$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa File: 8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json) Hash identifier: B/2gfQbALrYdWutaPEEU6eMV53tZLZZaXW1gS/HXrck= Subject key identifier: C0:11:D9:F2:CC:F4:1C:12:AB:CC:CB:54:23:8E:01:6D:DB:6D:FB:01 Certificate issuer: /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Certificate serial: 010D0C9F4328584B0A116760BE6AF6FE0C756580 Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 30255 IP address blocks: 66.205.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:67:60:be:6a:f6:fe:0c:75:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=e77f1a60-8b23-4981-846d-4fcb77d96c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:9c:d3:27:ad:38:d5:50:0c:bf:22:6a:3c: 9d:dc:94:ef:88:83:51:8e:7f:80:18:ff:dd:ba:c4: 75:53:a3:38:94:23:cb:0b:57:b3:8c:16:c0:e2:53: b9:8c:e0:2f:0b:ad:e8:2e:83:17:76:c7:1a:43:ee: 77:31:01:e4:33:fe:44:ff:ef:64:bd:cf:f0:5b:68: 60:59:88:b9:42:14:ae:e2:29:57:ed:51:eb:ab:fc: 83:c5:03:0a:5a:f0:75:7c:7f:e4:38:38:e8:6d:a3: 1b:c4:c6:bc:2f:94:28:fb:24:99:12:0e:91:91:5c: 39:d4:c0:f4:95:ab:d1:0f:22:b8:73:2d:f8:be:d6: 6a:0a:cb:98:cc:bf:2a:a8:73:21:bc:95:6f:0f:07: d0:ad:25:3f:3b:79:53:92:ba:aa:fe:77:ec:0a:a4: 7e:67:b5:07:25:5f:62:17:0d:25:94:b1:d7:9c:cc: c7:17:c1:4a:bb:2f:61:5e:2d:8e:d6:8c:0c:17:ef: 5c:e4:98:33:5f:5d:07:b8:3d:bb:8e:ff:96:f9:69: 8c:90:b9:55:68:7d:26:e9:c7:cb:58:54:7b:5d:c1: 68:dc:2c:ff:44:42:bc:81:35:c3:23:a8:91:e6:fb: a7:ca:24:f3:a1:3e:dd:1b:4c:53:b1:97:09:2e:28: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:11:D9:F2:CC:F4:1C:12:AB:CC:CB:54:23:8E:01:6D:DB:6D:FB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl X509v3 Authority Key Identifier: keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer sbgp-ipAddrBlock: critical IPv4: 66.205.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cd:63:a7:54:1d:3e:70:f5:8f:b3:53:ca:06:91:19:8d:05: 94:6f:0d:95:5c:d2:50:a1:9b:af:85:7e:67:67:cf:c8:10:99: 6e:be:c3:20:97:33:2f:42:b1:8a:d5:e6:6a:a9:42:52:26:d9: 14:d9:3b:cc:45:79:99:76:9a:25:80:81:35:77:75:62:9d:c9: 54:82:35:ae:76:e6:8d:ac:54:de:e2:c0:d5:1c:14:3a:04:78: b7:93:a2:0b:e1:8e:fa:9f:8b:aa:a7:e2:d2:7d:b8:b0:e7:be: c3:62:cd:3e:74:a2:77:d0:b6:9e:09:f3:fe:26:5b:ba:78:d2: 57:8b:42:eb:3d:96:e8:14:ef:3d:f3:c7:0e:3e:87:80:36:49: ea:40:53:45:cc:65:0b:83:a2:94:98:ea:74:d1:99:2d:59:bb: 4e:92:9f:de:c6:59:9e:00:2e:a4:41:da:71:f2:06:f2:f8:cc: 0b:c7:34:0b:5d:a9:c1:af:d3:1b:2a:eb:70:70:9a:2b:2a:28: 4f:db:8c:13:a5:9e:a7:bc:5a:e2:b8:a7:33:34:08:b6:9b:e0: 79:5a:a8:bd:8a:6a:60:83:76:f6:e1:4c:a1:4a:24:d0:d0:93: 48:84:cf:1f:9c:3b:a6:bf:d6:0a:a0:6d:2c:d8:07:14:ff:6f: 4e:24:9f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWdgvmr2/gx1ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZWMzY2YtODU4YS00NTdiLTg0NGYtOGM2MjgzZjVl NWQ5MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZTc3ZjFhNjAtOGIyMy00OTgxLTg0NmQtNGZjYjc3ZDk2YzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37yc0yetONVQDL8iajyd3JTviINRjn+AGP/d usR1U6M4lCPLC1ezjBbA4lO5jOAvC63oLoMXdscaQ+53MQHkM/5E/+9kvc/wW2hg WYi5QhSu4ilX7VHrq/yDxQMKWvB1fH/kODjobaMbxMa8L5Qo+ySZEg6RkVw51MD0 lavRDyK4cy34vtZqCsuYzL8qqHMhvJVvDwfQrSU/O3lTkrqq/nfsCqR+Z7UHJV9i Fw0llLHXnMzHF8FKuy9hXi2O1owMF+9c5JgzX10HuD27jv+W+WmMkLlVaH0m6cfL WFR7XcFo3Cz/REK8gTXDI6iR5vunyiTzoT7dG0xTsZcJLij/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAR2fLM9BwSq8zLVCOOAW3bbfsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNl YzNjZi04NThhLTQ1N2ItODQ0Zi04YzYyODNmNWU1ZDkvOGQ5MDc2OTQtZjA4NC0z NjYxLWI5ZDctMmU0ZWU5YTVkZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAzZWMzY2YtODU4YS00NTdiLTg0 NGYtOGM2MjgzZjVlNWQ5LzkwM2VjM2NmLTg1OGEtNDU3Yi04NDRmLThjNjI4M2Y1 ZTVkOS5jcmwwHwYDVR0jBBgwFoAUPVYhXxO4CO7AZA1SjS1VdeJwyO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNlYzNjZi04NThhLTQ1N2ItODQ0Zi04YzYy ODNmNWU1ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALNY6dUHT5w9Y+zU8oGkRmNBZRvDZVc0lChm6+Ffmdnz8gQmW6+wyCX My9CsYrV5mqpQlIm2RTZO8xFeZl2miWAgTV3dWKdyVSCNa525o2sVN7iwNUcFDoE eLeTogvhjvqfi6qn4tJ9uLDnvsNizT50onfQtp4J8/4mW7p40leLQus9lugU7z3z xw4+h4A2SepAU0XMZQuDopSY6nTRmS1Zu06Sn97GWZ4ALqRB2nHyBvL4zAvHNAtd qcGv0xsq63BwmisqKE/bjBOlnqe8WuK4pzM0CLab4HlaqL2KamCDdvbhTKFKJNDQ k0iEzx+cO6a/1gqgbSzYBxT/b04kn2Q= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:32 2025 by rpki-client