$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa File: 209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa (raw, json) Hash identifier: /1KrsP1ih0ZEqZ9pJX9Nxh8sRj8/MqvlhswAgvNK8Cc= Subject key identifier: 17:89:83:D8:5D:C9:88:BB:A0:62:A6:78:36:C6:25:06:20:3B:5C:6A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C92255B1A7556875D3D40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:92:25:5b:1a:75:56:87:5d:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=addf7501-fe4f-4693-9041-150dabd61f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:02:6a:f1:38:97:a4:f5:e8:a9:b8:63:7e: 62:72:14:ab:8b:d6:65:da:71:6f:5b:39:f1:07:4b: 84:6e:73:cf:7b:f0:2f:b9:70:a1:45:db:eb:8d:9b: a0:04:5a:25:2f:e8:31:39:73:3f:c7:69:5f:c6:58: 4d:76:be:05:c1:0c:b3:2c:38:81:0e:c4:ad:7e:cf: 37:d3:e2:39:6b:3e:be:2b:13:5f:53:f7:bd:3a:b8: 6d:51:3e:99:38:d2:c3:1b:a6:61:5b:91:28:9e:f1: 3d:7c:2a:01:c9:1c:85:f9:28:26:8f:06:d3:bf:36: aa:8f:42:df:41:18:01:2b:cb:b1:c8:9d:52:04:9c: 64:a8:51:21:4c:77:92:36:92:8a:ae:47:a2:cd:37: 30:f7:b1:07:07:0e:03:67:cc:f2:2b:1f:bc:e8:24: e8:87:1d:32:73:71:3f:bd:41:e0:de:26:7c:b1:57: 17:47:1d:f0:45:b4:d2:53:2d:92:c2:f6:c4:45:0d: 4a:1a:ee:9a:61:5d:6f:9b:a0:73:42:c4:d6:cb:12: c6:e0:ff:27:7a:57:06:e2:27:38:0f:99:14:e8:74: 64:95:73:62:24:62:a4:3d:9a:a1:ee:10:ab:42:2a: 15:e2:44:27:32:32:e4:77:5a:69:02:46:7b:1a:b3: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:83:D8:5D:C9:88:BB:A0:62:A6:78:36:C6:25:06:20:3B:5C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b8:56:48:9f:dd:fc:73:fd:14:9f:42:de:5d:fd:d0:a7:28: fa:3b:cc:7b:5a:ce:9f:6b:66:07:8e:03:bf:be:70:18:08:06: df:bb:cd:0a:fb:4b:d1:e7:18:d9:a8:70:fe:ac:88:4f:f9:d3: cb:a5:95:cc:4a:ca:19:74:b1:14:b6:04:b9:d4:40:4b:67:35: bd:fe:09:71:1d:85:18:85:71:1b:71:87:a7:a8:7c:d2:34:61: bd:13:2f:d5:16:b9:d1:59:24:5a:70:55:2b:b1:91:28:61:fd: 56:f4:49:56:82:85:9e:91:39:11:1f:d7:26:b4:01:d0:21:4e: 33:45:c2:37:61:32:b5:02:60:f9:80:8d:13:41:30:06:b1:44: 56:84:9d:9b:29:0d:ae:b8:72:8c:f0:49:dd:53:11:e5:4e:90: 13:a3:f2:d3:57:10:54:ab:96:b1:ff:e8:0a:da:50:53:bf:6c: 81:bc:cb:fe:f0:98:25:30:11:8d:86:67:8f:35:c0:e7:6a:3c: 88:20:ca:c7:8c:9d:7a:d2:1d:c4:f5:e2:de:04:02:5c:98:ae: ac:90:fe:74:10:d5:19:a1:c4:0b:d9:f3:b7:ab:51:f1:00:e8: 59:71:7c:11:3e:58:a8:c8:3c:c3:54:a1:1d:71:b3:79:43:7b: 4b:fd:3e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJIlWxp1VoddPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YWRkZjc1MDEtZmU0Zi00NjkzLTkwNDEtMTUwZGFiZDYxZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eYCavE4l6T16Km4Y35ichSri9Zl2nFvWznx B0uEbnPPe/AvuXChRdvrjZugBFolL+gxOXM/x2lfxlhNdr4FwQyzLDiBDsStfs83 0+I5az6+KxNfU/e9OrhtUT6ZONLDG6ZhW5EonvE9fCoByRyF+SgmjwbTvzaqj0Lf QRgBK8uxyJ1SBJxkqFEhTHeSNpKKrkeizTcw97EHBw4DZ8zyKx+86CTohx0yc3E/ vUHg3iZ8sVcXRx3wRbTSUy2SwvbERQ1KGu6aYV1vm6BzQsTWyxLG4P8nelcG4ic4 D5kU6HRklXNiJGKkPZqh7hCrQioV4kQnMjLkd1ppAkZ7GrNzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeJg9hdyYi7oGKmeDbGJQYgO1xqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjA5ZTUyYTktN2FkMC0z ZDNkLThlYTktOWVjOTZjNjkwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH24Vkif3fxz/RSfQt5d/dCnKPo7zHtazp9rZgeOA7++cBgIBt+7zQr7 S9HnGNmocP6siE/508ullcxKyhl0sRS2BLnUQEtnNb3+CXEdhRiFcRtxh6eofNI0 Yb0TL9UWudFZJFpwVSuxkShh/Vb0SVaChZ6ROREf1ya0AdAhTjNFwjdhMrUCYPmA jRNBMAaxRFaEnZspDa64cozwSd1TEeVOkBOj8tNXEFSrlrH/6AraUFO/bIG8y/7w mCUwEY2GZ481wOdqPIggyseMnXrSHcT14t4EAlyYrqyQ/nQQ1RmhxAvZ87erUfEA 6FlxfBE+WKjIPMNUoR1xs3lDe0v9Ph0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:10 2025 by rpki-client