$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa File: 4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa (raw, json) Hash identifier: cmDN8q6/cSp3yG1QbnDu3yIugd6IFacTFK9rT6El+ls= Subject key identifier: AF:96:5A:9D:95:AE:03:AF:7F:FE:4D:07:CB:C0:08:AA:29:40:35:FA Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584B5C6C7820750EEE2E1B3522D8 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 40934 IP address blocks: 66.35.19.0/24 maxlen: 24 173.243.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:78:20:75:0e:ee:2e:1b:35:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=114023c7-2013-4aa8-9e28-f062d2c0658f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:66:bb:ac:7c:01:8c:e9:b2:dd:80:b5:70: d6:8f:9f:24:17:ff:a2:36:8b:07:bc:bd:b9:b7:2f: ed:44:7f:a7:d0:b1:c4:ea:ae:87:ed:53:fc:6d:de: 67:7b:4f:07:96:82:0b:ff:61:8a:89:7b:61:6d:f4: 24:48:92:f4:40:d7:e1:ce:12:c3:7a:23:f0:71:25: cf:0d:03:a6:76:6d:ea:02:3a:a9:08:65:75:2b:4e: 7c:43:6c:a7:3b:f8:1a:db:d7:fe:6b:97:dd:cc:45: a1:d8:6d:e6:2a:f4:dd:8a:4c:9d:be:db:8d:24:3f: 48:14:df:0a:eb:81:cf:87:1a:a4:c7:54:6a:5c:d6: 57:96:b0:cc:0c:35:e1:e8:9b:9a:15:2d:03:6f:24: 9d:08:48:60:80:2c:1d:ff:bc:bb:17:18:56:8b:5f: 27:a5:f3:1e:71:f1:31:06:f2:e6:44:f0:25:d2:eb: 4d:a0:c2:d3:d2:81:34:ff:ce:28:b4:ed:02:23:24: ba:1c:79:47:9d:e1:62:71:6f:4f:5e:61:97:79:6c: 5f:88:8c:0d:b1:7a:89:a0:6b:d4:6c:85:6a:a9:86: ad:01:89:24:d9:b8:22:1a:04:42:67:18:2c:c9:3c: 67:41:1b:69:1a:dd:11:54:ed:28:46:1c:77:3c:94: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:5A:9D:95:AE:03:AF:7F:FE:4D:07:CB:C0:08:AA:29:40:35:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 66.35.19.0/24 173.243.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:28:e5:00:c2:5c:54:e3:fe:2a:5c:b7:0c:b6:b0:3a:8e:cf: 96:9a:d9:89:38:83:fb:6a:66:7c:3c:29:b2:5f:9d:f1:75:b0: 83:18:13:d3:a6:84:91:4f:1c:a2:a8:14:a0:fd:55:05:30:3b: f2:ca:05:39:37:29:77:fa:4e:fa:70:d5:f4:2d:75:5c:cf:8d: 23:3d:c1:00:b8:76:a7:29:02:87:3f:bd:08:a6:d0:0c:c9:e0: f3:11:34:35:09:a8:a9:0d:bb:37:d6:a0:8c:06:cb:86:7a:8b: 7a:d2:a3:2d:a5:32:50:75:72:56:aa:89:c4:a2:1d:d2:fc:a1: 78:cc:e0:4d:0b:d3:8f:d1:c1:fc:c1:78:54:9b:12:d0:bd:2f: b0:35:5c:07:ab:92:fc:23:a2:8b:19:db:af:08:c8:0b:05:ae: 03:a3:19:34:28:e8:27:82:81:76:6b:73:5e:11:c5:71:60:c6: 67:41:b5:86:65:95:e9:f0:4e:fa:47:9a:6b:18:6b:07:97:dc: 80:13:35:86:72:9b:e1:b8:b9:47:99:de:7d:ef:d5:1d:e4:b7: 3f:4f:56:76:06:bb:21:03:02:f4:13:26:a7:18:47:2d:41:b7: ec:22:32:fc:6f:8d:91:fb:f0:9e:4e:11:92:a3:2d:c0:d1:d5: 73:9f:fd:33 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtcbHggdQ7uLhs1ItgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MTE0MDIzYzctMjAxMy00YWE4LTllMjgtZjA2MmQyYzA2NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprZmu6x8AYzpst2AtXDWj58kF/+iNosHvL25 ty/tRH+n0LHE6q6H7VP8bd5ne08HloIL/2GKiXthbfQkSJL0QNfhzhLDeiPwcSXP DQOmdm3qAjqpCGV1K058Q2ynO/ga29f+a5fdzEWh2G3mKvTdikydvtuNJD9IFN8K 64HPhxqkx1RqXNZXlrDMDDXh6JuaFS0DbySdCEhggCwd/7y7FxhWi18npfMecfEx BvLmRPAl0utNoMLT0oE0/84otO0CIyS6HHlHneFicW9PXmGXeWxfiIwNsXqJoGvU bIVqqYatAYkk2bgiGgRCZxgsyTxnQRtpGt0RVO0oRhx3PJSGuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK+WWp2VrgOvf/5NB8vACKopQDX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvNGU0N2Y0MDgtMGYzYi0z YTZmLWFmZTctNTEzMGRlOTg5MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQiMTAwQA rfOCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHso5QDCXFTj/ipctwy2sDqOz5aa2Yk4g/tqZnw8KbJfnfF1 sIMYE9OmhJFPHKKoFKD9VQUwO/LKBTk3KXf6Tvpw1fQtdVzPjSM9wQC4dqcpAoc/ vQim0AzJ4PMRNDUJqKkNuzfWoIwGy4Z6i3rSoy2lMlB1claqicSiHdL8oXjM4E0L 04/RwfzBeFSbEtC9L7A1XAerkvwjoosZ268IyAsFrgOjGTQo6CeCgXZrc14RxXFg xmdBtYZllenwTvpHmmsYaweX3IATNYZym+G4uUeZ3n3v1R3ktz9PVnYGuyEDAvQT JqcYRy1Bt+wiMvxvjZH78J5OEZKjLcDR1XOf/TM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:26:24 2025 by rpki-client