$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa File: bc353fe3-9c6f-392f-bf75-22c347775fd9.roa (raw, json) Hash identifier: fJGVqR0IZPA+XWbd1YacOkjw0J2zBR2B5Tr59UYsI/0= Subject key identifier: 3E:00:F7:6B:4E:76:B2:7E:00:EF:E1:6F:1D:5A:F2:B9:B4:9A:D3:CD Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Certificate serial: 010D0C9F4328584B1806DA8805E356C185B72F00 Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 21713 IP address blocks: 66.172.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:da:88:05:e3:56:c1:85:b7:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=f346fb45-7db7-4a3f-bfc2-793880ef757c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:86:3d:9a:e2:40:08:ad:1b:4d:f2:a9:8b: 4c:18:cf:bc:bb:44:e4:4d:e2:3f:36:a0:32:11:e3: ff:4a:df:3d:6b:f0:04:37:5a:bc:1f:78:9a:a2:7b: 1f:80:ca:65:c7:02:0e:37:ab:a0:28:ae:32:7f:1e: 19:dc:49:9d:d7:02:fc:3a:6e:fd:94:8a:a8:28:7c: 4e:6e:9a:81:b8:8b:ff:24:10:ef:cb:4f:dc:b8:a2: 0b:9e:f4:14:4b:b4:b1:6c:0d:2f:2a:6a:c1:19:fb: d7:47:33:e9:3d:c8:b4:10:8f:dc:51:1a:5f:c0:40: 1d:9a:d7:81:a2:3d:21:70:30:ff:2d:ed:86:d4:7e: ce:c1:95:dd:97:44:18:97:14:06:41:67:1f:d7:fb: 69:c5:c5:94:39:e6:65:40:48:9b:7f:68:a0:d8:84: c1:71:c7:84:d8:00:e9:93:3a:30:5b:ab:db:99:96: 36:46:5a:6c:a5:f7:49:cf:7f:21:8e:f1:a0:5d:08: 8e:65:df:81:1d:78:5d:0c:a0:ce:65:5a:5d:99:38: 1b:fe:87:9c:d0:42:6b:4c:9d:37:c8:84:a6:a8:36: 84:ff:c3:56:20:4a:dc:95:0c:1d:cf:30:8b:3d:6d: b0:c0:17:e7:b3:6c:5d:eb:f7:45:c3:6f:56:6b:d5: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:00:F7:6B:4E:76:B2:7E:00:EF:E1:6F:1D:5A:F2:B9:B4:9A:D3:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl X509v3 Authority Key Identifier: keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer sbgp-ipAddrBlock: critical IPv4: 66.172.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f3:0e:94:da:6f:25:a8:de:6f:ef:f1:70:ae:67:c8:a2:b9: b9:3f:0b:d5:74:e4:45:ea:b4:2d:17:6a:3c:d0:39:11:60:4b: 54:a4:77:5a:0b:b3:18:5d:30:50:66:a1:ef:26:d1:0b:2f:bd: bc:89:11:46:15:ba:1c:4e:e3:1c:cc:33:2a:dd:07:a3:56:e0: ae:83:cb:e8:37:96:1f:7f:3a:d7:be:32:b4:89:0f:a1:5f:c7: 24:a7:75:f7:b6:13:e8:b6:08:99:8f:c5:83:52:d5:60:fd:09: a3:29:43:8f:85:d5:65:1d:4a:a8:39:90:f9:4b:d8:59:fd:e3: 36:80:58:ba:0e:c2:ba:17:f0:bb:24:6b:bd:f6:c6:22:f4:a8: 29:e6:b4:f1:7a:19:ab:32:94:7a:08:ad:c3:6a:37:72:cb:79: 53:53:32:ae:15:f5:c9:c4:61:c6:46:6d:46:6d:bc:96:09:dc: fe:10:43:58:f6:eb:95:24:4d:1c:50:af:00:cb:8b:db:aa:70: 61:2d:85:10:b2:bb:13:c2:93:84:11:46:13:68:49:3d:ca:72: fb:8e:7f:7e:08:e7:af:62:97:b7:b5:f7:76:03:67:9e:2c:85: 2c:f2:e4:1d:d0:d6:24:f4:97:39:1c:be:b1:06:24:4c:7a:ec: 9a:c1:2a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtqIBeNWwYW3LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkzMWU3MTctYzFkMS00ZGQ4LTg2M2QtNWMwNmZiNzZm NDdiMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjM0NmZiNDUtN2RiNy00YTNmLWJmYzItNzkzODgwZWY3NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlayGPZriQAitG03yqYtMGM+8u0TkTeI/NqAy EeP/St89a/AEN1q8H3iaonsfgMplxwION6ugKK4yfx4Z3Emd1wL8Om79lIqoKHxO bpqBuIv/JBDvy0/cuKILnvQUS7SxbA0vKmrBGfvXRzPpPci0EI/cURpfwEAdmteB oj0hcDD/Le2G1H7OwZXdl0QYlxQGQWcf1/tpxcWUOeZlQEibf2ig2ITBcceE2ADp kzowW6vbmZY2RlpspfdJz38hjvGgXQiOZd+BHXhdDKDOZVpdmTgb/oec0EJrTJ03 yISmqDaE/8NWIErclQwdzzCLPW2wwBfns2xd6/dFw29Wa9U49QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4A92tOdrJ+AO/hbx1a8rm0mtPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OTMx ZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3NmY0N2IvYmMzNTNmZTMtOWM2Zi0z OTJmLWJmNzUtMjJjMzQ3Nzc1ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDkzMWU3MTctYzFkMS00ZGQ4LTg2 M2QtNWMwNmZiNzZmNDdiLzQ5MzFlNzE3LWMxZDEtNGRkOC04NjNkLTVjMDZmYjc2 ZjQ3Yi5jcmwwHwYDVR0jBBgwFoAUzkL+cRFxw0kbjbZ7dOQfT+KR3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2 ZmI3NmY0N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnzDpTabyWo3m/v8XCuZ8iiubk/C9V05EXqtC0XajzQORFgS1Skd1oL sxhdMFBmoe8m0QsvvbyJEUYVuhxO4xzMMyrdB6NW4K6Dy+g3lh9/Ote+MrSJD6Ff xySndfe2E+i2CJmPxYNS1WD9CaMpQ4+F1WUdSqg5kPlL2Fn94zaAWLoOwroX8Lsk a732xiL0qCnmtPF6GasylHoIrcNqN3LLeVNTMq4V9cnEYcZGbUZtvJYJ3P4QQ1j2 65UkTRxQrwDLi9uqcGEthRCyuxPCk4QRRhNoST3KcvuOf34I569il7e193YDZ54s hSzy5B3Q1iT0lzkcvrEGJEx67JrBKvM= -----END CERTIFICATE-----Generated at Fri Sep 19 18:03:48 2025 by rpki-client