$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa File: fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa (raw, json) Hash identifier: KcwW/B+ZlWM3Zzs1xycc8l6VEHR96Fym2mtyGpGmmAU= Subject key identifier: B7:D1:23:EF:9E:99:27:81:CD:F1:F1:69:41:C5:10:04:0B:94:D0:A5 Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Certificate serial: 010D0C9F4328584B80B77F2C0CF058A9D723FC00 Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36734 IP address blocks: 66.54.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7f:2c:0c:f0:58:a9:d7:23:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=7f2cd980-9cca-4a31-8a27-0ef55f4c774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:a1:8a:8e:1e:0e:10:33:a7:8f:13:53:bf: 1b:94:a2:40:a7:aa:59:f3:0f:40:97:3c:83:c4:c0: 9e:76:5f:b9:e9:9e:10:2e:0d:fe:85:f1:41:44:74: 83:01:70:54:3e:eb:e3:4b:81:bb:57:4f:9f:96:53: e2:aa:a2:4d:4f:3f:f9:63:9b:7c:67:e5:8d:cf:62: 84:db:a5:cd:2e:c9:19:0f:eb:9b:d3:b8:05:28:c5: ac:a0:5c:60:1e:6e:3d:5a:5c:33:e9:ac:ac:1f:a7: 47:df:7e:30:8b:7f:d9:70:13:bd:00:6d:6d:a0:44: 9c:07:d3:4c:a9:17:da:36:c7:44:39:82:f9:69:4d: 12:d5:c8:eb:51:15:75:b0:f5:18:1b:94:31:83:fd: 7f:ed:84:48:ef:08:7b:d5:74:ca:28:88:bf:c6:66: 73:f3:61:a4:09:93:b6:da:99:03:ec:40:ac:70:a2: d0:9c:d2:27:29:bb:4a:65:cc:b6:58:ae:a3:2b:22: b9:5d:f4:90:31:37:9d:45:ab:0e:d0:40:e1:ac:5a: a7:6c:9a:b8:7b:bb:9a:5c:0e:2d:78:53:79:dc:91: c7:be:6d:89:01:68:9f:81:0f:09:51:25:ff:c5:10: 3e:9e:97:e4:71:0a:46:e8:77:ab:2d:b3:6f:24:16: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:23:EF:9E:99:27:81:CD:F1:F1:69:41:C5:10:04:0B:94:D0:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl X509v3 Authority Key Identifier: keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer sbgp-ipAddrBlock: critical IPv4: 66.54.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:00:f8:47:f7:85:23:2a:20:bd:4a:35:f4:93:7b:2c:86:bf: 0c:2f:fa:08:45:bf:af:7d:33:d1:7f:c7:2b:e1:6a:2e:0a:23: 22:e2:9d:7b:b7:14:93:26:0c:ab:32:13:a4:d7:e0:7c:e0:86: 1f:bf:c0:14:4d:ca:71:d3:a7:29:43:8a:b3:f1:5a:f6:49:a8: 66:6d:1f:f9:4c:69:74:fe:9e:44:1a:61:32:9d:4a:6b:ba:e8: 66:ab:30:80:31:f1:f5:54:d6:fe:46:fd:59:77:50:36:6b:8d: 47:15:b7:7f:e2:37:57:a9:66:02:0e:ce:f9:86:f0:1e:65:7f: b9:4c:19:a5:eb:a3:ac:b4:5c:4e:d4:95:fc:ae:da:41:db:6c: f6:23:a6:fc:93:10:f5:51:8f:47:a5:f2:d7:05:e4:52:c5:94: dd:10:64:51:c4:6d:26:79:be:75:a2:5d:d0:65:7c:be:1c:4b: 46:33:9c:ef:60:38:51:69:b2:72:b6:d0:73:0c:dd:e0:fc:9f: 50:a9:b7:46:41:9b:14:b6:5c:94:0b:04:04:35:93:7e:7a:a5: 67:24:0a:46:6d:ba:d7:61:75:82:7e:fa:0b:d2:2e:4b:82:6e: d5:f1:44:de:e8:c5:d1:95:9b:d5:34:93:41:4d:a2:2f:10:5d: da:15:e7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt38sDPBYqdcj/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz MDdkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk N2YyY2Q5ODAtOWNjYS00YTMxLThhMjctMGVmNTVmNGM3NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIShio4eDhAzp48TU78blKJAp6pZ8w9AlzyD xMCedl+56Z4QLg3+hfFBRHSDAXBUPuvjS4G7V0+fllPiqqJNTz/5Y5t8Z+WNz2KE 26XNLskZD+ub07gFKMWsoFxgHm49Wlwz6aysH6dH334wi3/ZcBO9AG1toEScB9NM qRfaNsdEOYL5aU0S1cjrURV1sPUYG5Qxg/1/7YRI7wh71XTKKIi/xmZz82GkCZO2 2pkD7ECscKLQnNInKbtKZcy2WK6jKyK5XfSQMTedRasO0EDhrFqnbJq4e7uaXA4t eFN53JHHvm2JAWifgQ8JUSX/xRA+npfkcQpG6HerLbNvJBblcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfRI++emSeBzfHxaUHFEAQLlNClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvZmQ1ZGNlNGMtN2EzZi0z MWY5LWJjMTgtZjk5YTE3Yzk2NGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3 NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8A+Ef3hSMqIL1KNfSTeyyGvwwv+ghFv699M9F/xyvhai4KIyLinXu3 FJMmDKsyE6TX4Hzghh+/wBRNynHTpylDirPxWvZJqGZtH/lMaXT+nkQaYTKdSmu6 6GarMIAx8fVU1v5G/Vl3UDZrjUcVt3/iN1epZgIOzvmG8B5lf7lMGaXro6y0XE7U lfyu2kHbbPYjpvyTEPVRj0el8tcF5FLFlN0QZFHEbSZ5vnWiXdBlfL4cS0YznO9g OFFpsnK20HMM3eD8n1Cpt0ZBmxS2XJQLBAQ1k356pWckCkZtutdhdYJ++gvSLkuC btXxRN7oxdGVm9U0k0FNoi8QXdoV50U= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:16 2025 by rpki-client