$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/66a06d02-4e95-32d4-911c-1798fed5d78a.roa File: 66a06d02-4e95-32d4-911c-1798fed5d78a.roa (raw, json) Hash identifier: 4CkW9EAEczpTagRERSpEoCXjdGErey6V3qNLuFXZR7I= Subject key identifier: A3:BE:10:85:D8:97:7A:0D:02:B9:EE:82:4C:FD:99:5B:DC:CA:3C:BB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AF52155689EFDD5C78FEF6C40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/66a06d02-4e95-32d4-911c-1798fed5d78a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 216.106.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:55:68:9e:fd:d5:c7:8f:ef:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a2e35082-7932-43c8-b706-85785615d63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:bf:2a:9a:0e:8a:ce:ed:7c:fe:9c:86:0f: 63:0d:89:4b:29:45:e5:4f:a1:b4:79:4a:07:97:36: 0d:75:78:60:4b:08:51:2e:02:60:75:a3:7f:11:e9: 5a:24:11:9a:38:bf:0d:9b:b9:27:ae:56:e5:df:57: a0:d4:dc:94:fd:11:eb:22:bf:b2:4a:89:92:1c:f6: 11:6b:82:8a:6e:e3:88:ca:60:54:74:69:70:61:1b: 54:81:1a:f8:9c:6f:ef:d1:4f:fd:24:76:6b:36:c3: 18:c3:80:8e:f6:28:86:fe:2c:ed:2c:9d:7d:d2:85: 51:fc:7b:a8:4c:63:d0:95:d4:04:ab:df:f6:5c:29: 53:d3:6b:03:ab:7e:59:29:a6:60:2d:79:f4:a7:0c: 91:c9:47:ab:4a:34:b3:d2:1a:e2:5b:f6:d9:e6:88: 61:dc:93:80:5f:99:82:47:a1:c3:aa:ef:c5:a7:41: 81:98:a5:85:3c:be:91:f9:a3:ab:3f:c8:34:e2:80: 03:6c:1c:b7:26:27:01:2d:bd:63:f7:62:aa:40:11: 57:b9:6e:d3:13:ff:51:78:95:9a:dd:2d:b0:60:b8: f9:0f:93:4e:a5:9c:4d:ee:30:05:45:3e:48:17:61: 6b:1f:a8:96:67:d2:3e:5a:86:32:c5:d1:d6:29:cf: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BE:10:85:D8:97:7A:0D:02:B9:EE:82:4C:FD:99:5B:DC:CA:3C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/66a06d02-4e95-32d4-911c-1798fed5d78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:45:cb:9d:af:98:28:be:c8:b1:f5:c0:b1:5d:e8:2a:7c:28: a3:23:7c:95:90:c7:ad:e8:46:1a:7e:07:60:21:df:ec:bd:a7: 69:82:75:0c:9d:5c:ba:2d:02:eb:46:95:03:2b:cb:7a:81:11: d4:86:24:5c:59:11:c8:0b:53:4f:10:06:f2:b0:02:8a:c1:e0: a2:05:48:e1:4a:4f:7d:81:03:7b:10:b4:a8:25:7d:2b:a0:3c: 96:48:66:ab:da:ba:74:bd:6c:2a:68:9b:9f:e6:ae:1b:83:5d: dc:44:22:d0:b5:cb:0a:92:9b:d8:d3:65:e8:da:99:33:3b:bb: 8d:0a:fe:ec:f5:ec:cf:69:ef:c2:77:f2:09:85:b8:2e:de:65: f0:3c:4c:17:56:7e:81:d0:c5:52:36:47:37:f4:02:94:1f:41: 18:d1:d0:e2:fc:bd:29:76:de:a7:b4:f5:75:8a:1e:40:03:59: 40:5d:bb:3d:33:d3:42:d1:fc:ac:90:0d:8a:86:0f:ba:22:0c: 42:e6:7a:71:e8:2a:41:54:f2:60:1c:44:41:33:cc:c5:98:72: 60:d8:8e:b4:41:76:bf:f8:96:50:e9:eb:21:65:4a:bb:f3:de: 4d:56:5f:f8:b5:ab:27:0b:69:73:27:6f:31:d0:eb:c6:fe:55: b3:c6:7d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVVonv3Vx4/vbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTJlMzUwODItNzkzMi00M2M4LWI3MDYtODU3ODU2MTVkNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJu/KpoOis7tfP6chg9jDYlLKUXlT6G0eUoH lzYNdXhgSwhRLgJgdaN/EelaJBGaOL8Nm7knrlbl31eg1NyU/RHrIr+ySomSHPYR a4KKbuOIymBUdGlwYRtUgRr4nG/v0U/9JHZrNsMYw4CO9iiG/iztLJ190oVR/Huo TGPQldQEq9/2XClT02sDq35ZKaZgLXn0pwyRyUerSjSz0hriW/bZ5ohh3JOAX5mC R6HDqu/Fp0GBmKWFPL6R+aOrP8g04oADbBy3JicBLb1j92KqQBFXuW7TE/9ReJWa 3S2wYLj5D5NOpZxN7jAFRT5IF2FrH6iWZ9I+WoYyxdHWKc+2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO+EIXYl3oNArnugkz9mVvcyjy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNjZhMDZkMDItNGU5NS0z MmQ0LTkxMWMtMTc5OGZlZDVkNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5Fy52vmCi+yLH1wLFd6Cp8KKMjfJWQx63oRhp+B2Ah3+y9p2mCdQyd XLotAutGlQMry3qBEdSGJFxZEcgLU08QBvKwAorB4KIFSOFKT32BA3sQtKglfSug PJZIZqvaunS9bCpom5/mrhuDXdxEItC1ywqSm9jTZejamTM7u40K/uz17M9p78J3 8gmFuC7eZfA8TBdWfoHQxVI2Rzf0ApQfQRjR0OL8vSl23qe09XWKHkADWUBduz0z 00LR/KyQDYqGD7oiDELmenHoKkFU8mAcREEzzMWYcmDYjrRBdr/4llDp6yFlSrvz 3k1WX/i1qycLaXMnbzHQ68b+VbPGfY8= -----END CERTIFICATE-----Generated at Sun Aug 24 03:48:56 2025 by rpki-client