$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa File: cfa20e25-bed2-3567-961a-5bbdbe881853.roa (raw, json) Hash identifier: J7RjJb3JDB7zH78Poz3zNSp5ZzSkROtFDTa5O/lxgjQ= Subject key identifier: 82:E6:3F:5B:02:4B:9D:11:98:D5:7A:83:F8:05:34:F7:38:A3:C8:02 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584B6D2C92DD5E076C5A1AE40D00 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 26703 IP address blocks: 66.102.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:92:dd:5e:07:6c:5a:1a:e4:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=dafe3401-074d-4156-b5a9-55648f286b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:16:d9:b5:ad:be:4e:fe:09:d7:74:fc:eb:0e: 87:e1:09:da:c4:4d:8f:0d:a0:9d:c9:e0:87:3a:d6: 88:75:4a:57:cc:a6:01:8f:ad:05:be:0a:a0:a7:d3: 5e:f0:84:29:0c:c6:fb:36:0e:65:af:6b:14:cb:b9: 8b:f6:0e:76:e9:e1:fe:c2:f1:61:94:81:f8:8a:41: 31:c6:0d:8f:56:4d:d0:86:b4:f2:ac:be:14:bb:c5: 3f:00:55:80:81:5f:42:8a:c2:95:f5:33:96:fd:32: ff:a8:65:2b:27:94:30:88:7e:90:9a:31:58:4a:1a: 7b:11:46:c8:1e:55:9d:b1:aa:68:c9:0a:28:3f:a0: 56:3d:9d:02:81:26:48:b5:bf:45:8f:d2:39:33:34: 10:72:55:26:1d:ef:ee:32:98:84:40:7b:da:d8:71: 68:f0:9a:e4:8b:01:04:2a:65:c4:ce:87:ab:f8:ef: 29:d1:2f:28:b6:89:bf:81:c1:94:e1:34:1b:6f:26: 94:7e:fa:01:2a:a5:40:d6:27:0b:27:a4:a1:56:15: 4f:1a:67:df:3d:93:a6:5a:fc:d9:6e:c4:2c:03:f6: 9e:06:93:f8:fd:08:74:5b:1f:27:62:79:6e:c2:b3: b1:fd:2c:a9:19:dc:ce:1b:ef:b6:48:11:ab:59:85: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E6:3F:5B:02:4B:9D:11:98:D5:7A:83:F8:05:34:F7:38:A3:C8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a4:63:ba:8d:ad:cf:34:67:f3:69:4f:60:71:d1:7f:13:cd: f5:10:c3:75:08:4f:e9:e0:d8:d4:89:fb:73:be:22:88:34:69: e2:e0:cb:72:56:1b:48:86:6b:9e:57:50:d6:6c:61:76:bf:23: 62:c8:02:60:bb:12:25:31:56:fe:67:0d:42:12:21:24:9b:b7: 3a:98:a9:83:48:a5:1b:33:cf:75:b0:7b:c6:4f:87:53:82:8b: f3:83:65:58:d8:e4:92:5e:fc:f2:9b:30:0c:51:25:0b:5e:c2: 49:80:57:99:a8:35:d6:25:44:50:39:3c:86:6e:f2:b7:96:9a: 6d:6e:9c:ef:73:c5:40:9f:22:82:44:b9:e1:c0:3e:17:95:73: fd:cd:0e:58:fd:f5:76:33:9a:21:68:a0:b8:ed:6a:a8:db:b7: 43:c6:1c:b2:c9:ac:78:11:07:ef:9f:59:3c:42:d8:4b:ae:9a: 65:61:b0:94:b0:f6:a1:81:27:9e:3c:7c:5f:ad:5e:cf:1d:77: c5:53:34:42:d6:ab:8c:a5:d6:09:0b:c6:d6:d3:e2:34:e4:42: a7:0e:40:0c:0f:29:77:c6:22:87:cb:ab:f1:83:51:15:86:21: 58:15:bd:cf:63:12:f6:75:3c:00:be:c4:28:00:7b:ae:29:c2: d8:e5:d8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJLdXgdsWhrkDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGFmZTM0MDEtMDc0ZC00MTU2LWI1YTktNTU2NDhmMjg2YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxbZta2+Tv4J13T86w6H4QnaxE2PDaCdyeCH OtaIdUpXzKYBj60Fvgqgp9Ne8IQpDMb7Ng5lr2sUy7mL9g526eH+wvFhlIH4ikEx xg2PVk3QhrTyrL4Uu8U/AFWAgV9CisKV9TOW/TL/qGUrJ5QwiH6QmjFYShp7EUbI HlWdsapoyQooP6BWPZ0CgSZItb9Fj9I5MzQQclUmHe/uMpiEQHva2HFo8JrkiwEE KmXEzoer+O8p0S8otom/gcGU4TQbbyaUfvoBKqVA1icLJ6ShVhVPGmffPZOmWvzZ bsQsA/aeBpP4/Qh0Wx8nYnluwrOx/SypGdzOG++2SBGrWYXpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILmP1sCS50RmNV6g/gFNPc4o8gCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvY2ZhMjBlMjUtYmVkMi0z NTY3LTk2MWEtNWJiZGJlODgxODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqkY7qNrc80Z/NpT2Bx0X8TzfUQw3UIT+ng2NSJ+3O+Iog0aeLgy3JW G0iGa55XUNZsYXa/I2LIAmC7EiUxVv5nDUISISSbtzqYqYNIpRszz3Wwe8ZPh1OC i/ODZVjY5JJe/PKbMAxRJQtewkmAV5moNdYlRFA5PIZu8reWmm1unO9zxUCfIoJE ueHAPheVc/3NDlj99XYzmiFooLjtaqjbt0PGHLLJrHgRB++fWTxC2EuummVhsJSw 9qGBJ548fF+tXs8dd8VTNELWq4yl1gkLxtbT4jTkQqcOQAwPKXfGIofLq/GDURWG IVgVvc9jEvZ1PAC+xCgAe64pwtjl2Gw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:08 2025 by rpki-client