$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json) Hash identifier: dX233ruux1m9QRUIyw6aZrpjGD0S+FpSSTKIrRlPCqQ= Subject key identifier: 70:E4:82:29:5D:E5:0A:8F:E5:23:E1:D3:41:5E:55:01:81:D8:B2:AC Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584B8EACCFD3F6A29ADCB5271700 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 30148 IP address blocks: 66.248.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:cf:d3:f6:a2:9a:dc:b5:27:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=8240c82a-95e7-49fd-9d9b-6c13f6066471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:39:8d:a9:3a:23:6b:c0:39:5b:8f:7d:6b: 48:a1:34:26:c9:b3:a6:75:b9:ff:8e:a0:ab:db:f3: 8c:32:59:3b:1a:75:d1:70:42:c3:72:d8:46:ab:b0: c8:a1:4e:33:ac:4e:25:28:00:81:ab:68:84:ac:22: 54:ba:69:07:0c:7c:19:e9:3f:ab:e5:ae:93:a6:cc: 5c:f8:6a:a2:d6:65:d3:7d:16:b8:02:6a:b3:b1:54: c6:c9:7a:09:50:e5:2e:26:ee:27:f6:ba:68:3a:07: 45:59:9e:a1:cc:93:c2:bb:5a:e9:e5:04:ab:7a:23: 11:05:de:c0:b3:58:46:2b:d8:70:4d:4f:c4:1e:40: 63:3e:44:08:8d:ce:23:49:83:bc:d9:34:b3:5e:57: 0d:f8:7d:f5:ca:ca:15:b7:79:d7:84:a7:58:13:cc: 1c:3c:13:f4:23:e5:52:55:d0:ec:1f:32:65:f2:1b: c9:07:75:07:f1:1f:51:a6:b4:af:86:d6:f7:06:3e: de:0b:40:e0:c9:17:7e:e6:07:e4:fc:b5:08:d7:82: 9e:6e:d9:d6:91:0a:fd:09:22:35:c6:18:48:f9:2b: 5a:c5:ca:04:30:ce:a2:67:ab:c6:8b:21:4c:82:97: a1:5b:f4:21:74:d2:6b:18:a8:2c:d5:45:23:07:b7: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:82:29:5D:E5:0A:8F:E5:23:E1:D3:41:5E:55:01:81:D8:B2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7f:72:e7:f7:bb:5c:ab:db:08:2d:fa:2e:61:95:fe:02:fc: 4e:31:51:5f:25:e7:ee:89:63:12:07:83:d1:80:6f:84:44:33: 75:08:10:8f:46:66:64:5b:b2:cb:63:5b:3c:56:4e:0d:9b:ff: a5:48:ed:70:f7:d3:15:57:ec:a2:33:cf:38:ed:6c:8d:4c:87: 15:1f:d9:02:4f:8e:36:3c:c6:c9:c2:78:f7:a9:50:d4:30:6d: 85:80:74:92:85:09:b6:cf:49:d9:fe:6e:d3:2d:43:07:fe:63: 49:6e:44:79:9c:30:9f:5e:18:78:5d:c3:ae:2a:7b:45:1a:85: 82:12:f1:bf:45:01:cd:b5:42:c6:db:06:05:24:3f:0f:cb:82: 67:6d:36:c0:e5:4b:64:3d:35:3d:be:cd:66:2b:63:f8:4e:b8: d3:8b:ff:ba:fe:8f:1b:a5:dc:15:05:17:40:8f:5a:4f:45:af: 55:61:01:f7:46:9a:f0:2d:ab:18:72:53:7b:c9:30:a5:bf:fa: 7f:ca:f6:dd:f8:1c:d3:97:12:cd:79:c1:4f:2e:3e:43:69:05: e1:28:da:9e:72:48:5f:bf:8f:b8:a1:96:d5:16:e4:27:41:83: cb:09:f9:88:70:2c:ed:a1:6d:16:80:06:c1:ed:df:78:c9:c2: f0:0a:20:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrM/T9qKa3LUnFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODI0MGM4MmEtOTVlNy00OWZkLTlkOWItNmMxM2Y2MDY2NDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEU5jak6I2vAOVuPfWtIoTQmybOmdbn/jqCr 2/OMMlk7GnXRcELDcthGq7DIoU4zrE4lKACBq2iErCJUumkHDHwZ6T+r5a6Tpsxc +Gqi1mXTfRa4AmqzsVTGyXoJUOUuJu4n9rpoOgdFWZ6hzJPCu1rp5QSreiMRBd7A s1hGK9hwTU/EHkBjPkQIjc4jSYO82TSzXlcN+H31ysoVt3nXhKdYE8wcPBP0I+VS VdDsHzJl8hvJB3UH8R9RprSvhtb3Bj7eC0DgyRd+5gfk/LUI14KebtnWkQr9CSI1 xhhI+StaxcoEMM6iZ6vGiyFMgpehW/QhdNJrGKgs1UUjB7dAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDkgild5QqP5SPh00FeVQGB2LKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMGRlMDgwNzAtOTkyZS0z MzRmLTgwOTAtYTRjM2E4ODY3N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR/cuf3u1yr2wgt+i5hlf4C/E4xUV8l5+6JYxIHg9GAb4REM3UIEI9G ZmRbsstjWzxWTg2b/6VI7XD30xVX7KIzzzjtbI1MhxUf2QJPjjY8xsnCePepUNQw bYWAdJKFCbbPSdn+btMtQwf+Y0luRHmcMJ9eGHhdw64qe0UahYIS8b9FAc21Qsbb BgUkPw/LgmdtNsDlS2Q9NT2+zWYrY/hOuNOL/7r+jxul3BUFF0CPWk9Fr1VhAfdG mvAtqxhyU3vJMKW/+n/K9t34HNOXEs15wU8uPkNpBeEo2p5ySF+/j7ihltUW5CdB g8sJ+YhwLO2hbRaABsHt33jJwvAKINw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:48:02 2025 by rpki-client