$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa File: 4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa (raw, json) Hash identifier: UweXjgti7+1enGpsOvXb8g58oWjjgDXO55b3gpvAzYY= Subject key identifier: CA:D3:3E:BD:F7:F5:B0:BB:60:73:A0:10:94:88:24:0E:31:7A:FF:06 Certificate issuer: /CN=6957121d-8962-482d-982c-d123ff337caa Certificate serial: 010D0C9F4328584B33F19D7A0481B4A47C705680 Authority key identifier: ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 16509 IP address blocks: 66.54.73.0/24 maxlen: 24 66.54.74.0/24 maxlen: 24 66.54.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9d:7a:04:81:b4:a4:7c:70:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6957121d-8962-482d-982c-d123ff337caa Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=09f2cae3-3ddf-492a-831f-26c51bc44e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:eb:ff:ca:50:79:b5:ee:a7:ac:d7:5d:1e: 04:a6:8f:78:c4:92:87:84:bd:52:09:52:68:9d:e8: 75:96:08:4e:5b:87:93:50:cd:16:ee:34:cc:b0:b7: 03:28:c0:29:c4:3e:5b:fe:bd:da:da:6a:b0:69:cd: 3f:f9:aa:45:1a:51:4e:0b:3a:a7:a4:4b:77:25:bb: 10:ca:27:0a:8b:d8:cf:ac:8a:a8:13:4e:67:63:cf: a0:8c:c5:e2:d9:12:a6:9a:c2:43:a5:85:ba:70:95: 1d:b2:37:f0:4a:f5:a0:7e:18:aa:44:bb:f4:af:fd: c2:a1:43:eb:67:e0:28:01:05:18:4e:ba:88:0f:33: 3e:24:8f:d8:32:0a:81:43:a8:3f:29:29:df:37:bb: 3f:e5:e0:9a:61:dc:2b:af:c8:cd:2c:d4:68:0d:7f: 15:02:22:5b:e6:7f:98:a2:71:53:0a:54:cf:5f:a0: 81:b6:e3:3a:51:3a:a7:b7:13:07:ca:aa:8b:e6:c8: 20:13:a9:de:6d:de:b2:a1:85:f3:ca:31:9e:96:33: aa:e1:62:bc:25:f0:4f:79:fa:91:4c:4b:70:ce:2e: 6e:f7:3e:2f:23:1f:ba:9f:16:70:25:3b:f0:f9:10: 95:d9:e3:49:1d:3c:2f:65:2f:e9:e7:e3:c6:ba:11: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D3:3E:BD:F7:F5:B0:BB:60:73:A0:10:94:88:24:0E:31:7A:FF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl X509v3 Authority Key Identifier: keyid:ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer sbgp-ipAddrBlock: critical IPv4: 66.54.73.0-66.54.75.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:68:d9:d5:f6:85:03:72:e4:78:52:6d:0b:28:cc:91:d1:af: bc:aa:a0:49:29:99:8b:17:36:31:48:42:c0:72:b7:f8:55:5c: e2:d1:fa:1e:f4:a1:19:5d:1e:c6:79:ba:cb:7c:98:3e:97:60: 3a:ee:5e:bc:ac:a5:68:71:f0:0b:24:e4:92:f5:79:67:ed:80: c9:00:56:89:eb:a5:e8:c8:e1:3c:7d:05:cc:e9:50:d8:80:77: 81:70:32:06:13:f6:f8:ca:03:ad:11:48:aa:29:48:33:b1:52: b0:a4:fc:95:b2:3d:fa:6b:20:24:63:ee:d1:2d:04:f2:99:8c: f6:7c:cb:0d:3b:04:8c:b0:c6:f2:51:5b:04:c6:a1:1f:2c:73: 18:9e:44:54:56:7b:61:eb:02:a5:c5:ef:f8:2c:4c:7c:82:fe: 90:b6:30:4c:55:66:e7:f1:25:64:9b:47:af:b6:66:ba:8b:ab: 4a:d8:bb:b8:a4:c1:6e:36:e2:b5:6a:0e:9c:52:aa:76:1d:86: 9d:c4:d5:cc:03:ba:47:3c:28:b1:53:b5:7a:d6:05:d0:a7:23: a8:88:de:49:94:be:4b:29:80:b3:1f:fd:bd:4d:c5:f4:2a:7e: 53:78:fe:a9:24:21:e1:75:76:bd:c3:c2:e3:9d:82:41:f5:4d: d8:63:93:e6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsz8Z16BIG0pHxwVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk1NzEyMWQtODk2Mi00ODJkLTk4MmMtZDEyM2ZmMzM3 Y2FhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MDlmMmNhZTMtM2RkZi00OTJhLTgzMWYtMjZjNTFiYzQ0ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Dr/8pQebXup6zXXR4Epo94xJKHhL1SCVJo neh1lghOW4eTUM0W7jTMsLcDKMApxD5b/r3a2mqwac0/+apFGlFOCzqnpEt3JbsQ yicKi9jPrIqoE05nY8+gjMXi2RKmmsJDpYW6cJUdsjfwSvWgfhiqRLv0r/3CoUPr Z+AoAQUYTrqIDzM+JI/YMgqBQ6g/KSnfN7s/5eCaYdwrr8jNLNRoDX8VAiJb5n+Y onFTClTPX6CBtuM6UTqntxMHyqqL5sggE6nebd6yoYXzyjGeljOq4WK8JfBPefqR TEtwzi5u9z4vIx+6nxZwJTvw+RCV2eNJHTwvZS/p5+PGuhHxbQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMrTPr339bC7YHOgEJSIJA4xev8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82OTU3 MTIxZC04OTYyLTQ4MmQtOTgyYy1kMTIzZmYzMzdjYWEvNGIzZGZjYTUtMWQ3ZC0z OWZjLWI1OWItYjk2Yzk5NjA3ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjk1NzEyMWQtODk2Mi00ODJkLTk4 MmMtZDEyM2ZmMzM3Y2FhLzY5NTcxMjFkLTg5NjItNDgyZC05ODJjLWQxMjNmZjMz N2NhYS5jcmwwHwYDVR0jBBgwFoAU7Q4aZB0DaF4rNONTJB7ikoLj5WwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82OTU3MTIxZC04OTYyLTQ4MmQtOTgyYy1kMTIz ZmYzMzdjYWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCNkkD BAJCNkgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAq2jZ1faFA3LkeFJtCyjMkdGvvKqgSSmZixc2MUhCwHK3 +FVc4tH6HvShGV0exnm6y3yYPpdgOu5evKylaHHwCyTkkvV5Z+2AyQBWieul6Mjh PH0FzOlQ2IB3gXAyBhP2+MoDrRFIqilIM7FSsKT8lbI9+msgJGPu0S0E8pmM9nzL DTsEjLDG8lFbBMahHyxzGJ5EVFZ7YesCpcXv+CxMfIL+kLYwTFVm5/ElZJtHr7Zm uourSti7uKTBbjbitWoOnFKqdh2GncTVzAO6RzwosVO1etYF0KcjqIjeSZS+SymA sx/9vU3F9Cp+U3j+qSQh4XV2vcPC452CQfVN2GOT5g== -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:01 2025 by rpki-client