$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/1e22c1fc-8006-3dea-8770-a2507a44ff42.roa File: 1e22c1fc-8006-3dea-8770-a2507a44ff42.roa (raw, json) Hash identifier: igqYnP6YWKA+dwsBy1/eQPrAzSUGNOz7bIeNX+BCr1M= Subject key identifier: 12:F1:D8:E9:BD:13:15:1E:1E:D1:9D:16:8C:12:71:32:ED:74:05:13 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584B27617BE406A289A3A5077080 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/1e22c1fc-8006-3dea-8770-a2507a44ff42.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 22351 IP address blocks: 66.205.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7b:e4:06:a2:89:a3:a5:07:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=c78f3c74-272b-4bf3-bc25-3552a4550658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:dc:6e:70:76:c0:25:b3:11:bb:a0:08:b2: 04:b8:70:10:f0:0f:ce:43:9a:e0:c5:37:b5:fd:01: 14:35:0b:75:ca:73:48:32:64:eb:61:97:56:6c:4d: 1d:78:8d:9c:43:a2:cc:9b:0b:4f:d0:f4:48:e2:23: 36:d4:28:01:99:2e:85:ac:d4:a7:b6:32:c2:d8:25: 07:b9:db:e1:e3:7b:40:3c:c1:44:d7:18:e4:25:76: 08:96:84:40:55:b8:9e:8e:09:2b:44:85:39:c0:f7: 8f:a2:bf:b2:24:11:7c:b7:00:1c:59:d4:25:69:d1: 73:a0:83:51:fb:de:53:a2:7a:48:7e:23:7c:94:e9: 01:5f:73:6d:6e:31:90:e2:db:83:d4:2c:64:fa:77: 81:eb:47:03:06:eb:61:86:00:da:6c:d9:65:ad:75: de:d1:8c:89:b1:b3:c6:71:c1:e5:fe:94:26:d1:1e: 28:48:01:b6:1b:e2:09:6c:34:09:0c:71:ed:32:27: d4:98:cc:a0:6e:40:a3:dc:47:29:11:ce:90:b9:8d: 94:2c:8b:5f:e2:f2:31:c0:dc:38:aa:02:42:94:ac: 67:44:e3:58:51:1d:35:35:a1:c5:3d:94:df:7f:32: fa:36:49:c0:15:a9:b1:3d:2d:2d:45:7d:ba:b4:96: b8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:D8:E9:BD:13:15:1E:1E:D1:9D:16:8C:12:71:32:ED:74:05:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/1e22c1fc-8006-3dea-8770-a2507a44ff42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.205.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5f:ae:de:d3:49:4e:88:44:cc:40:15:32:bf:94:18:20:c5: c6:f4:3e:68:4d:1c:54:9e:55:f3:37:72:04:be:de:97:8b:8e: 8e:70:e2:da:79:85:cf:7f:b7:05:a5:fb:7f:2d:c7:be:26:5c: d2:38:a3:4e:07:66:e2:c9:d7:17:64:8f:60:07:66:f3:be:ad: 68:13:db:83:d7:a1:6a:53:09:69:a5:95:94:06:25:67:85:21: dd:18:87:76:16:5e:5f:e6:8b:75:b3:4f:b2:2f:cc:78:25:76: 58:db:fb:84:f0:b5:7a:a6:c8:e2:ff:01:d9:c6:7f:b2:25:9a: 04:41:a9:70:65:6e:8b:3d:1f:14:66:d5:70:ac:2c:69:6c:e5: df:8d:b9:5c:87:8e:84:69:b1:75:79:96:28:e8:ef:ed:87:9c: 36:63:0a:dd:1b:5d:b7:24:68:ce:9e:ba:65:ba:99:cb:3d:3d: df:a9:af:4b:29:70:34:57:ec:0d:e0:46:5a:63:74:69:14:8b: 1a:66:30:27:2e:d4:29:6c:59:fe:be:fc:21:2d:58:dd:63:0c: 59:93:87:9f:f0:14:ac:67:34:20:04:22:49:9b:de:7e:e8:00: cc:15:26:26:2f:42:da:98:b6:f5:c9:8f:da:a4:32:26:15:7b: 41:8d:f5:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXvkBqKJo6UHcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk Yzc4ZjNjNzQtMjcyYi00YmYzLWJjMjUtMzU1MmE0NTUwNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBbcbnB2wCWzEbugCLIEuHAQ8A/OQ5rgxTe1 /QEUNQt1ynNIMmTrYZdWbE0deI2cQ6LMmwtP0PRI4iM21CgBmS6FrNSntjLC2CUH udvh43tAPMFE1xjkJXYIloRAVbiejgkrRIU5wPePor+yJBF8twAcWdQladFzoINR +95TonpIfiN8lOkBX3NtbjGQ4tuD1Cxk+neB60cDButhhgDabNllrXXe0YyJsbPG ccHl/pQm0R4oSAG2G+IJbDQJDHHtMifUmMygbkCj3EcpEc6QuY2ULItf4vIxwNw4 qgJClKxnRONYUR01NaHFPZTffzL6NknAFamxPS0tRX26tJa44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLx2Om9ExUeHtGdFowScTLtdAUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvMWUyMmMxZmMtODAwNi0z ZGVhLTg3NzAtYTI1MDdhNDRmZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtfrt7TSU6IRMxAFTK/lBggxcb0PmhNHFSeVfM3cgS+3peLjo5w4tp5 hc9/twWl+38tx74mXNI4o04HZuLJ1xdkj2AHZvO+rWgT24PXoWpTCWmllZQGJWeF Id0Yh3YWXl/mi3WzT7IvzHgldljb+4TwtXqmyOL/AdnGf7IlmgRBqXBlbos9HxRm 1XCsLGls5d+NuVyHjoRpsXV5lijo7+2HnDZjCt0bXbckaM6eumW6mcs9Pd+pr0sp cDRX7A3gRlpjdGkUixpmMCcu1ClsWf6+/CEtWN1jDFmTh5/wFKxnNCAEIkmb3n7o AMwVJiYvQtqYtvXJj9qkMiYVe0GN9V4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:45 2025 by rpki-client