$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa File: 50598dc8-c270-395c-891a-6dffce02191c.roa (raw, json) Hash identifier: agcJap4YHmbJM6u+mx15ZpMMNqdD865akFZcqzKbs+A= Subject key identifier: 6C:22:5F:AC:7C:C5:3C:34:16:2A:08:65:FC:29:06:D6:F4:14:E9:52 Certificate issuer: /CN=d0a540d7-50ef-458a-abc4-e11f9c1f88aa Certificate serial: 010D0C9F4328584B9177844CCBE406FE01FD5C80 Authority key identifier: E5:3F:4E:D1:F1:17:6B:1D:87:91:B4:A7:20:11:3F:94:88:54:41:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 54466 IP address blocks: 66.234.4.0/24 maxlen: 24 66.234.5.0/24 maxlen: 24 66.234.6.0/24 maxlen: 24 66.234.7.0/24 maxlen: 24 216.49.164.0/24 maxlen: 24 216.49.165.0/24 maxlen: 24 216.49.166.0/24 maxlen: 24 216.49.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:84:4c:cb:e4:06:fe:01:fd:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a540d7-50ef-458a-abc4-e11f9c1f88aa Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=89f861b5-0ffe-4b3b-bd49-2313e9b03ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:a0:99:c0:03:15:30:e9:26:0f:5a:52:cf: 86:04:25:8d:69:55:e3:89:1d:4c:ff:30:5c:7f:e6: 3c:b2:ce:1c:51:ac:dd:eb:fb:82:5b:53:de:43:b1: 8b:1f:cc:c3:f4:ea:bb:ec:4b:81:88:c6:7c:53:fd: aa:f0:19:27:cc:71:9c:d7:4d:9e:ed:3d:0b:da:e3: 40:47:73:8c:b8:29:b5:83:e7:24:d6:34:21:65:94: 6e:f1:1a:3a:16:d3:bf:47:88:45:e7:f8:da:48:92: 4c:59:24:5e:7f:15:a0:bc:dd:d3:91:5c:ad:ff:7e: be:b0:c7:79:14:15:27:cd:f2:a9:d5:94:bf:d0:f8: ba:52:6e:e4:c8:3e:33:62:2f:c2:e7:5e:a8:0e:f2: 61:da:56:71:66:f1:91:65:e9:7c:8b:98:c2:ff:8f: e9:ea:2d:a7:24:0f:c3:74:e5:14:fc:1f:04:a8:c7: b7:3f:5a:f0:ca:3c:80:fa:cc:b6:0d:92:f5:0c:da: b1:5c:47:4d:77:af:39:61:bb:df:ee:b7:08:fa:42: d0:79:0e:32:55:e9:0c:8a:92:4d:69:8a:e4:19:75: 3a:28:61:93:f6:ac:b4:21:56:13:6a:81:d3:ad:1e: f0:7c:d2:58:ce:95:0a:b7:25:db:f2:c2:b0:36:2a: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:22:5F:AC:7C:C5:3C:34:16:2A:08:65:FC:29:06:D6:F4:14:E9:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/50598dc8-c270-395c-891a-6dffce02191c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.crl X509v3 Authority Key Identifier: keyid:E5:3F:4E:D1:F1:17:6B:1D:87:91:B4:A7:20:11:3F:94:88:54:41:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d0a540d7-50ef-458a-abc4-e11f9c1f88aa.cer sbgp-ipAddrBlock: critical IPv4: 66.234.4.0/22 216.49.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e7:1e:fe:8f:21:91:a1:fa:53:b5:66:80:07:09:10:e0:4a: 93:f6:a2:e5:b6:04:ad:fc:f2:d8:13:c5:49:dd:a8:48:fc:89: 26:68:a4:ca:5a:d1:06:e7:4e:7d:5e:74:bd:58:f2:84:64:ac: 90:44:28:41:fc:82:71:f7:d2:af:ec:9e:8f:a0:8b:76:ab:48: b8:dd:19:7f:b1:f6:4b:14:76:f3:92:a5:2e:70:0c:a3:18:8a: a1:0c:23:5f:e7:79:9e:0a:18:cd:32:ea:d9:d8:87:d3:ac:00: b1:89:94:a2:8d:8c:b4:95:df:6c:52:3c:1b:7d:d4:e2:79:ea: c9:ff:5c:49:26:bd:57:88:bc:30:65:68:bc:7e:42:b0:db:4e: b5:7e:38:fa:8d:45:c5:31:3b:20:b5:3b:db:0f:1b:79:a0:b7: f8:6a:15:17:74:54:a9:0c:6f:f6:8c:93:f6:d4:70:78:f6:30: a3:50:5d:04:df:da:ca:e1:2b:8e:57:26:00:24:61:be:7b:27: 70:9f:26:d9:31:16:5d:3a:95:43:97:49:87:b2:cc:d3:86:7b: 4f:28:ad:37:28:58:72:c2:bf:73:b4:05:db:6c:4d:3c:22:f9: 64:b4:c4:f8:e4:e0:ac:62:90:06:af:2d:c5:fc:e1:09:7e:21: 2c:f3:86:b5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuRd4RMy+QG/gH9XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNTQwZDctNTBlZi00NThhLWFiYzQtZTExZjljMWY4 OGFhMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk ODlmODYxYjUtMGZmZS00YjNiLWJkNDktMjMxM2U5YjAzZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCmgmcADFTDpJg9aUs+GBCWNaVXjiR1M/zBc f+Y8ss4cUazd6/uCW1PeQ7GLH8zD9Oq77EuBiMZ8U/2q8BknzHGc102e7T0L2uNA R3OMuCm1g+ck1jQhZZRu8Ro6FtO/R4hF5/jaSJJMWSRefxWgvN3TkVyt/36+sMd5 FBUnzfKp1ZS/0Pi6Um7kyD4zYi/C516oDvJh2lZxZvGRZel8i5jC/4/p6i2nJA/D dOUU/B8EqMe3P1rwyjyA+sy2DZL1DNqxXEdNd685Ybvf7rcI+kLQeQ4yVekMipJN aYrkGXU6KGGT9qy0IVYTaoHTrR7wfNJYzpUKtyXb8sKwNir0NQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGwiX6x8xTw0FioIZfwpBtb0FOlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMGE1 NDBkNy01MGVmLTQ1OGEtYWJjNC1lMTFmOWMxZjg4YWEvNTA1OThkYzgtYzI3MC0z OTVjLTg5MWEtNmRmZmNlMDIxOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDBhNTQwZDctNTBlZi00NThhLWFi YzQtZTExZjljMWY4OGFhL2QwYTU0MGQ3LTUwZWYtNDU4YS1hYmM0LWUxMWY5YzFm ODhhYS5jcmwwHwYDVR0jBBgwFoAU5T9O0fEXax2HkbSnIBE/lIhUQdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMGE1NDBkNy01MGVmLTQ1OGEtYWJjNC1lMTFm OWMxZjg4YWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQuoEAwQC 2DGkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH/nHv6PIZGh+lO1ZoAHCRDgSpP2ouW2BK388tgTxUndqEj8 iSZopMpa0QbnTn1edL1Y8oRkrJBEKEH8gnH30q/sno+gi3arSLjdGX+x9ksUdvOS pS5wDKMYiqEMI1/neZ4KGM0y6tnYh9OsALGJlKKNjLSV32xSPBt91OJ56sn/XEkm vVeIvDBlaLx+QrDbTrV+OPqNRcUxOyC1O9sPG3mgt/hqFRd0VKkMb/aMk/bUcHj2 MKNQXQTf2srhK45XJgAkYb57J3CfJtkxFl06lUOXSYeyzNOGe08orTcoWHLCv3O0 BdtsTTwi+WS0xPjk4KxikAavLcX84Ql+ISzzhrU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:42 2025 by rpki-client