$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa File: 628d4d18-2b20-319e-8245-80ecdf68c5f8.roa (raw, json) Hash identifier: 7YtSH7tPDnRL25O2HJ1NlqoefN5MSFfA/A8eBDHJi+M= Subject key identifier: 3E:49:CE:4D:E7:34:0E:64:90:00:F5:52:60:28:E5:91:38:EF:4B:D1 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584B68FC996FF6662B5C58EE1F80 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 66.59.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:99:6f:f6:66:2b:5c:58:ee:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=a2334a78-9f72-40f4-821c-3b2508920578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:38:97:58:ad:72:20:d5:a4:ff:33:7c:6a: 90:64:4d:cd:76:5d:c3:da:41:6c:54:c4:c9:35:4c: 37:c5:d2:c6:71:5c:c0:64:84:e5:d7:d9:8f:c4:41: 47:07:ad:b2:66:3a:3b:78:35:b0:88:45:91:44:1d: c4:2c:61:15:02:94:57:1b:26:9c:08:bf:22:ea:9a: c2:39:42:da:86:fd:88:4f:6b:19:81:6c:33:db:3c: 59:f9:44:80:30:3a:13:d4:a0:d7:b1:a1:5b:bb:91: 16:f4:8e:a8:b5:95:75:57:18:a6:96:20:dd:ff:6a: 04:52:3e:04:62:c1:47:65:66:82:ff:18:75:a8:f4: a0:af:14:39:0e:5d:b5:db:70:3e:18:e3:46:44:88: 39:ee:00:fd:02:44:01:f1:48:e5:c9:b3:fd:0a:37: 90:62:f1:e1:2a:a7:3e:9e:d1:9e:2f:1c:bf:c4:37: 18:80:e4:70:a3:70:b6:7f:45:49:07:75:99:35:10: dc:1e:33:66:41:5c:68:89:b6:10:91:1b:83:7d:b6: e2:2c:37:a4:e3:76:e2:44:f2:fa:27:b5:03:bc:70: 31:08:bf:7a:58:f7:b4:b7:8c:84:fe:e2:0c:d5:9e: 5a:77:21:10:21:45:09:fc:18:43:72:1f:e5:92:f2: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:49:CE:4D:E7:34:0E:64:90:00:F5:52:60:28:E5:91:38:EF:4B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 66.59.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:dd:03:34:77:d9:78:75:7d:8e:1e:2c:7a:8c:3a:54:c6:a9: 14:4e:fa:8a:b8:19:a3:e6:76:1f:96:f3:a5:a8:2c:fd:7f:3e: 99:e6:ad:e3:07:71:b1:0b:7c:26:43:5d:a6:66:7c:39:41:be: 5e:00:31:05:46:60:12:a9:e7:f5:65:1b:f4:e6:d8:03:a7:6b: f7:3f:36:3c:77:e7:2a:70:93:87:2b:ca:ef:4f:8b:21:26:e6: 3e:6a:5d:c7:99:3b:1e:70:9c:7d:c6:d4:99:54:b4:ae:04:b4: 38:30:76:3c:5a:7d:48:de:6c:80:01:6b:f4:13:a5:77:a5:e8: 2d:8c:35:ed:c8:9b:66:88:91:a5:91:64:d2:44:9d:21:af:56: 32:32:a1:6d:d0:b8:5d:19:ac:32:b7:b5:94:2c:07:d4:37:76: 81:8f:c2:1e:8d:21:7e:31:70:20:60:fb:da:70:dd:ef:47:a1: 47:5b:6c:a1:01:02:8f:cb:ae:dc:5a:66:d0:75:df:fc:9e:e6: dc:0e:31:d9:36:93:6b:a9:2a:e3:d3:35:49:44:56:c3:aa:cd: d6:41:aa:b9:08:1a:95:40:0b:e3:c9:b9:49:ed:10:82:a8:cd: e0:f3:28:3b:24:84:c2:68:22:03:f9:97:f0:b8:09:8c:9d:99: 6d:ec:e5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Jlv9mYrXFjuH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk YTIzMzRhNzgtOWY3Mi00MGY0LTgyMWMtM2IyNTA4OTIwNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnk4l1itciDVpP8zfGqQZE3Ndl3D2kFsVMTJ NUw3xdLGcVzAZITl19mPxEFHB62yZjo7eDWwiEWRRB3ELGEVApRXGyacCL8i6prC OULahv2IT2sZgWwz2zxZ+USAMDoT1KDXsaFbu5EW9I6otZV1VximliDd/2oEUj4E YsFHZWaC/xh1qPSgrxQ5Dl2123A+GONGRIg57gD9AkQB8UjlybP9CjeQYvHhKqc+ ntGeLxy/xDcYgORwo3C2f0VJB3WZNRDcHjNmQVxoibYQkRuDfbbiLDek43biRPL6 J7UDvHAxCL96WPe0t4yE/uIM1Z5adyEQIUUJ/BhDch/lkvKaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Jzk3nNA5kkAD1UmAo5ZE470vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvNjI4ZDRkMTgtMmIyMC0z MTllLTgyNDUtODBlY2RmNjhjNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQjsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvdAzR32Xh1fY4eLHqMOlTGqRRO+oq4GaPmdh+W86WoLP1/PpnmreMH cbELfCZDXaZmfDlBvl4AMQVGYBKp5/VlG/Tm2AOna/c/Njx35ypwk4cryu9PiyEm 5j5qXceZOx5wnH3G1JlUtK4EtDgwdjxafUjebIABa/QTpXel6C2MNe3Im2aIkaWR ZNJEnSGvVjIyoW3QuF0ZrDK3tZQsB9Q3doGPwh6NIX4xcCBg+9pw3e9HoUdbbKEB Ao/LrtxaZtB13/ye5twOMdk2k2upKuPTNUlEVsOqzdZBqrkIGpVAC+PJuUntEIKo zeDzKDskhMJoIgP5l/C4CYydmW3s5Qg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:22:54 2025 by rpki-client