$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa File: cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa (raw, json) Hash identifier: JHQdJ96Ki8spM+mcXa7lKkvIQyxSOCPI+wYud8l+rG4= Subject key identifier: 8F:6F:40:5E:F6:87:AD:8E:E4:E9:E1:48:C9:95:FA:6F:28:AF:5E:34 Certificate issuer: /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6 Certificate serial: 010D0C9F4328584B80B757D23512DE5C8DD89980 Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 393960 IP address blocks: 66.85.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:57:d2:35:12:de:5c:8d:d8:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=a4a0367e-0049-4e87-9741-911aa7923e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:cb:cb:da:ce:a4:6c:66:82:ab:c0:dc:49: 7d:a9:9f:82:86:98:fc:42:78:50:b0:79:6d:1c:f8: bd:bb:bf:b2:aa:a9:f0:43:a5:b0:89:0b:e1:24:8a: 96:83:9c:ba:4c:4e:80:30:72:8d:59:62:0b:e0:3d: a8:94:f5:db:eb:9b:42:31:f3:1a:8e:09:2e:ce:8a: 5f:4c:19:c6:0d:fe:99:26:eb:1a:2c:d0:0d:22:10: fd:07:62:bb:9b:cb:0a:a9:1b:51:18:51:d6:25:9a: cf:60:43:a6:d9:9d:b6:70:19:45:b2:83:d8:f2:db: 1d:a8:96:9e:b8:77:6b:59:30:75:88:54:0b:ca:6a: 05:7a:0b:b0:81:a4:95:c1:b2:4c:1a:f3:7b:fa:bd: b2:ff:85:44:60:bb:2a:f5:26:90:41:de:3c:8d:26: 10:44:5e:97:d8:d5:6a:b7:99:f0:67:cf:43:88:68: 25:f6:fe:28:f1:c4:3e:12:57:f8:68:7e:2b:4d:6a: 3f:96:e9:3a:27:96:af:d9:3d:8e:70:e1:c1:96:40: 6e:7e:eb:07:e6:e8:c3:9a:9e:b5:ac:c4:be:fc:96: 6a:ac:a3:af:01:db:fe:e5:6c:34:18:4c:f5:40:11: 57:91:6c:06:38:37:5d:0c:d0:c0:b9:d0:fa:6a:9c: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:40:5E:F6:87:AD:8E:E4:E9:E1:48:C9:95:FA:6F:28:AF:5E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl X509v3 Authority Key Identifier: keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer sbgp-ipAddrBlock: critical IPv4: 66.85.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:35:40:c9:7d:08:e0:f3:76:04:6d:77:b2:a5:e0:bc:38:9b: d6:69:a7:8b:49:46:7f:a1:48:07:08:fb:50:a1:b9:1a:9e:fe: 2c:ff:d9:22:0c:ac:84:94:d5:46:28:35:ec:ca:1d:26:fd:9a: 97:f7:2a:b8:90:38:17:6f:9d:97:81:b8:2c:07:0c:0e:93:30: b9:30:ba:6c:e1:16:49:d3:68:c2:46:2a:af:a1:6d:ed:c9:78: 32:52:ac:5f:5a:8b:83:dd:b5:86:ef:9b:d8:8f:4b:3f:90:e6: 52:aa:e6:8e:a4:1b:d6:53:c7:81:a5:1e:a2:04:e0:07:9b:f4: 70:18:a6:aa:78:6b:ea:43:f7:91:ec:94:7a:06:c6:79:e5:78: 95:b9:e6:39:13:4c:92:de:68:58:02:07:2f:38:b4:98:00:81: 31:fe:10:a0:7c:fd:1e:d4:4b:d9:d1:bf:12:2c:4c:1c:c9:ee: 02:0a:e6:3a:77:f0:c3:49:c2:c7:d0:10:6b:2c:d4:5c:ba:96: 6e:aa:ab:9f:52:f8:d9:aa:e1:45:8e:bd:e0:79:52:19:e7:29: 06:c4:a1:bb:aa:34:47:de:33:89:87:79:d5:33:51:42:2a:62: bf:5c:38:9f:eb:49:20:72:d8:14:07:c2:22:9a:36:5f:d8:48: 26:b5:09:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1fSNRLeXI3YmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyYTVhZWUtYzE1Ni00M2E3LTg1MmQtOGNmYzJhY2Ez NmU2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YTRhMDM2N2UtMDA0OS00ZTg3LTk3NDEtOTExYWE3OTIzZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0LLy9rOpGxmgqvA3El9qZ+Chpj8QnhQsHlt HPi9u7+yqqnwQ6WwiQvhJIqWg5y6TE6AMHKNWWIL4D2olPXb65tCMfMajgkuzopf TBnGDf6ZJusaLNANIhD9B2K7m8sKqRtRGFHWJZrPYEOm2Z22cBlFsoPY8tsdqJae uHdrWTB1iFQLymoFeguwgaSVwbJMGvN7+r2y/4VEYLsq9SaQQd48jSYQRF6X2NVq t5nwZ89DiGgl9v4o8cQ+Elf4aH4rTWo/luk6J5av2T2OcOHBlkBufusH5ujDmp61 rMS+/JZqrKOvAdv+5Ww0GEz1QBFXkWwGODddDNDAudD6apwWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9vQF72h62O5OnhSMmV+m8or140MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJh NWFlZS1jMTU2LTQzYTctODUyZC04Y2ZjMmFjYTM2ZTYvY2MxYTZiNzYtM2EyMS0z MzI5LWE5YWEtZDhmZmI4NTQ1MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTgyYTVhZWUtYzE1Ni00M2E3LTg1 MmQtOGNmYzJhY2EzNmU2L2U4MmE1YWVlLWMxNTYtNDNhNy04NTJkLThjZmMyYWNh MzZlNi5jcmwwHwYDVR0jBBgwFoAUUFdAxxWy+40HQ6bcB3qgd77rv0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJhNWFlZS1jMTU2LTQzYTctODUyZC04Y2Zj MmFjYTM2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM1QMl9CODzdgRtd7Kl4Lw4m9Zpp4tJRn+hSAcI+1ChuRqe/iz/2SIM rISU1UYoNezKHSb9mpf3KriQOBdvnZeBuCwHDA6TMLkwumzhFknTaMJGKq+hbe3J eDJSrF9ai4PdtYbvm9iPSz+Q5lKq5o6kG9ZTx4GlHqIE4Aeb9HAYpqp4a+pD95Hs lHoGxnnleJW55jkTTJLeaFgCBy84tJgAgTH+EKB8/R7US9nRvxIsTBzJ7gIK5jp3 8MNJwsfQEGss1Fy6lm6qq59S+Nmq4UWOveB5UhnnKQbEobuqNEfeM4mHedUzUUIq Yr9cOJ/rSSBy2BQHwiKaNl/YSCa1Cew= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:06 2025 by rpki-client