$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa File: 5717c9fc-bf14-3da4-9371-4fc98a870156.roa (raw, json) Hash identifier: 4rtA+YAZ8lxWk3PaE9e6UN0VLxCOl0TgoNwVYDm0/eE= Subject key identifier: 46:B4:9C:7D:5A:86:74:92:36:3F:E8:09:FC:48:26:58:94:F2:F7:B2 Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584B2A2C37A97B0144488D9CF900 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 139648 IP address blocks: 66.118.0.0/22 maxlen: 22 66.118.0.0/24 maxlen: 24 66.118.1.0/24 maxlen: 24 66.118.2.0/24 maxlen: 24 66.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:37:a9:7b:01:44:48:8d:9c:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=c4c1f1a4-7119-4a0e-8b9f-a5294e7d858c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:42:49:19:02:d3:21:29:17:1d:94:38:50: b3:92:85:cf:8f:69:53:65:f7:ee:97:4e:3f:04:50: 7e:18:22:a7:c1:12:3d:54:da:b2:1b:a1:c6:9e:ec: 92:1a:6c:29:2f:ee:11:f6:ec:55:a6:46:bb:01:26: db:bf:bb:64:57:7f:3b:11:ac:bb:b4:d1:59:a8:de: 92:da:cb:17:7d:f4:c3:a8:60:b1:b2:e7:1b:98:cb: f0:59:0b:a2:82:de:77:67:2b:02:05:2f:df:ed:8a: b5:0d:4d:dc:b1:37:c8:b8:4d:2a:60:0b:ba:04:04: 80:e1:93:d4:76:40:11:dd:30:69:f3:16:9e:83:a8: d2:7b:77:8c:9d:3b:ac:a5:99:db:45:16:db:bd:6a: b2:88:66:ba:b9:a5:fb:93:18:7f:8d:38:df:d7:d6: ba:2a:27:08:50:b3:77:ed:9b:1d:3c:2b:fb:01:dc: bf:ec:11:c7:ef:a9:c7:44:09:a5:df:fb:ac:23:8d: 6c:c9:23:9f:69:d7:8a:b6:94:c8:9f:9b:28:89:c4: dc:95:d7:a0:67:80:f2:78:3b:e0:3c:af:8d:89:5c: 42:76:86:7d:ff:19:de:ed:ad:80:fe:52:60:de:f3: d0:c2:1e:86:0e:3a:48:f8:25:48:1c:b7:bf:47:72: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B4:9C:7D:5A:86:74:92:36:3F:E8:09:FC:48:26:58:94:F2:F7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ad:eb:2b:4f:54:dd:e3:37:22:c7:d6:99:7c:a6:54:6f:6a: d1:7a:4e:e8:71:89:d1:c8:88:62:6d:c4:6e:73:ac:47:f9:cb: 49:c5:ea:94:8f:f1:b0:15:35:2a:dd:a0:43:96:a7:51:f3:47: f1:e7:19:12:c0:9b:2a:25:cf:72:7e:23:de:57:44:f5:0d:12: b6:08:d7:46:2f:cd:c7:0f:41:e7:ce:80:6c:da:83:d1:6d:a8: 0f:1f:42:a7:18:6f:74:57:0e:4d:01:f6:68:1e:fb:66:1e:c0: 75:1d:91:14:15:f4:a5:c4:0c:ea:95:38:d5:d1:ae:cb:6e:f3: 79:2d:96:57:df:4f:da:09:ad:93:43:9c:40:fa:03:a6:a3:53: 56:57:cc:3e:82:f0:e8:6d:59:29:2d:79:f1:70:a5:bd:5b:dd: fd:62:43:65:82:eb:6b:5b:8c:57:0c:6e:7e:05:0f:e9:9d:ca: ec:fb:62:f5:69:b0:5f:36:f7:ad:a1:b2:58:d8:df:aa:e5:14: 3a:49:c4:4b:63:26:03:5c:23:2e:1b:bf:dd:f7:cc:f8:c9:6b: f8:3b:3f:53:17:e5:d4:73:cb:ed:52:4e:c8:30:9a:39:94:79: 67:40:ad:df:36:24:a8:54:7f:6c:f2:4e:dc:00:4b:22:98:76: f1:2f:23:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDepewFESI2c+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YzRjMWYxYTQtNzExOS00YTBlLThiOWYtYTUyOTRlN2Q4NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnlCSRkC0yEpFx2UOFCzkoXPj2lTZfful04/ BFB+GCKnwRI9VNqyG6HGnuySGmwpL+4R9uxVpka7ASbbv7tkV387Eay7tNFZqN6S 2ssXffTDqGCxsucbmMvwWQuigt53ZysCBS/f7Yq1DU3csTfIuE0qYAu6BASA4ZPU dkAR3TBp8xaeg6jSe3eMnTuspZnbRRbbvWqyiGa6uaX7kxh/jTjf19a6KicIULN3 7ZsdPCv7Ady/7BHH76nHRAml3/usI41sySOfadeKtpTIn5soicTcldegZ4DyeDvg PK+NiVxCdoZ9/xne7a2A/lJg3vPQwh6GDjpI+CVIHLe/R3LQvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa0nH1ahnSSNj/oCfxIJliU8veyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvNTcxN2M5ZmMtYmYxNC0z ZGE0LTkzNzEtNGZjOThhODcwMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGt6ytPVN3jNyLH1pl8plRvatF6TuhxidHIiGJtxG5zrEf5y0nF6pSP 8bAVNSrdoEOWp1HzR/HnGRLAmyolz3J+I95XRPUNErYI10YvzccPQefOgGzag9Ft qA8fQqcYb3RXDk0B9mge+2YewHUdkRQV9KXEDOqVONXRrstu83ktllffT9oJrZND nED6A6ajU1ZXzD6C8OhtWSktefFwpb1b3f1iQ2WC62tbjFcMbn4FD+mdyuz7YvVp sF82962hsljY36rlFDpJxEtjJgNcIy4bv933zPjJa/g7P1MX5dRzy+1STsgwmjmU eWdArd82JKhUf2zyTtwASyKYdvEvIyg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:15 2025 by rpki-client