$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa File: af90bffe-7547-31d9-9cfe-98c0501cfdba.roa (raw, json) Hash identifier: 7dhM6u2aiUDYhhn/cq+0chbCHXdbDzoEuj+lPasa7S8= Subject key identifier: 5A:AC:E1:0D:22:71:CA:0B:96:B8:59:79:88:02:D7:D2:1A:09:8D:95 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584B7C8760496BBF3CBAF7F08860 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 400610 IP address blocks: 66.219.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:60:49:6b:bf:3c:ba:f7:f0:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=4d6be6a7-d238-4ece-941e-a29ed22b7d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:09:9d:d1:ae:dd:a2:fe:db:22:5f:f2:ac: b2:dc:dc:15:4c:ea:14:fb:e1:33:cc:3f:1b:d0:21: 29:34:5f:86:08:6f:15:3e:b1:c4:54:0a:af:c8:d2: 94:99:ac:fb:7e:da:39:ca:83:23:c5:e9:2a:d5:f1: 48:c7:b8:10:1d:c6:0b:aa:34:60:a9:21:ef:20:60: 65:5f:75:38:c6:72:4f:d6:d2:fb:e6:9d:7b:11:a2: a8:58:15:b6:0a:c9:85:33:7e:8b:6a:31:50:87:dd: cb:e0:e2:61:7a:65:82:83:8b:f6:81:4d:41:c7:6f: 96:47:af:19:77:60:9a:e3:76:de:58:18:27:55:a9: 13:99:98:48:1b:ec:8e:69:37:29:a0:b3:6c:b7:ce: 84:3d:e1:a7:03:99:42:48:02:5f:c5:21:67:47:35: e8:5f:d6:dc:28:63:33:48:6d:59:3a:fc:f9:70:f3: ac:6d:61:33:a5:f9:23:19:54:24:e4:a4:0f:a9:f5: 00:c5:c0:84:82:41:5c:5c:bf:83:aa:cd:56:da:47: 30:40:22:69:1e:40:b9:29:38:c9:7f:d1:bd:15:ae: 9f:ec:0c:46:34:e0:c7:8b:69:8e:e3:c3:bd:68:72: c5:54:05:f1:7b:eb:88:23:ae:1a:65:0a:e7:5b:35: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:E1:0D:22:71:CA:0B:96:B8:59:79:88:02:D7:D2:1A:09:8D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ad:f7:3b:e4:63:ff:3d:50:b6:04:ec:e5:fc:76:40:b2:5a: e7:8d:32:32:43:80:ca:c0:9c:50:c0:ba:bf:71:f3:1e:6b:b7: 43:c3:70:d0:70:12:69:90:c7:6b:be:e9:35:5b:a9:4f:50:2d: e3:67:c8:77:b6:b4:e5:d8:c7:83:3d:ed:4a:14:3c:15:06:03: 36:02:2f:a2:76:ee:2d:f6:d5:b6:24:39:43:77:95:98:04:7f: 40:56:ff:8a:e1:cb:18:8e:02:f1:90:d0:22:f9:fa:2b:6d:89: fc:f5:ee:8f:d5:a8:e7:cd:63:e1:ad:30:82:c6:37:88:c9:09: f3:e1:a2:6b:e4:5a:cd:e8:d9:e4:f7:89:0d:16:71:45:c8:cb: 90:65:13:63:16:b6:b9:58:a5:84:c1:ef:0e:28:5e:70:eb:52: e6:94:f8:2e:a6:e3:19:7d:9b:e5:c9:58:29:84:2a:be:2e:c4: 13:eb:41:be:ed:33:00:f9:44:13:9d:ed:75:40:f3:4d:7a:6a: 1b:96:b7:0b:c3:c0:a7:cd:d5:f9:c1:a9:ec:05:8e:6e:bb:66: f7:71:8f:8c:bb:f8:c7:04:eb:01:90:26:1e:46:95:00:96:f5: eb:08:40:c3:07:26:64:53:c1:74:a1:66:88:fc:11:db:67:91: 27:8c:3b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2BJa788uvfwiGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NGQ2YmU2YTctZDIzOC00ZWNlLTk0MWUtYTI5ZWQyMmI3ZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZEJndGu3aL+2yJf8qyy3NwVTOoU++EzzD8b 0CEpNF+GCG8VPrHEVAqvyNKUmaz7fto5yoMjxekq1fFIx7gQHcYLqjRgqSHvIGBl X3U4xnJP1tL75p17EaKoWBW2CsmFM36LajFQh93L4OJhemWCg4v2gU1Bx2+WR68Z d2Ca43beWBgnVakTmZhIG+yOaTcpoLNst86EPeGnA5lCSAJfxSFnRzXoX9bcKGMz SG1ZOvz5cPOsbWEzpfkjGVQk5KQPqfUAxcCEgkFcXL+Dqs1W2kcwQCJpHkC5KTjJ f9G9Fa6f7AxGNODHi2mO48O9aHLFVAXxe+uII64aZQrnWzWfxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqs4Q0iccoLlrhZeYgC19IaCY2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYWY5MGJmZmUtNzU0Ny0z MWQ5LTljZmUtOThjMDUwMWNmZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqt9zvkY/89ULYE7OX8dkCyWueNMjJDgMrAnFDAur9x8x5rt0PDcNBw EmmQx2u+6TVbqU9QLeNnyHe2tOXYx4M97UoUPBUGAzYCL6J27i321bYkOUN3lZgE f0BW/4rhyxiOAvGQ0CL5+ittifz17o/VqOfNY+GtMILGN4jJCfPhomvkWs3o2eT3 iQ0WcUXIy5BlE2MWtrlYpYTB7w4oXnDrUuaU+C6m4xl9m+XJWCmEKr4uxBPrQb7t MwD5RBOd7XVA8016ahuWtwvDwKfN1fnBqewFjm67Zvdxj4y7+McE6wGQJh5GlQCW 9esIQMMHJmRTwXShZoj8EdtnkSeMO54= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:00 2025 by rpki-client