$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9001677-9a9d-377f-824b-c7d025b9793b.roa File: d9001677-9a9d-377f-824b-c7d025b9793b.roa (raw, json) Hash identifier: oDzvn0m9y3EJMpDnMOhLAxI3mHyjGae1JUvLAo84Wto= Subject key identifier: 12:FC:5B:B3:F4:2E:BD:F5:CA:CE:85:FE:C7:92:BA:FC:73:9A:D7:F8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584ADB553C7A9AF0F5DC5577D8A0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9001677-9a9d-377f-824b-c7d025b9793b.roa Signing time: Thu 14 Aug 2025 19:14:32 +0000 ROA not before: Thu 14 Aug 2025 19:14:32 +0000 ROA not after: Wed 12 Nov 2025 20:14:32 +0000 asID: 23473 IP address blocks: 66.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:55:3c:7a:9a:f0:f5:dc:55:77:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 14 19:14:32 2025 GMT Not After : Nov 12 20:14:32 2025 GMT Subject: CN=b11b9a61-71f0-4b31-87fc-296c3276653e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:03:85:c6:0f:f2:cd:76:ea:41:be:f7:1c: 95:26:e9:f4:33:a0:e2:37:1d:27:99:fb:94:f5:34: 24:36:32:11:50:14:64:e1:9b:c9:92:d3:5f:88:2e: 67:62:9e:be:28:52:54:3a:8f:cd:63:74:3e:12:02: c0:6a:fa:17:4a:9a:81:13:03:1f:a3:73:42:ec:9e: 42:81:58:54:99:f5:45:ba:be:7f:ee:90:b9:1a:67: 2b:b0:7c:08:76:9d:b2:ce:20:a1:a3:26:3c:af:8e: f1:95:fb:3c:f4:a8:37:05:af:37:38:db:17:58:b7: 59:34:64:66:56:05:27:d5:4b:da:fe:20:cf:e8:45: 9c:7a:8b:f0:ce:e6:7f:fb:10:b3:69:1b:ac:77:2f: b4:17:45:66:07:a1:34:29:12:d9:fd:1d:d3:84:e9: 73:36:2a:48:5f:63:bb:f4:f8:02:9e:4b:d9:6e:94: 37:a6:b1:43:f3:51:15:5e:ff:0e:37:d0:ae:09:c6: b7:3f:f6:9f:52:5c:da:07:e1:c7:b3:98:a8:a6:ef: c5:b9:2c:47:07:d6:0b:4d:a1:13:98:35:3e:8a:e0: 65:c0:6e:8c:c7:c0:b5:4a:b7:31:38:24:af:c1:b9: a4:ee:b3:a8:4f:a5:41:31:89:82:0d:23:84:4c:36: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FC:5B:B3:F4:2E:BD:F5:CA:CE:85:FE:C7:92:BA:FC:73:9A:D7:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9001677-9a9d-377f-824b-c7d025b9793b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c1:de:e6:b9:aa:4a:ce:85:2e:be:f2:6f:d1:00:de:ac:cc: 78:a3:0a:15:fe:9b:67:15:93:be:13:78:5a:f2:12:66:a9:e0: 5e:88:90:c4:68:3a:68:4d:ee:bf:58:28:49:a9:a5:bc:a7:e5: e9:be:74:96:1d:27:ca:87:34:b5:ff:d2:70:82:01:62:df:7c: cf:a4:bf:1e:2a:67:1a:e4:ae:45:14:64:e1:ae:02:0f:6a:48: c0:a4:1a:99:79:52:22:bf:d8:f2:1a:b3:2d:a2:29:4a:be:6a: 65:98:ea:40:54:a1:81:26:f3:9e:34:4a:f7:b9:79:73:ce:d2: 7d:85:ee:dd:85:f8:3c:02:d2:fc:72:85:ff:35:70:de:e0:3f: d3:8b:6d:10:79:e3:3b:e0:ab:35:45:32:2d:a2:d4:26:fe:57: ea:0e:98:0a:85:3f:78:75:25:bc:17:13:6c:81:52:73:6d:25: 44:0e:30:7f:c3:e3:cc:b8:e0:1b:d2:83:61:f4:45:8b:0f:cb: 91:bc:05:2d:eb:43:eb:7f:a4:5b:02:ea:68:e6:d2:e6:2e:5f: 0b:a1:82:b2:25:6a:55:3a:29:ae:01:87:f6:f0:f8:6f:64:a1: c6:d1:e6:75:48:9f:70:74:3f:e9:17:af:78:de:c4:cb:18:22: ef:47:f1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErbVTx6mvD13FV32KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgxNDE5MTQzMloXDTI1MTExMjIwMTQzMlowLzEtMCsGA1UEAxMk YjExYjlhNjEtNzFmMC00YjMxLTg3ZmMtMjk2YzMyNzY2NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKEDhcYP8s126kG+9xyVJun0M6DiNx0nmfuU 9TQkNjIRUBRk4ZvJktNfiC5nYp6+KFJUOo/NY3Q+EgLAavoXSpqBEwMfo3NC7J5C gVhUmfVFur5/7pC5GmcrsHwIdp2yziChoyY8r47xlfs89Kg3Ba83ONsXWLdZNGRm VgUn1Uva/iDP6EWceovwzuZ/+xCzaRusdy+0F0VmB6E0KRLZ/R3ThOlzNipIX2O7 9PgCnkvZbpQ3prFD81EVXv8ON9CuCca3P/afUlzaB+HHs5iopu/FuSxHB9YLTaET mDU+iuBlwG6Mx8C1SrcxOCSvwbmk7rOoT6VBMYmCDSOETDbQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL8W7P0Lr31ys6F/seSuvxzmtf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDkwMDE2NzctOWE5ZC0z NzdmLTgyNGItYzdkMDI1Yjk3OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLB3ua5qkrOhS6+8m/RAN6szHijChX+m2cVk74TeFryEmap4F6IkMRo OmhN7r9YKEmppbyn5em+dJYdJ8qHNLX/0nCCAWLffM+kvx4qZxrkrkUUZOGuAg9q SMCkGpl5UiK/2PIasy2iKUq+amWY6kBUoYEm8540Sve5eXPO0n2F7t2F+DwC0vxy hf81cN7gP9OLbRB54zvgqzVFMi2i1Cb+V+oOmAqFP3h1JbwXE2yBUnNtJUQOMH/D 48y44BvSg2H0RYsPy5G8BS3rQ+t/pFsC6mjm0uYuXwuhgrIlalU6Ka4Bh/bw+G9k ocbR5nVIn3B0P+kXr3jexMsYIu9H8SU= -----END CERTIFICATE-----Generated at Thu Aug 21 03:54:30 2025 by rpki-client