$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa File: 5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa (raw, json) Hash identifier: RQz+PZhR6iW+MWGI+wVdeOu23RiLbyZg4Gwg4hZa+aE= Subject key identifier: 2A:D8:55:03:63:02:84:CD:A0:CB:F5:89:E8:5E:81:3E:A6:DB:70:E0 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AFC1C08E687429E814F50E8C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 66.128.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:08:e6:87:42:9e:81:4f:50:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9b1d6305-06ec-4dac-a208-0d7a4ec05f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:d7:33:48:06:32:3a:6e:b9:22:e6:19:a1: 58:b8:87:e4:4c:53:22:ed:eb:00:40:e9:dc:e2:e7: 05:39:2e:4c:64:88:29:2f:a1:97:0f:05:13:0b:18: 52:9e:b3:7a:43:0c:db:b4:21:39:6b:79:3c:c2:ef: da:95:e4:59:cc:e5:b0:08:ab:c5:e0:25:b1:aa:de: b5:d8:f1:3c:46:10:95:fd:50:ef:ee:ae:4f:c1:c4: 46:82:e2:a4:38:db:ef:6f:3f:16:c5:9e:cb:32:f4: 36:08:dc:de:18:7f:12:b9:88:4a:60:3d:35:50:d1: 05:7f:31:60:92:36:b0:c9:66:60:49:a5:a0:4e:25: a4:9f:20:8d:96:99:e3:5d:e2:cc:ab:c5:6a:29:8d: bd:c4:29:ad:58:98:e3:08:c3:ef:77:5d:a0:29:2a: 52:84:b6:0e:ab:4f:23:ca:1b:43:8d:f5:4e:05:01: 4b:3b:37:7e:0a:6e:a5:52:9e:0d:67:3f:28:1b:2f: e0:08:6c:2d:ca:5f:47:be:27:6c:a4:d9:e5:17:d6: bd:03:31:76:42:fb:7d:2e:7f:9b:64:c5:a1:ef:b3: 5e:d0:47:3f:5c:89:bd:ae:fd:c6:f9:59:ca:12:a2: 93:cf:5c:57:71:a2:fa:6d:fb:21:90:e5:ab:69:51: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D8:55:03:63:02:84:CD:A0:CB:F5:89:E8:5E:81:3E:A6:DB:70:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:cb:f7:6b:41:43:1b:e7:c9:2b:18:b2:f9:ee:d2:3e:7f:9f: 01:33:bf:e2:3d:ce:29:8e:7e:77:70:9f:4e:b1:c2:5e:b5:74: cd:a7:d3:0e:0d:1a:49:2c:b9:11:78:95:b6:32:2f:0e:1e:a5: 8a:52:be:d3:43:14:7d:25:fd:f9:21:ba:47:d0:fb:80:72:17: 17:39:90:a5:e4:77:80:0e:86:8c:63:90:b7:eb:80:d8:c6:05: 44:45:c4:b4:50:7c:7b:9b:13:40:91:1c:05:cb:92:70:3e:01: 72:4a:e1:92:46:29:72:4e:04:94:3a:3f:68:ac:7b:c2:5c:19: 6d:5a:f9:c8:62:9f:ec:57:88:35:e1:af:9e:ae:86:22:56:b6: 08:e6:48:3a:f2:9f:92:b1:25:06:66:66:f5:7d:b4:a8:85:eb: 76:15:34:b4:b4:ae:76:ff:6b:74:e7:f9:34:23:b1:70:3d:09: 08:c9:3d:bf:fb:96:55:60:b5:18:7e:bb:fe:5c:92:5f:91:e4: 4f:ec:6d:cd:45:96:ca:c1:f3:58:d6:1c:09:e8:00:73:b1:6c: 56:83:91:37:b2:8a:48:3d:d0:58:b4:87:11:55:ce:63:bb:cb: 79:14:79:da:7b:a2:1a:33:64:fe:c8:10:3f:91:20:9c:52:55: cd:3d:e3:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAjmh0KegU9Q6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWIxZDYzMDUtMDZlYy00ZGFjLWEyMDgtMGQ3YTRlYzA1ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV3XM0gGMjpuuSLmGaFYuIfkTFMi7esAQOnc 4ucFOS5MZIgpL6GXDwUTCxhSnrN6QwzbtCE5a3k8wu/aleRZzOWwCKvF4CWxqt61 2PE8RhCV/VDv7q5PwcRGguKkONvvbz8WxZ7LMvQ2CNzeGH8SuYhKYD01UNEFfzFg kjawyWZgSaWgTiWknyCNlpnjXeLMq8VqKY29xCmtWJjjCMPvd12gKSpShLYOq08j yhtDjfVOBQFLOzd+Cm6lUp4NZz8oGy/gCGwtyl9HvidspNnlF9a9AzF2Qvt9Ln+b ZMWh77Ne0Ec/XIm9rv3G+VnKEqKTz1xXcaL6bfshkOWraVFAeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrYVQNjAoTNoMv1iehegT6m23DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNTM5MmI3Y2QtZGE4Ni0z MWNkLWE0YzEtYTBmODUxZjExYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPL92tBQxvnySsYsvnu0j5/nwEzv+I9zimOfndwn06xwl61dM2n0w4N GkksuRF4lbYyLw4epYpSvtNDFH0l/fkhukfQ+4ByFxc5kKXkd4AOhoxjkLfrgNjG BURFxLRQfHubE0CRHAXLknA+AXJK4ZJGKXJOBJQ6P2ise8JcGW1a+chin+xXiDXh r56uhiJWtgjmSDryn5KxJQZmZvV9tKiF63YVNLS0rnb/a3Tn+TQjsXA9CQjJPb/7 llVgtRh+u/5ckl+R5E/sbc1FlsrB81jWHAnoAHOxbFaDkTeyikg90Fi0hxFVzmO7 y3kUedp7ohozZP7IED+RIJxSVc0948w= -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:47 2025 by rpki-client