$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa File: 86977d22-6d9b-33b1-b034-072d4f571283.roa (raw, json) Hash identifier: VFa9Vp6t378O9PvCgs0yHVKV4Dg/h2lJ+VRToZs8PGQ= Subject key identifier: B1:6B:F6:97:A2:35:11:E7:1E:10:A2:0B:44:EB:AA:64:D5:7B:74:EE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B6BC7609849FA7225CDA2D700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 174 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:60:98:49:fa:72:25:cd:a2:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6940adaf-8950-45e6-b95d-82f309ba934e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:d0:0f:09:7e:5f:ac:fd:69:d4:c1:86:d0: 09:0f:50:72:78:34:cd:5c:6f:00:fa:f2:d2:8b:c3: 63:b9:eb:d4:1e:20:14:49:8b:e6:46:3d:60:ba:b4: 1c:49:3c:c9:df:68:77:42:15:3c:62:63:04:9c:7a: 3d:ef:2c:74:6a:90:2e:74:af:ec:93:54:b8:39:0c: 8b:c5:fb:03:35:96:58:77:2d:6f:73:a8:7d:75:0a: e0:e6:91:4e:92:f0:87:ab:1d:76:42:de:e4:14:0a: 33:db:db:7a:ef:c3:8f:d5:6f:ad:10:23:7c:96:7b: d0:b6:a8:33:95:46:8d:4f:46:84:ce:92:27:36:8a: 83:82:10:e0:42:ed:5b:34:41:8e:40:6a:20:68:aa: a8:f9:ca:74:51:46:5e:17:d9:49:7b:64:d1:f3:12: ad:26:ae:62:28:e8:d2:86:08:90:a8:76:a8:8a:f2: 44:5f:3a:1d:c4:c2:f7:ac:12:a3:99:06:e4:92:bf: 2d:84:cc:45:0b:b9:dc:be:c6:b6:eb:ab:60:4c:db: 64:31:4b:6b:ef:c7:3d:0d:46:37:5a:c3:79:e3:7f: f4:57:bd:fa:73:04:c3:9f:fd:be:f7:df:0e:09:0e: 7a:d0:d7:20:74:8f:11:97:55:3f:fd:3e:c3:e0:0f: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6B:F6:97:A2:35:11:E7:1E:10:A2:0B:44:EB:AA:64:D5:7B:74:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e8:f3:fc:34:e3:e0:fc:ac:6b:bc:c7:ef:ba:f2:89:50:42: 42:b5:12:b2:7c:4f:85:1e:b7:20:a7:5e:d2:4d:93:0d:51:a8: e9:af:aa:c3:e2:07:be:b4:23:c1:5c:c0:9c:43:45:fd:41:e5: b3:34:28:81:50:85:d9:a2:b2:55:5a:5b:82:d4:a3:52:d1:18: 7c:0d:c0:e6:ad:1c:d8:c8:26:a0:ca:0f:3c:59:24:d7:38:69: 3d:e6:04:35:50:e6:76:6c:b7:a8:05:5d:52:4e:d7:f9:11:36: 9b:a3:4b:b2:20:a9:83:b0:48:68:9a:a0:cf:47:e4:6a:e4:3c: 8c:10:95:49:ba:e7:0c:76:e2:b9:d4:62:93:9a:54:5d:d4:1c: 01:46:9a:34:36:25:ed:f6:87:12:27:ab:ac:29:75:b1:16:2a: eb:a7:01:c9:ca:1a:45:64:66:75:62:5a:ab:ab:11:86:a1:50: 6c:89:fb:f6:ee:54:f9:2e:d6:aa:b0:b6:ef:45:87:16:5a:1b: 88:95:36:f5:57:fb:62:c3:ff:3c:c8:3b:19:f3:2a:9f:d2:a8: a1:40:28:e9:c7:17:9d:c8:d2:10:b2:d5:91:f2:ce:1f:b1:dd: 18:c4:91:6d:6c:d2:0f:e7:09:8f:bd:b4:dc:80:5d:db:b4:a8: 0f:4b:4c:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtrx2CYSfpyJc2i1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Njk0MGFkYWYtODk1MC00NWU2LWI5NWQtODJmMzA5YmE5MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFfQDwl+X6z9adTBhtAJD1ByeDTNXG8A+vLS i8NjuevUHiAUSYvmRj1gurQcSTzJ32h3QhU8YmMEnHo97yx0apAudK/sk1S4OQyL xfsDNZZYdy1vc6h9dQrg5pFOkvCHqx12Qt7kFAoz29t678OP1W+tECN8lnvQtqgz lUaNT0aEzpInNoqDghDgQu1bNEGOQGogaKqo+cp0UUZeF9lJe2TR8xKtJq5iKOjS hgiQqHaoivJEXzodxML3rBKjmQbkkr8thMxFC7ncvsa266tgTNtkMUtr78c9DUY3 WsN543/0V736cwTDn/2+998OCQ560NcgdI8Rl1U//T7D4A9EmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLFr9peiNRHnHhCiC0TrqmTVe3TuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY5NzdkMjItNmQ5Yi0z M2IxLWIwMzQtMDcyZDRmNTcxMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkujz/DTj4Pysa7zH77ryiVBCQrUSsnxPhR63IKde0k2TDVGo6a+qw+IH vrQjwVzAnENF/UHlszQogVCF2aKyVVpbgtSjUtEYfA3A5q0c2MgmoMoPPFkk1zhp PeYENVDmdmy3qAVdUk7X+RE2m6NLsiCpg7BIaJqgz0fkauQ8jBCVSbrnDHbiudRi k5pUXdQcAUaaNDYl7faHEierrCl1sRYq66cBycoaRWRmdWJaq6sRhqFQbIn79u5U +S7WqrC270WHFlobiJU29Vf7YsP/PMg7GfMqn9KooUAo6ccXncjSELLVkfLOH7Hd GMSRbWzSD+cJj7203IBd27SoD0tM/Q== -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:43 2025 by rpki-client