$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5722aba4-b51b-3148-9d54-298a275a422f.roa File: 5722aba4-b51b-3148-9d54-298a275a422f.roa (raw, json) Hash identifier: gM390Yd4SWAJZgKs6XsnNAjSEb6Y3k/2vk6M2+ZrMjY= Subject key identifier: 43:C4:95:51:2C:89:B4:9E:78:F2:6D:2E:DF:89:2E:00:DD:9F:4F:FC Certificate issuer: /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2 Certificate serial: 010D0C9F4328584B85EB9CA3D2B0E9D566937760 Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5722aba4-b51b-3148-9d54-298a275a422f.roa Signing time: Tue 14 Oct 2025 21:44:56 +0000 ROA not before: Tue 14 Oct 2025 21:44:56 +0000 ROA not after: Mon 12 Jan 2026 22:44:56 +0000 asID: 401319 IP address blocks: 66.51.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:eb:9c:a3:d2:b0:e9:d5:66:93:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2 Validity Not Before: Oct 14 21:44:56 2025 GMT Not After : Jan 12 22:44:56 2026 GMT Subject: CN=6d386530-ca94-4a90-a075-f2e75cd52e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:fa:62:23:e6:df:e8:64:86:9f:29:d9:d4: 99:7d:c4:21:39:b6:95:0b:70:3e:08:5b:7a:37:d6: 36:38:f7:ec:7c:5e:96:50:39:7e:a3:fd:59:1f:d2: c2:a8:66:71:df:10:1c:ec:54:76:b4:37:22:e2:b4: a3:8a:ca:3b:d9:9e:09:44:1c:27:98:44:81:aa:af: 3d:8e:d4:1a:e0:79:42:c9:5f:b2:ac:4d:0d:e8:78: 6a:c1:15:d9:84:a3:23:dc:36:44:12:c8:c8:29:23: de:79:78:30:b5:9e:1b:13:58:d0:ef:a9:d3:7e:83: 9b:24:97:36:a6:3b:1d:4b:1a:11:74:e2:18:19:88: 82:71:7d:79:56:9e:29:4f:27:9f:82:89:d2:23:c7: 64:c3:37:60:f9:47:93:5b:fc:67:5d:52:80:3c:42: f1:e5:61:5c:98:dc:e7:3d:48:ca:26:6d:98:f0:8c: 3b:38:72:3b:9d:9b:91:09:13:cc:87:5d:cb:46:38: 4b:3c:72:89:d4:b9:24:28:f5:be:cb:2f:5c:86:c7: f6:29:b2:95:bf:9a:b1:e7:6a:04:49:cd:94:b8:ef: 7c:96:f6:5d:5e:22:9a:c5:bf:14:1c:1b:b3:6e:db: ae:b2:da:81:f0:78:5c:8a:b2:ff:f5:f2:e3:0e:12: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C4:95:51:2C:89:B4:9E:78:F2:6D:2E:DF:89:2E:00:DD:9F:4F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5722aba4-b51b-3148-9d54-298a275a422f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl X509v3 Authority Key Identifier: keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer sbgp-ipAddrBlock: critical IPv4: 66.51.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:48:9c:a8:d6:16:f6:d6:99:8a:c8:a7:f0:22:cd:90:07:91: 14:b8:c9:a5:85:27:ce:f4:13:ae:2d:3a:f2:a3:19:2f:e1:43: 74:70:52:bc:33:2d:d1:d0:b0:06:e0:36:b2:2b:81:b9:c6:b4: 2d:6f:ac:c2:82:45:82:57:69:65:be:7e:90:8e:e2:97:ec:f0: a4:0e:16:1a:9e:46:39:8a:3c:50:e4:10:3e:77:3b:38:58:bd: 03:b7:b5:22:ce:b0:45:69:ef:d4:d2:66:e9:90:48:53:3a:e6: b6:b0:a6:7a:97:5a:6c:41:d2:06:d0:ed:15:c2:c5:9f:12:0e: 35:13:e9:08:a5:88:b9:89:b5:a4:d9:0e:d1:66:f6:a8:c6:dc: 87:6e:08:61:30:ef:47:82:a2:ab:47:ac:b6:16:db:9a:0b:2b: dc:c6:94:86:56:3f:b7:6a:93:dc:d2:62:06:12:14:c6:fb:82: de:bd:b9:f9:51:2d:58:bc:ff:f1:99:10:91:10:dc:3a:e3:cf: 33:87:0c:45:d6:97:4a:36:62:2e:07:d2:85:d6:68:a0:06:98: 35:9b:a3:c8:f5:b0:65:8c:ab:ec:ca:da:c1:e0:e9:2b:6b:4e: 5b:65:b0:06:0a:d8:65:7f:b1:a5:e7:58:9f:ae:de:10:e1:6c: 27:92:9e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuF65yj0rDp1WaTd2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZkMTZhMzktNDcyYy00OGNjLWFjNGMtN2UzODU5NTBh MGUyMB4XDTI1MTAxNDIxNDQ1NloXDTI2MDExMjIyNDQ1NlowLzEtMCsGA1UEAxMk NmQzODY1MzAtY2E5NC00YTkwLWEwNzUtZjJlNzVjZDUyZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2n6YiPm3+hkhp8p2dSZfcQhObaVC3A+CFt6 N9Y2OPfsfF6WUDl+o/1ZH9LCqGZx3xAc7FR2tDci4rSjiso72Z4JRBwnmESBqq89 jtQa4HlCyV+yrE0N6HhqwRXZhKMj3DZEEsjIKSPeeXgwtZ4bE1jQ76nTfoObJJc2 pjsdSxoRdOIYGYiCcX15Vp4pTyefgonSI8dkwzdg+UeTW/xnXVKAPELx5WFcmNzn PUjKJm2Y8Iw7OHI7nZuRCRPMh13LRjhLPHKJ1LkkKPW+yy9chsf2KbKVv5qx52oE Sc2UuO98lvZdXiKaxb8UHBuzbtuustqB8HhcirL/9fLjDhKZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPElVEsibSeePJtLt+JLgDdn0/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNmQx NmEzOS00NzJjLTQ4Y2MtYWM0Yy03ZTM4NTk1MGEwZTIvNTcyMmFiYTQtYjUxYi0z MTQ4LTlkNTQtMjk4YTI3NWE0MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzZkMTZhMzktNDcyYy00OGNjLWFj NGMtN2UzODU5NTBhMGUyL2M2ZDE2YTM5LTQ3MmMtNDhjYy1hYzRjLTdlMzg1OTUw YTBlMi5jcmwwHwYDVR0jBBgwFoAUTp55Qa1V1J2d113ukH33TjCqkD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNmQxNmEzOS00NzJjLTQ4Y2MtYWM0Yy03ZTM4 NTk1MGEwZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxInKjWFvbWmYrIp/AizZAHkRS4yaWFJ870E64tOvKjGS/hQ3RwUrwz LdHQsAbgNrIrgbnGtC1vrMKCRYJXaWW+fpCO4pfs8KQOFhqeRjmKPFDkED53OzhY vQO3tSLOsEVp79TSZumQSFM65rawpnqXWmxB0gbQ7RXCxZ8SDjUT6QiliLmJtaTZ DtFm9qjG3IduCGEw70eCoqtHrLYW25oLK9zGlIZWP7dqk9zSYgYSFMb7gt69uflR LVi8//GZEJEQ3DrjzzOHDEXWl0o2Yi4H0oXWaKAGmDWbo8j1sGWMq+zK2sHg6Str TltlsAYK2GV/saXnWJ+u3hDhbCeSnh0= -----END CERTIFICATE-----Generated at Tue Oct 21 10:20:08 2025 by rpki-client