$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa File: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (raw, json) Hash identifier: K0UK1sWoUuBurLk8GPeb4LGcvoSEQr5wrkjz+N6+9po= Subject key identifier: 5C:06:F3:16:74:AA:FA:0B:B8:98:65:CE:E3:85:F7:E9:64:65:22:70 Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584AFC1BF53B839A44395C2CA880 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 64236 IP address blocks: 66.181.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f5:3b:83:9a:44:39:5c:2c:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=2583b2ba-e96e-454f-bb7d-5f0d3fbf7854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:17:fb:13:8e:7c:95:9b:d3:73:b5:28:a3: e1:72:cd:b2:15:b6:41:1d:95:98:cb:7b:75:a0:4b: 7c:b6:53:07:43:24:51:a1:10:04:66:17:8a:c9:c3: 98:68:d9:0a:55:33:12:01:7c:7c:26:73:55:0a:27: 20:03:c2:e6:95:99:c6:fe:da:97:dd:fb:3c:a2:b7: d1:e3:c0:30:75:ee:dc:ae:d3:9c:1d:70:71:7c:10: de:0b:ec:5b:7d:e5:33:a9:74:14:cb:e7:07:38:eb: 85:a0:41:8c:03:76:5d:82:1d:01:3d:5f:c4:a8:94: 18:ff:89:92:f8:f4:63:c5:75:56:ae:d5:08:79:17: f7:c1:0d:4b:c8:85:28:1a:68:62:55:de:db:30:41: 3a:64:f1:c1:3e:1e:05:d9:21:3d:20:b8:22:b6:fd: bb:55:45:a7:c1:c7:ce:9b:37:50:b7:80:04:b1:e1: d7:b6:67:d3:3a:4a:02:c8:9c:bf:5f:8b:66:98:5b: 29:6f:53:83:90:48:12:30:af:64:4e:45:01:b4:3a: 74:04:44:b8:3a:29:0e:ff:8c:be:40:25:6b:5e:03: c1:7f:1c:f2:ae:e3:4e:cf:93:fd:cc:20:10:65:f8: 9f:eb:e8:11:25:ae:5b:01:e5:3a:de:99:53:54:b1: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:F3:16:74:AA:FA:0B:B8:98:65:CE:E3:85:F7:E9:64:65:22:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: 66.181.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:dc:0e:1e:ac:0e:9c:1d:84:97:c2:fe:04:6f:cf:fd:71:8f: cb:a5:fd:0e:fb:b6:72:87:1d:6a:08:6f:d1:a8:45:5e:8f:63: d6:da:4a:a9:b6:74:3d:1e:97:38:37:bb:6e:f4:33:64:eb:30: 32:f2:87:84:4b:49:9a:58:b7:9a:4f:c1:55:f1:fa:82:93:6b: 41:19:30:e6:3f:37:7e:9f:50:9e:26:24:f9:8a:4a:19:e7:40: 1f:b7:61:27:20:d6:a9:6e:83:f9:b2:d9:b0:75:65:43:95:10: 5f:e8:8c:dc:b6:56:ab:db:8e:5f:e6:42:1f:ab:48:ab:c5:aa: 37:6d:61:5c:24:ef:79:a5:d5:a6:8b:ae:1c:77:f7:a1:e0:a4: 92:6c:78:b0:ef:7e:3b:b1:a3:9c:27:97:18:44:33:27:89:5c: 1b:a7:dc:72:62:30:b6:2c:e1:df:18:b3:18:9b:c8:49:07:f0: 11:16:d7:df:ac:06:74:9b:54:9f:07:65:b3:e7:07:90:2f:26: 91:ba:01:b0:56:a7:9d:08:ca:7b:ac:14:ae:ee:fd:d2:53:38: dd:dc:72:ba:08:ab:0b:be:e6:8d:7b:72:d7:e6:d6:45:56:e4: 63:3e:9b:0e:72:48:c4:f0:b2:6d:b5:83:cc:b6:e2:c5:c8:be: 66:22:b4:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/U7g5pEOVwsqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjU4M2IyYmEtZTk2ZS00NTRmLWJiN2QtNWYwZDNmYmY3ODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljsX+xOOfJWb03O1KKPhcs2yFbZBHZWYy3t1 oEt8tlMHQyRRoRAEZheKycOYaNkKVTMSAXx8JnNVCicgA8LmlZnG/tqX3fs8orfR 48Awde7crtOcHXBxfBDeC+xbfeUzqXQUy+cHOOuFoEGMA3Zdgh0BPV/EqJQY/4mS +PRjxXVWrtUIeRf3wQ1LyIUoGmhiVd7bMEE6ZPHBPh4F2SE9ILgitv27VUWnwcfO mzdQt4AEseHXtmfTOkoCyJy/X4tmmFspb1ODkEgSMK9kTkUBtDp0BES4OikO/4y+ QCVrXgPBfxzyruNOz5P9zCAQZfif6+gRJa5bAeU63plTVLG/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwG8xZ0qvoLuJhlzuOF9+lkZSJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvM2JkMjNhNjctNmI0YS0z ZDY4LTgyNTMtZmQ0ODVjOWY2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfcDh6sDpwdhJfC/gRvz/1xj8ul/Q77tnKHHWoIb9GoRV6PY9baSqm2 dD0elzg3u270M2TrMDLyh4RLSZpYt5pPwVXx+oKTa0EZMOY/N36fUJ4mJPmKShnn QB+3YScg1qlug/my2bB1ZUOVEF/ojNy2Vqvbjl/mQh+rSKvFqjdtYVwk73ml1aaL rhx396HgpJJseLDvfjuxo5wnlxhEMyeJXBun3HJiMLYs4d8YsxibyEkH8BEW19+s BnSbVJ8HZbPnB5AvJpG6AbBWp50IynusFK7u/dJTON3ccroIqwu+5o17ctfm1kVW 5GM+mw5ySMTwsm21g8y24sXIvmYitLs= -----END CERTIFICATE-----Generated at Wed Sep 10 00:09:34 2025 by rpki-client