$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbaf38e3-dfa7-3dd2-9bad-ff986f572b21.roa File: dbaf38e3-dfa7-3dd2-9bad-ff986f572b21.roa (raw, json) Hash identifier: 0q8YNYB2fqdKOcb3z7gZjUPUzVHTmKyytZkN52H9TIs= Subject key identifier: C1:DB:10:84:6C:D7:C8:14:31:75:E7:BB:41:01:A2:A4:E7:00:7F:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7BCE14E1E526466A0BA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbaf38e3-dfa7-3dd2-9bad-ff986f572b21.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33667 IP address blocks: 66.208.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:bc:e1:4e:1e:52:64:66:a0:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ae4d8021-f2ae-4e8d-9644-d385187858ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:24:d0:e2:06:df:9b:c5:ca:3a:14:c9:0d: 01:8e:e8:be:21:2e:c4:cb:68:0e:a7:0b:b4:c1:b0: 8b:e6:95:7a:49:9a:b9:fa:c5:fc:cc:6c:5d:89:ba: 53:67:6c:df:d1:7c:15:b3:68:c3:c1:36:5f:6c:c6: a4:a7:46:18:f1:f9:5b:57:53:1b:ea:39:92:6f:08: 28:9d:52:92:8e:55:ee:84:f3:1f:ba:53:6f:98:da: db:a6:78:c2:ae:ef:3a:d1:d1:4f:76:02:6d:04:87: ab:01:c0:94:e4:07:db:fb:f5:bd:cb:bc:1b:06:b8: 71:b1:b5:f5:d9:1c:c7:66:d7:66:b8:9b:dc:85:30: d7:ec:20:4b:8a:42:e5:9f:6b:ed:70:2f:7a:67:f9: 90:5b:d8:08:6b:b3:4e:29:e5:3b:17:74:6d:1d:7e: d8:be:bf:23:4c:de:eb:3d:c3:e6:7b:fb:08:5f:01: 63:e5:42:bf:a7:56:0f:8c:10:7f:b0:22:ef:be:c1: 6f:33:9f:cd:49:56:db:eb:22:f8:cd:9b:71:54:e2: d4:b7:48:53:01:84:de:d5:bb:ef:45:93:0d:b3:a1: ae:62:7c:58:94:9d:82:09:2c:2e:c9:88:07:cf:03: 01:e7:f8:0b:10:c4:2a:b5:36:75:6f:03:78:00:ae: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:10:84:6C:D7:C8:14:31:75:E7:BB:41:01:A2:A4:E7:00:7F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbaf38e3-dfa7-3dd2-9bad-ff986f572b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.208.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:f1:f7:5e:02:52:6b:99:2b:39:9d:e9:16:92:08:e9:3b:88: 20:e2:7e:73:45:5e:a9:38:38:88:c5:d0:28:0a:ea:d7:c3:80: 2f:53:f0:4b:b1:c2:76:b5:d7:db:14:81:4e:61:12:48:83:7b: 98:f7:1c:a0:95:b1:34:01:91:7a:a1:ac:1b:b3:e8:d2:1b:b1: 3e:a5:2e:20:a0:b9:68:37:3a:03:37:ec:9b:6e:22:df:7f:fb: 2a:1e:8a:56:02:d7:9c:fe:de:ea:d3:8d:89:5b:76:3b:43:0b: 7e:49:bb:b2:0d:e2:e9:53:7f:61:fe:c5:63:21:9c:a4:8f:94: 32:fb:56:4b:07:9e:ad:98:8d:f4:71:1d:0e:c5:4d:22:7b:eb: cf:bf:c9:41:24:9b:70:c4:0b:7b:e0:3c:b1:9b:40:06:3e:8d: f4:e6:a0:61:28:3f:df:5f:ae:0d:17:e9:17:fd:cd:ee:86:79: 37:d5:1f:4c:c1:9d:94:8d:55:bd:f5:3d:39:69:84:8b:f2:c9: 6b:ad:ab:8b:2e:37:69:94:44:81:9d:5c:22:de:05:0d:3d:da: 04:4c:ff:6a:2e:e7:26:ed:3c:38:82:4f:31:43:e2:4b:2a:54: be:f5:81:25:ca:42:c7:1b:73:7a:7d:03:2e:d3:a2:5a:5d:b4: 57:9d:bc:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t7zhTh5SZGagugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YWU0ZDgwMjEtZjJhZS00ZThkLTk2NDQtZDM4NTE4Nzg1OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnok0OIG35vFyjoUyQ0Bjui+IS7Ey2gOpwu0 wbCL5pV6SZq5+sX8zGxdibpTZ2zf0XwVs2jDwTZfbMakp0YY8flbV1Mb6jmSbwgo nVKSjlXuhPMfulNvmNrbpnjCru860dFPdgJtBIerAcCU5Afb+/W9y7wbBrhxsbX1 2RzHZtdmuJvchTDX7CBLikLln2vtcC96Z/mQW9gIa7NOKeU7F3RtHX7Yvr8jTN7r PcPme/sIXwFj5UK/p1YPjBB/sCLvvsFvM5/NSVbb6yL4zZtxVOLUt0hTAYTe1bvv RZMNs6GuYnxYlJ2CCSwuyYgHzwMB5/gLEMQqtTZ1bwN4AK5apQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHbEIRs18gUMXXnu0EBoqTnAH+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJhZjM4ZTMtZGZhNy0z ZGQyLTliYWQtZmY5ODZmNTcyYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHx914CUmuZKzmd6RaSCOk7iCDifnNFXqk4OIjF0CgK6tfDgC9T8Eux wna119sUgU5hEkiDe5j3HKCVsTQBkXqhrBuz6NIbsT6lLiCguWg3OgM37JtuIt9/ +yoeilYC15z+3urTjYlbdjtDC35Ju7IN4ulTf2H+xWMhnKSPlDL7VksHnq2YjfRx HQ7FTSJ768+/yUEkm3DEC3vgPLGbQAY+jfTmoGEoP99frg0X6Rf9ze6GeTfVH0zB nZSNVb31PTlphIvyyWutq4suN2mURIGdXCLeBQ092gRM/2ou5ybtPDiCTzFD4ksq VL71gSXKQscbc3p9Ay7TolpdtFedvFg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:16 2025 by rpki-client