$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa File: d33868cc-aaa1-37b3-b510-97181288e62a.roa (raw, json) Hash identifier: KFKSURLw+aItlrUkenbwg0qRO1jrgQ4tAczGm3aKdCI= Subject key identifier: 69:1C:CF:F4:DE:71:61:CD:DC:DD:CD:38:2B:25:47:C9:56:ED:19:8B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584B5DD20B5552D7B8BFEAD12980 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 8100 IP address blocks: 66.232.101.0/24 maxlen: 24 66.232.102.0/24 maxlen: 24 66.232.103.0/24 maxlen: 24 66.232.109.0/24 maxlen: 24 66.232.113.0/24 maxlen: 24 66.232.116.0/24 maxlen: 24 66.232.117.0/24 maxlen: 24 66.232.120.0/24 maxlen: 24 66.232.121.0/24 maxlen: 24 66.232.122.0/24 maxlen: 24 66.232.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:0b:55:52:d7:b8:bf:ea:d1:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=2e8cb0c6-c3e4-42bd-b06f-da34d8244480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:b5:04:76:ad:50:8f:32:c5:0f:94:5b:53: c4:d0:29:81:24:7e:84:42:c5:2a:9b:10:f3:5d:68: 45:d9:e2:7c:b0:de:b3:b3:6f:ef:0f:bf:76:e1:c6: c7:0f:1f:b3:93:ba:af:58:d4:d8:6c:4b:83:71:be: c6:88:5f:df:45:e1:77:ca:3e:fd:1f:06:2a:b0:3d: 61:40:c3:1d:f2:3a:64:22:67:2f:2b:b8:6f:83:f0: b2:a0:a6:52:f2:df:20:3b:46:7c:94:eb:16:c9:51: 8f:66:d1:32:97:78:5c:d3:fc:64:a2:99:79:cf:ee: 8a:6b:ec:ca:52:93:81:af:54:3a:7e:4f:1b:64:8e: f2:7a:66:e4:32:8b:34:f9:7a:3e:ad:a2:55:b7:1f: f2:41:f1:4b:a1:df:1f:62:f2:11:9f:20:a9:32:0e: 23:b6:e8:5b:09:d3:7d:fe:2b:17:9a:c4:eb:9d:59: ec:62:52:eb:3f:96:ee:28:f1:fa:75:64:53:3e:59: db:d7:55:f9:7f:d0:ce:ad:73:04:a5:38:51:da:17: 64:34:55:bf:2f:1c:2c:37:40:20:40:a2:b6:61:39: c5:bf:c2:b6:c5:b2:c6:4d:a7:28:2e:33:d0:38:2b: 04:55:d9:85:70:6e:a7:8b:04:d4:da:72:c4:a7:ed: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1C:CF:F4:DE:71:61:CD:DC:DD:CD:38:2B:25:47:C9:56:ED:19:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.232.101.0-66.232.103.255 66.232.109.0/24 66.232.113.0/24 66.232.116.0/23 66.232.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:71:83:62:7c:ac:f7:e2:d8:fa:de:4b:3f:25:15:ca:d9:87: 97:09:9c:ce:bd:35:34:6b:5b:28:4c:70:fc:74:c5:af:e3:6d: 9c:a5:da:a9:f2:c9:4c:1d:8e:16:53:a0:84:ad:82:9f:f8:71: 9e:5c:16:b9:3e:dd:f0:da:d7:d9:f5:b7:bf:84:77:2f:d7:b7: 5a:1f:9a:10:2a:27:8c:ac:a4:44:96:eb:09:86:c7:d3:6b:f3: e4:6d:0d:e7:14:1d:3c:28:54:62:f6:57:e5:43:f7:b1:16:bc: c7:a4:18:38:6f:4b:e5:f2:e4:86:cc:eb:1c:cb:1f:ef:f3:6e: d4:cb:36:16:88:aa:b6:64:6a:e3:46:aa:4b:9e:74:b3:99:5c: 8f:b5:05:80:15:c4:1d:59:7f:c8:07:d2:e3:75:05:c0:d5:fc: a4:9d:26:63:5a:86:48:30:10:ea:ac:8f:f5:31:b6:53:39:a1: f9:da:04:18:fd:de:5e:4a:d7:56:e2:57:6f:fd:0d:99:c5:f9: c1:f2:76:b7:19:e4:1f:81:f6:3c:01:37:84:b3:f6:bb:36:3a: 48:ef:fb:71:98:d9:78:1f:1b:80:b6:e6:9c:65:b2:6d:de:5a: ee:37:e1:86:a7:6e:39:27:f9:28:5a:03:89:24:25:54:9e:0a: 1c:0a:3d:2f -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEtd0gtVUte4v+rRKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MmU4Y2IwYzYtYzNlNC00MmJkLWIwNmYtZGEzNGQ4MjQ0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZO1BHatUI8yxQ+UW1PE0CmBJH6EQsUqmxDz XWhF2eJ8sN6zs2/vD7924cbHDx+zk7qvWNTYbEuDcb7GiF/fReF3yj79HwYqsD1h QMMd8jpkImcvK7hvg/CyoKZS8t8gO0Z8lOsWyVGPZtEyl3hc0/xkopl5z+6Ka+zK UpOBr1Q6fk8bZI7yembkMos0+Xo+raJVtx/yQfFLod8fYvIRnyCpMg4jtuhbCdN9 /isXmsTrnVnsYlLrP5buKPH6dWRTPlnb11X5f9DOrXMEpThR2hdkNFW/LxwsN0Ag QKK2YTnFv8K2xbLGTacoLjPQOCsEVdmFcG6niwTU2nLEp+1d9QIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFGkcz/TecWHN3N3NOCslR8lW7RmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDMzODY4Y2MtYWFhMS0z N2IzLWI1MTAtOTcxODEyODhlNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABC6GUD BANC6GADBABC6G0DBABC6HEDBAFC6HQDBAJC6HgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg3GDYnys9+LY +t5LPyUVytmHlwmczr01NGtbKExw/HTFr+NtnKXaqfLJTB2OFlOghK2Cn/hxnlwW uT7d8NrX2fW3v4R3L9e3Wh+aEConjKykRJbrCYbH02vz5G0N5xQdPChUYvZX5UP3 sRa8x6QYOG9L5fLkhszrHMsf7/Nu1Ms2FoiqtmRq40aqS550s5lcj7UFgBXEHVl/ yAfS43UFwNX8pJ0mY1qGSDAQ6qyP9TG2Uzmh+doEGP3eXkrXVuJXb/0NmcX5wfJ2 txnkH4H2PAE3hLP2uzY6SO/7cZjZeB8bgLbmnGWybd5a7jfhhqduOSf5KFoDiSQl VJ4KHAo9Lw== -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:06 2025 by rpki-client