$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa File: c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa (raw, json) Hash identifier: 9OcqvrAn6P6lFv9T42JqehoD2fGFRHY3A3nfQ4vdB2Q= Subject key identifier: D5:A8:CD:09:16:8F:34:D0:27:74:A0:B7:31:47:55:97:37:92:14:48 Certificate issuer: /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Certificate serial: 010D0C9F4328584B68FC9E4592CBAA1BBCF5A480 Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 36221 IP address blocks: 66.241.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9e:45:92:cb:aa:1b:bc:f5:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=f5d5d34f-0a59-4561-8ca6-f87a816cd82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:90:58:69:9d:79:92:c7:ac:d7:60:77:05: 6b:be:d8:b7:4d:2d:19:71:de:6b:83:20:26:f7:82: eb:9f:40:ab:bf:f4:1d:65:5b:e7:34:ea:ad:96:0a: 97:50:f1:d2:90:ef:24:8c:80:9d:df:f4:3e:fc:e5: 25:1a:5d:6e:1d:13:4c:47:d8:0e:d5:8f:02:42:9d: a1:c7:e4:b1:68:b3:0b:62:dc:1e:16:77:17:5e:76: ce:d1:88:1c:32:a0:e6:b6:c3:65:57:84:13:04:6a: de:99:14:9f:47:47:b4:bd:fc:f1:a0:13:9e:b8:95: 91:44:60:e2:dc:40:ff:2d:1d:51:90:67:fc:41:7e: 23:e4:2e:7b:23:64:0f:30:7d:e8:d7:b7:a8:66:b9: 3b:df:c0:06:f4:44:a5:dd:bb:22:6d:24:06:ef:b6: 18:a9:9c:55:d5:56:b9:1c:26:1f:8a:38:c8:4c:de: 7e:75:d5:ef:69:23:0f:ce:32:d1:6a:35:fa:ad:fb: a5:c9:13:42:0a:f8:de:44:b0:0b:90:36:3d:04:94: d3:39:f9:2b:bc:34:14:f2:16:8f:b8:47:bc:e6:12: e0:bd:7e:38:a9:b1:12:2d:58:5c:d7:41:d7:ae:d5: d4:db:a6:77:5f:87:1e:00:58:2f:72:66:2f:17:ec: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A8:CD:09:16:8F:34:D0:27:74:A0:B7:31:47:55:97:37:92:14:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl X509v3 Authority Key Identifier: keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer sbgp-ipAddrBlock: critical IPv4: 66.241.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3b:56:90:6e:aa:7b:83:1e:6a:0f:d6:2d:2b:9b:8e:80:0e: 45:8b:d7:81:07:38:c6:c5:7c:88:6c:c7:86:d9:f7:8b:5b:45: 96:07:db:ae:5a:26:ac:fb:39:87:04:42:fd:a2:0b:09:ce:dd: 50:4d:47:53:f8:47:be:94:f6:93:37:b3:31:3b:1b:9e:47:4b: 64:52:08:c3:93:c1:10:e8:6d:66:19:91:58:ed:e5:f9:74:87: df:38:06:c5:d3:fc:0c:aa:73:37:a2:c9:4c:73:86:68:02:5a: 72:63:a8:36:af:e0:30:40:b2:a7:d5:89:a0:70:32:b8:63:de: 33:da:b2:10:c6:09:c4:d2:16:0a:67:82:54:4e:1d:2e:07:bf: 55:83:80:42:63:59:fd:3d:09:74:eb:4d:bd:e7:7c:c1:88:be: d5:4d:eb:09:6d:70:d8:a2:ed:58:62:d1:5e:1c:25:c0:f1:40: 01:3c:0d:ea:54:c0:8d:bd:85:09:62:6f:48:22:0d:e9:d2:49: 4f:f2:f8:5f:9d:db:15:a3:84:e8:85:16:37:14:0e:3c:4d:95: f9:2f:b6:bd:33:7e:4b:eb:9c:ee:b9:bc:11:4a:cf:bd:23:35: 15:1f:17:ab:9d:2f:64:bd:60:9e:39:0a:32:2a:d9:f5:ce:16: c1:96:a1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J5FksuqG7z1pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJjOTIyZjUtZDJmZS00NGUzLTk1NDEtODRjNDZjN2Q4 MzQ4MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZjVkNWQzNGYtMGE1OS00NTYxLThjYTYtZjg3YTgxNmNkODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbaQWGmdeZLHrNdgdwVrvti3TS0Zcd5rgyAm 94Lrn0Crv/QdZVvnNOqtlgqXUPHSkO8kjICd3/Q+/OUlGl1uHRNMR9gO1Y8CQp2h x+SxaLMLYtweFncXXnbO0YgcMqDmtsNlV4QTBGremRSfR0e0vfzxoBOeuJWRRGDi 3ED/LR1RkGf8QX4j5C57I2QPMH3o17eoZrk738AG9ESl3bsibSQG77YYqZxV1Va5 HCYfijjITN5+ddXvaSMPzjLRajX6rfulyRNCCvjeRLALkDY9BJTTOfkrvDQU8haP uEe85hLgvX44qbESLVhc10HXrtXU26Z3X4ceAFgvcmYvF+xBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWozQkWjzTQJ3SgtzFHVZc3khRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5 MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0NmM3ZDgzNDgvYzRlMGYwNjUtYjUxOC0z NTBiLWEwZTUtZTk0ODY1ZTZjYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTJjOTIyZjUtZDJmZS00NGUzLTk1 NDEtODRjNDZjN2Q4MzQ4LzEyYzkyMmY1LWQyZmUtNDRlMy05NTQxLTg0YzQ2Yzdk ODM0OC5jcmwwHwYDVR0jBBgwFoAU/gzZERlPbkSIaK/Z4atNjEZ3QrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0 NmM3ZDgzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs7VpBuqnuDHmoP1i0rm46ADkWL14EHOMbFfIhsx4bZ94tbRZYH265a Jqz7OYcEQv2iCwnO3VBNR1P4R76U9pM3szE7G55HS2RSCMOTwRDobWYZkVjt5fl0 h984BsXT/AyqczeiyUxzhmgCWnJjqDav4DBAsqfViaBwMrhj3jPashDGCcTSFgpn glROHS4Hv1WDgEJjWf09CXTrTb3nfMGIvtVN6wltcNii7Vhi0V4cJcDxQAE8DepU wI29hQlib0giDenSSU/y+F+d2xWjhOiFFjcUDjxNlfkvtr0zfkvrnO65vBFKz70j NRUfF6udL2S9YJ45CjIq2fXOFsGWoQk= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:31 2025 by rpki-client