$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a37d30f9-6f8e-3fe0-bf02-a57bbc9b6f08.roa File: a37d30f9-6f8e-3fe0-bf02-a57bbc9b6f08.roa (raw, json) Hash identifier: fnz6W7H80zhIFTK+K3CmmcMezILnApNJLGl/pY2ZN4I= Subject key identifier: 3E:1A:DC:6E:E6:F6:AA:8C:4E:DE:0A:20:D5:9A:AC:A1:A8:96:4D:5A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B20F0CDBECAF419468EEE1B80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a37d30f9-6f8e-3fe0-bf02-a57bbc9b6f08.roa Signing time: Mon 08 Sep 2025 17:38:45 +0000 ROA not before: Mon 08 Sep 2025 17:38:45 +0000 ROA not after: Sun 07 Dec 2025 18:38:45 +0000 asID: 23473 IP address blocks: 66.253.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:f0:cd:be:ca:f4:19:46:8e:ee:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 8 17:38:45 2025 GMT Not After : Dec 7 18:38:45 2025 GMT Subject: CN=611b1387-4d5b-48f6-842a-e20fb77e6229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:02:36:f9:7f:85:34:b3:c6:8e:b5:f2:74: 6d:43:4b:37:62:a8:cb:a4:9f:5d:6d:6c:1b:24:05: fb:ec:66:b2:a2:64:ed:66:42:3a:2e:a6:19:f8:01: c6:70:6f:df:d8:0e:30:7b:0b:ea:aa:b1:bb:2f:54: cc:86:4d:25:a7:fe:6e:53:72:07:6c:11:01:57:6d: 04:f6:4b:b7:b1:20:e3:f6:ba:7b:d0:f5:0f:39:32: b3:bb:0e:60:ec:d1:92:04:39:6e:0e:da:ec:d6:9f: 32:0a:01:ec:50:cf:e7:88:ad:28:fa:57:b5:2c:0c: 5f:9b:0c:2f:0b:ea:fe:fa:9d:1d:eb:1e:7f:01:3a: ac:f8:5b:06:ff:02:64:34:98:d0:65:e7:ab:7c:7d: 8c:81:f0:d8:db:92:2a:87:14:c2:a4:68:f2:8e:59: 5d:8c:b0:70:01:69:13:66:7c:dc:c3:d4:dc:2c:2a: f2:4f:3c:f4:78:54:dd:82:a8:9b:0c:63:28:5e:6e: 04:dd:ea:70:47:c1:77:7f:0e:83:a0:01:a1:e6:d6: 4f:00:65:04:66:50:68:22:7b:ef:53:8f:35:90:42: bc:49:8f:20:eb:22:0e:a1:1b:07:73:5f:7e:12:fd: f7:9c:60:a3:97:d2:f1:9a:d4:df:a8:f5:cf:a0:18: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:DC:6E:E6:F6:AA:8C:4E:DE:0A:20:D5:9A:AC:A1:A8:96:4D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a37d30f9-6f8e-3fe0-bf02-a57bbc9b6f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:20:5a:12:a0:ae:22:fe:f6:a2:cc:32:22:6b:05:1f:81:1d: 7f:f1:f7:0a:c0:f6:df:5c:40:d0:19:c0:65:74:8e:45:4e:d2: 4a:50:3b:06:61:16:53:ff:07:2e:dd:d1:f1:c2:c5:61:95:12: 69:e7:c7:4d:d2:35:90:8d:c1:c6:26:a8:2e:5c:64:75:55:b5: 38:37:36:12:f6:a5:1a:c9:dc:ab:b1:d4:7e:7c:a5:35:6c:4d: e2:49:2c:51:bc:73:a7:33:55:9d:30:12:79:b6:88:c7:23:07: fb:9d:84:04:18:ec:f3:84:03:00:4c:c8:7d:5f:39:15:f3:4f: f7:6d:b8:bb:1e:4e:55:25:75:dd:04:41:71:3f:7b:64:23:5d: 23:b3:6a:ea:10:0e:6f:72:ef:c8:5e:14:c9:ac:9f:3c:7a:df: 44:cc:7c:f2:0b:4d:d6:ef:74:55:98:85:e0:ea:15:94:a3:1f: f8:c5:c5:cc:b2:d9:c6:df:43:a4:6d:8a:7f:dd:b8:f3:d4:26: 75:6c:05:64:4e:9f:b1:b9:f2:5b:f7:a8:ae:ad:03:b8:ab:bd: 6c:db:b1:53:82:82:4f:16:98:a8:50:d6:09:19:ed:dd:5a:01: d8:40:4b:50:f3:96:57:fd:13:25:f9:72:36:92:5b:82:a5:38: a1:84:1e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsg8M2+yvQZRo7uG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkwODE3Mzg0NVoXDTI1MTIwNzE4Mzg0NVowLzEtMCsGA1UEAxMk NjExYjEzODctNGQ1Yi00OGY2LTg0MmEtZTIwZmI3N2U2MjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra8CNvl/hTSzxo618nRtQ0s3YqjLpJ9dbWwb JAX77GayomTtZkI6LqYZ+AHGcG/f2A4wewvqqrG7L1TMhk0lp/5uU3IHbBEBV20E 9ku3sSDj9rp70PUPOTKzuw5g7NGSBDluDtrs1p8yCgHsUM/niK0o+le1LAxfmwwv C+r++p0d6x5/ATqs+FsG/wJkNJjQZeerfH2MgfDY25IqhxTCpGjyjlldjLBwAWkT Znzcw9TcLCryTzz0eFTdgqibDGMoXm4E3epwR8F3fw6DoAGh5tZPAGUEZlBoInvv U481kEK8SY8g6yIOoRsHc19+Ev33nGCjl9LxmtTfqPXPoBgr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4a3G7m9qqMTt4KINWarKGolk1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTM3ZDMwZjktNmY4ZS0z ZmUwLWJmMDItYTU3YmJjOWI2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsgWhKgriL+9qLMMiJrBR+BHX/x9wrA9t9cQNAZwGV0jkVO0kpQOwZh FlP/By7d0fHCxWGVEmnnx03SNZCNwcYmqC5cZHVVtTg3NhL2pRrJ3Kux1H58pTVs TeJJLFG8c6czVZ0wEnm2iMcjB/udhAQY7POEAwBMyH1fORXzT/dtuLseTlUldd0E QXE/e2QjXSOzauoQDm9y78heFMmsnzx630TMfPILTdbvdFWYheDqFZSjH/jFxcyy 2cbfQ6Rtin/duPPUJnVsBWROn7G58lv3qK6tA7irvWzbsVOCgk8WmKhQ1gkZ7d1a AdhAS1Dzllf9EyX5cjaSW4KlOKGEHpE= -----END CERTIFICATE-----Generated at Fri Oct 10 06:39:48 2025 by rpki-client