$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa File: 0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa (raw, json) Hash identifier: y11cfeHMkXMbPi0nqC8oCPCBAnp38FjgcZX/gnCETsA= Subject key identifier: 60:01:13:8A:64:E1:49:F5:33:10:14:0E:E9:54:FB:2B:56:A7:CE:2C Certificate issuer: /CN=5f0444bf-8f35-4754-9121-fb0e0baca58d Certificate serial: 010D0C9F4328584B84E7744CF8511B058A336B80 Authority key identifier: 46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 66.232.20.0/23 maxlen: 23 206.166.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:74:4c:f8:51:1b:05:8a:33:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0444bf-8f35-4754-9121-fb0e0baca58d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ac77e091-c834-4e78-88bb-e0972548925c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:86:1b:e4:1f:62:b9:83:87:8d:a4:b4:0e:87: 59:f3:58:44:a9:e2:6b:35:0c:d2:60:55:f1:f7:5c: 93:5d:1a:79:25:32:59:57:34:c2:b4:db:3f:0b:83: 02:b7:54:76:6d:c8:4b:61:6c:1a:3c:80:69:97:45: 35:16:34:a9:0d:bc:d9:6b:6f:41:7d:ad:13:e8:73: 61:6f:19:ba:23:1f:cc:5c:7e:83:85:19:07:0b:e9: 30:10:75:ce:85:71:49:d3:f4:d5:64:33:c0:64:a1: a6:7b:15:ec:94:ff:ee:db:46:6c:63:9c:4a:b9:10: d3:fc:33:40:4d:d2:d6:ea:55:4e:fc:f8:06:ad:1e: 99:f8:09:1d:a6:ea:5a:5f:c4:e6:cc:c2:5a:32:39: 46:15:f5:17:3a:ff:e6:77:c5:03:fd:ed:92:80:ad: 41:d7:31:34:27:2e:be:12:b4:04:34:af:c8:7a:f4: 7e:a3:6e:97:98:16:74:b0:8c:a0:85:fa:8c:f1:d4: fb:f7:66:33:0c:7d:0e:28:66:13:49:88:c2:54:57: 97:85:2d:9e:9d:77:3d:de:c7:e4:ac:f5:40:35:8b: e7:62:95:88:e1:26:e1:3f:a1:14:9f:4f:28:09:08: 9a:93:1d:5a:c4:7d:c1:af:c8:1f:d7:4d:be:97:4c: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:13:8A:64:E1:49:F5:33:10:14:0E:E9:54:FB:2B:56:A7:CE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl X509v3 Authority Key Identifier: keyid:46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer sbgp-ipAddrBlock: critical IPv4: 66.232.20.0/23 206.166.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:72:28:96:44:0d:6f:97:a6:1b:ec:55:76:61:71:6d:0b:4a: 11:0f:73:fc:30:77:00:4a:1f:93:d6:8d:99:4f:bd:83:75:c9: ee:e7:3f:47:e8:f7:81:47:e0:a6:9c:33:02:5d:ee:38:62:a7: 56:13:f3:7c:e2:4d:44:00:64:3b:81:b1:9a:f2:7c:e4:83:96: 83:7a:f3:9d:36:02:94:ef:36:93:c7:32:20:c0:b2:07:49:3a: be:df:81:29:20:cc:4f:be:8e:c7:42:15:d7:06:26:97:e9:98: a6:6c:62:af:7e:e7:26:23:c2:4f:03:75:62:b5:21:03:a4:84: c7:e9:17:22:56:f2:59:17:12:83:c5:20:7a:75:7b:83:64:c3: be:46:0b:32:de:68:08:04:09:44:5f:54:55:d9:25:27:97:8e: ca:b3:32:65:37:62:fd:65:d8:c3:2f:73:fa:ed:d1:68:5e:83: 26:d4:2f:00:da:cf:b6:be:fd:62:99:59:7c:3d:b0:40:d2:1e: 74:a9:88:02:e5:90:bc:7f:7a:76:de:80:08:58:32:86:4a:59: 27:be:eb:ce:d2:0a:62:7d:f8:fb:82:89:9f:78:00:b3:1a:25: 3b:b9:6d:0e:60:d3:b2:05:3a:3a:ca:e8:6d:1b:0f:7b:47:3a: 36:60:bd:91 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuE53RM+FEbBYoza4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYwNDQ0YmYtOGYzNS00NzU0LTkxMjEtZmIwZTBiYWNh NThkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWM3N2UwOTEtYzgzNC00ZTc4LTg4YmItZTA5NzI1NDg5MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIYb5B9iuYOHjaS0DodZ81hEqeJrNQzSYFXx 91yTXRp5JTJZVzTCtNs/C4MCt1R2bchLYWwaPIBpl0U1FjSpDbzZa29Bfa0T6HNh bxm6Ix/MXH6DhRkHC+kwEHXOhXFJ0/TVZDPAZKGmexXslP/u20ZsY5xKuRDT/DNA TdLW6lVO/PgGrR6Z+AkdpupaX8TmzMJaMjlGFfUXOv/md8UD/e2SgK1B1zE0Jy6+ ErQENK/IevR+o26XmBZ0sIyghfqM8dT792YzDH0OKGYTSYjCVFeXhS2enXc93sfk rPVANYvnYpWI4SbhP6EUn08oCQiakx1axH3Br8gf102+l0yOGQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGABE4pk4Un1MxAUDulU+ytWp84sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjA0 NDRiZi04ZjM1LTQ3NTQtOTEyMS1mYjBlMGJhY2E1OGQvMGRiYmQ3MDAtMWJlZi0z M2JkLTk0ZTUtYjk1OTM1YWI2NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWYwNDQ0YmYtOGYzNS00NzU0LTkx MjEtZmIwZTBiYWNhNThkLzVmMDQ0NGJmLThmMzUtNDc1NC05MTIxLWZiMGUwYmFj YTU4ZC5jcmwwHwYDVR0jBBgwFoAURkVu6+gtQ1ULwuiOFLf5u30k/YUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjA0NDRiZi04ZjM1LTQ3NTQtOTEyMS1mYjBl MGJhY2E1OGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQugUAwQB zqb4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHVyKJZEDW+XphvsVXZhcW0LShEPc/wwdwBKH5PWjZlPvYN1 ye7nP0fo94FH4KacMwJd7jhip1YT83ziTUQAZDuBsZryfOSDloN68502ApTvNpPH MiDAsgdJOr7fgSkgzE++jsdCFdcGJpfpmKZsYq9+5yYjwk8DdWK1IQOkhMfpFyJW 8lkXEoPFIHp1e4Nkw75GCzLeaAgECURfVFXZJSeXjsqzMmU3Yv1l2MMvc/rt0Whe gybULwDaz7a+/WKZWXw9sEDSHnSpiALlkLx/enbegAhYMoZKWSe+687SCmJ9+PuC iZ94ALMaJTu5bQ5g07IFOjrK6G0bD3tHOjZgvZE= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:21 2025 by rpki-client