$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25247f64-ff98-3e9c-aef1-9c3588317b5b.roa File: 25247f64-ff98-3e9c-aef1-9c3588317b5b.roa (raw, json) Hash identifier: SOIyMtUXRvV7r+iD8mCLnkqE4Lv2ka+3Nzv0GnyioTo= Subject key identifier: 5A:AB:35:5F:F9:EA:5E:3D:38:C2:A5:D0:57:2A:BC:99:BA:E9:98:3B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7F9868BDBA8F44B596140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25247f64-ff98-3e9c-aef1-9c3588317b5b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 66.41.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:f9:86:8b:db:a8:f4:4b:59:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=29b240b5-c914-4dfc-bcc4-aa698c3d1e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4f:ca:ab:e9:86:af:c5:67:c2:e0:bb:e4:9d: ec:33:d8:ab:a7:d7:35:57:66:bf:6a:f7:c8:dd:28: 4c:be:e4:12:33:25:ea:c5:f8:6a:8e:74:5f:30:15: 76:fe:6b:54:c4:c0:b2:9b:34:83:0f:a6:a5:c9:a2: 87:a7:53:96:0d:47:20:7f:ea:07:79:cd:af:9b:10: 35:71:dd:d3:96:51:0a:5f:b9:3a:c8:73:6e:98:3b: 6c:8c:b9:53:d2:02:60:32:c7:23:38:1a:f9:2e:07: 5f:9e:6b:d5:67:b7:57:0c:be:bf:19:82:e1:4b:c6: d1:93:5c:8e:7c:fa:21:ad:ea:3b:61:3f:6b:ca:92: 63:c4:b6:b2:1b:e2:05:ec:9e:ad:fb:ad:aa:f7:a0: 91:d8:6e:44:54:11:a1:05:16:0a:ed:37:a7:82:84: c4:0e:c5:0d:bb:0d:2d:98:3d:98:b3:eb:b6:af:a6: 19:2b:73:01:a5:f2:92:96:11:2c:a9:a7:76:6e:55: 18:78:a5:eb:0b:b8:fe:c3:c8:c5:2d:9f:c2:31:1f: b9:70:80:ee:b3:33:69:9e:10:7f:6f:a9:05:a0:5c: 59:77:ad:96:c5:86:44:a5:51:25:48:2b:89:44:70: 61:57:52:8e:5e:f5:3e:22:88:60:93:de:b2:82:11: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AB:35:5F:F9:EA:5E:3D:38:C2:A5:D0:57:2A:BC:99:BA:E9:98:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25247f64-ff98-3e9c-aef1-9c3588317b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.41.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:64:de:08:e4:e1:a5:89:91:fc:d0:83:42:97:c1:d2:3b:7e: ae:92:cd:82:9c:84:95:3d:12:8a:9f:78:a6:45:05:43:73:36: 95:74:4c:f1:d2:8d:84:1a:a4:d3:4d:8a:9a:e5:12:00:4a:2d: 70:c3:32:0d:93:5a:33:63:67:6a:8c:fa:dd:7a:44:98:e3:79: 70:b6:7d:f2:8b:d3:9a:21:c4:68:ba:57:3e:b7:3c:26:ca:5c: 1b:b1:da:64:a3:8b:f2:62:0b:59:7a:c0:ae:1a:21:10:f2:62: 8d:b8:09:bc:9a:50:fd:3f:ea:f6:a1:2f:fd:5d:fc:ee:e1:1e: 46:c9:f8:d2:01:39:8b:d5:36:4c:d9:55:5c:11:00:f2:b6:aa: e3:66:14:02:9f:a5:e4:a9:31:7d:1b:e6:32:65:b8:ec:78:d4: 5b:6a:3d:d8:56:15:3e:6a:20:31:39:d2:d2:98:ec:84:03:71: 28:ab:4c:80:23:41:02:cb:1c:91:af:7b:cf:f2:3d:6b:df:6a: 14:69:6c:12:7e:a3:c3:d4:41:1a:8d:9c:73:35:59:81:3a:2d: f3:d5:94:58:a0:78:6d:83:dc:6b:4b:f5:24:d5:d3:45:f1:8a: 17:88:c4:17:18:21:bc:93:02:b8:7c:35:1c:5a:15:1d:af:aa: 14:65:78:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/mGi9uo9EtZYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjliMjQwYjUtYzkxNC00ZGZjLWJjYzQtYWE2OThjM2QxZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0/Kq+mGr8VnwuC75J3sM9irp9c1V2a/avfI 3ShMvuQSMyXqxfhqjnRfMBV2/mtUxMCymzSDD6alyaKHp1OWDUcgf+oHec2vmxA1 cd3TllEKX7k6yHNumDtsjLlT0gJgMscjOBr5LgdfnmvVZ7dXDL6/GYLhS8bRk1yO fPohreo7YT9rypJjxLayG+IF7J6t+62q96CR2G5EVBGhBRYK7TengoTEDsUNuw0t mD2Ys+u2r6YZK3MBpfKSlhEsqad2blUYeKXrC7j+w8jFLZ/CMR+5cIDuszNpnhB/ b6kFoFxZd62WxYZEpVElSCuJRHBhV1KOXvU+Iohgk96yghEQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqrNV/56l49OMKl0FcqvJm66Zg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUyNDdmNjQtZmY5OC0z ZTljLWFlZjEtOWMzNTg4MzE3YjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQiloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFk3gjk4aWJkfzQg0KXwdI7fq6SzYKchJU9EoqfeKZFBUNzNpV0TPHS jYQapNNNiprlEgBKLXDDMg2TWjNjZ2qM+t16RJjjeXC2ffKL05ohxGi6Vz63PCbK XBux2mSji/JiC1l6wK4aIRDyYo24CbyaUP0/6vahL/1d/O7hHkbJ+NIBOYvVNkzZ VVwRAPK2quNmFAKfpeSpMX0b5jJluOx41FtqPdhWFT5qIDE50tKY7IQDcSirTIAj QQLLHJGve8/yPWvfahRpbBJ+o8PUQRqNnHM1WYE6LfPVlFigeG2D3GtL9STV00Xx iheIxBcYIbyTArh8NRxaFR2vqhRlePI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:13 2025 by rpki-client