$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa File: 8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa (raw, json) Hash identifier: +wiTy/AjKWAOWEBrh2nNelsoK+hbjMzy0TcUnWWtnys= Subject key identifier: 81:21:25:23:92:80:E6:80:96:CA:A8:6B:09:97:0D:38:76:3E:37:84 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E71A6E19E83B18DE751940 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 66.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1a:6e:19:e8:3b:18:de:75:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=49c80da9-f6a5-4ef5-a079-4b0436f97eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:68:fc:95:b3:f8:9b:df:c7:23:4c:7c:ee: f1:9e:2b:23:94:76:ee:c0:3e:a2:f6:01:50:56:54: 34:c9:06:de:81:f0:f3:b6:07:4e:eb:f2:e9:2b:f1: 14:c2:3f:c8:0a:60:ba:fe:1d:e1:59:8f:ea:02:33: 76:d4:83:32:9a:50:68:34:bf:b0:24:15:b1:a0:3c: 4a:2a:91:bf:52:83:fd:58:01:bf:df:22:15:1d:b1: 1c:ef:39:41:ab:e8:46:d4:b7:7c:2b:17:fa:f2:ff: c1:bf:da:36:52:ec:ef:3a:37:f1:72:ff:ad:8c:21: 51:83:19:ea:b3:5e:0e:c9:4d:bb:09:a5:75:6c:ee: a6:a2:34:06:84:1a:de:4a:53:0c:de:d2:ce:ca:18: 26:63:90:4d:5f:3d:47:2c:d3:7e:e2:5d:e2:a6:9d: dd:04:95:aa:f8:2c:30:2e:06:bf:2a:68:22:ca:27: 7f:d2:28:03:5a:ee:9c:49:b6:3c:38:c3:03:a7:97: 09:f4:56:d5:34:2a:cf:ec:fb:bb:7b:7b:7f:ef:03: dc:89:c8:3b:16:1d:8b:9b:83:e0:ef:e9:8a:b0:c1: 2a:60:35:9e:03:12:7a:a5:1f:75:64:61:d9:1f:4f: 6e:5a:c6:07:3b:a6:6f:3b:dd:63:50:14:b5:4f:9f: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:21:25:23:92:80:E6:80:96:CA:A8:6B:09:97:0D:38:76:3E:37:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:db:73:05:cb:b6:c8:8c:d5:b7:dc:6d:97:53:a5:61:7a:cd: 17:1a:8c:bc:b4:56:23:a5:4e:cb:6c:ae:fd:20:1a:e9:e7:63: c5:cc:6e:34:97:ed:73:4c:ea:5c:8f:56:fe:d8:56:69:62:89: c3:e9:20:03:18:09:b6:3f:6b:f7:df:04:ac:d8:aa:d7:49:a0: f7:aa:8e:26:9f:3b:a4:ee:21:9b:48:50:9b:2f:28:f4:82:a7: 5d:81:a9:5d:01:ec:81:4d:3f:e0:3b:9c:87:bd:ec:6c:d8:50: f2:00:9c:db:9d:d6:39:18:a6:51:1d:07:f1:7d:11:00:c2:43: 4b:c7:ae:35:c1:64:17:66:63:a1:a2:ea:b9:52:62:51:8b:b2: 9e:f4:a3:74:a6:34:7a:3d:5e:43:67:2b:20:af:a6:35:65:07: c0:49:8e:4c:60:f6:46:ee:ce:97:f7:19:50:94:da:42:f3:8e: 0d:1f:4e:92:59:72:fa:7b:b6:f8:27:c3:49:98:58:10:42:94: d0:c5:89:4b:59:9d:35:f9:b5:60:82:4d:31:bb:ac:d8:66:d2: 70:d5:ff:5c:8e:f8:d2:ac:76:8c:a8:3c:47:20:85:4e:d7:2e: 04:ef:fc:b2:9c:d1:1e:98:dd:80:19:66:3d:61:e6:a8:ed:bf: 1f:ed:66:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xpuGeg7GN51GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NDljODBkYTktZjZhNS00ZWY1LWEwNzktNGIwNDM2Zjk3ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPho/JWz+JvfxyNMfO7xnisjlHbuwD6i9gFQ VlQ0yQbegfDztgdO6/LpK/EUwj/ICmC6/h3hWY/qAjN21IMymlBoNL+wJBWxoDxK KpG/UoP9WAG/3yIVHbEc7zlBq+hG1Ld8Kxf68v/Bv9o2UuzvOjfxcv+tjCFRgxnq s14OyU27CaV1bO6mojQGhBreSlMM3tLOyhgmY5BNXz1HLNN+4l3ipp3dBJWq+Cww Lga/Kmgiyid/0igDWu6cSbY8OMMDp5cJ9FbVNCrP7Pu7e3t/7wPcicg7Fh2Lm4Pg 7+mKsMEqYDWeAxJ6pR91ZGHZH09uWsYHO6ZvO91jUBS1T5+APQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEhJSOSgOaAlsqoawmXDTh2PjeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGRhMGIxNTMtNTYzYi0z YmYzLTk4ZTMtMTZmNWM0OGZjMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjbcwXLtsiM1bfcbZdTpWF6zRcajLy0ViOlTstsrv0gGunnY8XMbjSX 7XNM6lyPVv7YVmliicPpIAMYCbY/a/ffBKzYqtdJoPeqjiafO6TuIZtIUJsvKPSC p12BqV0B7IFNP+A7nIe97GzYUPIAnNud1jkYplEdB/F9EQDCQ0vHrjXBZBdmY6Gi 6rlSYlGLsp70o3SmNHo9XkNnKyCvpjVlB8BJjkxg9kbuzpf3GVCU2kLzjg0fTpJZ cvp7tvgnw0mYWBBClNDFiUtZnTX5tWCCTTG7rNhm0nDV/1yO+NKsdoyoPEcghU7X LgTv/LKc0R6Y3YAZZj1h5qjtvx/tZmE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:38 2025 by rpki-client