$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa File: fcf651bf-062d-3478-a5f1-a3f894589147.roa (raw, json) Hash identifier: uomOJO/vZlKe7z3Vp1pAzS5pl9JeslP69zy3bWWHxFo= Subject key identifier: 7F:F7:76:0C:88:E0:02:16:87:21:73:7D:D1:16:8C:41:9F:E5:6F:2F Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584B7C876028638F34AB8B13D380 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 400610 IP address blocks: 66.219.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:60:28:63:8f:34:ab:8b:13:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=dffbf6fc-a583-4530-8c9f-e5d6fff38d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:43:d9:16:22:a4:ea:de:5c:c4:ea:9d:d8: 4f:b7:76:81:d6:9b:e5:2d:09:64:f1:c3:16:05:e7: d1:f9:58:70:cb:14:b2:66:10:58:75:d0:a6:d7:69: f7:b3:09:96:a3:d0:b2:36:b3:1c:5b:c1:97:47:48: 50:1a:7a:0d:fd:dd:25:29:7a:6a:45:43:25:5f:a8: 5c:d8:e2:a0:b9:02:ae:47:f8:20:b5:06:a4:a4:80: c8:fb:13:42:b1:f1:3b:af:6a:47:82:c0:27:0e:43: 5e:b7:c6:81:94:ee:d6:8d:5b:cc:00:74:3d:61:64: 6d:76:84:fa:51:2e:cd:15:df:42:25:9a:cf:11:7a: 95:82:bf:40:10:03:55:92:d7:95:00:c5:5f:a6:ee: 8c:46:fe:7b:45:a3:82:05:af:3d:ac:7c:5f:da:2c: d7:5c:5d:9c:db:2e:50:26:f2:ba:13:da:71:0b:9d: e1:86:c9:be:63:9c:82:3a:41:4e:ad:a9:16:f4:31: 4e:60:5b:0d:de:26:e5:93:39:b4:70:61:13:33:59: ed:6d:55:47:89:ae:5b:67:ba:b8:6f:13:4d:8f:0b: 42:49:64:b1:65:bb:d4:21:aa:25:4f:ad:e7:58:3d: 84:70:12:19:40:c5:e3:5d:13:62:25:15:35:cd:0e: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:76:0C:88:E0:02:16:87:21:73:7D:D1:16:8C:41:9F:E5:6F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c9:26:9d:5c:e8:61:c5:0b:5a:4e:72:61:af:88:46:e9:87: e7:db:f3:b7:e1:6b:7a:be:cd:fb:ec:ce:99:dd:7b:bc:ee:46: d3:07:fb:16:6a:a2:88:f0:75:a8:b3:39:bc:bf:c3:20:0b:c1: db:a7:fd:c1:33:18:dc:11:9d:47:dd:f8:84:04:c6:b8:0f:16: f0:0d:0e:fe:ef:d0:90:53:37:58:82:b6:49:51:94:ee:ad:1e: f2:b4:93:f5:2f:36:ab:5f:b5:e2:01:77:95:a7:3d:4e:92:ec: 88:ec:d2:23:9a:11:04:52:5f:33:fb:da:78:69:2f:87:2c:c0: 8e:74:76:18:cd:41:cc:9d:76:f2:ee:c1:96:8b:1a:88:79:aa: 92:99:83:2d:54:ee:9d:ca:fb:a4:d0:4f:b9:62:45:c6:73:86: 1f:2e:21:7d:30:7b:f6:37:11:23:57:fc:cf:2f:1e:8c:d0:2f: e5:f8:03:df:c9:4c:12:3d:92:f3:96:30:3e:9a:83:d2:1b:d5: ad:5a:af:fe:5d:11:43:3b:49:8e:96:81:06:e4:60:c7:37:5f: 96:7c:5b:ed:50:b2:b6:b9:21:8e:d4:9d:2a:44:5f:e6:98:50: 48:90:47:65:98:80:12:11:8e:3f:70:02:95:45:c7:8d:3b:56: 05:0e:9b:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2AoY480q4sT04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZGZmYmY2ZmMtYTU4My00NTMwLThjOWYtZTVkNmZmZjM4ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3xD2RYipOreXMTqndhPt3aB1pvlLQlk8cMW BefR+VhwyxSyZhBYddCm12n3swmWo9CyNrMcW8GXR0hQGnoN/d0lKXpqRUMlX6hc 2OKguQKuR/ggtQakpIDI+xNCsfE7r2pHgsAnDkNet8aBlO7WjVvMAHQ9YWRtdoT6 US7NFd9CJZrPEXqVgr9AEANVkteVAMVfpu6MRv57RaOCBa89rHxf2izXXF2c2y5Q JvK6E9pxC53hhsm+Y5yCOkFOrakW9DFOYFsN3iblkzm0cGETM1ntbVVHia5bZ7q4 bxNNjwtCSWSxZbvUIaolT63nWD2EcBIZQMXjXRNiJRU1zQ48RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/3dgyI4AIWhyFzfdEWjEGf5W8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvZmNmNjUxYmYtMDYyZC0z NDc4LWE1ZjEtYTNmODk0NTg5MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDJJp1c6GHFC1pOcmGviEbph+fb87fha3q+zfvszpnde7zuRtMH+xZq oojwdaizOby/wyALwdun/cEzGNwRnUfd+IQExrgPFvANDv7v0JBTN1iCtklRlO6t HvK0k/UvNqtfteIBd5WnPU6S7Ijs0iOaEQRSXzP72nhpL4cswI50dhjNQcyddvLu wZaLGoh5qpKZgy1U7p3K+6TQT7liRcZzhh8uIX0we/Y3ESNX/M8vHozQL+X4A9/J TBI9kvOWMD6ag9Ib1a1ar/5dEUM7SY6WgQbkYMc3X5Z8W+1Qsra5IY7UnSpEX+aY UEiQR2WYgBIRjj9wApVFx407VgUOmzU= -----END CERTIFICATE-----Generated at Wed Oct 22 00:12:02 2025 by rpki-client