$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/04d76299-19f6-3977-b16f-5f34f621e67b.roa File: 04d76299-19f6-3977-b16f-5f34f621e67b.roa (raw, json) Hash identifier: qo5CugcKRggxi55yzxqdCh1WLLyd5+Xaak/f7Xk4uws= Subject key identifier: 85:5B:35:29:47:C3:5B:D4:51:EB:5B:3C:EC:F5:10:54:03:DE:CA:D8 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584B5B074B61C48CBD81BD599980 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/04d76299-19f6-3977-b16f-5f34f621e67b.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 400304 IP address blocks: 66.23.198.0/23 maxlen: 24 104.36.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4b:61:c4:8c:bd:81:bd:59:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=fd2556e3-ef04-4b7c-95bc-e501d8373f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:16:f7:97:7c:ab:1d:5c:66:13:b7:d9:d5: b0:2f:4c:92:5d:9f:fa:b0:f4:37:f9:17:a2:73:1d: 47:a6:3c:9e:9d:3f:c9:76:8e:fb:47:f8:f9:ff:5c: b0:3b:af:10:6b:90:2e:e6:17:37:8f:c9:c6:cb:98: 70:c7:ba:4e:b2:64:8a:b2:35:63:2e:94:9c:d4:cf: a9:2e:4b:66:f7:9a:4b:4e:1c:6f:b6:04:82:69:3b: 1b:84:4d:a9:e9:ff:74:b9:bc:3d:56:28:47:25:92: 62:d2:81:2f:5b:48:55:de:86:81:9a:cf:08:96:ba: 57:71:86:7a:16:32:b7:53:32:2b:72:da:da:99:35: 2b:8a:3f:27:b2:09:ba:a3:47:62:16:bd:d2:2c:88: c5:e6:f7:19:6e:a5:da:df:a6:12:4e:60:18:a9:48: 8c:44:df:7c:5a:84:76:13:f1:58:ab:2e:16:61:43: 38:0a:7a:73:c9:39:de:55:47:3b:ba:10:a9:90:67: 18:46:66:3f:8b:de:58:46:34:c2:3f:ae:e6:22:5e: 6e:29:3a:dd:81:1a:94:f8:3e:8e:64:81:ad:d9:fc: 68:88:69:96:ad:87:12:e1:57:2d:ac:ad:2a:c5:11: 66:59:46:61:11:27:de:3d:57:f9:74:ca:0e:a5:cc: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:35:29:47:C3:5B:D4:51:EB:5B:3C:EC:F5:10:54:03:DE:CA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/04d76299-19f6-3977-b16f-5f34f621e67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 66.23.198.0/23 104.36.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cc:81:cc:aa:95:38:1e:f0:f0:4d:8b:57:ac:22:63:c5:a4: 21:9e:14:72:ec:1f:91:00:57:93:79:e8:9b:d3:4e:6f:7f:f0: b8:da:f6:51:a6:f4:08:39:57:4c:53:0d:ad:39:10:a5:00:f2: 8b:4b:b2:61:f2:77:dd:32:f3:b5:b2:89:1e:9e:37:db:6f:34: 02:ed:fa:5b:cd:ec:97:99:59:2e:07:81:ae:d9:25:4d:24:aa: bb:d1:cd:00:04:ce:cf:f4:13:68:09:67:59:b8:e8:72:4e:37: 04:e6:d8:0b:b1:1b:31:13:cd:44:c8:b6:ad:b8:5f:0e:4a:69: 8b:76:c2:eb:e4:f6:8c:12:69:25:2e:6b:a3:08:26:aa:9d:dc: 73:1d:9c:b1:b7:e1:d0:ab:5c:fc:87:b5:a1:7e:93:6d:23:ed: 44:7b:2e:27:83:05:19:9d:ea:32:8d:f3:f6:d7:eb:d0:8d:5c: 52:e1:ca:d6:23:b1:47:29:cb:92:89:00:45:92:e6:4d:b9:cf: d4:08:29:35:ba:64:57:42:2f:ee:f8:db:f6:39:a8:f3:92:db: f3:2b:d5:77:b0:be:ca:9e:09:b7:78:be:0e:6c:32:2f:6b:6d: 77:3b:94:de:0c:6e:90:a4:b4:d7:4f:c6:30:76:55:73:5c:53: 4d:90:95:53 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtbB0thxIy9gb1ZmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZmQyNTU2ZTMtZWYwNC00YjdjLTk1YmMtZTUwMWQ4MzczZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijwW95d8qx1cZhO32dWwL0ySXZ/6sPQ3+Rei cx1HpjyenT/Jdo77R/j5/1ywO68Qa5Au5hc3j8nGy5hwx7pOsmSKsjVjLpSc1M+p Lktm95pLThxvtgSCaTsbhE2p6f90ubw9VihHJZJi0oEvW0hV3oaBms8IlrpXcYZ6 FjK3UzIrctramTUrij8nsgm6o0diFr3SLIjF5vcZbqXa36YSTmAYqUiMRN98WoR2 E/FYqy4WYUM4CnpzyTneVUc7uhCpkGcYRmY/i95YRjTCP67mIl5uKTrdgRqU+D6O ZIGt2fxoiGmWrYcS4VctrK0qxRFmWUZhESfePVf5dMoOpcz09wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIVbNSlHw1vUUetbPOz1EFQD3srYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMDRkNzYyOTktMTlmNi0z OTc3LWIxNmYtNWYzNGY2MjFlNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQhfGAwQB aCRSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAzMgcyqlTge8PBNi1esImPFpCGeFHLsH5EAV5N56JvTTm9/ 8Lja9lGm9Ag5V0xTDa05EKUA8otLsmHyd90y87WyiR6eN9tvNALt+lvN7JeZWS4H ga7ZJU0kqrvRzQAEzs/0E2gJZ1m46HJONwTm2AuxGzETzUTItq24Xw5KaYt2wuvk 9owSaSUua6MIJqqd3HMdnLG34dCrXPyHtaF+k20j7UR7LieDBRmd6jKN8/bX69CN XFLhytYjsUcpy5KJAEWS5k25z9QIKTW6ZFdCL+742/Y5qPOS2/Mr1XewvsqeCbd4 vg5sMi9rbXc7lN4MbpCktNdPxjB2VXNcU02QlVM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:49 2025 by rpki-client