$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa File: 45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa (raw, json) Hash identifier: ggZxPfoXZgqqmfImduPD7y5HLxYsS+CjmZOpApDJWfo= Subject key identifier: 33:DB:9C:C6:5D:7B:BF:1E:88:B0:1C:3E:99:F7:1F:44:02:A3:02:23 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B02CF2F008584EFEB3E102E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa Signing time: Thu 28 Aug 2025 22:36:46 +0000 ROA not before: Thu 28 Aug 2025 22:36:46 +0000 ROA not after: Wed 26 Nov 2025 23:36:46 +0000 asID: 852 IP address blocks: 66.222.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:cf:2f:00:85:84:ef:eb:3e:10:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 28 22:36:46 2025 GMT Not After : Nov 26 23:36:46 2025 GMT Subject: CN=df39af09-63f4-4253-b5c7-74d77d197f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:62:cc:36:68:a7:0e:d0:03:06:fd:72:cf: bd:d7:88:d3:1d:f2:6e:d3:31:eb:02:5d:f8:3d:5e: 86:5f:ed:61:cd:9f:33:f8:c8:61:33:3c:7d:ad:ea: bd:e4:08:f3:4a:20:ef:68:ba:21:2f:3c:ff:e1:6f: a8:ab:33:d7:a6:0b:0e:0f:aa:d7:e3:80:22:e1:21: 4b:a9:a8:a4:13:64:f3:7a:4f:b6:68:4d:c9:84:9b: 76:7c:1e:95:4f:3c:86:34:0b:77:c9:11:34:3d:82: 7f:bc:ae:2d:d4:fb:31:2b:e5:d6:bf:e4:53:18:fa: 24:cd:73:3a:08:3f:92:79:fa:cc:5d:61:31:c6:f7: f6:cd:34:e3:4f:8e:a8:5e:71:5b:78:a4:ee:97:70: 82:77:8c:5e:a5:6c:4a:7f:5b:c2:35:63:38:2e:37: ea:31:5f:52:f0:cf:e6:c6:08:da:ff:ec:a1:d4:f9: 6b:a2:cb:70:f6:20:8f:7c:f4:2e:4a:6b:fe:7e:20: 09:9a:22:6b:f6:e5:ca:e2:74:94:ef:94:97:3f:bb: 09:db:90:0a:aa:0e:df:52:d9:3a:9b:ae:c2:a9:c2: b1:f0:29:50:20:fa:73:4a:7f:3b:4c:d4:fe:a0:b9: dd:20:6c:82:f8:e9:27:d0:6b:b7:9c:fe:d2:16:f1: 49:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:9C:C6:5D:7B:BF:1E:88:B0:1C:3E:99:F7:1F:44:02:A3:02:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cdf852-4a84-3dbd-8a74-9e9f986e2491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 66.222.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9c:60:b4:1c:0d:93:57:fc:7a:1c:e2:9a:9e:9c:96:aa:5e: 2f:ab:7f:0b:38:52:9d:77:b7:ae:d8:4f:39:23:1e:aa:26:cf: c9:53:3b:29:d4:1e:43:9b:df:ca:42:76:8e:92:8c:f3:e3:90: 30:4a:c4:f9:83:d0:05:93:2f:31:15:36:4f:3b:91:ad:02:71: 8f:a4:7d:aa:fb:0b:0a:b8:10:69:93:94:8f:30:fe:78:1f:70: 41:fd:c8:93:4a:e5:90:9f:8c:18:2b:6d:b2:8f:c8:e9:2d:30: 9d:24:96:80:28:d6:03:2f:d0:a5:c6:f2:f1:ab:e3:69:03:e6: fe:d0:25:d2:3d:bb:81:8f:ae:8a:7c:cd:86:6c:a3:bf:6d:32: ad:5e:16:33:77:b5:0c:3f:e5:47:aa:ce:b2:96:ac:c9:02:3d: f7:f8:3c:6b:4e:84:8c:63:91:fa:a4:b4:26:29:a5:ce:cd:5b: 63:fd:c9:3a:70:db:5a:40:09:41:c7:5f:53:07:59:42:da:b4: dd:fd:a4:ef:07:01:ad:71:4d:62:bf:cc:f2:3a:a9:2a:f8:52: f3:67:d0:d9:ba:da:89:8b:fc:c5:89:64:86:45:49:ea:f6:14: ac:60:c5:39:73:6f:33:f6:10:ec:76:ed:b6:a4:3a:20:1c:03: a5:25:fc:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsCzy8AhYTv6z4QLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgyODIyMzY0NloXDTI1MTEyNjIzMzY0NlowLzEtMCsGA1UEAxMk ZGYzOWFmMDktNjNmNC00MjUzLWI1YzctNzRkNzdkMTk3ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg49izDZopw7QAwb9cs+914jTHfJu0zHrAl34 PV6GX+1hzZ8z+MhhMzx9req95AjzSiDvaLohLzz/4W+oqzPXpgsOD6rX44Ai4SFL qaikE2Tzek+2aE3JhJt2fB6VTzyGNAt3yRE0PYJ/vK4t1PsxK+XWv+RTGPokzXM6 CD+SefrMXWExxvf2zTTjT46oXnFbeKTul3CCd4xepWxKf1vCNWM4LjfqMV9S8M/m xgja/+yh1Plrostw9iCPfPQuSmv+fiAJmiJr9uXK4nSU75SXP7sJ25AKqg7fUtk6 m67CqcKx8ClQIPpzSn87TNT+oLndIGyC+Okn0Gu3nP7SFvFJSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPbnMZde78eiLAcPpn3H0QCowIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDVjZGY4NTItNGE4NC0z ZGJkLThhNzQtOWU5Zjk4NmUyNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQt6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACecYLQcDZNX/Hoc4pqenJaqXi+rfws4Up13t67YTzkjHqomz8lTOynU HkOb38pCdo6SjPPjkDBKxPmD0AWTLzEVNk87ka0CcY+kfar7Cwq4EGmTlI8w/ngf cEH9yJNK5ZCfjBgrbbKPyOktMJ0kloAo1gMv0KXG8vGr42kD5v7QJdI9u4GProp8 zYZso79tMq1eFjN3tQw/5UeqzrKWrMkCPff4PGtOhIxjkfqktCYppc7NW2P9yTpw 21pACUHHX1MHWULatN39pO8HAa1xTWK/zPI6qSr4UvNn0Nm62omL/MWJZIZFSer2 FKxgxTlzbzP2EOx27bakOiAcA6Ul/B0= -----END CERTIFICATE-----Generated at Mon Sep 8 22:28:31 2025 by rpki-client