$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa File: 77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa (raw, json) Hash identifier: 6cr0X5OoVniWgCtFQrIyUPZ4/yE79tkcX4cA2YISnro= Subject key identifier: 09:86:27:2D:48:91:EA:CF:86:27:5F:84:0B:E8:16:CD:6B:D9:C4:62 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CECDA568E537F38D7C80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 66.109.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ce:cd:a5:68:e5:37:f3:8d:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=bd262c9d-402d-4209-a98c-ccef57cbc504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:ca:2f:69:09:34:d3:c0:96:f7:ab:85:07: 56:bb:fb:83:04:6c:67:8d:a7:af:1c:22:d0:49:83: b6:f8:44:7e:2b:ef:ef:87:5c:0b:8e:3b:1a:12:1c: 78:bb:ee:53:cf:b6:7c:ff:3f:49:42:a0:1a:86:b4: 8a:5d:3e:07:ae:ac:f5:5e:af:78:4b:21:5d:c7:26: 95:61:b4:1d:2c:8b:21:b2:94:30:ad:1d:a0:0f:dd: 50:4c:86:a1:2b:b6:96:4d:f4:77:d0:d2:87:19:bb: 89:f1:80:d2:5e:3d:74:06:7d:86:2b:12:13:a3:e2: 38:9a:fe:a9:df:9e:43:f3:95:02:7f:f9:c9:3a:1f: 0a:0f:9f:5b:43:b0:30:b4:b2:6f:d8:e5:af:78:bc: 82:7b:6a:57:cf:7b:1c:a8:ce:36:57:0c:a1:00:14: 04:a2:7f:54:eb:7f:e0:27:53:6e:9e:91:80:fd:c0: b1:55:fe:e0:74:b3:f6:a1:74:64:2f:b6:09:d5:a8: 00:1e:c5:79:68:72:d0:6c:5c:b9:3a:57:59:5f:00: 5d:ee:fb:6f:3f:19:b7:8f:f4:b4:a1:17:8c:39:c9: c6:c9:da:00:57:54:db:13:29:ca:98:d5:76:c2:57: b9:0b:54:c1:a6:0d:82:7a:68:4e:ae:50:e4:43:a6: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:86:27:2D:48:91:EA:CF:86:27:5F:84:0B:E8:16:CD:6B:D9:C4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/77aa2d1e-fe7a-3efb-80ac-0234c3bb48fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 66.109.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2d:76:89:c8:3b:1f:6a:a7:4b:35:44:c4:6a:ed:2e:99:ac: 8d:55:00:45:e4:9a:06:38:c0:fc:14:3a:7a:dc:ea:96:82:f6: c4:60:5d:0d:ab:c8:d1:cf:38:52:33:3f:d7:de:25:51:3a:76: b4:26:5e:ae:75:fd:f0:b9:1f:11:4e:4c:0c:b2:78:56:18:98: ba:23:3d:70:c1:cd:12:1a:2f:82:7e:57:d4:ee:00:dd:d1:71: 44:13:66:12:ad:95:26:cd:a6:9f:cb:e9:da:f6:b2:ed:b0:b7: 8a:cf:20:2b:74:3d:8e:c7:f7:85:76:c3:31:c6:59:83:01:91: 36:d3:a9:bc:b3:69:a8:4a:08:d8:45:91:40:2f:54:21:f5:a7: 4d:29:d2:22:06:35:9d:9e:96:7b:2a:4d:95:de:21:72:d4:3d: 49:46:e2:ca:8e:5b:de:d4:36:36:ad:e3:5a:dc:ed:98:72:40: 55:6d:d0:ae:2d:b4:65:5f:09:c6:88:39:7b:57:5a:a4:93:6d: 69:51:e9:a2:1f:b3:ef:68:59:07:65:21:90:72:21:cb:ff:d7: 32:ed:4f:8f:f2:32:1f:07:6f:cb:6e:c6:f4:e3:cf:75:76:f3: 7f:85:38:7f:a2:ea:9f:8d:96:f3:1a:07:77:e8:cd:c0:76:08: eb:12:e5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds7NpWjlN/ONfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YmQyNjJjOWQtNDAyZC00MjA5LWE5OGMtY2NlZjU3Y2JjNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUHKL2kJNNPAlverhQdWu/uDBGxnjaevHCLQ SYO2+ER+K+/vh1wLjjsaEhx4u+5Tz7Z8/z9JQqAahrSKXT4Hrqz1Xq94SyFdxyaV YbQdLIshspQwrR2gD91QTIahK7aWTfR30NKHGbuJ8YDSXj10Bn2GKxITo+I4mv6p 355D85UCf/nJOh8KD59bQ7AwtLJv2OWveLyCe2pXz3scqM42VwyhABQEon9U63/g J1NunpGA/cCxVf7gdLP2oXRkL7YJ1agAHsV5aHLQbFy5OldZXwBd7vtvPxm3j/S0 oReMOcnGydoAV1TbEynKmNV2wle5C1TBpg2CemhOrlDkQ6YasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmGJy1IkerPhidfhAvoFs1r2cRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzdhYTJkMWUtZmU3YS0z ZWZiLTgwYWMtMDIzNGMzYmI0OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMtdonIOx9qp0s1RMRq7S6ZrI1VAEXkmgY4wPwUOnrc6paC9sRgXQ2r yNHPOFIzP9feJVE6drQmXq51/fC5HxFOTAyyeFYYmLojPXDBzRIaL4J+V9TuAN3R cUQTZhKtlSbNpp/L6dr2su2wt4rPICt0PY7H94V2wzHGWYMBkTbTqbyzaahKCNhF kUAvVCH1p00p0iIGNZ2elnsqTZXeIXLUPUlG4sqOW97UNjat41rc7ZhyQFVt0K4t tGVfCcaIOXtXWqSTbWlR6aIfs+9oWQdlIZByIcv/1zLtT4/yMh8Hb8tuxvTjz3V2 83+FOH+i6p+NlvMaB3fozcB2COsS5UQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:53 2025 by rpki-client