$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa File: bad120b8-8503-344a-8e33-655ad28b7df1.roa (raw, json) Hash identifier: RyCIPqh0tFQ7oRWimu36M9nT3LimX6F/N9b8K5noVf4= Subject key identifier: 5B:6B:0A:70:D4:DB:48:F3:D5:02:E7:1A:0A:B0:E2:C3:48:38:2A:DD Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B8EACF207FD409D250F58E200 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16696 IP address blocks: 66.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f2:07:fd:40:9d:25:0f:58:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=dd4aeae9-48ff-4f0c-9474-06bf0dd71394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:56:09:05:21:9b:30:fe:df:77:3d:79:78: c8:e5:58:15:a9:5b:0c:3f:51:c0:2b:e9:60:c8:b7: 82:26:5f:30:a0:1d:45:e3:d2:e6:75:a9:bb:1d:6d: 26:ed:ee:cf:79:c2:33:b2:e8:a4:e7:bc:d9:c6:97: 8b:e2:42:65:82:f0:55:0b:4b:03:d3:63:76:e5:b4: f8:12:f4:ca:52:31:b6:e6:73:69:f0:d5:32:6c:69: 78:02:72:ba:cd:66:c2:d4:06:36:76:37:03:c2:72: d5:dc:43:fc:33:a0:55:84:f0:65:77:b1:b4:70:72: 1e:9c:94:ab:40:32:ab:ac:f3:5a:71:1e:7e:88:e1: 5c:be:ed:60:6a:5c:07:30:0a:ce:ec:58:15:28:2c: a1:50:12:19:e1:bd:01:86:87:76:01:7b:ce:ca:4d: bd:f7:9c:41:d9:84:df:59:00:e0:4d:c1:35:bf:b3: a9:a5:4f:6a:33:36:be:9f:61:b3:24:09:f4:c2:72: c7:15:ee:6e:a6:1c:41:d8:3e:16:5f:e2:8c:e0:1f: 4b:1e:e6:1e:2d:d0:8d:72:ff:9e:91:98:90:d2:25: f8:6d:9f:9e:c1:50:33:d0:79:a9:cc:f3:23:25:03: 11:2f:cc:5b:db:00:dd:83:c8:f6:e5:1e:45:8e:12: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6B:0A:70:D4:DB:48:F3:D5:02:E7:1A:0A:B0:E2:C3:48:38:2A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 66.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ca:2d:65:92:a4:d6:6f:a0:58:a8:a5:70:69:85:df:8c:18: ba:62:16:1a:bd:41:ea:db:00:71:ee:3f:2d:4e:77:4b:d8:cf: b2:1e:e1:11:11:ad:3a:9d:79:56:ee:c0:17:fb:3c:73:ff:f2: ce:8c:ed:80:a9:f6:cc:6f:90:b3:61:88:3f:7b:11:8c:08:41: fc:e4:52:be:0e:f5:db:35:de:92:1e:71:63:37:81:47:b1:bc: 56:2d:31:54:e2:41:00:18:03:44:64:ea:11:cf:fe:bf:6e:93: 65:63:f9:ca:91:9d:57:b7:19:60:de:15:e5:30:b3:57:af:58: e9:50:b8:59:e7:ac:0e:67:a3:80:5f:ef:d8:bb:e9:75:45:74: 70:53:4c:7e:53:cc:cc:9d:92:a1:ed:9e:fd:80:13:54:1c:87: 0e:95:e9:11:3d:d1:d9:ec:95:f1:33:5d:5c:0d:fb:1b:98:65: 65:cf:2d:89:a0:a6:8d:72:77:0a:ed:91:15:aa:91:31:59:dd: 85:bd:57:8c:65:8c:38:c7:25:c6:dd:84:27:e8:d9:db:01:b1: c8:ea:54:fb:cb:e3:29:69:8e:42:15:d4:93:cb:25:5b:26:28: 19:18:67:ca:52:55:55:53:13:0a:84:91:b2:b0:27:b6:69:e7: cd:4c:27:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPIH/UCdJQ9Y4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGQ0YWVhZTktNDhmZi00ZjBjLTk0NzQtMDZiZjBkZDcxMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMJWCQUhmzD+33c9eXjI5VgVqVsMP1HAK+lg yLeCJl8woB1F49Lmdam7HW0m7e7PecIzsuik57zZxpeL4kJlgvBVC0sD02N25bT4 EvTKUjG25nNp8NUybGl4AnK6zWbC1AY2djcDwnLV3EP8M6BVhPBld7G0cHIenJSr QDKrrPNacR5+iOFcvu1galwHMArO7FgVKCyhUBIZ4b0Bhod2AXvOyk2995xB2YTf WQDgTcE1v7OppU9qMza+n2GzJAn0wnLHFe5uphxB2D4WX+KM4B9LHuYeLdCNcv+e kZiQ0iX4bZ+ewVAz0HmpzPMjJQMRL8xb2wDdg8j25R5FjhKgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtrCnDU20jz1QLnGgqw4sNIOCrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmFkMTIwYjgtODUwMy0z NDRhLThlMzMtNjU1YWQyOGI3ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3KLWWSpNZvoFiopXBphd+MGLpiFhq9QerbAHHuPy1Od0vYz7Ie4RER rTqdeVbuwBf7PHP/8s6M7YCp9sxvkLNhiD97EYwIQfzkUr4O9ds13pIecWM3gUex vFYtMVTiQQAYA0Rk6hHP/r9uk2Vj+cqRnVe3GWDeFeUws1evWOlQuFnnrA5no4Bf 79i76XVFdHBTTH5TzMydkqHtnv2AE1Qchw6V6RE90dnslfEzXVwN+xuYZWXPLYmg po1ydwrtkRWqkTFZ3YW9V4xljDjHJcbdhCfo2dsBscjqVPvL4ylpjkIV1JPLJVsm KBkYZ8pSVVVTEwqEkbKwJ7Zp581MJ5w= -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:39 2025 by rpki-client