$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa File: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json) Hash identifier: R2Ci4eKHWOpBJadcT3ThKdZst4pBtjCdMdMXeYSlTK4= Subject key identifier: 30:12:5B:DA:F1:5D:FB:C4:B9:A8:39:5F:87:4D:68:35:0B:73:E8:CB Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F4328584B1F017C69C80AFFB9DEB06380 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 63208 IP address blocks: 66.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:7c:69:c8:0a:ff:b9:de:b0:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=1f306f21-0e1a-405f-806e-59317d605222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:a5:0c:6e:4f:44:c4:84:40:27:c3:aa:7e: 40:41:d2:19:b6:83:fb:1b:cf:46:49:f7:12:95:7e: af:28:e5:d0:9f:83:f9:bb:b9:5f:5e:6f:5f:4a:61: 4c:cb:71:72:48:0a:2b:65:f4:c4:03:a3:d3:68:5a: 91:4a:b0:3d:fa:71:f8:f5:cb:46:8a:ee:64:78:85: 85:0d:36:6b:2f:b4:42:af:5a:4c:e5:09:73:d1:d1: a0:76:fc:7c:0a:c7:65:13:c1:14:41:83:ec:f3:f8: a7:ee:65:ab:ad:87:d7:80:5f:57:cf:20:3e:10:7e: ff:ca:d5:f9:cb:07:4b:4e:71:e3:8e:c9:9f:8f:80: be:f5:49:f5:7d:39:f8:f4:12:87:42:aa:f1:9f:26: 96:67:2a:d6:2a:c9:02:09:43:51:b9:a3:fc:1c:d4: 31:cc:35:46:01:ca:49:ae:23:64:6d:fb:ea:cd:56: 11:e3:b8:9d:13:c4:80:9a:0c:80:d7:d1:29:e8:bf: 08:af:99:ae:4a:6e:99:2b:0b:84:7c:73:de:76:32: 80:c8:a4:9f:60:6d:6e:18:66:de:1f:30:77:4d:b6: d3:a3:d5:92:7e:69:3c:ed:55:50:1e:c8:22:d4:bd: b3:5a:6a:89:9f:6c:8a:be:50:3b:04:a9:27:a6:f5: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:12:5B:DA:F1:5D:FB:C4:B9:A8:39:5F:87:4D:68:35:0B:73:E8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv4: 66.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fb:c7:f7:33:2f:5c:8c:ac:1b:4e:2c:23:c7:81:7c:d3:bc: 69:07:5c:b7:63:82:c9:26:5e:47:e4:1b:8f:7a:cf:e5:8e:d3: f7:67:dc:e4:03:eb:13:0e:4c:62:92:72:7c:7e:f6:57:e4:9d: a6:c0:be:a6:40:47:e7:32:28:3b:16:3d:4d:d8:76:2f:94:91: 24:0b:f9:4a:40:27:6c:e6:38:7e:cc:db:94:74:2c:01:a0:95: 3f:2e:27:f7:fb:8b:b6:e8:15:9f:4b:3c:54:27:7f:9b:b4:c3: dd:d7:67:af:69:27:b3:46:ac:55:38:24:56:64:5c:6d:ec:cd: 56:a1:e6:47:5d:63:9d:06:b1:38:d6:f9:ee:ea:d2:1b:58:07: 1d:88:06:91:7e:3a:9b:87:3f:ef:52:1f:79:42:76:51:9a:e7: 4c:c7:96:ef:18:aa:e8:6d:b7:fa:f9:02:89:ef:40:53:65:ca: 80:53:70:ac:a0:4c:3d:35:44:f9:f5:b8:76:bf:59:b5:78:47: 81:2f:2d:39:cb:0d:24:ac:52:75:da:88:e8:3e:73:10:9e:20: 69:8f:b1:02:65:62:64:95:05:a4:b2:61:29:25:c3:0b:0f:65: 37:4d:f6:c7:7c:2c:5d:23:22:57:87:9e:1f:5b:3f:f3:3e:1f: 57:a7:c6:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXxpyAr/ud6wY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWYzMDZmMjEtMGUxYS00MDVmLTgwNmUtNTkzMTdkNjA1MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0mlDG5PRMSEQCfDqn5AQdIZtoP7G89GSfcS lX6vKOXQn4P5u7lfXm9fSmFMy3FySAorZfTEA6PTaFqRSrA9+nH49ctGiu5keIWF DTZrL7RCr1pM5Qlz0dGgdvx8CsdlE8EUQYPs8/in7mWrrYfXgF9XzyA+EH7/ytX5 ywdLTnHjjsmfj4C+9Un1fTn49BKHQqrxnyaWZyrWKskCCUNRuaP8HNQxzDVGAcpJ riNkbfvqzVYR47idE8SAmgyA19Ep6L8Ir5muSm6ZKwuEfHPedjKAyKSfYG1uGGbe HzB3TbbTo9WSfmk87VVQHsgi1L2zWmqJn2yKvlA7BKknpvV+XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDASW9rxXfvEuag5X4dNaDULc+jLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvMzRhNzJhMWUtMTI1Zi0z Nzc1LWE2YTItZDFiZDFhODAzYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX7x/czL1yMrBtOLCPHgXzTvGkHXLdjgskmXkfkG496z+WO0/dn3OQD 6xMOTGKScnx+9lfknabAvqZAR+cyKDsWPU3Ydi+UkSQL+UpAJ2zmOH7M25R0LAGg lT8uJ/f7i7boFZ9LPFQnf5u0w93XZ69pJ7NGrFU4JFZkXG3szVah5kddY50GsTjW +e7q0htYBx2IBpF+OpuHP+9SH3lCdlGa50zHlu8Yquhtt/r5AonvQFNlyoBTcKyg TD01RPn1uHa/WbV4R4EvLTnLDSSsUnXaiOg+cxCeIGmPsQJlYmSVBaSyYSklwwsP ZTdN9sd8LF0jIleHnh9bP/M+H1enxrY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:26:56 2025 by rpki-client