$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa File: 8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json) Hash identifier: n7VVzpBe4wPb7vvXfs5Mi6gGF16gYXufJ7AnaamL/is= Subject key identifier: 26:D3:C7:12:EC:51:4F:E8:75:13:6F:35:B9:76:A7:91:45:14:20:F6 Certificate issuer: /CN=de8b5430-108d-4deb-960f-6c438a23adc4 Certificate serial: 010D0C9F4328584B583C8C68AE1C7412E99CD580 Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 66.132.138.0/24 maxlen: 24 198.73.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8c:68:ae:1c:74:12:e9:9c:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=3e32bd65-b22a-4ada-b1f5-0ea45b4118d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:a6:aa:fe:38:15:c9:ed:f4:b5:4a:50:ce: 01:61:7a:d8:fa:00:63:94:f3:c6:28:ec:9d:e8:0a: 3b:f1:b2:f4:99:cd:6f:6f:78:ea:fb:46:c1:2a:a7: a1:69:5e:76:7d:72:e3:4f:48:63:c7:1c:52:b4:d7: dc:f1:d1:ce:68:c3:91:f0:e2:75:1a:bf:72:4e:08: c0:b1:e8:b3:59:08:3a:be:36:18:18:f0:1f:1c:e1: 16:cb:e9:2c:94:4c:01:1c:cc:80:ce:7b:2e:ae:9f: 62:f4:03:25:0d:3f:43:be:9e:08:ea:0b:04:36:a7: 7a:77:6c:b0:26:f0:21:3c:bc:ef:aa:45:78:a0:a0: be:ba:2f:fe:4b:56:d6:57:c1:44:ee:3a:42:c4:38: f4:02:6d:31:be:2d:8c:16:95:4e:50:ae:b5:ac:c3: a2:50:a6:0b:19:ba:1d:49:69:90:54:d8:e3:cd:74: 86:8e:bb:92:c7:11:17:cf:62:3a:c1:f9:e0:2e:93: 44:0b:64:2f:41:3b:9d:90:a6:f4:9e:91:fd:bb:e6: 79:0d:86:9d:c0:85:08:b8:a7:2a:ec:e6:99:81:4e: c8:2a:94:46:90:74:85:c0:25:39:3d:c9:92:a8:26: 8b:37:b9:7c:29:7c:ae:27:3c:b5:c9:ae:d3:47:1b: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D3:C7:12:EC:51:4F:E8:75:13:6F:35:B9:76:A7:91:45:14:20:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl X509v3 Authority Key Identifier: keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer sbgp-ipAddrBlock: critical IPv4: 66.132.138.0/24 198.73.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:fa:e2:26:db:a6:0e:f9:b9:5c:89:dc:ee:f8:99:50:ca:8e: 33:b5:9f:f5:01:67:9e:84:2f:c5:b0:f8:b5:b2:8d:de:de:70: bc:57:61:c2:89:a6:07:76:50:94:bc:be:75:72:78:1c:21:9f: 6b:4f:66:ba:51:42:46:4f:0b:8d:63:22:4f:37:68:59:75:19: 00:f3:f7:81:cc:f4:eb:6e:d6:eb:78:5a:93:6e:c7:1e:17:fd: eb:00:76:df:47:ab:54:37:70:90:61:67:57:65:80:70:dc:c2: a9:e3:40:94:3b:75:82:d6:d6:ca:9e:e8:de:31:19:68:c4:a9: 1b:b3:94:4c:f4:60:be:99:88:20:10:7a:4b:1d:7d:0f:bc:2d: 44:8e:92:5d:5b:34:bb:d2:11:f9:0b:44:63:6b:b5:86:19:a8: c6:df:35:b1:fb:36:e6:4e:2f:cb:bd:70:ac:72:9a:85:df:44: fa:75:a4:77:de:c5:89:3d:d0:ec:dd:15:b1:32:eb:bd:72:66: f7:80:6f:6e:47:b0:e5:9e:ab:28:82:cc:93:58:99:86:46:ba: 8d:06:ae:e7:26:4e:32:a7:4f:77:44:e0:49:0b:81:30:7d:7f: f1:b1:b0:f7:b4:26:68:02:24:9a:4f:8b:af:5d:1b:a4:f4:30: 21:51:03:12 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtYPIxorhx0Eumc1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh ZGM0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk M2UzMmJkNjUtYjIyYS00YWRhLWIxZjUtMGVhNDViNDExOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2emqv44Fcnt9LVKUM4BYXrY+gBjlPPGKOyd 6Ao78bL0mc1vb3jq+0bBKqehaV52fXLjT0hjxxxStNfc8dHOaMOR8OJ1Gr9yTgjA seizWQg6vjYYGPAfHOEWy+kslEwBHMyAznsurp9i9AMlDT9Dvp4I6gsENqd6d2yw JvAhPLzvqkV4oKC+ui/+S1bWV8FE7jpCxDj0Am0xvi2MFpVOUK61rMOiUKYLGbod SWmQVNjjzXSGjruSxxEXz2I6wfngLpNEC2QvQTudkKb0npH9u+Z5DYadwIUIuKcq 7OaZgU7IKpRGkHSFwCU5PcmSqCaLN7l8KXyuJzy1ya7TRxs6XwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCbTxxLsUU/odRNvNbl2p5FFFCD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvOGY5OTc3YjQtYmYzZC0z ODg2LTg2ZDItMmU1NzRmZjE2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2 MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz OGEyM2FkYzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQoSKAwQA xkk1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAOD64ibbpg75uVyJ3O74mVDKjjO1n/UBZ56EL8Ww+LWyjd7e cLxXYcKJpgd2UJS8vnVyeBwhn2tPZrpRQkZPC41jIk83aFl1GQDz94HM9Otu1ut4 WpNuxx4X/esAdt9Hq1Q3cJBhZ1dlgHDcwqnjQJQ7dYLW1sqe6N4xGWjEqRuzlEz0 YL6ZiCAQeksdfQ+8LUSOkl1bNLvSEfkLRGNrtYYZqMbfNbH7NuZOL8u9cKxymoXf RPp1pHfexYk90OzdFbEy671yZveAb25HsOWeqyiCzJNYmYZGuo0GrucmTjKnT3dE 4EkLgTB9f/GxsPe0JmgCJJpPi69dG6T0MCFRAxI= -----END CERTIFICATE-----Generated at Thu Oct 9 06:15:54 2025 by rpki-client