$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa File: 43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json) Hash identifier: YA50hYtRfBUKNkpEnXjpzK4XATbPZrekAqAfuLuQFWM= Subject key identifier: 10:E1:38:A6:3B:1E:8C:CF:73:D1:10:FC:67:6A:D9:14:83:BB:0F:6B Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584B7C875C097614552D8C956300 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 10865 IP address blocks: 66.129.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5c:09:76:14:55:2d:8c:95:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=7cc684d6-7e72-441f-b81f-16d024f0aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:7d:4b:c8:13:49:37:20:a4:3a:e0:55:ee: 67:1c:79:c6:d8:69:69:d9:f5:b4:bb:fb:52:b2:fb: 46:08:05:19:23:b5:18:4b:dd:e4:12:d0:21:3a:ef: 43:b1:64:6a:9b:b9:e4:7b:d7:fd:91:71:69:84:b3: 3e:d0:53:32:66:67:2b:ef:5f:03:6f:52:9d:b9:96: df:81:8b:1a:aa:a4:a8:53:c5:2a:5b:2f:0d:65:8d: 2d:6c:37:64:88:73:df:a6:60:30:d3:86:60:b1:29: 1c:e1:4f:14:17:90:0e:97:3c:46:02:fa:20:29:22: b3:c4:64:ed:34:c6:c4:50:5c:6d:9d:80:a9:e5:30: 7e:ba:4b:4c:04:b6:47:67:db:ca:45:38:a6:d9:b0: eb:a1:fa:a2:b0:75:d9:83:77:e0:19:82:3b:07:f6: bd:9e:f4:d2:8a:42:f9:e9:1d:30:94:86:7d:4a:dd: 66:c9:cc:a4:d9:82:fd:1c:0f:00:90:ad:58:86:8a: 43:f0:a4:aa:ce:7c:ea:5b:ea:dc:2c:78:57:a3:0a: dd:6c:9e:17:2a:77:a3:2e:e9:d9:2d:04:4b:d3:c6: f0:1f:65:b3:f2:64:8d:8e:64:21:47:e3:36:0f:8e: 60:d9:16:40:8b:07:5a:ea:7a:8f:67:88:f2:8f:7a: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:38:A6:3B:1E:8C:CF:73:D1:10:FC:67:6A:D9:14:83:BB:0F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.129.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:04:2d:e7:c3:9c:df:87:36:23:be:ad:47:82:68:47:8a:6f: 89:ca:48:df:da:a4:cf:01:bc:95:3b:b1:0d:f1:81:fd:fc:ba: 61:82:ac:fd:ef:87:ab:c1:03:ca:92:a9:15:35:44:a1:29:9d: e8:5d:63:6d:56:a0:ba:46:9e:a2:ec:48:17:88:b4:e3:ea:18: c0:94:5d:5b:30:68:ea:c3:bf:18:16:98:21:d2:8b:af:29:43: 4d:33:fc:fa:bc:96:6b:72:d1:f5:5d:4d:07:b9:af:f5:16:24: 99:bd:18:6f:e6:8c:e4:5c:95:df:91:a2:c7:16:46:d3:3c:26: ad:34:c0:d9:45:13:0e:71:38:2d:24:31:44:83:d2:cc:d4:38: ed:98:04:d8:68:03:d8:cc:a7:13:eb:93:53:6a:62:59:25:55: 08:69:d2:e9:45:0e:d4:35:09:68:1e:ba:43:82:36:4d:fe:0f: 52:af:5f:62:4d:3e:dd:01:15:d8:b2:35:e7:1b:91:27:98:db: fe:a1:2c:7d:de:a9:ef:5c:12:97:97:df:06:6e:84:e2:ba:52: 40:27:49:dd:01:c8:f5:c9:8b:37:ba:76:d4:c3:61:2d:1d:a3: 32:df:84:4e:b3:6b:ec:c7:0a:71:64:c1:0a:7b:b3:9d:22:fb: f2:78:da:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1wJdhRVLYyVYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk N2NjNjg0ZDYtN2U3Mi00NDFmLWI4MWYtMTZkMDI0ZjBhYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuad9S8gTSTcgpDrgVe5nHHnG2Glp2fW0u/tS svtGCAUZI7UYS93kEtAhOu9DsWRqm7nke9f9kXFphLM+0FMyZmcr718Db1KduZbf gYsaqqSoU8UqWy8NZY0tbDdkiHPfpmAw04ZgsSkc4U8UF5AOlzxGAvogKSKzxGTt NMbEUFxtnYCp5TB+uktMBLZHZ9vKRTim2bDrofqisHXZg3fgGYI7B/a9nvTSikL5 6R0wlIZ9St1mycyk2YL9HA8AkK1YhopD8KSqznzqW+rcLHhXowrdbJ4XKnejLunZ LQRL08bwH2Wz8mSNjmQhR+M2D45g2RZAiwda6nqPZ4jyj3oR8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDhOKY7HozPc9EQ/Gdq2RSDuw9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNDNhZjQzMWUtN2IwMy0z ZWM2LWJlMzItNmY5MDJmYzU1YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQoGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMELefDnN+HNiO+rUeCaEeKb4nKSN/apM8BvJU7sQ3xgf38umGCrP3v h6vBA8qSqRU1RKEpnehdY21WoLpGnqLsSBeItOPqGMCUXVswaOrDvxgWmCHSi68p Q00z/Pq8lmty0fVdTQe5r/UWJJm9GG/mjORcld+RoscWRtM8Jq00wNlFEw5xOC0k MUSD0szUOO2YBNhoA9jMpxPrk1NqYlklVQhp0ulFDtQ1CWgeukOCNk3+D1KvX2JN Pt0BFdiyNecbkSeY2/6hLH3eqe9cEpeX3wZuhOK6UkAnSd0ByPXJize6dtTDYS0d ozLfhE6za+zHCnFkwQp7s50i+/J42r4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:35 2025 by rpki-client