$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/70a7c83e-ef7a-3165-97e4-bf7529e271d0.roa File: 70a7c83e-ef7a-3165-97e4-bf7529e271d0.roa (raw, json) Hash identifier: 1cxXlyuNbzuSWpfEn4tkrSHq7ygxdFWtScPWwoWZUPk= Subject key identifier: 67:A5:B5:4C:5C:DC:80:C3:02:F7:E2:8C:09:A0:27:22:B0:E4:BD:06 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584B7C8760DBC65A90A450809148 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/70a7c83e-ef7a-3165-97e4-bf7529e271d0.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 400610 IP address blocks: 66.219.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:60:db:c6:5a:90:a4:50:80:91:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=29c0b04c-2350-4738-9b4d-f638b52f15e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:6c:ee:7a:a6:25:3e:9c:d9:dd:19:bc:99: b0:a9:ca:d2:05:b7:c5:36:a0:51:a2:b4:14:c3:4b: 8f:2c:09:95:1f:f0:52:d4:e3:68:0c:9f:b2:bc:e4: 4a:75:f1:cc:40:b8:7d:62:26:d6:78:68:d7:6f:db: a5:b9:74:09:4b:f8:79:71:16:12:91:44:c7:ac:73: 50:ce:f0:5c:db:3f:01:89:8a:f5:16:cf:62:26:4a: bd:8a:cc:b8:6c:65:48:11:5f:c5:db:78:b1:89:ad: de:ba:c3:73:c1:9d:ae:a6:38:65:2f:c3:89:ac:d4: cb:82:21:07:3a:b9:ac:1c:97:4b:28:9b:c9:d9:bb: e0:f2:a2:f4:f0:ec:45:b5:10:3c:1a:31:7f:e1:25: 54:bc:86:10:0c:db:7d:94:b7:b8:ff:0a:6f:fc:71: 77:c9:4e:88:70:02:d4:83:7b:9f:7d:ef:dc:9a:16: 5b:ab:88:c7:89:2e:33:32:45:2a:a7:dc:53:d3:89: b4:1c:cd:48:2e:e1:e1:b7:e7:78:4a:3b:ad:cf:a5: 06:4e:77:2c:9a:c0:1f:ab:12:0c:21:e5:6d:66:a0: 98:ea:c1:3e:14:63:09:80:ce:8e:37:23:5d:21:92: b1:1f:bf:ad:48:3c:ba:34:a1:83:3a:18:40:57:ab: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A5:B5:4C:5C:DC:80:C3:02:F7:E2:8C:09:A0:27:22:B0:E4:BD:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/70a7c83e-ef7a-3165-97e4-bf7529e271d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:39:93:09:a2:cf:eb:49:b5:75:c3:a4:8a:86:7e:a2:bc:67: aa:da:b6:68:ef:1f:48:be:da:ee:4b:a7:4d:7f:19:65:ac:30: 21:60:ec:53:66:3a:13:b9:f5:b1:de:55:68:11:8d:7c:50:9e: f5:9c:84:d5:b1:00:8b:d4:8b:5f:7a:e7:9d:56:b0:49:7f:9a: 2d:81:13:ed:17:6b:b8:50:0b:23:82:26:36:63:cc:c2:2b:af: ec:85:ec:40:64:54:e4:ba:ea:01:a8:e6:33:e3:e7:1a:c1:66: ef:cb:f0:53:d4:da:a2:5c:9f:24:9d:04:92:d1:20:23:31:f0: 9d:12:18:6f:4d:f2:35:71:5d:ac:e7:bd:be:3d:4f:86:53:12: cb:32:4a:0c:70:f8:cc:1f:c1:be:16:9a:bf:17:96:0d:fa:53: 63:5b:f1:d6:03:4b:5d:ac:d3:6c:c5:a2:a1:11:82:85:25:ef: 90:0e:51:3f:11:92:0a:3b:13:ea:ac:24:c0:37:74:9b:3e:39: df:1b:75:3d:48:c8:6a:7a:88:aa:26:9b:5a:59:7d:82:a6:fa: 1e:c6:56:85:7e:3a:bf:bd:f9:62:e0:30:d2:c4:ae:19:cc:29: e1:01:69:75:cf:fc:64:66:3b:a0:61:a0:de:d0:4e:f6:b2:3c: ae:c2:b6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2DbxlqQpFCAkUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MjljMGIwNGMtMjM1MC00NzM4LTliNGQtZjYzOGI1MmYxNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Js7nqmJT6c2d0ZvJmwqcrSBbfFNqBRorQU w0uPLAmVH/BS1ONoDJ+yvORKdfHMQLh9YibWeGjXb9uluXQJS/h5cRYSkUTHrHNQ zvBc2z8BiYr1Fs9iJkq9isy4bGVIEV/F23ixia3eusNzwZ2upjhlL8OJrNTLgiEH OrmsHJdLKJvJ2bvg8qL08OxFtRA8GjF/4SVUvIYQDNt9lLe4/wpv/HF3yU6IcALU g3uffe/cmhZbq4jHiS4zMkUqp9xT04m0HM1ILuHht+d4Sjutz6UGTncsmsAfqxIM IeVtZqCY6sE+FGMJgM6ONyNdIZKxH7+tSDy6NKGDOhhAV6sXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeltUxc3IDDAvfijAmgJyKw5L0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvNzBhN2M4M2UtZWY3YS0z MTY1LTk3ZTQtYmY3NTI5ZTI3MWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs5kwmiz+tJtXXDpIqGfqK8Z6ratmjvH0i+2u5Lp01/GWWsMCFg7FNm OhO59bHeVWgRjXxQnvWchNWxAIvUi196551WsEl/mi2BE+0Xa7hQCyOCJjZjzMIr r+yF7EBkVOS66gGo5jPj5xrBZu/L8FPU2qJcnySdBJLRICMx8J0SGG9N8jVxXazn vb49T4ZTEssySgxw+Mwfwb4Wmr8Xlg36U2Nb8dYDS12s02zFoqERgoUl75AOUT8R kgo7E+qsJMA3dJs+Od8bdT1IyGp6iKomm1pZfYKm+h7GVoV+Or+9+WLgMNLErhnM KeEBaXXP/GRmO6BhoN7QTvayPK7Ctmc= -----END CERTIFICATE-----Generated at Wed Oct 22 02:24:40 2025 by rpki-client