$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa File: 66e45a7d-1f5b-3734-935a-1f34866304be.roa (raw, json) Hash identifier: UYDZptNQXt5p+vTdVOsoxGj2uH4AQ/Vh6GvyMDOJah4= Subject key identifier: 09:19:5C:26:D1:20:5D:82:68:89:F5:CF:6A:F3:74:DF:F9:AE:32:75 Certificate issuer: /CN=66108100-1fc2-4d23-b89e-3e81cc652270 Certificate serial: 010D0C9F4328584AADF114CAC69DA71EA427AA00 Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13984 IP address blocks: 206.124.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:14:ca:c6:9d:a7:1e:a4:27:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=a71f03c4-e2e1-4a16-a5bc-d06de8dbbde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:c7:50:1e:95:dd:88:4d:91:8a:55:34:63: ca:54:86:e9:e3:6d:f4:6e:ee:41:af:ec:c5:5a:6e: f1:1d:50:51:3f:c5:4a:38:ad:ba:e2:b4:da:b0:83: d9:f7:16:b5:87:0d:80:dd:e1:bf:98:78:d0:be:82: c1:48:bf:17:2b:be:0c:10:5b:bc:f4:60:cb:97:9f: 2d:02:20:e4:74:09:66:dc:0e:75:40:fd:3d:09:19: ec:77:03:9f:b6:84:f4:40:63:24:07:64:46:2e:45: 4f:e4:11:8b:9a:85:2f:dc:b7:1c:9d:a5:a4:7d:20: d3:35:49:69:b0:57:e3:97:33:80:f5:73:1b:63:99: 46:35:93:a5:ca:ac:65:af:f2:7d:d3:98:30:5c:14: 5e:aa:a6:2d:48:43:0c:c4:4f:a4:b4:2b:8f:2a:45: 5a:26:27:7b:35:4b:05:e5:c2:a2:29:1b:20:6f:60: d0:67:a1:61:17:ae:59:56:90:11:10:16:b7:72:72: 25:57:c5:9d:eb:6a:d9:63:d7:4b:f8:0b:5a:dd:6b: 67:cf:c8:bb:ba:87:ad:ec:9d:38:84:e4:cf:2c:e8: 19:01:48:c4:80:1c:36:ec:76:48:90:5b:cf:91:be: 83:16:0e:56:e6:3f:19:5c:ba:c4:a7:32:41:8b:84: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:19:5C:26:D1:20:5D:82:68:89:F5:CF:6A:F3:74:DF:F9:AE:32:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl X509v3 Authority Key Identifier: keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer sbgp-ipAddrBlock: critical IPv4: 206.124.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:64:fa:3e:90:af:eb:71:5d:cf:d3:56:df:b5:8f:7e:74:a6: fa:77:6e:60:b8:66:3b:ff:ab:8f:d6:3f:d1:59:ef:0d:c5:82: 1d:02:4b:59:8f:ca:64:13:66:d3:eb:65:4b:9a:82:30:d6:09: fe:d3:ac:75:46:33:dc:4c:9b:fa:9f:60:f5:8a:0e:aa:ab:15: f8:00:40:80:50:f6:af:ea:06:7c:f6:ca:27:1a:b0:81:0b:83: 1d:3b:2a:3d:5d:0d:6f:30:59:c5:bb:54:7a:00:94:af:a2:0b: b8:c4:93:4d:f7:67:42:9a:ea:35:be:7d:3b:10:65:f0:40:12: cb:2c:09:1d:ee:26:d8:bc:20:ff:53:11:b3:5c:6c:c0:9a:8e: 2c:0e:ee:4d:72:4f:94:ec:77:91:cb:bd:94:29:e5:47:c6:01: c2:ba:da:96:57:b4:d8:70:c6:26:99:e9:4d:36:5c:8e:d9:fc: a1:a5:cb:fd:cf:f2:14:7a:d6:b6:33:da:9a:f8:1b:af:33:77: 47:09:39:0b:1d:a9:fb:ba:e7:38:e7:74:2a:ca:f0:09:71:98: 58:05:4a:db:a7:ba:53:30:4c:78:a3:06:a2:9f:cc:a6:fd:bf: ac:d2:a0:10:f3:dd:c2:83:64:cc:48:65:a2:23:0b:d7:f2:f7: d8:18:c6:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RTKxp2nHqQnqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy MjcwMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YTcxZjAzYzQtZTJlMS00YTE2LWE1YmMtZDA2ZGU4ZGJiZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpfHUB6V3YhNkYpVNGPKVIbp4230bu5Br+zF Wm7xHVBRP8VKOK264rTasIPZ9xa1hw2A3eG/mHjQvoLBSL8XK74MEFu89GDLl58t AiDkdAlm3A51QP09CRnsdwOftoT0QGMkB2RGLkVP5BGLmoUv3LccnaWkfSDTNUlp sFfjlzOA9XMbY5lGNZOlyqxlr/J905gwXBReqqYtSEMMxE+ktCuPKkVaJid7NUsF 5cKiKRsgb2DQZ6FhF65ZVpAREBa3cnIlV8Wd62rZY9dL+Ata3Wtnz8i7uoet7J04 hOTPLOgZAUjEgBw27HZIkFvPkb6DFg5W5j8ZXLrEpzJBi4TquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkZXCbRIF2CaIn1z2rzdN/5rjJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvNjZlNDVhN2QtMWY1Yi0z NzM0LTkzNWEtMWYzNDg2NjMwNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4 OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1 MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhk+j6Qr+txXc/TVt+1j350pvp3bmC4Zjv/q4/WP9FZ7w3Fgh0CS1mP ymQTZtPrZUuagjDWCf7TrHVGM9xMm/qfYPWKDqqrFfgAQIBQ9q/qBnz2yicasIEL gx07Kj1dDW8wWcW7VHoAlK+iC7jEk033Z0Ka6jW+fTsQZfBAEsssCR3uJti8IP9T EbNcbMCajiwO7k1yT5Tsd5HLvZQp5UfGAcK62pZXtNhwxiaZ6U02XI7Z/KGly/3P 8hR61rYz2pr4G68zd0cJOQsdqfu65zjndCrK8AlxmFgFStunulMwTHijBqKfzKb9 v6zSoBDz3cKDZMxIZaIjC9fy99gYxg4= -----END CERTIFICATE-----Generated at Thu Jul 31 04:30:52 2025 by rpki-client