$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa File: 5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa (raw, json) Hash identifier: sI/wSSajBMuMXPpFq3PYhrMybh61xQLi8JSnCjNLZ+c= Subject key identifier: 52:25:27:2B:C3:9F:BA:3B:F1:DB:0C:9D:56:8C:1C:09:C0:E6:E7:1D Certificate issuer: /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Certificate serial: 010D0C9F4328584ADD667058E8DA412B0DA15340 Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 66.179.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:70:58:e8:da:41:2b:0d:a1:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=30a21d67-4478-4d20-a7e9-5a7ce3c94cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:7c:53:87:57:17:fd:95:8f:26:51:12:27: 00:69:d7:fd:da:ec:df:7f:4a:99:14:fa:30:c3:7d: 81:65:38:64:2e:25:e4:19:48:41:ee:0d:b9:a6:c6: 7f:82:d9:69:31:4c:36:d4:79:02:bd:2e:6f:8b:d8: 7a:1f:c1:7a:60:9e:d6:81:5d:57:9c:a5:19:7a:d3: be:c0:f6:27:51:58:f9:5f:fc:96:6b:aa:7c:7e:37: 18:e9:d4:5d:b4:4e:6f:68:46:3a:93:9d:e8:3e:e2: 94:7c:8b:37:4e:fa:c1:d8:0c:3c:e6:dd:75:75:99: f3:e6:a0:7d:e8:e3:0d:a4:9d:27:b6:24:c2:32:85: ac:72:9a:ed:ba:43:74:00:e5:71:55:a1:df:66:cf: 24:5e:f1:ee:0a:c8:32:07:24:66:e2:f4:2c:9f:97: bc:c9:37:96:68:52:3f:d1:68:a2:92:01:cb:17:a0: a4:56:ba:d0:08:ab:07:56:af:46:c9:24:4b:65:2b: 7e:a2:bc:f8:bf:55:a7:b0:66:01:b4:da:a0:1f:9f: 8b:39:43:51:60:38:06:ae:90:d2:39:1a:7c:58:38: 52:e9:17:b5:63:9f:a0:a9:4d:fb:ef:aa:97:68:65: c8:a2:a1:b3:52:b0:eb:72:8e:e3:59:86:de:55:90: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:25:27:2B:C3:9F:BA:3B:F1:DB:0C:9D:56:8C:1C:09:C0:E6:E7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl X509v3 Authority Key Identifier: keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1a:64:38:01:63:f3:59:5c:04:12:df:32:bb:6e:04:a9:19: c2:60:c6:8b:ce:a0:88:a3:35:23:59:4a:88:44:c5:2b:bf:77: c2:c6:07:90:52:cf:65:80:6b:49:e2:e3:44:74:fb:21:26:36: 37:f1:5d:8d:93:bf:00:6e:5b:00:26:72:74:6a:18:39:e7:39: 8b:3f:fc:82:70:0d:3d:ce:b6:58:50:97:75:35:3f:5a:4b:fa: 49:fc:6e:16:2a:4a:63:f1:f4:48:2f:47:a3:ce:fa:82:51:59: 36:04:9a:24:6f:cb:5e:bd:fa:1a:90:d4:dd:7a:76:c6:7e:1a: ce:5e:f4:30:85:66:60:82:20:4d:7c:61:9a:b8:e3:64:7d:51: 2c:96:4b:b2:66:dc:bb:bc:b0:ee:33:a7:b3:dd:d6:18:62:44: 02:02:60:f7:76:a3:59:17:f9:20:c2:d9:4b:c5:1b:fb:9d:64: e9:e2:cc:3e:bc:ef:16:6a:7d:30:ad:df:e9:94:dd:17:2e:19: 72:6c:7c:06:7d:bb:8b:5b:d8:38:34:7b:8f:58:77:47:78:8e: 33:1c:60:c2:6d:cd:f9:fa:1d:fe:ca:b9:e1:6f:a9:db:8e:99: 26:fa:e9:91:58:12:70:a8:4b:39:af:3b:c1:e4:db:ab:8c:9b: df:76:bf:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnBY6NpBKw2hU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5 ZTlhMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MzBhMjFkNjctNDQ3OC00ZDIwLWE3ZTktNWE3Y2UzYzk0Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOx8U4dXF/2VjyZREicAadf92uzff0qZFPow w32BZThkLiXkGUhB7g25psZ/gtlpMUw21HkCvS5vi9h6H8F6YJ7WgV1XnKUZetO+ wPYnUVj5X/yWa6p8fjcY6dRdtE5vaEY6k53oPuKUfIs3TvrB2Aw85t11dZnz5qB9 6OMNpJ0ntiTCMoWscprtukN0AOVxVaHfZs8kXvHuCsgyByRm4vQsn5e8yTeWaFI/ 0WiikgHLF6CkVrrQCKsHVq9GySRLZSt+orz4v1WnsGYBtNqgH5+LOUNRYDgGrpDS ORp8WDhS6Re1Y5+gqU3776qXaGXIoqGzUrDrco7jWYbeVZDTiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIlJyvDn7o78dsMnVaMHAnA5ucdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjlj MzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvNWQzZmFjMDMtNGRlZi0z ZWU4LTk3NmItNDZjZDZkZGFjMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI5YzM4YmUtZGI1MS00ZDkxLWEz NjEtOTRiYTNiZmQ5ZTlhLzQyOWMzOGJlLWRiNTEtNGQ5MS1hMzYxLTk0YmEzYmZk OWU5YS5jcmwwHwYDVR0jBBgwFoAUOwreAHVyImja/ScA8cgfi8oFlzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJh M2JmZDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAaZDgBY/NZXAQS3zK7bgSpGcJgxovOoIijNSNZSohExSu/d8LGB5BS z2WAa0ni40R0+yEmNjfxXY2TvwBuWwAmcnRqGDnnOYs//IJwDT3OtlhQl3U1P1pL +kn8bhYqSmPx9EgvR6PO+oJRWTYEmiRvy169+hqQ1N16dsZ+Gs5e9DCFZmCCIE18 YZq442R9USyWS7Jm3Lu8sO4zp7Pd1hhiRAICYPd2o1kX+SDC2UvFG/udZOnizD68 7xZqfTCt3+mU3RcuGXJsfAZ9u4tb2Dg0e49Yd0d4jjMcYMJtzfn6Hf7KueFvqduO mSb66ZFYEnCoSzmvO8Hk26uMm992vzQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:10 2025 by rpki-client