$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa File: 849770b3-423d-36e5-898b-d99735708a9c.roa (raw, json) Hash identifier: bdDpisRj9cBelYe0V39GpFl4xuYRjjGBaUdyd67HSuU= Subject key identifier: 78:FE:37:D8:BC:64:0D:D0:50:FB:48:A8:11:A2:6C:4C:F8:EC:11:95 Certificate issuer: /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Certificate serial: 010D0C9F4328584B5B073E0B146F157344CB0200 Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 31919 IP address blocks: 66.119.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3e:0b:14:6f:15:73:44:cb:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=01ed5882-a1c9-438f-b83c-dbce1e5b5358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:b7:e1:97:a2:5e:e4:64:2f:a3:9f:0e:52: 19:a5:3b:24:5c:c8:cb:8e:32:7a:5b:7b:7e:43:f7: de:4a:52:e0:ba:7a:04:a9:3a:9e:80:71:fc:0d:64: d9:e1:da:7f:bd:62:ed:78:04:74:eb:20:ba:14:06: 69:0a:f2:44:5b:15:43:ce:0c:d8:10:85:dd:f7:60: bc:0f:e4:01:90:03:b0:92:40:1c:d5:42:01:6c:39: cd:54:06:8e:8e:56:ff:72:35:24:66:01:2a:e8:54: 48:15:e8:7c:e7:59:d0:55:8b:2a:fd:3d:e1:c5:0e: 77:03:9b:86:4c:dd:83:0c:55:ba:ee:94:c8:17:75: 62:b9:4d:45:aa:e9:3a:bf:c3:af:f7:af:20:98:75: d0:bf:97:c4:a4:4d:df:00:33:ea:14:71:3b:00:72: c3:c9:f8:f9:a7:29:95:69:1e:56:58:ae:0a:98:d7: aa:17:71:7d:03:89:dc:49:80:4c:6c:01:c3:7a:d9: 20:ad:71:7b:71:e1:a3:c0:39:54:99:65:2c:a3:cb: da:3f:aa:fc:49:8a:0a:29:08:11:62:8d:3d:44:93: bf:1a:d5:ef:99:e4:cc:9e:27:ba:6f:93:eb:da:00: bc:68:a0:a7:8f:75:35:30:21:4a:8a:42:6b:36:13: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FE:37:D8:BC:64:0D:D0:50:FB:48:A8:11:A2:6C:4C:F8:EC:11:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl X509v3 Authority Key Identifier: keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer sbgp-ipAddrBlock: critical IPv4: 66.119.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f0:3d:4d:74:d8:50:02:ee:42:60:39:99:de:10:b6:2b:f4: 29:e7:c7:b2:da:5f:22:1b:2f:43:28:91:e5:b3:a3:bd:d8:2e: 3d:f6:f1:1c:b5:16:8e:a7:c6:61:5f:b7:0d:6a:7c:a4:a3:86: 20:7e:c4:cc:a3:13:48:f5:3d:e2:28:8a:dc:80:5c:fd:84:6e: ef:a0:c2:ec:06:12:3b:fd:ad:33:af:08:c7:e3:e9:09:53:e6: 16:b3:2e:2a:7a:36:1f:f4:60:5a:24:c2:13:57:51:6a:43:53: f2:fe:69:a9:99:d4:14:e6:9c:be:38:0b:16:15:40:f7:6c:90: 26:54:84:a6:78:16:4a:a2:e1:64:46:bf:64:57:b3:7e:67:60: b0:57:42:44:1b:7a:3a:ae:be:ed:ae:a9:0f:63:92:3e:c6:0e: e0:3c:bd:61:20:e9:81:87:8c:8b:24:f8:66:15:7a:5f:81:5a: 2e:b0:fb:cb:4e:b0:cd:46:11:61:fd:ae:e1:3a:2b:5a:33:47: 4f:be:6a:a9:d5:64:67:34:b5:99:3c:9e:65:d9:c0:fe:54:9b: 68:04:aa:e6:00:b5:54:c8:72:8c:4f:d7:a0:3b:62:c1:ec:3e: 15:35:bf:98:e7:1c:9f:db:17:ee:a3:81:83:6f:1c:07:e3:3f: 43:0f:45:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz4LFG8Vc0TLAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU5ZDZlNjEtODYxMy00Mjg5LWJlMzQtY2IwZmUwYWVl YTZlMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDFlZDU4ODItYTFjOS00MzhmLWI4M2MtZGJjZTFlNWI1MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIu34ZeiXuRkL6OfDlIZpTskXMjLjjJ6W3t+ Q/feSlLgunoEqTqegHH8DWTZ4dp/vWLteAR06yC6FAZpCvJEWxVDzgzYEIXd92C8 D+QBkAOwkkAc1UIBbDnNVAaOjlb/cjUkZgEq6FRIFeh851nQVYsq/T3hxQ53A5uG TN2DDFW67pTIF3ViuU1Fquk6v8Ov968gmHXQv5fEpE3fADPqFHE7AHLDyfj5pymV aR5WWK4KmNeqF3F9A4ncSYBMbAHDetkgrXF7ceGjwDlUmWUso8vaP6r8SYoKKQgR Yo09RJO/GtXvmeTMnie6b5Pr2gC8aKCnj3U1MCFKikJrNhMt9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj+N9i8ZA3QUPtIqBGibEz47BGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlk NmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBhZWVhNmUvODQ5NzcwYjMtNDIzZC0z NmU1LTg5OGItZDk5NzM1NzA4YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDU5ZDZlNjEtODYxMy00Mjg5LWJl MzQtY2IwZmUwYWVlYTZlLzQ1OWQ2ZTYxLTg2MTMtNDI4OS1iZTM0LWNiMGZlMGFl ZWE2ZS5jcmwwHwYDVR0jBBgwFoAU4cDQPgBLYWNKRx1bI0QthHr5a8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBm ZTBhZWVhNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQndgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTwPU102FAC7kJgOZneELYr9Cnnx7LaXyIbL0MokeWzo73YLj328Ry1 Fo6nxmFftw1qfKSjhiB+xMyjE0j1PeIoityAXP2Ebu+gwuwGEjv9rTOvCMfj6QlT 5hazLip6Nh/0YFokwhNXUWpDU/L+aamZ1BTmnL44CxYVQPdskCZUhKZ4Fkqi4WRG v2RXs35nYLBXQkQbejquvu2uqQ9jkj7GDuA8vWEg6YGHjIsk+GYVel+BWi6w+8tO sM1GEWH9ruE6K1ozR0++aqnVZGc0tZk8nmXZwP5Um2gEquYAtVTIcoxP16A7YsHs PhU1v5jnHJ/bF+6jgYNvHAfjP0MPRdM= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:56 2025 by rpki-client