$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa File: db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json) Hash identifier: XZ+Yl79Y2JHC5lU85uQ7NJHqjtrAPOB428HJt7to33Y= Subject key identifier: 9C:62:29:D1:08:B6:63:EA:C3:21:05:AF:AD:6A:DC:5C:4B:67:C4:D2 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584B047BFA417FBE83CFF0068CA0 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 22808 IP address blocks: 66.112.128.8/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fa:41:7f:be:83:cf:f0:06:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=4d326bb6-290f-42db-8a61-8fc26170b451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:7b:61:1a:fe:36:20:47:6e:a7:a7:cc:25: 39:cb:ad:f6:c7:bd:63:e9:54:07:e7:67:2d:18:4a: 2e:8f:26:c4:1e:ae:8b:1d:c0:b6:c9:39:c9:64:7c: e9:d3:cc:85:de:9f:50:e7:02:70:66:bf:7d:f8:3b: 3e:bf:5d:94:bf:d3:0b:d8:07:15:ef:5a:05:49:78: 35:5e:05:3f:3f:50:d2:26:8d:ae:ce:ab:1f:41:a9: 59:a3:0f:e2:ad:4e:36:e4:2c:c2:c4:42:15:c4:3e: 9d:76:38:9f:2b:5a:ad:33:81:ea:f7:f9:e5:27:25: 21:3b:1e:e9:d7:d8:7e:52:1e:b2:87:d3:d2:aa:46: 05:57:7c:2d:c3:64:76:e4:48:8e:dc:61:69:5b:5a: 72:8b:ba:33:b5:20:16:9b:26:e4:d0:62:4c:c2:e2: a6:3e:b5:a1:f0:ee:20:50:43:9a:2c:b9:d3:1e:b6: 2e:5f:bb:93:d8:e8:15:38:dd:e7:1d:ea:c9:81:4f: 76:04:7a:46:dc:96:aa:62:76:2e:8d:d5:6c:57:ba: 18:e6:95:0d:68:55:ec:86:f4:c4:ce:8a:88:f6:c1: ac:4f:7d:91:69:a1:ec:20:dd:6a:36:13:70:b7:f5: 73:cd:3c:fa:82:eb:3d:ad:77:14:05:84:eb:57:42: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:62:29:D1:08:B6:63:EA:C3:21:05:AF:AD:6A:DC:5C:4B:67:C4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.8/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9f:c0:9d:c3:a5:85:67:af:48:51:2a:db:86:6c:e3:3d:54: 90:79:49:8f:43:51:3d:7a:18:6d:e3:d6:74:49:9b:18:a3:a9: 54:f5:32:64:8b:01:f7:ad:dc:40:12:21:05:e0:e7:97:08:a0: d3:ae:c6:d2:39:7d:38:df:bf:6d:d8:67:7f:ca:75:d8:af:3f: 58:6a:01:e4:56:60:2d:61:e7:6a:0f:a0:e9:e5:c0:94:93:32: 70:eb:97:8b:04:2f:ba:5f:bc:16:24:03:0d:b4:94:f5:00:52: 06:2d:81:3e:bf:29:8b:61:6e:18:78:b3:ed:9a:65:3f:c4:be: c1:92:05:59:1e:67:c7:86:fc:ca:9c:5b:77:35:b0:8d:e8:51: 8a:eb:4c:33:25:e5:de:ee:f8:3e:2b:7e:f5:d8:75:2e:93:68: 85:9c:48:04:72:8d:03:13:39:bb:5d:b2:6b:87:36:87:7a:6b: 21:28:de:32:14:b5:57:55:a1:60:8f:14:ad:5a:22:44:83:bf: de:b5:8d:53:0d:ab:07:11:56:8a:e5:5b:ef:d9:22:d9:c0:5a: 47:fb:16:a2:f5:83:65:01:df:5c:48:ef:cd:c0:f7:88:73:76: 0f:f6:e5:e8:ff:61:b5:e8:55:92:cb:a8:18:a0:0e:f4:f4:0c: ad:9d:2e:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsEe/pBf76Dz/AGjKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGQzMjZiYjYtMjkwZi00MmRiLThhNjEtOGZjMjYxNzBiNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibJ7YRr+NiBHbqenzCU5y632x71j6VQH52ct GEoujybEHq6LHcC2yTnJZHzp08yF3p9Q5wJwZr99+Ds+v12Uv9ML2AcV71oFSXg1 XgU/P1DSJo2uzqsfQalZow/irU425CzCxEIVxD6ddjifK1qtM4Hq9/nlJyUhOx7p 19h+Uh6yh9PSqkYFV3wtw2R25EiO3GFpW1pyi7oztSAWmybk0GJMwuKmPrWh8O4g UEOaLLnTHrYuX7uT2OgVON3nHerJgU92BHpG3JaqYnYujdVsV7oY5pUNaFXshvTE zoqI9sGsT32RaaHsIN1qNhNwt/VzzTz6gus9rXcUBYTrV0ITiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJxiKdEItmPqwyEFr61q3FxLZ8TSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjn8Cdw6WFZ69IUSrbhmzjPVSQeUmPQ1E9ehht49Z0SZsYo6lU9TJk iwH3rdxAEiEF4OeXCKDTrsbSOX04379t2Gd/ynXYrz9YagHkVmAtYedqD6Dp5cCU kzJw65eLBC+6X7wWJAMNtJT1AFIGLYE+vymLYW4YeLPtmmU/xL7BkgVZHmfHhvzK nFt3NbCN6FGK60wzJeXe7vg+K3712HUuk2iFnEgEco0DEzm7XbJrhzaHemshKN4y FLVXVaFgjxStWiJEg7/etY1TDasHEVaK5Vvv2SLZwFpH+xai9YNlAd9cSO/NwPeI c3YP9uXo/2G16FWSy6gYoA709AytnS4a -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:33 2025 by rpki-client