$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/09bd9485-e750-3af8-b392-ad7716e4c8d3.roa File: 09bd9485-e750-3af8-b392-ad7716e4c8d3.roa (raw, json) Hash identifier: yc3r5k5kWhKhq8YoEx8me5DEnxFasWpR5z4150z7EkM= Subject key identifier: 53:F9:93:1F:DD:46:01:C1:F7:DD:4F:4A:DC:97:3C:0A:5D:2C:87:93 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AD50660707D6E865C744BDEF0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/09bd9485-e750-3af8-b392-ad7716e4c8d3.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13576 IP address blocks: 66.128.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:60:70:7d:6e:86:5c:74:4b:de:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=7841eb74-c3e4-47b0-a9af-65107e213e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:44:5c:24:63:62:87:2c:70:ad:f1:f7:74: fb:e2:e3:57:52:f9:73:93:a1:e1:39:59:b2:52:c3: 24:c8:cd:1b:85:25:c3:38:71:b0:9b:84:08:f6:39: e7:2f:89:4e:66:65:54:97:ac:08:2f:89:6b:f4:7c: 93:31:65:95:d9:d9:84:d4:e9:53:6d:6e:bd:01:3b: 9c:cc:27:3e:aa:6b:9b:cf:cc:58:a3:7e:fb:37:97: cd:47:75:eb:34:34:ab:2d:df:9b:8d:a3:ae:8c:d4: dd:0b:67:a7:a8:e5:86:d0:dc:0b:2b:9b:db:1c:6a: 31:9f:e9:ff:9d:3d:fa:24:e6:b3:9b:8f:b8:a5:f3: 55:b0:f2:a8:67:0a:35:cd:0f:0e:cd:2b:af:b2:f8: db:c6:0a:5f:fa:e9:a7:1e:b6:4f:eb:79:56:59:44: e5:6b:f6:50:59:dd:ea:cc:d7:d4:fe:12:9b:98:a9: ff:ad:37:a6:97:45:4f:f5:fe:62:7a:20:3c:43:03: 62:67:2b:a4:de:77:0b:c4:d3:14:0a:4d:10:6b:35: 57:51:dc:77:a9:25:ea:26:bf:a0:d3:25:ff:a7:89: 54:55:b8:b7:73:ac:db:5b:c7:02:50:a7:98:3b:17: 4d:6a:1d:41:f1:33:68:a6:e5:a4:ce:d5:7e:30:9c: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F9:93:1F:DD:46:01:C1:F7:DD:4F:4A:DC:97:3C:0A:5D:2C:87:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/09bd9485-e750-3af8-b392-ad7716e4c8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:bc:d1:a1:c5:fe:a2:01:6f:dd:3f:25:3b:7f:e7:c3:ef:00: b3:55:c9:4e:ba:26:08:18:62:23:fa:e6:a5:77:ed:fa:fd:46: c4:13:cb:63:3f:ae:e4:fc:a7:1d:7b:87:ad:0a:40:b0:9b:40: 29:76:36:8b:c1:d5:a5:f8:ab:e0:4b:02:00:54:5e:ce:a3:8f: c1:a2:8a:ca:d0:6f:e7:f0:cf:38:20:83:c3:87:e5:f9:c7:b3: 5c:a1:0d:93:6b:64:ff:07:2f:71:73:26:ec:09:3f:17:54:28: 91:38:90:88:9d:5f:d9:17:65:17:f6:b5:3e:24:83:78:7e:7c: 00:a3:64:6f:2e:e8:17:75:f7:4b:50:bd:0a:ee:31:b4:ef:d6: 58:b0:46:34:73:b2:5a:86:12:a3:9a:67:da:1a:2f:83:08:a7: 6b:23:52:ee:7c:85:fb:24:14:c5:07:5b:30:7b:75:42:47:7d: 1a:81:a7:ae:a9:6b:1b:61:f9:b8:26:43:a5:61:17:01:12:70: f6:b0:13:79:cc:84:72:64:0b:3c:3c:f1:9d:59:31:db:f8:e3: f7:7e:0e:b1:df:fb:25:69:37:f2:70:ec:09:97:19:17:ac:a1: 76:e6:df:29:78:86:2a:e0:5a:60:15:47:ea:b1:38:52:14:f4: e3:8f:5a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmBwfW6GXHRL3vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk Nzg0MWViNzQtYzNlNC00N2IwLWE5YWYtNjUxMDdlMjEzZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm81EXCRjYocscK3x93T74uNXUvlzk6HhOVmy UsMkyM0bhSXDOHGwm4QI9jnnL4lOZmVUl6wIL4lr9HyTMWWV2dmE1OlTbW69ATuc zCc+qmubz8xYo377N5fNR3XrNDSrLd+bjaOujNTdC2enqOWG0NwLK5vbHGoxn+n/ nT36JOazm4+4pfNVsPKoZwo1zQ8OzSuvsvjbxgpf+umnHrZP63lWWUTla/ZQWd3q zNfU/hKbmKn/rTeml0VP9f5ieiA8QwNiZyuk3ncLxNMUCk0QazVXUdx3qSXqJr+g 0yX/p4lUVbi3c6zbW8cCUKeYOxdNah1B8TNopuWkztV+MJzrWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP5kx/dRgHB991PStyXPApdLIeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDliZDk0ODUtZTc1MC0z YWY4LWIzOTItYWQ3NzE2ZTRjOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ280aHF/qIBb90/JTt/58PvALNVyU66JggYYiP65qV37fr9RsQTy2M/ ruT8px17h60KQLCbQCl2NovB1aX4q+BLAgBUXs6jj8GiisrQb+fwzzggg8OH5fnH s1yhDZNrZP8HL3FzJuwJPxdUKJE4kIidX9kXZRf2tT4kg3h+fACjZG8u6Bd190tQ vQruMbTv1liwRjRzslqGEqOaZ9oaL4MIp2sjUu58hfskFMUHWzB7dUJHfRqBp66p axth+bgmQ6VhFwEScPawE3nMhHJkCzw88Z1ZMdv44/d+DrHf+yVpN/Jw7AmXGRes oXbm3yl4hirgWmAVR+qxOFIU9OOPWjM= -----END CERTIFICATE-----Generated at Thu Aug 21 00:52:32 2025 by rpki-client