$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa File: 5887cfae-8c62-3084-8853-2e533a04a923.roa (raw, json) Hash identifier: okBK1NmC2MYaXlp+F/mAT5Tm2pQgFIq28oIlRzUKoBk= Subject key identifier: 3B:59:79:D1:5C:DF:68:9C:59:32:B8:42:16:2C:53:14:95:B2:F1:CF Certificate issuer: /CN=607fb4c7-9b54-4d7e-9099-986be3553d20 Certificate serial: 010D0C9F4328584B80B7714A0E0D95C682C0FB80 Authority key identifier: 67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 32579 IP address blocks: 66.223.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:71:4a:0e:0d:95:c6:82:c0:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607fb4c7-9b54-4d7e-9099-986be3553d20 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=2b3db72a-2492-4fed-9ede-f30a68bea0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:00:47:79:c4:fa:5c:33:72:ce:7e:98:52: 02:a6:21:a8:c8:3b:ff:e2:69:d2:b2:ba:82:10:c9: 89:a9:22:3c:19:b3:b9:19:a7:86:1b:12:22:d0:d8: e2:d0:e0:3c:aa:8b:e0:ac:35:6f:e8:90:61:7d:b0: 82:be:35:d6:dd:8f:6c:34:0d:1d:bd:5c:4e:74:b0: 6c:ca:1c:fc:17:45:6a:9f:c2:d1:6c:75:35:1a:e0: 67:ed:84:69:d3:26:d9:fb:f6:f4:2d:51:6b:0c:85: 18:be:00:94:5f:06:2c:dd:f3:81:8c:7a:8d:27:2c: 7d:12:2c:1b:d2:99:1a:ac:21:cf:3e:20:02:75:cc: 1b:3f:f4:84:66:af:b7:f9:cd:86:d0:f0:26:86:44: 6f:7c:77:16:c9:15:08:ba:78:64:96:df:e1:64:0b: 1f:99:28:04:41:91:d4:10:f7:93:19:6e:2e:ae:39: 1a:61:52:ed:53:57:d2:5f:dc:47:47:2e:9f:78:e9: af:e0:a3:41:b3:34:da:89:b3:71:fb:4a:04:9d:cc: d5:aa:f0:51:76:33:48:01:88:65:8f:de:ac:2d:79: ec:64:a4:86:c1:86:3a:ff:0b:cd:cb:f9:8d:35:70: 37:81:b4:f1:e3:ef:f1:cc:c4:41:3f:3a:3c:5e:ce: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:59:79:D1:5C:DF:68:9C:59:32:B8:42:16:2C:53:14:95:B2:F1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl X509v3 Authority Key Identifier: keyid:67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer sbgp-ipAddrBlock: critical IPv4: 66.223.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:73:f1:c7:90:46:b0:e3:cb:22:c9:75:7d:10:e7:45:54:1f: a3:6e:2b:00:32:bf:6b:82:5e:02:be:45:69:11:91:96:2e:d6: a2:30:6e:2a:8c:2f:38:ae:a8:a0:af:a8:ce:94:5e:bc:02:db: 17:e8:4d:5d:d6:fc:85:d1:fc:ae:df:78:5d:1d:ad:10:e2:fb: 20:6e:6e:15:66:9d:38:02:0a:e6:f2:bd:78:bb:21:55:1e:6c: 3e:1d:24:1f:81:20:75:15:b5:ce:be:21:69:7d:ea:4c:3e:58: f9:9f:b3:85:5a:15:11:38:16:c5:c4:aa:80:c1:e4:81:cb:cf: 22:08:3a:03:2c:62:5e:13:a8:1d:e5:bb:57:40:1c:1e:21:74: e0:48:b5:8d:d0:41:74:69:68:ad:e2:ca:c6:f1:d8:2d:12:bc: c5:0b:ee:79:2f:75:de:18:fa:78:a1:f6:7a:dd:62:47:64:ea: 10:4e:78:b9:87:21:f7:e3:14:6a:e2:a0:8c:c6:78:84:cf:76: c0:f0:be:85:fe:04:ef:4e:dc:d9:70:c8:38:00:3e:0f:d3:81: 4a:f1:6a:97:80:ca:f2:2a:fa:ea:4c:97:ff:c5:d2:79:58:4f: 95:12:a8:c0:01:fe:4f:8c:a9:57:1a:91:5b:5d:cb:17:b5:39: 7d:3f:d7:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3FKDg2VxoLA+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA3ZmI0YzctOWI1NC00ZDdlLTkwOTktOTg2YmUzNTUz ZDIwMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MmIzZGI3MmEtMjQ5Mi00ZmVkLTllZGUtZjMwYTY4YmVhMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HQAR3nE+lwzcs5+mFICpiGoyDv/4mnSsrqC EMmJqSI8GbO5GaeGGxIi0Nji0OA8qovgrDVv6JBhfbCCvjXW3Y9sNA0dvVxOdLBs yhz8F0Vqn8LRbHU1GuBn7YRp0ybZ+/b0LVFrDIUYvgCUXwYs3fOBjHqNJyx9Eiwb 0pkarCHPPiACdcwbP/SEZq+3+c2G0PAmhkRvfHcWyRUIunhklt/hZAsfmSgEQZHU EPeTGW4urjkaYVLtU1fSX9xHRy6feOmv4KNBszTaibNx+0oEnczVqvBRdjNIAYhl j96sLXnsZKSGwYY6/wvNy/mNNXA3gbTx4+/xzMRBPzo8Xs70qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtZedFc32icWTK4QhYsUxSVsvHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82MDdm YjRjNy05YjU0LTRkN2UtOTA5OS05ODZiZTM1NTNkMjAvNTg4N2NmYWUtOGM2Mi0z MDg0LTg4NTMtMmU1MzNhMDRhOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjA3ZmI0YzctOWI1NC00ZDdlLTkw OTktOTg2YmUzNTUzZDIwLzYwN2ZiNGM3LTliNTQtNGQ3ZS05MDk5LTk4NmJlMzU1 M2QyMC5jcmwwHwYDVR0jBBgwFoAUZwW+QVYRsmxQ4jaw8aKXOOtS5MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82MDdmYjRjNy05YjU0LTRkN2UtOTA5OS05ODZi ZTM1NTNkMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQt9rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpz8ceQRrDjyyLJdX0Q50VUH6NuKwAyv2uCXgK+RWkRkZYu1qIwbiqM LziuqKCvqM6UXrwC2xfoTV3W/IXR/K7feF0drRDi+yBubhVmnTgCCubyvXi7IVUe bD4dJB+BIHUVtc6+IWl96kw+WPmfs4VaFRE4FsXEqoDB5IHLzyIIOgMsYl4TqB3l u1dAHB4hdOBItY3QQXRpaK3iysbx2C0SvMUL7nkvdd4Y+nih9nrdYkdk6hBOeLmH IffjFGrioIzGeITPdsDwvoX+BO9O3NlwyDgAPg/TgUrxapeAyvIq+upMl//F0nlY T5USqMAB/k+MqVcakVtdyxe1OX0/10Y= -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:06 2025 by rpki-client