$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa File: ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa (raw, json) Hash identifier: Pu56L2WnXLgwrWUxpeTLAUJs/WHy5tzyxy49NJQgUXQ= Subject key identifier: BC:1A:7A:18:DE:B6:D2:81:B3:67:17:F9:50:A1:0B:6E:7C:D9:BA:68 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584B63673FFC552C11AAF3102700 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 394002 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3f:fc:55:2c:11:aa:f3:10:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=e2da67a6-5767-4ba2-bd58-616843ee98c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:22:15:3b:23:fc:86:d0:12:9a:18:6d:9c: b3:c9:3a:6d:41:ae:7c:d3:98:c4:3d:12:93:8b:63: 33:d4:04:0e:c9:fa:64:05:ba:c9:9e:23:c4:38:b8: 7a:8d:ee:66:b6:8b:aa:1c:e3:dc:7c:41:e4:0a:51: e7:d2:40:8d:34:a7:16:49:a8:fa:30:df:df:b4:a3: b8:e3:79:37:d8:dd:29:65:e0:1d:08:33:ad:e3:af: a6:5e:46:b3:39:f8:19:17:52:67:df:a0:fc:72:c2: 9e:b1:68:97:39:ea:2c:e3:3f:3c:96:6c:b6:58:a5: d6:d5:5e:5e:fc:cd:7d:60:77:36:fa:f2:a4:a9:8a: 5c:0a:f7:56:c8:0d:75:ca:f1:02:c6:aa:d6:34:8e: fa:b9:66:7b:21:e5:dc:31:ad:b6:4c:02:bc:87:b4: 28:5f:7f:ca:93:d6:f2:ee:5d:c8:48:63:8b:93:33: ef:5e:75:c2:06:92:42:bd:a6:fd:4c:26:6d:5f:34: f4:c0:37:f7:f1:7b:df:a6:a2:fc:93:5f:b0:c7:8e: dc:60:8d:b9:10:00:7e:cd:d8:ad:0d:42:ea:c7:99: 0e:b3:35:88:8b:7f:6d:55:a5:25:c1:93:45:e2:bd: e0:0a:ab:c8:ba:b8:89:15:1a:7f:bc:61:6e:31:e9: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1A:7A:18:DE:B6:D2:81:B3:67:17:F9:50:A1:0B:6E:7C:D9:BA:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6f:4a:02:fc:86:e2:16:10:2a:86:6f:33:b5:45:63:fa:00: 84:f3:c8:95:b8:99:b4:9b:75:02:ce:3f:14:31:63:17:d9:ee: 7b:f8:69:69:1f:09:3e:c8:cd:0e:64:61:ea:69:7b:58:30:22: 9d:16:0b:2f:de:43:bd:24:bf:96:7a:8a:a0:a6:e9:fc:20:b0: 54:29:e6:b0:f5:8b:f9:05:e5:86:12:cc:b2:12:94:63:c2:fa: ef:3c:e9:23:42:cf:65:b3:38:22:03:38:37:02:3b:e2:56:1a: dd:31:b4:11:cc:62:10:ed:39:17:d8:48:fb:33:6f:d9:02:95: f2:0b:89:b7:e9:a1:76:98:43:ab:a7:d1:42:ea:8d:44:7a:65: 6b:1c:6b:95:85:9b:fa:b2:85:b2:c0:80:7a:94:d0:76:4a:85: 39:bf:9e:b6:4f:b1:9f:ba:a8:68:8c:4e:39:7d:43:1c:4b:9a: 9f:76:57:a1:da:06:5e:58:53:84:26:3d:b7:bc:90:a7:b5:19: 57:b5:e6:d0:2b:bc:44:46:6d:c0:a6:9d:7e:03:2f:e1:0a:46: 58:2e:16:f6:12:74:af:c0:20:22:97:aa:1a:8e:a1:44:72:20: a7:bf:15:6e:fb:ba:40:9d:ed:3d:e3:f7:66:a7:09:e7:2a:16: be:46:b3:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz/8VSwRqvMQJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTJkYTY3YTYtNTc2Ny00YmEyLWJkNTgtNjE2ODQzZWU5OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAsiFTsj/IbQEpoYbZyzyTptQa5805jEPRKT i2Mz1AQOyfpkBbrJniPEOLh6je5mtouqHOPcfEHkClHn0kCNNKcWSaj6MN/ftKO4 43k32N0pZeAdCDOt46+mXkazOfgZF1Jn36D8csKesWiXOeos4z88lmy2WKXW1V5e /M19YHc2+vKkqYpcCvdWyA11yvECxqrWNI76uWZ7IeXcMa22TAK8h7QoX3/Kk9by 7l3ISGOLkzPvXnXCBpJCvab9TCZtXzT0wDf38XvfpqL8k1+wx47cYI25EAB+zdit DULqx5kOszWIi39tVaUlwZNF4r3gCqvIuriJFRp/vGFuMelw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwaehjettKBs2cX+VChC2582bpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2EyNzViNTAtMzM2YS0z YWIwLWEwZmEtMzQxMWVkNDhlZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVvSgL8huIWECqGbzO1RWP6AITzyJW4mbSbdQLOPxQxYxfZ7nv4aWkf CT7IzQ5kYeppe1gwIp0WCy/eQ70kv5Z6iqCm6fwgsFQp5rD1i/kF5YYSzLISlGPC +u886SNCz2WzOCIDODcCO+JWGt0xtBHMYhDtORfYSPszb9kClfILibfpoXaYQ6un 0ULqjUR6ZWsca5WFm/qyhbLAgHqU0HZKhTm/nrZPsZ+6qGiMTjl9QxxLmp92V6Ha Bl5YU4QmPbe8kKe1GVe15tArvERGbcCmnX4DL+EKRlguFvYSdK/AICKXqhqOoURy IKe/FW77ukCd7T3j92anCecqFr5Gs94= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:55 2025 by rpki-client