$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/a4582581-da21-3fec-af37-14261669b74b.roa File: a4582581-da21-3fec-af37-14261669b74b.roa (raw, json) Hash identifier: gQSLdk7ezXN668+IYBnfED/Ep8n/8bJdXhugNBjBVtA= Subject key identifier: 29:A1:67:17:02:FC:0F:C9:94:F3:56:C9:1B:D5:72:39:84:AF:B2:A6 Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584B8BE216C4F15E531E83998180 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/a4582581-da21-3fec-af37-14261669b74b.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14371 IP address blocks: 66.171.40.0/21 maxlen: 24 208.77.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:16:c4:f1:5e:53:1e:83:99:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=bbf8b8f3-de59-4518-94f3-ab35e10bb752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:80:71:7d:06:59:b7:b1:f7:9e:40:a9:46: e5:8f:17:54:8d:7c:29:8e:19:70:32:52:70:10:62: 26:0c:e9:88:20:c6:15:c7:73:1c:75:80:ea:06:39: ff:8e:61:ee:4b:49:bb:41:fc:fa:8e:81:98:7e:61: 4a:9c:83:ad:ae:a5:70:a0:f2:4e:2d:99:ff:39:4b: 99:87:01:ee:85:44:86:60:a4:40:42:0f:fd:f0:51: f2:8c:d7:27:8c:91:e5:fe:89:94:48:9c:95:72:a4: dc:63:56:47:b6:44:3b:a6:a3:e3:42:5f:be:f8:44: 78:09:f5:00:0e:bd:cb:e6:58:53:50:4e:65:16:cd: 68:f3:fd:bc:1f:47:6d:92:89:ed:0e:72:8d:86:f2: ee:84:ae:21:7c:aa:72:fa:44:2e:ea:5b:c8:5d:b4: 4f:28:4c:95:f6:34:94:f8:7b:45:f8:6e:5f:d3:94: 42:cc:74:37:58:3a:08:a6:34:b2:65:31:ce:a8:ba: 82:ed:c8:57:53:8e:9a:09:16:d5:bb:21:b7:f5:06: 3a:6d:41:73:e7:52:41:e7:33:3f:86:7d:d8:48:7f: 20:5a:95:bf:bd:46:fd:11:e5:f1:88:95:af:90:da: 5b:a8:d3:c9:2a:81:c9:2f:14:ed:51:79:ee:36:d7: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:67:17:02:FC:0F:C9:94:F3:56:C9:1B:D5:72:39:84:AF:B2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/a4582581-da21-3fec-af37-14261669b74b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 66.171.40.0/21 208.77.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6d:11:23:7a:de:b4:14:2f:27:90:68:cb:d8:c8:7c:2d:43: db:40:d0:3f:0a:97:e5:65:4a:ac:be:b1:77:a3:88:29:08:e0: a4:c8:f4:21:76:52:52:9f:d7:a2:a9:a8:cc:de:63:02:63:69: 38:e3:1d:7b:6e:82:69:11:ca:4b:1c:f5:b1:9e:d7:70:66:9a: c5:2e:40:75:ca:ba:59:bd:15:b1:5f:f9:3f:1f:49:5e:a6:45: 1d:f3:d4:81:f8:59:8a:fd:d1:96:96:6b:3a:cf:14:a5:14:ca: 9d:a5:27:89:ea:e9:67:82:fe:7e:23:1f:a2:2e:ff:cf:4e:7d: dd:38:cc:d0:c9:6c:22:7d:e5:bf:25:9f:49:a1:c4:25:aa:f4: b6:f9:cc:e5:60:0b:e3:20:19:95:5a:35:e4:fd:08:22:b4:7c: 0b:1e:d5:c2:66:f4:1e:73:19:d3:c5:4a:83:c3:11:3f:40:e9: 7c:34:34:bd:35:47:69:69:81:99:15:80:d3:7c:64:70:9b:2f: 2b:8e:f1:a0:4f:d1:8d:af:ff:7d:de:93:67:46:57:96:b0:9e: b3:3d:a8:fd:8c:c7:31:c4:2d:5a:b3:d0:2a:5d:49:9f:72:e3: 2d:c4:24:64:13:e4:d8:fb:93:1f:f5:41:92:f7:6d:52:6e:f4: f7:9a:b6:df -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuL4hbE8V5THoOZgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YmJmOGI4ZjMtZGU1OS00NTE4LTk0ZjMtYWIzNWUxMGJiNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4+AcX0GWbex955AqUbljxdUjXwpjhlwMlJw EGImDOmIIMYVx3McdYDqBjn/jmHuS0m7Qfz6joGYfmFKnIOtrqVwoPJOLZn/OUuZ hwHuhUSGYKRAQg/98FHyjNcnjJHl/omUSJyVcqTcY1ZHtkQ7pqPjQl+++ER4CfUA Dr3L5lhTUE5lFs1o8/28H0dtkontDnKNhvLuhK4hfKpy+kQu6lvIXbRPKEyV9jSU +HtF+G5f05RCzHQ3WDoIpjSyZTHOqLqC7chXU46aCRbVuyG39QY6bUFz51JB5zM/ hn3YSH8gWpW/vUb9EeXxiJWvkNpbqNPJKoHJLxTtUXnuNtdw5wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCmhZxcC/A/JlPNWyRvVcjmEr7KmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvYTQ1ODI1ODEtZGEyMS0z ZmVjLWFmMzctMTQyNjE2NjliNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQqsoAwQC 0E0YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA1tESN63rQULyeQaMvYyHwtQ9tA0D8Kl+VlSqy+sXejiCkI 4KTI9CF2UlKf16KpqMzeYwJjaTjjHXtugmkRyksc9bGe13BmmsUuQHXKulm9FbFf +T8fSV6mRR3z1IH4WYr90ZaWazrPFKUUyp2lJ4nq6WeC/n4jH6Iu/89Ofd04zNDJ bCJ95b8ln0mhxCWq9Lb5zOVgC+MgGZVaNeT9CCK0fAse1cJm9B5zGdPFSoPDET9A 6Xw0NL01R2lpgZkVgNN8ZHCbLyuO8aBP0Y2v/33ek2dGV5awnrM9qP2MxzHELVqz 0CpdSZ9y4y3EJGQT5Nj7kx/1QZL3bVJu9Peatt8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:23 2025 by rpki-client