$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa File: 43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa (raw, json) Hash identifier: eMgn2dPIS8Wz5Ypk/0155RSrtqw7B2OerbBrJfdI1Bs= Subject key identifier: BD:64:72:BC:D3:A2:D1:13:27:01:00:C4:11:6E:50:09:9E:A7:47:E2 Certificate issuer: /CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Certificate serial: 010D0C9F4328584B4081B150A1E028844DEB8300 Authority key identifier: 93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 29900 IP address blocks: 66.146.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b1:50:a1:e0:28:84:4d:eb:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=ad9bea8b-6ac5-4f4c-80b3-f4b8fbb1b576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:84:ea:9a:35:20:26:4e:a6:fd:f3:a0:c8: c7:df:2a:d6:25:08:09:be:bd:76:c1:50:71:2d:07: 0d:30:ad:08:f5:7a:ee:99:82:32:65:c5:35:ee:14: 0f:e8:c8:70:1b:9b:d1:37:31:fb:69:ab:a6:12:1a: bb:6e:81:7c:89:0d:48:8d:7f:64:85:6f:f8:d2:5a: 52:32:bd:52:ce:3b:3a:a4:9b:28:ef:df:d3:c2:5b: 9a:0c:ee:a3:cf:a4:65:29:81:7d:29:4a:d0:64:5c: db:c4:ca:e2:2b:59:dd:92:fe:6e:da:e3:9e:74:78: a3:06:ce:2a:c8:b2:56:ce:7c:f2:3b:50:fc:42:5d: fe:ba:e3:fe:11:c4:b5:a2:71:3b:87:42:ec:ba:70: 93:94:6a:44:7d:df:c8:a0:b5:36:e2:7f:5b:8f:dd: aa:d3:d0:89:84:11:24:64:59:f2:2f:22:31:1e:a5: 6f:57:f4:82:39:f1:34:c5:7f:bd:8e:c5:8a:e2:15: ae:28:3a:15:e3:c9:65:b5:9c:34:08:05:55:28:e7: a2:16:10:1b:1f:40:fb:4a:f1:c3:97:b3:ac:90:94: 2d:c5:d9:1c:f5:9f:8f:ab:fe:4c:af:d6:22:ee:e4: ca:ee:cb:69:25:ad:d8:dc:a8:d2:5f:35:94:11:f4: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:72:BC:D3:A2:D1:13:27:01:00:C4:11:6E:50:09:9E:A7:47:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl X509v3 Authority Key Identifier: keyid:93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer sbgp-ipAddrBlock: critical IPv4: 66.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:04:24:d8:ab:f3:ab:eb:fc:da:94:a5:d1:dc:56:c8:8f:c0: 72:12:33:61:22:43:7c:7b:70:57:af:7b:0e:6e:cc:9b:0c:9c: e7:94:f0:1b:be:92:7a:ea:2c:81:40:07:90:cc:f5:ad:35:8c: 56:15:d3:10:59:ed:fa:f2:f7:27:95:fa:c7:86:c9:fd:48:ff: 7f:c4:5c:09:37:f9:be:7d:57:04:f1:ec:72:3d:05:0c:91:5b: 53:55:4a:74:83:ab:85:47:52:0c:14:5d:38:d2:75:0b:be:c9: 08:ab:e2:3b:c7:8a:74:5e:4e:18:7e:47:b2:de:94:18:51:bd: e1:50:ef:24:8b:90:0e:e2:b4:19:63:60:27:57:47:0b:bc:76: 29:e9:f0:45:8b:4a:0e:41:1b:6b:c4:8c:07:99:4e:db:ca:ff: 41:ae:db:14:20:ca:95:9c:c5:98:e6:41:1b:e4:25:59:10:69: cf:18:dc:d5:4e:bf:57:f8:89:44:55:8e:a9:74:66:8a:a8:77: 96:a2:7a:62:05:44:70:b0:ee:09:29:ce:14:69:16:a7:0a:a5: 83:4f:e4:d3:eb:8e:53:77:dc:1a:3d:21:bd:c9:67:65:a2:cd: 3e:7b:6b:d6:1f:9a:c6:a7:90:77:ba:1e:f8:27:17:0c:5b:53: 05:07:68:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbFQoeAohE3rgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVkYjE5OWQtOWRjOC00YjgzLWI1M2ItYjA5MmYwZDZl NzhlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YWQ5YmVhOGItNmFjNS00ZjRjLTgwYjMtZjRiOGZiYjFiNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNWE6po1ICZOpv3zoMjH3yrWJQgJvr12wVBx LQcNMK0I9XrumYIyZcU17hQP6MhwG5vRNzH7aaumEhq7boF8iQ1IjX9khW/40lpS Mr1Szjs6pJso79/TwluaDO6jz6RlKYF9KUrQZFzbxMriK1ndkv5u2uOedHijBs4q yLJWznzyO1D8Ql3+uuP+EcS1onE7h0LsunCTlGpEfd/IoLU24n9bj92q09CJhBEk ZFnyLyIxHqVvV/SCOfE0xX+9jsWK4hWuKDoV48lltZw0CAVVKOeiFhAbH0D7SvHD l7OskJQtxdkc9Z+Pq/5Mr9Yi7uTK7stpJa3Y3KjSXzWUEfQMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1kcrzTotETJwEAxBFuUAmep0fiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRi MTk5ZC05ZGM4LTRiODMtYjUzYi1iMDkyZjBkNmU3OGUvNDNkZTNiNWYtN2ZlNS0z MmNkLWI3MzItOGJhOThmNTFkYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTVkYjE5OWQtOWRjOC00YjgzLWI1 M2ItYjA5MmYwZDZlNzhlL2U1ZGIxOTlkLTlkYzgtNGI4My1iNTNiLWIwOTJmMGQ2 ZTc4ZS5jcmwwHwYDVR0jBBgwFoAUk0BH5PEQeGn9DIj0jnfJii1qqMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRiMTk5ZC05ZGM4LTRiODMtYjUzYi1iMDky ZjBkNmU3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQpLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcEJNir86vr/NqUpdHcVsiPwHISM2EiQ3x7cFevew5uzJsMnOeU8Bu+ knrqLIFAB5DM9a01jFYV0xBZ7fry9yeV+seGyf1I/3/EXAk3+b59VwTx7HI9BQyR W1NVSnSDq4VHUgwUXTjSdQu+yQir4jvHinReThh+R7LelBhRveFQ7ySLkA7itBlj YCdXRwu8dinp8EWLSg5BG2vEjAeZTtvK/0Gu2xQgypWcxZjmQRvkJVkQac8Y3NVO v1f4iURVjql0Zoqod5aiemIFRHCw7gkpzhRpFqcKpYNP5NPrjlN33Bo9Ib3JZ2Wi zT57a9YfmsankHe6HvgnFwxbUwUHaFY= -----END CERTIFICATE-----Generated at Sat Oct 11 04:23:35 2025 by rpki-client