$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa File: 039bc77e-6087-3093-9191-6772277f3e24.roa (raw, json) Hash identifier: w2TP6awPNYKvqAKChEvo4Law/ANswyBGVu3O3Kbpid8= Subject key identifier: 3B:06:98:FE:39:04:07:A6:2D:8F:8A:03:0D:CB:26:B8:3C:4C:85:80 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F4328584B2496D843A5BF3F36D357EA80 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 33115 IP address blocks: 66.223.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d8:43:a5:bf:3f:36:d3:57:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=84283e9e-aeac-40b1-ad77-71bfcc71640f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:a3:3d:59:23:ac:3b:8b:96:93:7a:13:89: d3:d7:1d:f0:5f:92:62:70:cc:ee:e4:c2:06:ad:ca: 4c:50:e1:fd:94:31:8e:39:ff:c0:ad:4f:76:9a:88: 5a:d5:9b:18:5b:a2:58:c3:67:15:41:fc:2c:2b:f1: 74:3b:f8:3e:d3:8b:d3:3b:a0:f5:65:69:20:5e:8c: 9c:34:e8:dc:20:a1:ca:15:00:75:2d:dd:ac:00:9f: 64:2d:bb:71:38:23:16:7a:b4:d9:9d:6d:2f:18:ac: 23:ed:86:39:34:c0:04:a2:42:b5:3d:b7:d2:bf:15: f6:a2:ec:56:5a:68:dc:b0:a4:ee:a4:e5:b4:9f:af: f2:4b:56:57:06:53:68:11:68:d0:92:81:ba:0b:6c: d1:e3:cf:04:3a:a7:56:cf:2c:e7:40:69:b9:a1:93: 22:d9:ca:b1:b6:f6:41:5b:55:7d:3e:60:b2:e2:18: c9:1c:48:dc:7c:15:24:ee:b2:47:32:3f:9b:5f:f9: 15:5b:3d:6f:52:08:a5:68:69:69:75:93:56:d6:0c: 4f:c6:30:ca:71:c7:36:5c:6d:2f:76:92:f4:78:24: 02:99:a1:bc:4f:23:0d:85:1e:85:a3:07:99:cb:d0: 7c:27:cb:98:d0:fc:5b:92:52:29:13:08:85:e1:fc: 8d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:06:98:FE:39:04:07:A6:2D:8F:8A:03:0D:CB:26:B8:3C:4C:85:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: 66.223.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bd:a3:aa:52:5a:4e:64:b9:17:1f:68:82:5b:88:b4:79:7b: bc:71:72:3d:2c:11:51:a0:b6:fd:00:30:ed:4f:71:89:5e:aa: ab:42:d9:80:cd:d8:d4:6c:38:bd:07:8f:58:aa:db:07:21:9f: 76:40:2e:67:22:cb:66:82:0a:4b:17:7c:dd:ea:b8:bb:8e:bf: f8:cc:be:a5:fc:20:26:a4:b3:76:61:bc:8d:f3:32:3f:55:8e: 38:b7:4d:82:ea:78:a9:e2:fb:84:2e:cc:b8:ef:be:c5:63:c0: 2c:e9:83:e9:f7:56:fd:61:78:e4:30:0c:4f:b6:1d:2e:e8:9d: 2a:d2:0e:a6:ed:c4:55:c1:f0:73:5b:bc:65:fc:4f:c9:71:3c: ba:fb:a5:c7:78:f5:56:b5:79:6a:c3:4b:fa:8f:ef:12:3d:45: df:3e:9d:67:eb:51:ff:3d:7d:7d:74:dc:5f:03:6d:1d:99:e9: 81:2d:02:42:2c:fd:05:c5:f9:3e:ce:7c:c7:f2:49:50:6e:d3: f5:fd:ac:c5:4c:8b:cb:45:e0:66:4f:05:5f:9a:d2:f0:d9:91: 4a:3f:ed:82:d4:4e:fb:31:da:db:d2:bd:73:23:64:23:24:b3: 5e:02:4b:34:7a:ae:01:76:b2:04:f9:0b:5b:23:4d:ee:14:d7: 55:07:88:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklthDpb8/NtNX6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ODQyODNlOWUtYWVhYy00MGIxLWFkNzctNzFiZmNjNzE2NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdyjPVkjrDuLlpN6E4nT1x3wX5JicMzu5MIG rcpMUOH9lDGOOf/ArU92moha1ZsYW6JYw2cVQfwsK/F0O/g+04vTO6D1ZWkgXoyc NOjcIKHKFQB1Ld2sAJ9kLbtxOCMWerTZnW0vGKwj7YY5NMAEokK1PbfSvxX2ouxW WmjcsKTupOW0n6/yS1ZXBlNoEWjQkoG6C2zR488EOqdWzyznQGm5oZMi2cqxtvZB W1V9PmCy4hjJHEjcfBUk7rJHMj+bX/kVWz1vUgilaGlpdZNW1gxPxjDKccc2XG0v dpL0eCQCmaG8TyMNhR6FoweZy9B8J8uY0PxbklIpEwiF4fyNCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsGmP45BAemLY+KAw3LJrg8TIWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMDM5YmM3N2UtNjA4Ny0z MDkzLTkxOTEtNjc3MjI3N2YzZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQt9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO9o6pSWk5kuRcfaIJbiLR5e7xxcj0sEVGgtv0AMO1PcYleqqtC2YDN 2NRsOL0Hj1iq2wchn3ZALmciy2aCCksXfN3quLuOv/jMvqX8ICaks3ZhvI3zMj9V jji3TYLqeKni+4QuzLjvvsVjwCzpg+n3Vv1heOQwDE+2HS7onSrSDqbtxFXB8HNb vGX8T8lxPLr7pcd49Va1eWrDS/qP7xI9Rd8+nWfrUf89fX103F8DbR2Z6YEtAkIs /QXF+T7OfMfySVBu0/X9rMVMi8tF4GZPBV+a0vDZkUo/7YLUTvsx2tvSvXMjZCMk s14CSzR6rgF2sgT5C1sjTe4U11UHiP4= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:23 2025 by rpki-client