$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa File: 2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa (raw, json) Hash identifier: C5d6Rt1krM6ZFtv35cxSvt7ADfSPeBUrSDeQ/ySH1Ws= Subject key identifier: 6A:4C:26:F1:50:AC:CF:85:75:3E:CC:2E:5E:8A:E0:DB:E5:33:34:28 Certificate issuer: /CN=670a3755-a570-42cf-846d-b0190d7ff61a Certificate serial: 010D0C9F4328584B8EACBC0E56FE5B0554D84DE0 Authority key identifier: E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 393887 IP address blocks: 66.179.200.0/24 maxlen: 24 66.179.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:bc:0e:56:fe:5b:05:54:d8:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670a3755-a570-42cf-846d-b0190d7ff61a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ff2e129d-74bc-4c8b-855f-b002a6b3c00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:6e:be:6d:43:d5:a6:b5:09:c3:fa:59:df: 7a:b8:9b:d6:ab:07:15:3a:43:03:32:d6:d7:4e:93: 24:94:40:83:0e:85:e9:01:46:88:93:f5:4c:6d:02: 90:8a:68:a6:28:a7:ab:4c:08:4c:51:1d:ea:af:f0: 35:ce:0c:29:77:cc:71:c0:b9:ba:49:c3:3a:9c:c1: 41:b1:59:fd:2d:64:e1:1a:d9:ff:60:1f:09:b4:f5: dd:bc:da:c8:e4:04:0d:ee:0b:ee:c5:c9:4b:c4:bd: 4c:4d:66:d5:26:03:b1:bd:02:7d:ea:2b:5a:8e:d8: 03:54:d5:29:8b:82:90:72:26:73:b8:81:9b:f9:72: aa:7e:fd:e0:6f:36:a0:f8:8e:61:19:53:47:12:c2: f9:43:2d:f3:ea:65:a8:77:e8:d6:d0:05:ed:02:62: 3a:07:4c:4d:e2:3a:70:47:73:de:b8:13:d4:94:d9: 4a:53:76:91:da:82:27:aa:88:54:a6:18:d5:a5:63: 1f:11:90:6b:0b:50:06:f4:db:b4:57:c3:8f:cf:a7: 4d:5c:6d:f1:df:9f:2a:6a:57:ab:30:d8:82:e9:3f: bb:c5:f1:b1:ac:e8:88:be:4b:85:68:56:d2:40:e5: 68:7a:80:f9:ae:d5:69:d1:be:91:42:d8:d5:1e:97: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:26:F1:50:AC:CF:85:75:3E:CC:2E:5E:8A:E0:DB:E5:33:34:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/2b11d77d-36b4-36fa-bd23-0080d6a6e431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl X509v3 Authority Key Identifier: keyid:E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:46:00:1c:4e:71:fc:c8:31:f3:34:66:7c:7f:1f:d4:94:d5: c8:96:e7:23:b1:33:5d:12:f7:97:b6:68:e8:3e:88:6f:b8:2d: a9:90:b3:02:cb:da:25:00:e9:a9:fb:dd:50:0e:fa:48:b5:fc: f1:41:58:f8:be:61:3c:0f:6a:76:c9:2f:83:be:fc:63:67:1c: 5a:93:bb:39:29:6c:67:39:96:07:5c:a6:34:2b:5f:31:49:53: 43:a5:72:c7:ec:28:eb:71:ba:49:41:9f:33:bd:a5:f3:e2:9d: 0c:91:e2:be:2f:53:51:be:02:a5:13:3e:af:4b:5b:ad:fc:3b: b3:d8:87:61:46:0e:01:b2:c7:3d:9e:63:46:89:1f:44:d3:61: 45:5b:d1:50:d0:7e:ab:fc:84:a2:74:1b:55:f0:a5:cb:60:86: 43:28:03:14:0c:62:a4:fd:dc:48:bf:e8:48:d3:18:c0:77:ca: e5:a4:d1:6d:42:09:68:d2:95:6b:0f:f6:e4:d1:5e:d4:d4:02: c6:72:40:1c:ad:a7:96:7a:06:2d:d6:d9:c3:79:49:67:11:63: c8:c3:69:7e:3f:16:11:5e:85:e2:d0:c3:7a:64:61:04:b9:39: 09:ea:5a:fa:3e:8a:ef:2c:4e:c7:5e:7b:45:22:eb:e4:50:a9: 2d:14:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrLwOVv5bBVTYTeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYTM3NTUtYTU3MC00MmNmLTg0NmQtYjAxOTBkN2Zm NjFhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmYyZTEyOWQtNzRiYy00YzhiLTg1NWYtYjAwMmE2YjNjMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun9uvm1D1aa1CcP6Wd96uJvWqwcVOkMDMtbX TpMklECDDoXpAUaIk/VMbQKQimimKKerTAhMUR3qr/A1zgwpd8xxwLm6ScM6nMFB sVn9LWThGtn/YB8JtPXdvNrI5AQN7gvuxclLxL1MTWbVJgOxvQJ96itajtgDVNUp i4KQciZzuIGb+XKqfv3gbzag+I5hGVNHEsL5Qy3z6mWod+jW0AXtAmI6B0xN4jpw R3PeuBPUlNlKU3aR2oInqohUphjVpWMfEZBrC1AG9Nu0V8OPz6dNXG3x358qaler MNiC6T+7xfGxrOiIvkuFaFbSQOVoeoD5rtVp0b6RQtjVHpd2xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpMJvFQrM+FdT7MLl6K4NvlMzQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NzBh Mzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5MGQ3ZmY2MWEvMmIxMWQ3N2QtMzZiNC0z NmZhLWJkMjMtMDA4MGQ2YTZlNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjcwYTM3NTUtYTU3MC00MmNmLTg0 NmQtYjAxOTBkN2ZmNjFhLzY3MGEzNzU1LWE1NzAtNDJjZi04NDZkLWIwMTkwZDdm ZjYxYS5jcmwwHwYDVR0jBBgwFoAU4kOkH9AIRiHhlMQXHxjeP9tLKdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NzBhMzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5 MGQ3ZmY2MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdGABxOcfzIMfM0Znx/H9SU1ciW5yOxM10S95e2aOg+iG+4LamQswLL 2iUA6an73VAO+ki1/PFBWPi+YTwPanbJL4O+/GNnHFqTuzkpbGc5lgdcpjQrXzFJ U0OlcsfsKOtxuklBnzO9pfPinQyR4r4vU1G+AqUTPq9LW638O7PYh2FGDgGyxz2e Y0aJH0TTYUVb0VDQfqv8hKJ0G1XwpctghkMoAxQMYqT93Ei/6EjTGMB3yuWk0W1C CWjSlWsP9uTRXtTUAsZyQBytp5Z6Bi3W2cN5SWcRY8jDaX4/FhFeheLQw3pkYQS5 OQnqWvo+iu8sTsdee0Ui6+RQqS0UaZE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:06 2025 by rpki-client