$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/3ca1b9bd-85ed-382f-84e0-0a077531462a.roa File: 3ca1b9bd-85ed-382f-84e0-0a077531462a.roa (raw, json) Hash identifier: utBJ4X63/TymHCGZQJ9E7gm5AWeCv5yhIf3Q7sBRn1g= Subject key identifier: DC:3A:72:2D:56:B6:25:FA:4B:14:90:B5:D4:50:74:EB:6B:56:C5:F1 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584B398704DB956CF5E8863A0180 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/3ca1b9bd-85ed-382f-84e0-0a077531462a.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 55272 IP address blocks: 66.23.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:04:db:95:6c:f5:e8:86:3a:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=fb9f9d7d-d5b6-4540-81ab-6c0854c0fa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:ea:b1:a9:f4:93:06:1f:80:1a:96:3d:f3: 43:12:96:93:99:03:6b:e0:55:20:31:39:d3:d6:69: 5a:a1:42:5d:6d:a1:ce:2b:eb:be:6c:bf:68:44:26: 63:f3:9b:24:7a:74:93:de:50:50:4f:87:4e:ef:cc: 2b:a1:94:1e:ec:63:19:2d:29:ad:4d:d9:21:3e:b9: 8d:cc:c3:ce:7c:75:52:79:23:07:b6:6a:bc:bc:00: 74:54:50:53:15:b2:a3:e0:7d:92:f1:ca:39:a3:0c: cf:8a:94:44:a9:7c:3b:17:06:a3:7c:0b:e2:bb:f2: 40:10:dd:20:d5:1e:63:22:e2:aa:68:d9:ca:fc:f0: 6a:c3:d0:cf:a5:ed:dc:0a:a7:fa:d3:7f:ba:98:89: 06:7c:11:87:ac:30:73:a1:91:5e:ec:70:09:40:c5: 49:32:49:cc:37:27:43:06:63:e8:2d:3f:20:c6:fd: d7:53:de:ab:2c:bd:34:1e:0e:e8:bc:e8:0f:5e:7e: e5:12:57:ab:4a:8e:fd:1b:d5:a8:d6:8f:a5:ca:f2: 11:5b:1c:a2:50:7e:ba:1c:d8:76:6e:9c:2f:f4:30: b6:67:82:d4:c6:78:b1:8c:30:97:a5:d5:e1:f5:31: 29:fc:77:24:c7:ce:98:ac:75:0b:88:8f:d5:95:ed: 68:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:72:2D:56:B6:25:FA:4B:14:90:B5:D4:50:74:EB:6B:56:C5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/3ca1b9bd-85ed-382f-84e0-0a077531462a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 66.23.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:bd:00:36:68:d4:bb:d5:3d:ca:4a:e5:b4:8d:d4:f7:d0:0c: cc:fe:7a:81:82:93:7d:68:4c:80:be:42:93:23:1e:73:e7:3e: b8:e4:d6:31:07:3e:f1:ab:b8:c7:a3:30:be:7e:20:e0:b6:f5: 16:89:9e:a5:32:c0:e9:f3:4b:13:2c:87:4f:eb:da:64:b5:29: e5:06:6d:fb:64:4d:14:1a:7e:10:eb:83:13:8a:06:94:ce:19: 23:0b:d0:e6:09:fd:ee:e5:24:be:f6:8b:0b:b3:ba:75:7c:32: dd:bf:dc:34:2d:09:96:25:38:20:7f:66:c7:7f:db:66:1c:2b: c9:05:8e:6c:ef:80:07:bf:f9:15:a4:5b:df:c5:52:ba:c8:fb: 21:a5:2e:08:1a:77:9f:0a:af:92:6f:2e:26:46:be:96:46:33: d9:42:83:25:9f:f0:79:c4:e3:22:c9:97:6d:45:4a:d1:89:35: 9e:a7:51:d4:e2:1a:0c:0f:2f:4f:1a:9b:19:e0:a7:b0:05:a8: c6:5c:52:25:56:10:70:42:28:f7:46:46:ca:e0:42:8b:6a:51: 8e:1c:77:38:7b:7d:06:a1:09:31:89:29:bd:42:b1:2e:5e:a1: f2:41:1b:c8:0e:04:42:b5:70:c7:03:0e:ed:dd:bc:53:e5:9e: 57:65:0b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwTblWz16IY6AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmI5ZjlkN2QtZDViNi00NTQwLTgxYWItNmMwODU0YzBmYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jqsan0kwYfgBqWPfNDEpaTmQNr4FUgMTnT 1mlaoUJdbaHOK+u+bL9oRCZj85skenST3lBQT4dO78wroZQe7GMZLSmtTdkhPrmN zMPOfHVSeSMHtmq8vAB0VFBTFbKj4H2S8co5owzPipREqXw7FwajfAviu/JAEN0g 1R5jIuKqaNnK/PBqw9DPpe3cCqf603+6mIkGfBGHrDBzoZFe7HAJQMVJMknMNydD BmPoLT8gxv3XU96rLL00Hg7ovOgPXn7lElerSo79G9Wo1o+lyvIRWxyiUH66HNh2 bpwv9DC2Z4LUxnixjDCXpdXh9TEp/Hckx86YrHULiI/Vle1o1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw6ci1WtiX6SxSQtdRQdOtrVsXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvM2NhMWI5YmQtODVlZC0z ODJmLTg0ZTAtMGEwNzc1MzE0NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK9ADZo1LvVPcpK5bSN1PfQDMz+eoGCk31oTIC+QpMjHnPnPrjk1jEH PvGruMejML5+IOC29RaJnqUywOnzSxMsh0/r2mS1KeUGbftkTRQafhDrgxOKBpTO GSML0OYJ/e7lJL72iwuzunV8Mt2/3DQtCZYlOCB/Zsd/22YcK8kFjmzvgAe/+RWk W9/FUrrI+yGlLggad58Kr5JvLiZGvpZGM9lCgyWf8HnE4yLJl21FStGJNZ6nUdTi GgwPL08amxngp7AFqMZcUiVWEHBCKPdGRsrgQotqUY4cdzh7fQahCTGJKb1CsS5e ofJBG8gOBEK1cMcDDu3dvFPlnldlC5M= -----END CERTIFICATE-----Generated at Thu Sep 18 03:49:18 2025 by rpki-client