$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa File: f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (raw, json) Hash identifier: JWqH0ahLJ1AdBrLUYOdwV1OUKVU7lPSgswh76dC216A= Subject key identifier: 10:18:93:B9:7F:36:90:2A:DC:21:64:15:07:E2:2E:EB:B5:B2:8B:C3 Certificate issuer: /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Certificate serial: 010D0C9F4328584B3F1C625EF75DEC49DA16D000 Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 22611 IP address blocks: 66.33.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:62:5e:f7:5d:ec:49:da:16:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=cf3b837f-4474-4eea-9a03-09e54f1aaefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:0a:ed:87:79:e9:86:46:bb:e6:05:12:82: 8c:70:56:1a:ce:2b:63:c4:a7:5c:3d:2e:90:0b:a7: 9f:5e:54:44:ab:eb:a9:3c:5d:a3:34:75:ae:5e:5f: e2:2f:63:11:6e:df:d1:b8:48:58:0a:85:36:4a:59: 1b:bd:80:f8:b3:13:1a:e7:e3:c3:1e:3d:a4:1e:62: 13:30:fd:19:19:34:c8:ca:01:ce:17:bf:17:8d:81: 4e:70:c2:26:ff:54:a7:d2:67:5a:38:e2:30:7a:a6: 5d:b7:83:07:79:32:9a:b4:4c:d8:0a:96:9f:c0:4e: 16:ac:c1:79:de:11:be:f3:a2:88:ad:af:b7:dc:bf: 36:5d:5f:0f:bf:74:8e:14:fe:35:96:dc:5e:44:19: 2a:03:36:80:be:b6:31:86:f2:22:12:d1:97:b1:91: b3:b7:90:80:89:c1:47:8c:ab:95:42:4e:f4:93:4f: 7a:12:f2:78:c7:70:a6:56:d1:8d:9f:04:38:53:60: 03:20:27:bd:a9:48:74:d2:9b:03:a2:06:f3:82:3d: 6e:50:d7:80:c7:58:f5:85:38:a9:73:89:2f:f8:64: 2e:c0:64:da:20:a3:ab:e0:a5:0d:39:87:7e:ef:28: d7:65:88:d5:88:2f:5a:81:8c:c3:5d:ab:7b:83:c7: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:18:93:B9:7F:36:90:2A:DC:21:64:15:07:E2:2E:EB:B5:B2:8B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl X509v3 Authority Key Identifier: keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer sbgp-ipAddrBlock: critical IPv4: 66.33.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:13:cd:32:25:a4:85:34:2a:5e:33:da:88:17:ce:11:12:25: 60:25:c0:98:bd:30:93:74:fb:1a:f2:b7:b5:4e:e9:e1:34:f6: c5:f6:1f:13:e5:a7:dc:26:70:f6:98:32:24:35:03:89:5b:40: 2a:ad:40:96:2c:07:b5:8a:6f:38:6b:f9:ef:1a:54:db:c1:6f: fd:fe:45:ec:9a:02:32:7e:92:d7:39:95:56:ff:25:1e:57:ce: 65:13:16:b4:9f:05:b3:01:4d:c6:a3:2f:5a:9e:ab:85:d1:e6: d7:01:18:7f:46:b5:06:36:0a:fb:c0:4b:d0:49:39:7a:14:bc: bb:ce:1c:a1:28:35:42:e7:f4:8d:7a:7f:a0:94:4b:85:df:ac: f1:4b:93:62:f6:d2:38:c3:cf:69:ad:b9:bb:ac:2c:92:10:4b: e9:a8:53:04:50:51:ff:c1:73:a3:3c:d1:d0:47:0f:ee:43:18: ee:cd:7f:df:fc:57:a9:0d:b2:c0:38:29:e3:4d:65:2d:b3:f5: cc:2d:bf:1e:57:91:85:88:c6:91:43:59:40:fc:96:8a:e7:17: 5b:37:6c:8d:b3:ff:74:98:78:7d:0d:3b:ab:de:a5:4c:bf:97: bc:8e:19:65:35:9d:98:c3:fc:9c:e2:f0:87:a0:f1:ae:8d:2b: 88:89:0b:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGJe913sSdoW0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0 YmUwMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk Y2YzYjgzN2YtNDQ3NC00ZWVhLTlhMDMtMDllNTRmMWFhZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSQK7Yd56YZGu+YFEoKMcFYazitjxKdcPS6Q C6efXlREq+upPF2jNHWuXl/iL2MRbt/RuEhYCoU2SlkbvYD4sxMa5+PDHj2kHmIT MP0ZGTTIygHOF78XjYFOcMIm/1Sn0mdaOOIweqZdt4MHeTKatEzYCpafwE4WrMF5 3hG+86KIra+33L82XV8Pv3SOFP41ltxeRBkqAzaAvrYxhvIiEtGXsZGzt5CAicFH jKuVQk70k096EvJ4x3CmVtGNnwQ4U2ADICe9qUh00psDogbzgj1uUNeAx1j1hTip c4kv+GQuwGTaIKOr4KUNOYd+7yjXZYjViC9agYzDXat7g8cWrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAYk7l/NpAq3CFkFQfiLuu1sovDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvZjBlMDgyMWMtYmJmMy0z NGViLTgyNjYtNTU1ZjQ2YzljOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl ZTZkYzRiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKETzTIlpIU0Kl4z2ogXzhESJWAlwJi9MJN0+xryt7VO6eE09sX2HxPl p9wmcPaYMiQ1A4lbQCqtQJYsB7WKbzhr+e8aVNvBb/3+ReyaAjJ+ktc5lVb/JR5X zmUTFrSfBbMBTcajL1qeq4XR5tcBGH9GtQY2CvvAS9BJOXoUvLvOHKEoNULn9I16 f6CUS4XfrPFLk2L20jjDz2mtubusLJIQS+moUwRQUf/Bc6M80dBHD+5DGO7Nf9/8 V6kNssA4KeNNZS2z9cwtvx5XkYWIxpFDWUD8lornF1s3bI2z/3SYeH0NO6vepUy/ l7yOGWU1nZjD/Jzi8Ieg8a6NK4iJC4A= -----END CERTIFICATE-----Generated at Mon Oct 20 08:52:22 2025 by rpki-client