$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/b5777c3c-c31e-3fb4-aaf4-62dfb16e80a4.roa File: b5777c3c-c31e-3fb4-aaf4-62dfb16e80a4.roa (raw, json) Hash identifier: DSWN2dQdJiLl3H3fdD2SiunHvOMNNbUQtpSrKxDa1wo= Subject key identifier: 05:94:D7:59:A9:A1:F3:A3:86:E9:13:29:0C:56:36:1B:30:EE:33:82 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584B328C3A176DA2581FFAA0ED80 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/b5777c3c-c31e-3fb4-aaf4-62dfb16e80a4.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 30627 IP address blocks: 66.159.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3a:17:6d:a2:58:1f:fa:a0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=fbf02af8-deda-4165-9ab8-1f2b3217373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:b5:21:90:30:f3:54:26:e1:de:6b:8f:c9: ad:46:42:19:a9:9b:ca:f9:d1:42:60:49:ee:7f:b4: 5d:38:ea:44:a4:f4:e8:b6:a4:6a:00:78:66:7c:d1: b1:36:33:bf:86:90:54:ab:b4:bb:89:3a:f6:bc:a0: ab:18:c3:72:e2:19:2b:6d:21:a4:65:86:86:9a:46: 6e:ee:5b:63:a6:0c:f3:42:b7:53:8a:81:1a:b3:ab: f3:d1:c8:b0:54:df:56:83:22:25:b5:c5:1f:1f:03: 47:cd:e1:36:f8:66:f2:ef:72:fa:f4:60:29:3a:d9: bb:01:58:8f:4e:9d:7a:b1:54:52:7a:6b:64:20:3f: f0:1d:8c:fc:3a:60:cf:13:1a:6a:4e:0e:12:68:16: 76:fc:0d:4e:2b:48:2d:bf:10:39:68:99:95:14:fd: e1:53:cf:ff:5c:da:e7:bb:7b:1c:c9:68:2d:eb:b8: c3:12:47:d2:51:68:68:ff:77:5e:51:8d:6d:0b:07: 79:b1:1e:16:56:97:6a:d6:12:20:95:e4:80:fc:82: 1b:11:25:09:38:09:91:1f:64:b1:47:0f:1a:25:0a: 77:5d:0e:79:d2:14:f4:e9:61:0d:87:b6:d2:c4:56: 4b:e1:32:1a:28:dc:03:37:b5:7a:b4:f4:e7:8f:c2: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:D7:59:A9:A1:F3:A3:86:E9:13:29:0C:56:36:1B:30:EE:33:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/b5777c3c-c31e-3fb4-aaf4-62dfb16e80a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 66.159.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f2:13:2a:bc:05:06:b0:31:46:26:56:c3:aa:e5:5c:a0:cf: 4e:ea:53:23:ef:a8:8c:82:61:74:b0:ef:2a:76:07:cc:c5:50: 88:02:c1:65:0f:80:99:b1:e8:dd:c2:e5:94:40:15:a1:20:6a: ba:14:3d:35:ee:61:b8:a4:d7:8d:f8:63:a6:2e:8f:54:fb:09: 85:47:9e:0b:59:5e:81:ba:fe:e0:ce:00:b4:92:22:f3:e5:92: 02:e3:4d:9b:14:cc:74:7d:cb:a3:03:83:e2:67:bb:1b:42:d5: 47:e0:01:fc:3d:16:e6:eb:94:e1:79:d1:84:04:ff:7f:f9:4e: f1:83:a6:87:85:e0:3a:63:e5:ef:36:bf:cc:d5:a2:00:ac:f9: 9a:0b:17:1e:49:dd:a1:7b:1b:e6:ec:c7:85:c0:3d:9b:23:55: 70:5f:19:07:4f:8b:37:6a:f1:95:d5:24:f9:8d:7b:9e:d8:58: 52:56:93:90:1a:6e:ad:69:3f:ad:53:08:50:95:a7:ee:98:de: ae:fe:7e:f9:40:21:f5:2a:d4:11:1d:b4:dc:c7:15:15:7c:2c: 37:db:ec:ab:07:73:5d:6a:ba:e2:de:5b:13:70:7b:de:aa:01: 44:d5:2d:27:ff:1e:5d:e8:b3:b4:7f:aa:b7:da:7e:b0:f1:ac: 3f:da:da:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDoXbaJYH/qg7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmJmMDJhZjgtZGVkYS00MTY1LTlhYjgtMWYyYjMyMTczNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLC1IZAw81Qm4d5rj8mtRkIZqZvK+dFCYEnu f7RdOOpEpPTotqRqAHhmfNGxNjO/hpBUq7S7iTr2vKCrGMNy4hkrbSGkZYaGmkZu 7ltjpgzzQrdTioEas6vz0ciwVN9WgyIltcUfHwNHzeE2+Gby73L69GApOtm7AViP Tp16sVRSemtkID/wHYz8OmDPExpqTg4SaBZ2/A1OK0gtvxA5aJmVFP3hU8//XNrn u3scyWgt67jDEkfSUWho/3deUY1tCwd5sR4WVpdq1hIgleSA/IIbESUJOAmRH2Sx Rw8aJQp3XQ550hT06WENh7bSxFZL4TIaKNwDN7V6tPTnj8LidQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWU11mpofOjhukTKQxWNhsw7jOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYjU3NzdjM2MtYzMxZS0z ZmI0LWFhZjQtNjJkZmIxNmU4MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQp/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbyEyq8BQawMUYmVsOq5Vygz07qUyPvqIyCYXSw7yp2B8zFUIgCwWUP gJmx6N3C5ZRAFaEgaroUPTXuYbik1434Y6Yuj1T7CYVHngtZXoG6/uDOALSSIvPl kgLjTZsUzHR9y6MDg+JnuxtC1UfgAfw9FubrlOF50YQE/3/5TvGDpoeF4Dpj5e82 v8zVogCs+ZoLFx5J3aF7G+bsx4XAPZsjVXBfGQdPizdq8ZXVJPmNe57YWFJWk5Aa bq1pP61TCFCVp+6Y3q7+fvlAIfUq1BEdtNzHFRV8LDfb7KsHc11quuLeWxNwe96q AUTVLSf/Hl3os7R/qrfafrDxrD/a2rA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:06 2025 by rpki-client