$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa File: df833a82-7a66-3fb2-86c2-e24767894bdc.roa (raw, json) Hash identifier: n3hWzOU8UG9QPURUpmv/Y1l46YOeb2ioY1hkC4MDo6k= Subject key identifier: 20:BC:A3:82:A5:35:EE:12:80:B0:F5:FF:4D:D0:41:6D:9B:14:C5:8F Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B8EACF1E65E2EDAA915DABD00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16696 IP address blocks: 66.255.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f1:e6:5e:2e:da:a9:15:da:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c9a6da77-7534-4860-be84-4f39d808546d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:80:b7:02:0f:2d:95:3f:ef:1c:63:15:1f:a5: dc:3f:72:22:c7:7e:ba:3a:63:44:d9:87:12:95:fc: 88:54:28:d3:02:69:7a:dc:8b:40:d3:c8:8b:d5:e3: 41:95:11:cd:fb:1d:e0:9b:64:de:e9:c8:d2:e3:83: 29:c5:02:6f:d8:dd:0c:b6:87:cc:d8:cb:7d:ff:14: 47:6f:b5:1a:03:5b:a6:35:73:a9:8a:e7:ba:d7:2b: b4:4d:ef:09:ee:07:98:5a:be:51:c5:94:14:93:a5: 82:8b:f7:31:69:55:9e:4d:11:5b:f7:ba:03:4d:eb: 48:f7:63:15:b0:41:1d:46:ea:ae:84:88:dc:ed:96: 9e:f5:5f:70:94:49:e7:fd:bb:6d:3f:df:c6:1f:8c: 94:d8:c6:67:85:99:58:39:93:af:52:54:13:a3:bc: 3f:d7:fc:db:6e:b5:09:99:ad:92:24:b9:78:ec:a2: d6:de:44:b6:1a:f3:9f:a7:57:e8:70:81:8b:ff:8d: 27:96:48:2f:1a:e0:cd:41:8f:75:ae:46:69:9c:28: 52:14:2b:8e:b9:57:2b:1f:af:97:62:52:72:df:52: e7:cd:95:e5:da:e1:ae:fa:e7:e9:16:92:74:a9:82: 44:58:5e:32:0a:93:18:1e:0f:1d:77:01:f0:3e:7b: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BC:A3:82:A5:35:EE:12:80:B0:F5:FF:4D:D0:41:6D:9B:14:C5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 66.255.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6f:66:da:10:2b:32:5d:59:34:83:ed:f3:6f:af:8a:1f:2e: 9d:26:b7:ff:89:56:b5:fd:f9:18:c6:f3:4c:fd:a3:e9:48:b1: 87:e1:44:6a:c7:4b:d2:9a:ae:ed:9f:25:1b:78:c9:ec:31:4a: 62:ef:fd:76:a7:bd:47:a8:e7:ad:f5:aa:c1:80:2e:fd:b5:de: 4d:a3:9b:2e:01:19:87:2b:47:a9:61:25:de:f0:06:2a:b1:7c: ab:b1:55:ac:2d:59:43:90:6e:5f:ff:0f:9c:2b:96:ed:be:8f: d0:d5:a9:dc:33:c7:84:09:95:a9:f4:08:e0:f6:61:f9:45:0f: d2:07:d7:39:ba:42:4a:bb:62:61:0f:7c:45:db:c4:36:85:e3: f7:de:84:1d:83:2a:79:bc:4a:6a:3f:df:d4:dd:c1:7b:47:01: 2d:58:dc:84:83:f3:4b:28:61:84:44:04:f2:4e:22:6f:1d:75: 3b:2b:2b:39:7a:e4:63:b0:49:63:06:f2:29:f1:1d:a8:e0:9a: 99:b0:c2:9e:93:06:bd:d4:08:c5:db:49:26:85:ce:ea:e9:66: dd:b8:0a:1d:7b:b8:b4:04:34:9b:b3:ed:7a:39:e4:ff:6f:55: 66:b5:b4:3b:bf:96:77:c8:76:60:37:9c:f5:bf:b9:0d:9d:ed: 7b:84:99:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPHmXi7aqRXavQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzlhNmRhNzctNzUzNC00ODYwLWJlODQtNGYzOWQ4MDg1NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioC3Ag8tlT/vHGMVH6XcP3Iix366OmNE2YcS lfyIVCjTAml63ItA08iL1eNBlRHN+x3gm2Te6cjS44MpxQJv2N0MtofM2Mt9/xRH b7UaA1umNXOpiue61yu0Te8J7geYWr5RxZQUk6WCi/cxaVWeTRFb97oDTetI92MV sEEdRuquhIjc7Zae9V9wlEnn/bttP9/GH4yU2MZnhZlYOZOvUlQTo7w/1/zbbrUJ ma2SJLl47KLW3kS2GvOfp1focIGL/40nlkgvGuDNQY91rkZpnChSFCuOuVcrH6+X YlJy31LnzZXl2uGu+ufpFpJ0qYJEWF4yCpMYHg8ddwHwPnsZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC8o4KlNe4SgLD1/03QQW2bFMWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MzNhODItN2E2Ni0z ZmIyLTg2YzItZTI0NzY3ODk0YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRvZtoQKzJdWTSD7fNvr4ofLp0mt/+JVrX9+RjG80z9o+lIsYfhRGrH S9Karu2fJRt4yewxSmLv/XanvUeo5631qsGALv213k2jmy4BGYcrR6lhJd7wBiqx fKuxVawtWUOQbl//D5wrlu2+j9DVqdwzx4QJlan0COD2YflFD9IH1zm6Qkq7YmEP fEXbxDaF4/fehB2DKnm8Smo/39TdwXtHAS1Y3ISD80soYYREBPJOIm8ddTsrKzl6 5GOwSWMG8inxHajgmpmwwp6TBr3UCMXbSSaFzurpZt24Ch17uLQENJuz7Xo55P9v VWa1tDu/lnfIdmA3nPW/uQ2d7XuEmU4= -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:38 2025 by rpki-client