$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa File: 86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa (raw, json) Hash identifier: KediHnNKxEFAOpDC0f6XkcO1Sn809o1sj9Zz6pDlC4E= Subject key identifier: 45:47:C2:84:50:BE:66:C7:0C:46:68:E8:7F:4C:75:6E:1B:80:D1:6A Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F4328584B80B74FA9FCFBFF1EC41252B0 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 62945 IP address blocks: 66.244.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:4f:a9:fc:fb:ff:1e:c4:12:52:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=9f14c1d1-f233-46aa-82f3-b07a09acab19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:2a:b2:3e:01:c3:7a:62:e2:11:a5:60:66: d9:3a:fd:e2:b3:c0:f1:3d:73:e0:1a:95:8b:02:d4: a7:ca:97:d8:33:4c:a4:b3:c7:4d:44:ce:9a:b0:c9: 75:c8:12:2f:f7:32:cf:14:ab:be:10:83:97:2d:c1: 62:39:0a:62:5d:20:a0:26:70:d5:10:9d:88:68:81: 9e:33:52:e2:40:18:d7:22:6c:e5:45:b7:90:15:dc: fa:2a:49:b1:16:68:76:48:fd:84:45:fe:f5:cf:23: 17:e0:39:5e:c6:4c:9e:fd:df:89:41:ae:78:48:b9: ef:a8:45:56:51:df:6e:ca:28:46:09:8c:e2:96:b3: 11:84:4a:bf:9d:0c:71:a4:6f:98:38:86:54:0b:40: 90:01:fa:8f:84:c5:8f:7c:6f:a8:0e:fc:61:91:f8: d0:bc:4d:95:05:f7:ce:ed:9e:c6:32:c1:f7:6c:1f: 02:ab:70:14:a2:94:83:ff:84:1a:ec:12:a3:a6:47: 93:d1:26:15:6e:c2:11:82:91:a6:d2:14:77:64:26: af:27:8e:9f:94:23:79:ee:01:1c:a8:ac:12:fc:0b: 42:ef:84:30:40:d4:9e:4c:5e:37:97:25:4a:ec:e4: 60:29:1d:0b:75:e6:32:81:0e:73:aa:3b:ba:3d:07: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:47:C2:84:50:BE:66:C7:0C:46:68:E8:7F:4C:75:6E:1B:80:D1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 66.244.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:06:90:0b:9c:5d:6e:fe:c2:10:f6:ba:1e:f4:28:4f:47:42: 7b:9b:81:22:f4:6f:75:71:6d:35:47:d8:08:0e:68:40:29:85: 7b:4c:ea:02:27:41:7c:ec:a2:11:2e:22:0a:2f:4a:9b:72:1a: d0:89:42:d5:e0:c3:80:6b:98:f5:49:11:4c:db:b1:e4:e2:46: 10:62:43:9a:19:8a:2e:09:0f:dd:c5:f7:11:18:44:27:90:51: c6:3e:0c:24:51:14:8a:f5:ce:87:12:8a:6d:a3:80:08:eb:bb: 13:d4:87:54:78:74:c3:0c:ff:42:f4:c7:a5:fa:7a:c4:09:d3: f1:fd:19:96:4b:04:61:01:5a:3b:44:30:97:7c:1d:63:d0:b2: 4b:f6:ad:c9:d9:8b:07:3d:92:21:67:9c:5d:84:7a:37:07:19: d1:e1:f7:dc:65:84:32:ec:03:56:4b:8a:4a:53:f1:ea:9b:e4: 6f:bb:c8:8f:f2:3b:3c:2d:50:d0:bf:ae:1b:68:51:36:20:7a: 1a:86:40:ac:6d:c4:99:35:9d:37:a7:f5:7e:3e:bd:61:8d:78: ae:1f:65:c7:7a:0a:33:d6:e9:0d:7e:83:3c:68:a0:d7:0a:2e: c3:1f:5c:c4:7c:91:2c:d4:b2:ff:e0:70:dc:0e:e0:75:b6:d7: 53:f3:1b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt0+p/Pv/HsQSUrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OWYxNGMxZDEtZjIzMy00NmFhLTgyZjMtYjA3YTA5YWNhYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9gqsj4Bw3pi4hGlYGbZOv3is8DxPXPgGpWL AtSnypfYM0yks8dNRM6asMl1yBIv9zLPFKu+EIOXLcFiOQpiXSCgJnDVEJ2IaIGe M1LiQBjXImzlRbeQFdz6KkmxFmh2SP2ERf71zyMX4Dlexkye/d+JQa54SLnvqEVW Ud9uyihGCYzilrMRhEq/nQxxpG+YOIZUC0CQAfqPhMWPfG+oDvxhkfjQvE2VBffO 7Z7GMsH3bB8Cq3AUopSD/4Qa7BKjpkeT0SYVbsIRgpGm0hR3ZCavJ46flCN57gEc qKwS/AtC74QwQNSeTF43lyVK7ORgKR0LdeYygQ5zqju6PQfC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVHwoRQvmbHDEZo6H9MdW4bgNFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvODY4MDZjZGMtOWZkYy0z Yjc3LTkzNWQtYmI3YTBlYTVmNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQGkAucXW7+whD2uh70KE9HQnubgSL0b3VxbTVH2AgOaEAphXtM6gIn QXzsohEuIgovSptyGtCJQtXgw4BrmPVJEUzbseTiRhBiQ5oZii4JD93F9xEYRCeQ UcY+DCRRFIr1zocSim2jgAjruxPUh1R4dMMM/0L0x6X6esQJ0/H9GZZLBGEBWjtE MJd8HWPQskv2rcnZiwc9kiFnnF2EejcHGdHh99xlhDLsA1ZLikpT8eqb5G+7yI/y OzwtUNC/rhtoUTYgehqGQKxtxJk1nTen9X4+vWGNeK4fZcd6CjPW6Q1+gzxooNcK LsMfXMR8kSzUsv/gcNwO4HW211PzGyM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:16 2025 by rpki-client