$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa File: 1a6b350d-413d-3535-b410-8172ceaf133d.roa (raw, json) Hash identifier: d5UAPxJweFjeS7FNV9qhuEfGkYTgfO7SdSgUivs9SQY= Subject key identifier: 66:D5:64:E3:A7:21:A9:C4:43:E3:C8:39:38:D9:CC:F7:D6:0E:94:A4 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584B7C876038A19CCD0386218740 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 400610 IP address blocks: 66.219.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:60:38:a1:9c:cd:03:86:21:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=a868094c-5100-400d-84c5-0b062a92bdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:4c:90:a9:60:e9:2f:7f:2f:a2:36:4b:0b: b3:6b:1b:56:09:4d:0c:6c:c0:58:11:63:8c:6f:e0: c7:b0:36:12:10:00:87:7d:6b:85:ab:af:5d:ee:e9: 2d:12:5c:5b:7c:46:c7:c7:83:b7:de:6a:59:06:45: 3d:b2:45:dd:2b:00:9c:0f:78:5b:b2:74:de:27:ad: bd:69:8d:b9:e1:74:a5:0d:f8:c1:37:0c:d6:49:e8: 92:e3:75:df:bb:66:9d:1a:18:dd:55:92:c1:4e:f6: 69:79:cb:17:d1:97:0c:a4:87:79:8d:66:50:39:cf: d6:ec:02:5a:40:0b:ed:6a:36:34:9f:22:40:f1:9c: 0e:db:82:12:cc:00:f6:5a:da:9c:df:94:32:79:e8: a3:1a:df:b0:dc:ce:54:21:b3:6c:fd:0f:79:1c:0b: 80:a9:e9:36:96:40:2c:a8:f9:4e:7e:f5:56:15:a8: 6d:72:bc:6f:f5:c7:b5:6a:65:d3:e2:12:a5:76:2d: b5:e1:bb:fc:fa:f1:18:b4:1e:56:55:f0:30:ef:3a: 9a:71:0c:29:e2:0a:e9:b8:f0:77:8c:9a:0b:e9:19: 39:74:a9:be:08:4c:bf:70:dc:79:28:63:93:52:17: 47:e1:a2:71:ce:72:fb:dd:3c:9f:17:02:4d:5a:74: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D5:64:E3:A7:21:A9:C4:43:E3:C8:39:38:D9:CC:F7:D6:0E:94:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b4:98:4e:fd:69:a9:a4:4f:bf:b1:b7:95:e5:f2:7a:c8:3c: 24:1f:59:ba:52:1a:b6:57:00:7b:c9:ba:d9:8d:ae:3c:5d:2c: 4a:53:1f:0a:88:93:7e:23:e6:66:cd:a3:47:13:09:0c:6d:01: f4:b6:43:fe:de:6f:3c:9b:9e:0d:3c:78:95:83:59:15:56:15: 61:c1:d0:54:9b:cd:dc:1d:48:07:ea:ac:ee:26:79:b6:97:37: ca:08:35:84:7e:09:78:4c:ad:c1:a7:7e:8e:bc:63:08:c4:18: 19:dc:2e:ff:41:bf:21:e7:bc:d5:86:5f:fa:2e:85:56:ba:e4: 23:49:82:86:2c:cd:74:21:e8:4c:a3:46:ec:0a:b7:7e:a5:81: 58:2c:79:7c:de:90:67:3d:91:32:96:13:39:81:ed:32:67:03: 5f:5c:7b:15:fa:f7:94:ce:40:d6:3f:29:42:35:f6:f7:7a:6e: 1f:13:cd:0a:55:5c:90:67:0c:d6:9d:9d:c3:36:6a:34:f2:1b: 6e:ab:dc:37:d0:c9:05:96:e8:e6:fc:b5:06:5a:3a:86:77:63: d5:0d:7d:34:ba:0e:1f:5f:01:33:fb:aa:16:02:2e:24:31:f3: b2:45:a5:37:7f:66:18:2f:31:f7:0c:03:c7:15:6b:11:5b:f1: 67:11:5a:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2A4oZzNA4Yhh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YTg2ODA5NGMtNTEwMC00MDBkLTg0YzUtMGIwNjJhOTJiZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqRMkKlg6S9/L6I2SwuzaxtWCU0MbMBYEWOM b+DHsDYSEACHfWuFq69d7uktElxbfEbHx4O33mpZBkU9skXdKwCcD3hbsnTeJ629 aY254XSlDfjBNwzWSeiS43Xfu2adGhjdVZLBTvZpecsX0ZcMpId5jWZQOc/W7AJa QAvtajY0nyJA8ZwO24ISzAD2Wtqc35QyeeijGt+w3M5UIbNs/Q95HAuAqek2lkAs qPlOfvVWFahtcrxv9ce1amXT4hKldi214bv8+vEYtB5WVfAw7zqacQwp4grpuPB3 jJoL6Rk5dKm+CEy/cNx5KGOTUhdH4aJxznL73TyfFwJNWnRGtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbVZOOnIanEQ+PIOTjZzPfWDpSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvMWE2YjM1MGQtNDEzZC0z NTM1LWI0MTAtODE3MmNlYWYxMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC20mE79aamkT7+xt5Xl8nrIPCQfWbpSGrZXAHvJutmNrjxdLEpTHwqI k34j5mbNo0cTCQxtAfS2Q/7ebzybng08eJWDWRVWFWHB0FSbzdwdSAfqrO4mebaX N8oINYR+CXhMrcGnfo68YwjEGBncLv9BvyHnvNWGX/ouhVa65CNJgoYszXQh6Eyj RuwKt36lgVgseXzekGc9kTKWEzmB7TJnA19cexX695TOQNY/KUI19vd6bh8TzQpV XJBnDNadncM2ajTyG26r3DfQyQWW6Ob8tQZaOoZ3Y9UNfTS6Dh9fATP7qhYCLiQx 87JFpTd/ZhgvMfcMA8cVaxFb8WcRWuI= -----END CERTIFICATE-----Generated at Wed Oct 22 00:23:45 2025 by rpki-client