$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d5c2bb8-aeba-3465-b827-4a8917af7585.roa File: 1d5c2bb8-aeba-3465-b827-4a8917af7585.roa (raw, json) Hash identifier: 9H52bFy9iJqWJ3usYCpra41S2zrFlLMnyjQU154LqyY= Subject key identifier: 43:D0:6A:3B:1E:66:7D:A8:FA:27:9D:7A:BD:88:8D:38:1B:00:63:F9 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B0B76B7A0DE68729F56691280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d5c2bb8-aeba-3465-b827-4a8917af7585.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 66.115.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b7:a0:de:68:72:9f:56:69:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=712496a8-e982-46b1-8269-1bdb0aa74201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:10:a7:33:6d:32:2d:de:19:bc:c8:4f:c5:8e: 32:49:42:41:0c:40:07:0e:80:21:14:39:a2:18:f9: 2f:d6:e9:c0:60:76:30:18:a3:b3:f1:1f:30:12:6e: be:b3:65:cd:1e:42:f6:3e:b6:84:2b:ec:4e:10:68: 21:cb:1e:7a:ac:6d:38:5e:f6:39:e8:23:24:ce:26: 3e:1b:5b:76:1f:0d:80:7f:71:c7:34:56:e5:0d:f4: a4:5b:60:61:46:c9:50:23:05:0f:28:51:94:e1:cb: d9:8e:c1:b3:24:eb:82:5c:af:ca:68:b6:cd:52:d8: 3e:40:83:db:f3:e4:3f:a2:32:58:5d:fb:1b:04:af: fb:3b:a0:ae:e3:23:f9:c4:14:c0:b9:25:a7:aa:4c: ab:5a:3f:28:42:aa:36:ed:49:38:f8:69:1f:69:55: d9:d1:b2:4c:ee:49:44:96:c2:56:52:bf:de:75:8f: 53:44:2a:7d:f6:f3:cf:5d:09:33:08:37:f7:cb:8d: 69:fa:5d:05:00:cc:23:8c:56:56:6c:9c:aa:15:df: a1:9c:58:b7:bb:04:48:b2:cc:d6:5b:f5:24:9c:be: ac:d1:b0:b4:cc:73:9e:4e:1a:81:60:e5:df:ce:b8: 00:44:ff:64:7a:e6:53:21:32:22:c5:95:e9:8f:96: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:6A:3B:1E:66:7D:A8:FA:27:9D:7A:BD:88:8D:38:1B:00:63:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d5c2bb8-aeba-3465-b827-4a8917af7585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:91:2e:ee:db:cc:18:eb:55:73:97:1b:66:32:9a:23:c1:a5: 6b:3c:4b:a9:4c:11:6e:99:f6:1c:49:4f:10:27:12:6f:6a:b7: 3b:0c:79:dd:3e:83:4c:c8:2e:1c:f1:4e:eb:7d:7c:48:76:d3: 0a:b9:7d:b6:b2:92:6d:d6:70:36:c8:20:61:bb:89:74:a6:e0: 68:ab:aa:6c:2c:48:c2:3b:48:51:20:ed:38:4d:0b:b9:71:49: b4:64:6e:5f:dc:0a:46:d1:29:e1:24:2c:f2:c5:0f:03:d8:65: 74:8f:65:92:29:ca:81:56:5b:0e:49:43:08:9d:17:0f:cf:a1: 8c:4b:02:ba:a5:48:43:c0:fb:27:ec:8d:1a:85:32:b9:6c:33: de:68:dc:c9:21:e1:25:78:80:5d:ae:1b:07:84:a9:d6:2d:3d: 1f:0f:3d:ed:6f:a3:f9:46:63:46:5c:b0:86:9b:33:e3:30:db: b1:5a:cd:73:b7:1f:56:15:68:5c:d9:a7:cf:d0:c8:5f:ec:90: b0:19:d6:a5:ba:c1:3b:f8:f9:ee:e6:7e:13:bd:22:bf:5c:8b: 3e:bf:df:ec:4d:22:b4:b1:29:54:b5:f9:23:60:2f:5a:22:08: 6c:7f:b9:38:49:77:1e:b9:c3:1e:71:9e:d5:9d:7d:b7:fd:25: fd:1b:63:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdreg3mhyn1ZpEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzEyNDk2YTgtZTk4Mi00NmIxLTgyNjktMWJkYjBhYTc0MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RCnM20yLd4ZvMhPxY4ySUJBDEAHDoAhFDmi GPkv1unAYHYwGKOz8R8wEm6+s2XNHkL2PraEK+xOEGghyx56rG04XvY56CMkziY+ G1t2Hw2Af3HHNFblDfSkW2BhRslQIwUPKFGU4cvZjsGzJOuCXK/KaLbNUtg+QIPb 8+Q/ojJYXfsbBK/7O6Cu4yP5xBTAuSWnqkyrWj8oQqo27Uk4+GkfaVXZ0bJM7klE lsJWUr/edY9TRCp99vPPXQkzCDf3y41p+l0FAMwjjFZWbJyqFd+hnFi3uwRIsszW W/UknL6s0bC0zHOeThqBYOXfzrgARP9keuZTITIixZXpj5Y7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPQajseZn2o+ieder2IjTgbAGP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWQ1YzJiYjgtYWViYS0z NDY1LWI4MjctNGE4OTE3YWY3NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQnPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyRLu7bzBjrVXOXG2YymiPBpWs8S6lMEW6Z9hxJTxAnEm9qtzsMed0+ g0zILhzxTut9fEh20wq5fbaykm3WcDbIIGG7iXSm4GirqmwsSMI7SFEg7ThNC7lx SbRkbl/cCkbRKeEkLPLFDwPYZXSPZZIpyoFWWw5JQwidFw/PoYxLArqlSEPA+yfs jRqFMrlsM95o3Mkh4SV4gF2uGweEqdYtPR8PPe1vo/lGY0ZcsIabM+Mw27FazXO3 H1YVaFzZp8/QyF/skLAZ1qW6wTv4+e7mfhO9Ir9ciz6/3+xNIrSxKVS1+SNgL1oi CGx/uThJdx65wx5xntWdfbf9Jf0bYwk= -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:48 2025 by rpki-client