$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa File: b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa (raw, json) Hash identifier: VFBB7AvAtUg4dLOweTXZ6MizArj1fYQpV8BiTFvN7do= Subject key identifier: 1C:AD:B1:5E:2E:B9:3D:2D:32:1E:10:ED:0A:77:66:5E:2A:95:17:8D Certificate issuer: /CN=785749fa-091c-4978-a918-3238e45d2a1c Certificate serial: 010D0C9F4328584B7DECB0BEB844A325F8C93080 Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 400686 IP address blocks: 64.146.166.0/24 maxlen: 24 66.119.196.0/24 maxlen: 24 66.119.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b0:be:b8:44:a3:25:f8:c9:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=5a0908b0-c768-496f-b123-98f0965fb37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:26:0d:37:c6:f4:cd:0f:76:22:d7:5f:59: 18:be:92:85:a9:55:b0:81:6f:44:cd:df:1c:16:f3: 67:17:f5:ac:3f:9d:ee:ef:b3:b2:24:a3:95:a5:82: ea:3f:41:76:16:ea:d5:ae:cb:7a:e1:b6:42:ac:7f: ce:34:b6:7e:c6:d4:48:e8:a8:d0:b4:ef:56:73:ea: a4:fa:d3:20:de:1a:38:b4:c9:fd:86:76:a0:99:17: 55:a9:b8:d8:c1:70:f2:f6:91:d7:f7:22:b2:44:04: b1:eb:6b:29:7c:25:76:f2:22:52:26:9e:01:f7:2a: 99:7a:ce:94:ed:f6:11:24:78:a7:d0:c2:9c:d6:d6: f6:73:0e:3e:5e:7c:cc:63:87:38:35:83:7a:6f:89: 82:34:c6:48:81:46:c0:39:e3:b2:f1:2a:79:f7:1b: 4e:d9:d7:91:e1:6c:19:b4:f3:8e:d4:6e:eb:b2:cd: 00:e6:44:b6:55:88:8f:8f:2b:17:79:76:43:d6:e8: 5b:86:eb:19:7f:58:b1:34:c5:0c:16:d3:ac:f2:e2: 35:fa:0b:b0:39:74:0b:e4:b8:d0:56:19:07:b1:81: 20:29:6f:b6:4f:39:e6:35:82:75:9d:fe:36:4f:6f: 86:60:b5:a6:16:f6:0d:26:26:d9:d6:64:a6:04:e2: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:B1:5E:2E:B9:3D:2D:32:1E:10:ED:0A:77:66:5E:2A:95:17:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl X509v3 Authority Key Identifier: keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer sbgp-ipAddrBlock: critical IPv4: 64.146.166.0/24 66.119.196.0/24 66.119.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f1:f9:89:2d:42:4a:0e:92:d0:15:25:d3:f2:24:ab:15:89: 7c:47:ad:2a:d2:bb:c1:38:f7:6d:1e:cb:5e:a2:74:d0:41:97: c7:f7:d4:e2:80:e8:3d:83:5e:82:55:1c:f7:8d:db:ef:f9:01: 6d:f3:28:89:50:53:5f:e7:d9:3f:d9:3e:24:29:8b:d6:c0:40: fc:e0:6b:75:ec:5e:dd:48:d8:d5:8c:5b:b6:31:f2:b0:3f:9b: a2:1e:01:16:cb:b8:0a:a0:49:6d:90:7b:0e:c1:29:11:4c:6d: a3:4b:34:40:f0:6a:d7:e1:f9:98:73:75:5d:24:09:5c:62:08: 5f:d9:75:53:10:59:64:6b:14:1a:58:ed:fd:b5:cc:07:9b:ec: e0:d9:32:7d:12:9c:c8:fc:99:9d:6c:a1:55:e7:cf:e2:48:fa: 4b:be:dc:7a:97:9d:9c:cd:04:7c:37:ac:6d:a1:76:e6:31:f7: e6:de:4e:1f:07:15:45:c6:c3:ac:fc:85:96:f3:90:27:99:00: 68:15:b7:aa:ca:f3:1e:67:52:ed:26:74:58:f2:3f:2e:9a:1a: b0:98:f1:9a:c5:92:a2:b5:46:cd:02:44:de:82:96:ab:ef:83: fb:f7:0c:d9:4c:e5:7a:82:d2:38:5d:b7:98:35:a8:19:0b:53: 6f:00:57:10 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEt97LC+uESjJfjJMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy YTFjMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NWEwOTA4YjAtYzc2OC00OTZmLWIxMjMtOThmMDk2NWZiMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc4mDTfG9M0PdiLXX1kYvpKFqVWwgW9Ezd8c FvNnF/WsP53u77OyJKOVpYLqP0F2FurVrst64bZCrH/ONLZ+xtRI6KjQtO9Wc+qk +tMg3ho4tMn9hnagmRdVqbjYwXDy9pHX9yKyRASx62spfCV28iJSJp4B9yqZes6U 7fYRJHin0MKc1tb2cw4+XnzMY4c4NYN6b4mCNMZIgUbAOeOy8Sp59xtO2deR4WwZ tPOO1G7rss0A5kS2VYiPjysXeXZD1uhbhusZf1ixNMUMFtOs8uI1+guwOXQL5LjQ VhkHsYEgKW+2TznmNYJ1nf42T2+GYLWmFvYNJibZ1mSmBOJLtwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBytsV4uuT0tMh4Q7Qp3Zl4qlReNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3 NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvYjY4NmNlOGMtMzJmNi0z Y2YzLWE3MjAtODhhODFlNWM5NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5 MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4 ZTQ1ZDJhMWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQJKmAwQA QnfEAwQCQnfQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAPx+YktQkoOktAVJdPyJKsViXxHrSrSu8E4920e y16idNBBl8f31OKA6D2DXoJVHPeN2+/5AW3zKIlQU1/n2T/ZPiQpi9bAQPzga3Xs Xt1I2NWMW7Yx8rA/m6IeARbLuAqgSW2Qew7BKRFMbaNLNEDwatfh+ZhzdV0kCVxi CF/ZdVMQWWRrFBpY7f21zAeb7ODZMn0SnMj8mZ1soVXnz+JI+ku+3HqXnZzNBHw3 rG2hduYx9+beTh8HFUXGw6z8hZbzkCeZAGgVt6rK8x5nUu0mdFjyPy6aGrCY8ZrF kqK1Rs0CRN6Clqvvg/v3DNlM5XqC0jhdt5g1qBkLU28AVxA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:23 2025 by rpki-client