTMtOWY2MmYxZWFkODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Yj89PECx1lpGGEmQeMB1WU/UzMgZi5dFUB 3dR/DMYmbsYNlLYtJrTbJXRTNZ5Z/kTpy6zCbRCfWQYJfaOqIT2kvxHRSc04c7HP 6hhGfy1+aZ8HITwFTkffK5Xd8tMQNhplImw2c8NLRhV5k4GyGmpieWBavTknGUgQ 7+9W2SSPuckTXK1VzDZThCxPWoO/yYMCvaQLINwVa3bo7cAEoVvUkaic9d/Jqv7O BeX7HvgFNTaC+pbdaLQHI4c32UYJjOOb0x8irSH10Qa2CW4LCgTcLJOCu0cPfmtB kgUstRiLUFEt9gf5MM4UUVeWltsmnb15PbFnOwLR/ogxBbUMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9ZMw46I388wuYR48RS1Uc0c/MOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMmZk OTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3YmM5MDFjMTUvZDc0YjczY2ItZjdkMC0z MTBlLWFiZDMtZWI4MjQyNTU0NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDJmZDkxMjYtYjJlZS00Y2FmLWJi ZTUtMzM4N2JjOTAxYzE1L2QyZmQ5MTI2LWIyZWUtNGNhZi1iYmU1LTMzODdiYzkw MWMxNS5jcmwwHwYDVR0jBBgwFoAU2Mga50vWljReBKzGXiiZLKKPLR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMmZkOTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3 YmM5MDFjMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZJhtTe0mVf3wZOVh3mFUIpTFEDg3LGFxYiXVshQ7eFlEDfGB6Pnsho CO49A/Nf/DWAYaFCd57FfPqElqsRhijhDrmlaGo7frBXPmD5K/4QIin6CobjtwQd xrd8EN53e5BCA2k0ALNX/TgzZK/utjQ/D8hcIE/uFio6/lelvZN84omhJiYW1MTy daKxqZS+vxea+xp42A0b+1QaXZlyYw32ISI7a2cR+mB9Vo0sf5csAM10cNdFjTwX 8pk3h0kBuHrqSsSao7ZgGdFhuWpFwQhSEpgqiZkiUynHbR71u1BPvgvS6f2VfyaY dS3p9KPbb20Wip9yUbSEzm+xFaUEd7A= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:16 2025 by rpki-client