$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa File: 891132c6-0309-32ba-a1d3-ef9e3b909c24.roa (raw, json) Hash identifier: ndf0J02X9v0nP/P69XuSNoxx8RwXyZ3DeNZSk6rm5zw= Subject key identifier: FF:49:AF:DF:65:DF:27:8C:7C:23:F2:66:7C:7A:1E:10:14:11:BE:C9 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B01B14BEA9DB487F1011C28C0 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 22785 IP address blocks: 66.109.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:4b:ea:9d:b4:87:f1:01:1c:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=f1118088-3a45-4ccc-9070-d2ef1b836342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:cf:41:e9:23:69:41:a8:97:ef:5f:1d:2c: 80:fd:24:8e:38:d3:25:68:65:ef:d4:85:21:55:a1: d3:ab:d0:bd:93:a0:27:5d:cf:f5:80:80:e4:7c:c1: 9f:34:6a:c5:5b:86:3a:0c:35:cf:ff:0f:87:fa:54: 37:65:04:65:f8:fd:bc:da:ae:1a:06:e3:5f:fc:52: bc:97:9f:6f:e3:fe:94:e5:f2:40:5f:96:96:eb:dd: de:2d:db:d8:38:0b:92:1f:dd:1d:f5:70:35:9e:d4: 35:27:82:78:29:8a:26:d0:44:40:ee:0b:59:ab:de: ca:20:6b:69:cb:79:98:51:62:1f:b4:b0:b2:74:23: f9:86:cc:aa:b8:74:33:b3:10:00:40:05:15:bc:a4: e2:b4:ea:16:4b:7f:03:c2:02:35:a5:77:a6:5e:d3: 88:a2:da:cd:22:70:1e:9a:12:56:59:0e:6c:3e:7b: 21:45:1d:7c:a7:8a:25:3f:e8:50:89:68:e9:08:94: 89:22:27:97:e4:e7:01:5e:83:60:d3:cd:36:26:2a: 4d:a1:4f:cd:25:fc:aa:3b:83:ad:e4:62:d8:9e:53: 9f:3a:52:d9:11:1e:7f:f2:3f:fb:68:d1:9e:9b:9b: 04:d4:b4:e0:9c:a7:f6:00:21:87:4b:63:bb:ef:4b: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:AF:DF:65:DF:27:8C:7C:23:F2:66:7C:7A:1E:10:14:11:BE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:60:4e:3d:2c:bc:d5:a0:e5:03:83:49:d7:26:e2:b2:4e:c8: eb:1b:a7:7f:f3:46:2c:9a:24:c6:bf:1e:66:d2:28:b2:13:f7: 10:66:af:a0:81:f5:aa:5f:03:35:3d:6c:f9:e6:a0:dc:89:83: 19:63:e8:e3:6a:ef:fc:05:99:bf:75:41:a9:0e:61:41:43:98: 4f:d4:b5:f1:43:71:04:8d:18:27:6b:bf:6b:5b:e2:91:96:10: 84:70:34:b7:df:3b:3e:e1:88:ba:cb:14:22:15:2f:49:ca:e1: f9:c4:9e:0b:86:76:20:ec:65:d7:c7:e6:c9:a8:b1:42:b8:6f: 41:c1:86:bd:c8:75:e3:a4:ca:0c:aa:43:0c:80:9e:e3:fd:03: 96:db:ab:9a:74:6c:fa:47:b0:e5:ed:0f:eb:86:b3:cd:4d:d9: 9e:2d:0d:51:6f:d9:d2:44:39:eb:75:6e:f1:85:2c:d1:09:27: a0:ac:a2:63:c4:68:37:ba:f1:72:45:5d:36:07:23:b1:d0:2c: 74:29:0a:58:6a:61:0a:fe:66:32:9b:f8:1c:35:6c:f9:68:6d: ba:56:a4:a5:22:13:ab:ab:fe:af:a9:de:ee:e9:d1:8d:e2:15: 5e:ca:ba:e8:70:75:6c:c9:f8:55:50:19:dd:b8:3c:0e:46:f2: 10:53:21:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUvqnbSH8QEcKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjExMTgwODgtM2E0NS00Y2NjLTkwNzAtZDJlZjFiODM2MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCrPQekjaUGol+9fHSyA/SSOONMlaGXv1IUh VaHTq9C9k6AnXc/1gIDkfMGfNGrFW4Y6DDXP/w+H+lQ3ZQRl+P282q4aBuNf/FK8 l59v4/6U5fJAX5aW693eLdvYOAuSH90d9XA1ntQ1J4J4KYom0ERA7gtZq97KIGtp y3mYUWIftLCydCP5hsyquHQzsxAAQAUVvKTitOoWS38DwgI1pXemXtOIotrNInAe mhJWWQ5sPnshRR18p4olP+hQiWjpCJSJIieX5OcBXoNg0802JipNoU/NJfyqO4Ot 5GLYnlOfOlLZER5/8j/7aNGem5sE1LTgnKf2ACGHS2O770uvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9Jr99l3yeMfCPyZnx6HhAUEb7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvODkxMTMyYzYtMDMwOS0z MmJhLWExZDMtZWY5ZTNiOTA5YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQm2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtgTj0svNWg5QODSdcm4rJOyOsbp3/zRiyaJMa/HmbSKLIT9xBmr6CB 9apfAzU9bPnmoNyJgxlj6ONq7/wFmb91QakOYUFDmE/UtfFDcQSNGCdrv2tb4pGW EIRwNLffOz7hiLrLFCIVL0nK4fnEnguGdiDsZdfH5smosUK4b0HBhr3IdeOkygyq QwyAnuP9A5bbq5p0bPpHsOXtD+uGs81N2Z4tDVFv2dJEOet1bvGFLNEJJ6CsomPE aDe68XJFXTYHI7HQLHQpClhqYQr+ZjKb+Bw1bPlobbpWpKUiE6ur/q+p3u7p0Y3i FV7KuuhwdWzJ+FVQGd24PA5G8hBTIfM= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:42 2025 by rpki-client