$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa File: cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa (raw, json) Hash identifier: LIZi7lLKVnxBvzAyb7SipRgCvgXxvjArSMmCk860Ed4= Subject key identifier: D0:35:49:45:BB:F4:6D:E7:D9:F0:7B:58:A5:10:E6:C9:87:28:49:8D Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E716138594EBBF61EF8F20 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 66.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:16:13:85:94:eb:bf:61:ef:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=1c5cbe92-fe1c-499e-8a27-ee5a2974ad2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:98:2a:99:51:3a:18:22:49:5d:8b:b4:20: 41:1d:18:2c:40:e2:32:2c:26:bc:8d:87:21:5c:18: 27:82:66:5c:9c:5f:91:ef:89:b6:b6:58:93:a4:62: 2a:b2:f4:a2:bb:9f:31:76:3d:32:1a:87:71:72:d3: 54:0f:e2:86:08:7d:5a:24:b0:48:33:dc:be:3c:0b: 55:b0:93:c4:b7:e5:85:e2:82:bc:58:47:d4:d5:9e: 18:50:71:b3:ab:98:77:ee:cd:bb:0d:b3:0b:9e:67: f3:76:7c:7f:51:15:6e:b4:a9:2b:5c:a7:c8:ba:a8: ca:91:4e:4c:f8:0f:f7:1d:ab:64:7e:ae:d1:51:ce: 56:fe:d4:7b:e2:22:1d:f5:23:22:43:82:52:4c:ce: 49:44:cb:cf:3e:3e:04:a9:f9:f4:76:db:8f:c0:98: 51:dc:76:0f:d0:71:34:a6:8f:ef:61:35:1e:9d:28: 0c:cf:bf:65:d6:e3:81:9c:76:d6:03:8b:30:f4:3b: 1d:71:54:ab:95:e6:86:9e:bb:39:fd:ac:14:41:ef: e6:a6:27:72:78:49:84:a5:6c:ec:0e:ee:35:2c:12: 22:db:62:b4:e7:a0:53:cb:b5:52:d7:8e:d2:b8:c5: d4:ff:34:be:09:00:0a:41:5f:6a:c4:5b:9d:ea:9e: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:49:45:BB:F4:6D:E7:D9:F0:7B:58:A5:10:E6:C9:87:28:49:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:07:78:c4:61:99:4d:d8:38:48:d1:0c:8f:8e:21:17:56: 2a:58:2c:9b:10:9d:60:d2:7c:10:25:07:72:c4:8b:9e:3f:06: c8:34:60:e7:13:d0:77:8c:d4:96:21:d6:b6:32:45:7d:8a:6a: 18:2c:d8:7d:41:3e:a3:60:90:82:3e:e2:8f:1d:be:d6:f7:d4: 82:d4:ac:c9:df:73:d5:c7:f2:05:7b:29:a0:77:41:76:62:2e: 51:87:40:a8:6f:85:85:4d:9b:5d:d8:24:14:39:aa:e9:f3:28: 44:ff:45:54:72:3b:6a:a3:41:ac:65:96:0d:88:b8:49:ab:6f: 6b:06:17:35:18:58:63:62:1a:10:45:88:6d:e9:44:05:79:77: e6:d9:1b:0c:8b:f8:76:e5:d0:b0:44:59:e6:42:b9:c5:09:7c: b5:5c:8f:2e:a6:a6:87:2e:de:56:00:58:67:d8:b6:fd:f8:50: 39:b1:f9:6a:21:3c:f3:5a:7e:2e:c7:fc:41:7a:f2:cb:e4:50: 5c:2d:2d:88:af:aa:fd:a9:8d:1f:56:da:c7:56:63:99:64:36: 46:83:fe:ef:af:19:e4:f9:e1:5d:a8:a5:21:fd:67:72:61:cd: 16:f9:7b:f1:30:99:80:10:72:83:2a:aa:df:75:d1:9d:55:00: 65:f6:cf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xYThZTrv2HvjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MWM1Y2JlOTItZmUxYy00OTllLThhMjctZWU1YTI5NzRhZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzmYKplROhgiSV2LtCBBHRgsQOIyLCa8jYch XBgngmZcnF+R74m2tliTpGIqsvSiu58xdj0yGodxctNUD+KGCH1aJLBIM9y+PAtV sJPEt+WF4oK8WEfU1Z4YUHGzq5h37s27DbMLnmfzdnx/URVutKkrXKfIuqjKkU5M +A/3Hatkfq7RUc5W/tR74iId9SMiQ4JSTM5JRMvPPj4Eqfn0dtuPwJhR3HYP0HE0 po/vYTUenSgMz79l1uOBnHbWA4sw9DsdcVSrleaGnrs5/awUQe/mpidyeEmEpWzs Du41LBIi22K056BTy7VS147SuMXU/zS+CQAKQV9qxFud6p6BkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA1SUW79G3n2fB7WKUQ5smHKEmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvY2ZiMmNhMjctNWFjZC0z MTBmLWI3ZGQtNzViODQyMjI0ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRCB3jEYZlN2DhI0QyPjiEXVipYLJsQnWDSfBAlB3LEi54/Bsg0YOcT 0HeM1JYh1rYyRX2Kahgs2H1BPqNgkII+4o8dvtb31ILUrMnfc9XH8gV7KaB3QXZi LlGHQKhvhYVNm13YJBQ5qunzKET/RVRyO2qjQaxllg2IuEmrb2sGFzUYWGNiGhBF iG3pRAV5d+bZGwyL+Hbl0LBEWeZCucUJfLVcjy6mpocu3lYAWGfYtv34UDmx+Woh PPNafi7H/EF68svkUFwtLYivqv2pjR9W2sdWY5lkNkaD/u+vGeT54V2opSH9Z3Jh zRb5e/EwmYAQcoMqqt910Z1VAGX2z6M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:06 2025 by rpki-client