$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa File: 8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa (raw, json) Hash identifier: Ncm3dWlGx6Iy6X2vNF+A4BNnZpYEDRg777P2IwiDmg4= Subject key identifier: 27:48:BC:A7:59:CA:BB:FB:43:AB:F8:59:D7:22:A3:AA:5B:48:DA:E3 Certificate issuer: /CN=33beb877-dbaf-4d25-870e-a43af90cc071 Certificate serial: 010D0C9F4328584B7C87686976C3284216C82640 Authority key identifier: A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 26860 IP address blocks: 66.17.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:68:69:76:c3:28:42:16:c8:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33beb877-dbaf-4d25-870e-a43af90cc071 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=f2614b32-0c35-42ca-abe7-de5e3696cac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:a9:23:18:e2:ff:41:32:a1:38:64:9c:10: 46:52:c7:ef:bc:48:16:4c:83:ac:4a:9d:bd:9f:1a: 91:5e:1b:60:dd:e6:7f:c9:5b:12:4b:5e:18:1a:a9: 63:dc:c8:1a:b9:96:bd:74:2b:18:34:92:24:4d:6b: 1a:7f:b9:6f:f4:27:f1:30:76:d2:f2:01:95:47:ff: ce:39:91:43:4d:2b:f6:b3:ac:9b:ad:d4:73:95:7a: d0:58:e2:92:c9:5e:16:ee:e3:4f:4e:55:fb:06:ad: ce:d1:68:b3:87:3b:f8:09:48:63:25:09:43:fe:99: f1:ff:4a:92:de:b3:1f:e4:e7:40:90:a3:ad:ed:4b: 62:f3:e4:34:fd:d8:df:76:f5:a3:75:f6:c6:9e:5d: 2f:e2:06:f4:f5:7e:3b:84:15:fc:ab:51:c6:0e:b5: 71:ba:96:14:b3:ab:2b:5e:e0:d4:30:f3:be:de:13: 1d:e3:c6:d2:5f:6d:62:ba:7a:e0:2c:97:d6:43:85: f4:76:f6:a9:ba:b1:3a:c6:35:db:6d:13:a9:62:c3: 70:59:9a:45:09:a4:39:86:f1:78:59:c8:f2:60:f7: 92:e8:05:9d:94:01:84:d2:b2:47:0c:45:4c:20:46: 0f:5f:c9:a0:61:2c:ed:f1:76:73:42:95:ab:2f:09: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:BC:A7:59:CA:BB:FB:43:AB:F8:59:D7:22:A3:AA:5B:48:DA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl X509v3 Authority Key Identifier: keyid:A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer sbgp-ipAddrBlock: critical IPv4: 66.17.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b5:72:0b:a8:0c:79:76:7a:dd:bc:70:8e:d4:ff:39:22:07: b2:da:4e:60:d2:7c:30:74:da:bd:3e:4d:a4:df:65:a3:74:5b: cd:c1:41:2f:00:57:b0:fd:ea:29:45:ea:3a:4e:40:47:99:42: 42:70:b3:d4:5c:f3:ea:53:88:b4:36:14:46:c5:33:4e:6a:9c: e1:67:61:e7:df:1d:07:e3:10:5d:ba:79:35:92:3d:5c:b8:52: 29:9d:9f:e9:bb:94:08:17:5b:6b:59:e6:ca:f8:b4:b5:6a:92: d5:1d:fb:69:af:18:f4:20:85:af:ad:00:a2:0e:ac:0c:7d:38: 96:48:db:13:70:2f:45:2e:c3:28:5a:e8:85:4c:d0:4a:0a:44: 0c:ca:3f:f7:72:1f:88:c1:46:e8:25:43:3f:aa:d6:a9:68:cc: 02:4c:44:9a:cc:2e:bc:3e:63:37:76:84:80:e7:a6:05:b6:40: cb:3d:42:17:1d:4a:4a:d8:15:3d:4b:4a:92:33:c3:9e:7e:4f: c6:66:57:b9:67:53:30:82:e9:3b:21:33:68:59:07:3b:e2:39: 4b:fd:0c:37:27:e8:4a:80:60:44:9b:61:ce:49:a0:46:f5:23: ac:4d:2c:4b:b4:01:5e:c3:6c:93:d8:90:62:f8:d2:cc:c3:c9: f7:0c:80:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2hpdsMoQhbIJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNiZWI4NzctZGJhZi00ZDI1LTg3MGUtYTQzYWY5MGNj MDcxMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZjI2MTRiMzItMGMzNS00MmNhLWFiZTctZGU1ZTM2OTZjYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+pIxji/0EyoThknBBGUsfvvEgWTIOsSp29 nxqRXhtg3eZ/yVsSS14YGqlj3MgauZa9dCsYNJIkTWsaf7lv9CfxMHbS8gGVR//O OZFDTSv2s6ybrdRzlXrQWOKSyV4W7uNPTlX7Bq3O0Wizhzv4CUhjJQlD/pnx/0qS 3rMf5OdAkKOt7Uti8+Q0/djfdvWjdfbGnl0v4gb09X47hBX8q1HGDrVxupYUs6sr XuDUMPO+3hMd48bSX21iunrgLJfWQ4X0dvapurE6xjXbbROpYsNwWZpFCaQ5hvF4 WcjyYPeS6AWdlAGE0rJHDEVMIEYPX8mgYSzt8XZzQpWrLwkXbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdIvKdZyrv7Q6v4Wdcio6pbSNrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Jl Yjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNhZjkwY2MwNzEvOGU3NTg1NzQtZjBkOS0z MGIxLThmZTUtYTFkYzBmZDAxODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNiZWI4NzctZGJhZi00ZDI1LTg3 MGUtYTQzYWY5MGNjMDcxLzMzYmViODc3LWRiYWYtNGQyNS04NzBlLWE0M2FmOTBj YzA3MS5jcmwwHwYDVR0jBBgwFoAUoO4t/I3mu8OsuhTW4pUgc+cs+Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2JlYjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNh ZjkwY2MwNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQhFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK1cguoDHl2et28cI7U/zkiB7LaTmDSfDB02r0+TaTfZaN0W83BQS8A V7D96ilF6jpOQEeZQkJws9Rc8+pTiLQ2FEbFM05qnOFnYeffHQfjEF26eTWSPVy4 Uimdn+m7lAgXW2tZ5sr4tLVqktUd+2mvGPQgha+tAKIOrAx9OJZI2xNwL0Uuwyha 6IVM0EoKRAzKP/dyH4jBRuglQz+q1qlozAJMRJrMLrw+Yzd2hIDnpgW2QMs9Qhcd SkrYFT1LSpIzw55+T8ZmV7lnUzCC6TshM2hZBzviOUv9DDcn6EqAYESbYc5JoEb1 I6xNLEu0AV7DbJPYkGL40szDyfcMgC0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:14 2025 by rpki-client