$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa File: 8804544c-f9cd-38be-bc33-4778fc22dce7.roa (raw, json) Hash identifier: feX+X/h9N/TPKoACSuxV1RzT0I1qBuyNLLxQzicUZm8= Subject key identifier: 18:7A:3C:5B:3A:20:CD:DB:C2:DC:1C:CA:67:52:11:7D:84:2C:3E:5D Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Certificate serial: 010D0C9F4328584B28C6EE38C1C0A80FA38DC000 Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 66.235.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ee:38:c1:c0:a8:0f:a3:8d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=0067e608-7589-44fd-b1de-f3282046a9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:19:cf:5a:7b:27:6c:33:9e:9a:aa:ac:46: f8:36:06:3a:92:c4:d5:2e:0a:5f:52:d9:c7:42:1e: e8:1c:c5:67:91:af:bb:f0:c4:5c:53:0d:6a:d8:a1: ab:a9:06:42:b7:50:14:ee:0d:e5:7b:96:95:59:ef: 68:52:2b:a5:e9:c2:b2:9e:5e:81:77:3a:99:5f:92: e0:71:ae:9f:b4:76:22:64:69:e9:ad:96:13:f4:59: a0:a5:6d:8a:86:c7:bf:78:5d:5e:f3:c0:c9:7b:d4: 97:91:b5:7d:34:65:88:21:27:c2:2c:83:0e:83:49: 93:ae:74:15:36:77:0b:69:60:41:d6:06:ad:ef:7b: ff:ec:29:ab:2d:ce:a2:4b:da:ed:01:5a:33:13:aa: a0:0c:15:73:bd:15:b8:a9:1d:4b:7f:e1:00:b1:df: dc:48:59:dc:d8:30:2e:a1:5d:ff:62:45:b3:47:3f: 3d:a6:3e:79:54:3c:d8:1a:49:d4:d6:bd:13:25:b5: d9:a3:c0:1e:7a:d4:b8:7f:c0:0a:10:b6:97:db:04: 1e:c3:08:9b:33:70:b7:56:ac:1e:70:a9:9c:b1:bc: 99:20:6d:8b:71:8e:45:c9:e2:8a:93:6d:43:16:bf: 80:b2:99:50:19:e0:9a:28:e0:13:4b:37:1e:34:b4: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7A:3C:5B:3A:20:CD:DB:C2:DC:1C:CA:67:52:11:7D:84:2C:3E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl X509v3 Authority Key Identifier: keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer sbgp-ipAddrBlock: critical IPv4: 66.235.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ba:d3:b9:e6:46:d0:63:34:c4:4d:52:4d:a4:56:fc:a2:a4: 9f:bb:80:c1:4d:0b:91:2c:3c:d3:bf:99:c7:93:21:2e:dd:9f: a7:0d:ea:8c:6c:0b:d4:90:c1:b9:98:23:68:26:37:e4:52:05: fd:fe:dc:9b:3f:ad:4e:bb:83:42:13:22:21:36:39:96:b6:c8: a9:86:04:ea:75:0f:73:c1:0d:4e:88:0e:0b:0c:f2:ea:fb:2f: 44:59:8b:95:74:1e:c7:1b:c1:54:aa:9a:94:d2:cc:e8:94:18: 40:dc:77:bf:45:5f:b4:cf:bc:7d:50:ce:19:da:88:b2:35:68: 9d:61:78:4d:6d:f2:ff:9a:ad:27:ec:03:38:b8:07:23:72:50: 10:cb:eb:fa:c1:80:e8:80:a6:31:9a:8a:32:67:5e:fe:de:60: 68:8d:9a:f2:7b:96:54:4c:8d:60:fa:b5:9b:c8:c9:45:3b:61: 69:55:21:50:8b:e5:48:63:bd:e6:88:73:8b:43:06:60:8e:bf: a1:94:2d:1e:66:a3:3a:29:14:7f:d8:5a:84:24:84:d0:9e:e5: 8d:60:af:70:11:69:c4:42:56:1b:da:98:b9:ae:95:00:7c:81: cd:67:66:71:08:d4:dc:89:1b:67:5e:0a:d6:09:3f:18:5f:12: 7a:67:d0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxu44wcCoD6ONwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk MTcwMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MDA2N2U2MDgtNzU4OS00NGZkLWIxZGUtZjMyODIwNDZhOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoQZz1p7J2wznpqqrEb4NgY6ksTVLgpfUtnH Qh7oHMVnka+78MRcUw1q2KGrqQZCt1AU7g3le5aVWe9oUiul6cKynl6BdzqZX5Lg ca6ftHYiZGnprZYT9FmgpW2Khse/eF1e88DJe9SXkbV9NGWIISfCLIMOg0mTrnQV NncLaWBB1gat73v/7CmrLc6iS9rtAVozE6qgDBVzvRW4qR1Lf+EAsd/cSFnc2DAu oV3/YkWzRz89pj55VDzYGknU1r0TJbXZo8AeetS4f8AKELaX2wQewwibM3C3Vqwe cKmcsbyZIG2LcY5FyeKKk21DFr+AsplQGeCaKOATSzceNLQ1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh6PFs6IM3bwtwcymdSEX2ELD5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvODgwNDU0NGMtZjljZC0z OGJlLWJjMzMtNDc3OGZjMjJkY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5 ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3 ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+607nmRtBjNMRNUk2kVvyipJ+7gMFNC5EsPNO/mceTIS7dn6cN6oxs C9SQwbmYI2gmN+RSBf3+3Js/rU67g0ITIiE2OZa2yKmGBOp1D3PBDU6IDgsM8ur7 L0RZi5V0HscbwVSqmpTSzOiUGEDcd79FX7TPvH1QzhnaiLI1aJ1heE1t8v+arSfs Azi4ByNyUBDL6/rBgOiApjGaijJnXv7eYGiNmvJ7llRMjWD6tZvIyUU7YWlVIVCL 5UhjveaIc4tDBmCOv6GULR5mozopFH/YWoQkhNCe5Y1gr3ARacRCVhvamLmulQB8 gc1nZnEI1NyJG2deCtYJPxhfEnpn0Og= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:11 2025 by rpki-client