$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1bfd2f6c-64a8-3e6e-8a81-32697e5f1d83.roa File: 1bfd2f6c-64a8-3e6e-8a81-32697e5f1d83.roa (raw, json) Hash identifier: nXjerQyHUSYhGYG60XACRdd0xa2jz7q/kk0VaGP/5vs= Subject key identifier: 3E:C9:4B:30:1E:46:A4:A9:2A:9C:12:FD:34:C4:34:D1:6E:F4:57:C3 Certificate issuer: /CN=0a609de0-040f-42a5-990f-417b65a086a6 Certificate serial: 010D0C9F4328584B609C89833C3BF4B2FED08D80 Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1bfd2f6c-64a8-3e6e-8a81-32697e5f1d83.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 11414 IP address blocks: 66.22.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:89:83:3c:3b:f4:b2:fe:d0:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=66b39dd9-3fff-4ab9-aff0-527df19dc2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:23:9a:5c:bd:1b:8f:0e:1d:48:58:b4:35: 98:c3:38:e3:85:1f:9e:60:7d:6e:98:b6:88:3c:81: 5c:ce:b6:53:38:50:c9:11:96:35:65:aa:33:46:e4: 04:fc:b2:f6:d2:ce:db:c2:ab:f9:33:d3:91:63:43: 1e:eb:c4:f4:9e:5c:7a:00:44:d0:7d:11:c9:49:9a: 5f:01:04:66:62:03:f8:13:59:21:a1:f6:68:d9:6f: bc:a6:a7:0a:7b:c6:37:81:73:3f:24:25:7b:22:a6: 85:a3:2c:af:84:9f:89:1a:97:73:cd:e7:0b:5a:a0: 22:5d:89:16:8e:db:d0:06:b3:15:b5:3d:57:da:3c: 4d:d5:d8:37:93:db:7a:32:b1:fb:4d:70:2f:98:99: 7f:6a:95:41:61:2c:2c:b3:5d:0d:83:d7:7c:48:3b: e1:b7:67:89:78:f1:df:64:ce:0b:b2:91:d7:5a:f6: 27:ee:f2:71:0f:87:8f:57:3e:b1:00:f3:f2:fd:4c: 29:52:78:b2:9a:d7:ab:0b:83:76:c3:e5:fe:e1:47: 9a:85:6d:92:12:16:f7:85:5e:71:7c:39:2b:0e:b1: 96:3b:48:d5:2d:94:6a:cd:20:d8:1d:17:08:09:94: 10:ab:16:d4:f8:a7:61:52:72:66:bd:25:b7:d8:da: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:4B:30:1E:46:A4:A9:2A:9C:12:FD:34:C4:34:D1:6E:F4:57:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1bfd2f6c-64a8-3e6e-8a81-32697e5f1d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl X509v3 Authority Key Identifier: keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer sbgp-ipAddrBlock: critical IPv4: 66.22.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9a:31:a8:82:4b:07:f9:af:93:f3:38:9d:36:c3:fd:02:a5: af:10:16:7e:33:88:52:75:64:5e:b1:90:e8:58:a1:85:ba:d8: a3:d6:77:7c:e9:4e:76:7b:1a:16:66:fa:5c:fb:15:f3:1c:c7: 02:37:48:cb:57:77:03:0a:13:72:9d:d7:d6:f2:eb:c6:dc:54: ab:be:83:6a:bb:0d:8d:66:36:b2:10:f8:93:3b:24:30:37:46: cd:73:cd:81:5c:a8:04:fa:de:f9:51:15:7f:36:73:31:e5:66: ad:a1:76:b2:08:49:91:b9:65:2f:01:92:4e:11:ae:32:24:c8: 77:bd:37:22:0b:17:fe:21:ed:ee:0e:31:38:61:2d:b0:4e:a9: aa:d7:8b:48:c5:e2:f3:91:7a:1b:3d:37:00:b0:f1:16:d3:53: 0b:16:2b:c0:bf:a7:3e:20:5d:a9:b6:2a:11:8f:cb:d6:fc:5e: 39:28:ae:a5:2a:4b:13:4b:27:a7:a3:1a:f1:b2:aa:65:0f:e6: 60:93:f5:36:e3:79:67:5e:71:c3:54:e4:d3:27:be:08:f0:6c: 99:03:7f:8a:bd:c9:f9:ee:78:7c:1d:fa:9c:a7:c3:4a:b1:c7: 74:3e:06:4f:26:4b:3e:b2:6b:62:b2:e9:c0:2a:f1:74:d1:96: 63:9d:ac:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnImDPDv0sv7QjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE2MDlkZTAtMDQwZi00MmE1LTk5MGYtNDE3YjY1YTA4 NmE2MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NjZiMzlkZDktM2ZmZi00YWI5LWFmZjAtNTI3ZGYxOWRjMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP4jmly9G48OHUhYtDWYwzjjhR+eYH1umLaI PIFczrZTOFDJEZY1ZaozRuQE/LL20s7bwqv5M9ORY0Me68T0nlx6AETQfRHJSZpf AQRmYgP4E1khofZo2W+8pqcKe8Y3gXM/JCV7IqaFoyyvhJ+JGpdzzecLWqAiXYkW jtvQBrMVtT1X2jxN1dg3k9t6MrH7TXAvmJl/apVBYSwss10Ng9d8SDvht2eJePHf ZM4LspHXWvYn7vJxD4ePVz6xAPPy/UwpUniymterC4N2w+X+4UeahW2SEhb3hV5x fDkrDrGWO0jVLZRqzSDYHRcICZQQqxbU+KdhUnJmvSW32NoIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7JSzAeRqSpKpwS/TTENNFu9FfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTYw OWRlMC0wNDBmLTQyYTUtOTkwZi00MTdiNjVhMDg2YTYvMWJmZDJmNmMtNjRhOC0z ZTZlLThhODEtMzI2OTdlNWYxZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE2MDlkZTAtMDQwZi00MmE1LTk5 MGYtNDE3YjY1YTA4NmE2LzBhNjA5ZGUwLTA0MGYtNDJhNS05OTBmLTQxN2I2NWEw ODZhNi5jcmwwHwYDVR0jBBgwFoAU9XEN9mydkfokF14EVBw1cUYFWcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTYwOWRlMC0wNDBmLTQyYTUtOTkwZi00MTdi NjVhMDg2YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqaMaiCSwf5r5PzOJ02w/0Cpa8QFn4ziFJ1ZF6xkOhYoYW62KPWd3zp TnZ7GhZm+lz7FfMcxwI3SMtXdwMKE3Kd19by68bcVKu+g2q7DY1mNrIQ+JM7JDA3 Rs1zzYFcqAT63vlRFX82czHlZq2hdrIISZG5ZS8Bkk4RrjIkyHe9NyILF/4h7e4O MThhLbBOqarXi0jF4vORehs9NwCw8RbTUwsWK8C/pz4gXam2KhGPy9b8XjkorqUq SxNLJ6ejGvGyqmUP5mCT9TbjeWdeccNU5NMnvgjwbJkDf4q9yfnueHwd+pynw0qx x3Q+Bk8mSz6ya2Ky6cAq8XTRlmOdrKo= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:55 2025 by rpki-client