$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa File: 8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa (raw, json) Hash identifier: 4sQLFc35usxoBRvoyQO5Ge/yAK+oiSFStp5dJK+B8lE= Subject key identifier: BA:64:B7:82:60:99:3F:FB:F5:53:AB:CE:2E:4F:EB:2D:9F:78:D1:FE Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F4328584B3821970E664CE0ABACAC8DE0 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 19381 IP address blocks: 66.85.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:97:0e:66:4c:e0:ab:ac:ac:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=27d34d4e-b33a-4150-90a0-62350bf08992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1f:32:55:4b:84:e0:31:03:26:96:48:cf:27: 41:5f:c4:cd:6f:64:c7:25:8a:fd:87:5d:48:ea:e8: 4f:c7:27:32:1b:3e:e5:e6:5c:be:e6:e7:19:26:dd: 88:01:24:83:fe:dc:a5:45:b7:94:e8:3e:c1:d3:3a: 4e:74:f5:c6:b5:6e:5c:ee:45:96:83:6b:8e:8e:0c: 72:51:2a:12:01:9b:c3:ca:e1:e8:57:a9:6c:22:ea: 99:58:b5:d7:87:8b:0b:ba:c3:e7:f7:fd:35:75:1a: e5:58:84:8b:5c:34:88:c9:0e:12:a3:f0:c8:21:a6: 5d:aa:d2:0f:8b:17:8d:77:66:55:cf:9e:42:a8:b9: 1a:cd:a0:3d:d2:d9:6e:d8:29:e5:4c:f6:f7:bc:74: 41:c3:8d:70:09:e3:2c:33:fe:6c:24:29:8d:f0:4a: ba:cc:86:02:de:68:3e:b2:72:26:ac:15:02:54:49: df:14:cf:5d:90:ad:5a:d2:40:2b:4f:95:9d:57:e7: 29:d4:9a:7c:7c:ff:4f:78:6e:13:85:d8:a4:2f:5e: f5:3e:06:7e:46:23:36:4c:cc:4c:ad:f8:8d:2a:c2: ee:9b:83:25:a9:75:eb:3d:a7:ab:b8:a2:02:68:79: 2d:6b:76:cb:36:c0:dc:5e:a7:f6:12:d9:dc:eb:cb: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:64:B7:82:60:99:3F:FB:F5:53:AB:CE:2E:4F:EB:2D:9F:78:D1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv4: 66.85.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fa:17:dc:4a:2a:d4:30:f1:b4:fd:e1:a9:c8:2e:32:4b:95: bf:55:15:33:ca:98:c1:3b:a5:88:07:e7:28:f8:e6:e2:27:c4: fb:02:6d:6a:c7:55:0b:8a:0d:ee:1d:67:2a:71:bd:a2:6a:c2: 2b:93:ae:55:21:af:80:59:08:76:d5:31:bd:f5:af:bb:b0:9a: a3:40:4d:48:74:59:cd:2d:f1:04:be:57:c5:2b:7e:43:1c:7f: d1:91:ea:76:6e:ca:a1:9c:dd:bd:2d:fa:b2:00:23:0b:c4:c6: 46:a5:c8:2b:a9:3d:51:84:ce:8c:1e:b6:d6:d7:28:0b:12:8a: c3:31:72:e3:10:4f:03:4f:9d:ab:7e:d3:1e:98:23:e5:6c:ce: 02:7d:e4:7e:ae:63:64:21:03:4e:a6:2f:56:30:e2:09:d5:1c: d9:f8:49:3f:50:67:29:d2:67:22:e2:bc:a1:73:ee:b6:e4:50: cf:d3:53:7c:cb:fb:73:b7:2f:5e:c2:e0:96:ac:8c:74:01:87: b0:32:5a:ad:92:b4:1f:4d:95:b4:cf:81:74:bb:46:3f:a5:ff: b3:ad:1d:21:20:b7:31:83:a7:30:94:00:07:b1:00:f8:0d:47: e4:7a:05:70:a3:79:88:9c:a6:b2:bf:52:14:d7:ba:30:d1:ca: e5:16:09:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZcOZkzgq6ysjeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MjdkMzRkNGUtYjMzYS00MTUwLTkwYTAtNjIzNTBiZjA4OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x8yVUuE4DEDJpZIzydBX8TNb2THJYr9h11I 6uhPxycyGz7l5ly+5ucZJt2IASSD/tylRbeU6D7B0zpOdPXGtW5c7kWWg2uOjgxy USoSAZvDyuHoV6lsIuqZWLXXh4sLusPn9/01dRrlWISLXDSIyQ4So/DIIaZdqtIP ixeNd2ZVz55CqLkazaA90tlu2CnlTPb3vHRBw41wCeMsM/5sJCmN8Eq6zIYC3mg+ snImrBUCVEnfFM9dkK1a0kArT5WdV+cp1Jp8fP9PeG4ThdikL171PgZ+RiM2TMxM rfiNKsLum4MlqXXrPaeruKICaHkta3bLNsDcXqf2Etnc68vVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpkt4JgmT/79VOrzi5P6y2feNH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvOGVlMGIyNGQtOWI5Ni0z M2E5LWJjZGUtM2JhOTIzOTZlNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj6F9xKKtQw8bT94anILjJLlb9VFTPKmME7pYgH5yj45uInxPsCbWrH VQuKDe4dZypxvaJqwiuTrlUhr4BZCHbVMb31r7uwmqNATUh0Wc0t8QS+V8UrfkMc f9GR6nZuyqGc3b0t+rIAIwvExkalyCupPVGEzowettbXKAsSisMxcuMQTwNPnat+ 0x6YI+VszgJ95H6uY2QhA06mL1Yw4gnVHNn4ST9QZynSZyLivKFz7rbkUM/TU3zL +3O3L17C4JasjHQBh7AyWq2StB9NlbTPgXS7Rj+l/7OtHSEgtzGDpzCUAAexAPgN R+R6BXCjeYicprK/UhTXujDRyuUWCe0= -----END CERTIFICATE-----Generated at Tue Oct 21 16:33:13 2025 by rpki-client