$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/48043442-7756-3170-b12f-152b4e365d42.roa File: 48043442-7756-3170-b12f-152b4e365d42.roa (raw, json) Hash identifier: pOXgmY8fmKhhiDkb82yxAwDovfF8tQmJYVDHXhV17JI= Subject key identifier: AD:83:CD:AE:3F:BB:6F:E5:BC:30:08:0B:5F:0D:EB:4F:8A:38:1A:3C Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584B5DD1E09FB1245C0184BED280 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/48043442-7756-3170-b12f-152b4e365d42.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 14618 IP address blocks: 66.197.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e0:9f:b1:24:5c:01:84:be:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=d8218cd3-dc8b-4a33-88a1-5a950cb99e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:d7:b4:c1:1d:c5:c6:11:45:d6:79:13:49: 4f:ab:46:53:b7:dd:e7:09:dc:a7:f9:4b:e9:bf:ca: 84:fb:64:a9:88:0c:af:f7:e4:6b:a2:51:59:c0:f2: bc:b1:94:37:c5:4a:91:3b:d1:cb:af:1f:6e:00:12: 79:ba:65:ae:1a:0b:86:c6:fe:a7:88:a3:4c:af:af: e8:e1:c4:93:3b:7b:0f:ba:06:4f:ca:02:e3:54:86: 8c:5a:07:e5:3e:89:2c:67:4f:17:58:d5:4c:89:03: ea:60:4f:6b:ed:cb:fd:50:35:3a:2e:f7:10:1f:42: 5f:f2:cb:89:24:53:c7:53:a2:d0:35:4e:f6:56:e2: 0c:3a:e3:0d:75:35:93:1d:34:c6:9f:e0:43:69:04: d9:06:d0:bc:ca:75:dc:f2:af:50:30:04:d9:01:95: d9:6b:85:59:a0:eb:49:18:f8:fd:e4:22:9d:ba:70: bd:03:61:3e:7e:a2:03:3e:42:85:07:8e:40:31:a1: 2f:b5:62:88:da:86:86:20:61:e0:cd:9d:3d:38:95: 43:fb:05:b2:d8:05:16:3d:34:07:b0:73:6e:76:9b: 70:44:b6:65:7b:eb:e0:e7:d5:5c:3a:af:7f:a1:37: cc:fd:e2:c4:97:ee:4d:0c:21:21:3d:82:51:fb:2a: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:83:CD:AE:3F:BB:6F:E5:BC:30:08:0B:5F:0D:EB:4F:8A:38:1A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/48043442-7756-3170-b12f-152b4e365d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 66.197.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1f:69:08:7a:e4:7c:9a:3c:f0:d8:28:62:96:1c:30:a4:8b: 5b:6c:ae:d4:88:0c:41:a6:92:e5:7b:b0:1c:4e:f2:13:e3:2f: c9:86:da:04:cd:5d:f9:bb:16:29:c7:a7:6c:6a:14:1e:f4:a1: 39:46:b3:6f:30:33:fd:e1:58:60:74:ed:2e:38:85:85:71:2d: c3:5f:88:55:7a:1e:29:13:e0:18:55:ba:10:cb:d1:04:cd:51: da:f1:10:24:b6:11:af:a2:e8:d5:93:49:44:ca:1f:aa:00:52: a7:cc:be:b3:3f:ba:12:22:1d:02:70:3a:7f:07:ed:43:72:a0: 19:ff:b0:6c:5f:22:25:3b:c9:65:26:04:fd:73:b8:aa:42:e3: 9b:98:a5:ae:83:4c:06:5c:ac:ca:9e:34:b5:65:c6:63:b3:01: 64:b4:18:06:13:8f:82:61:75:4e:39:80:8c:42:1a:d7:54:16: eb:57:d8:ab:7c:67:12:1c:69:ad:c0:7d:97:90:06:87:15:de: ad:90:c6:05:57:14:72:d3:71:63:59:01:09:b7:81:5d:0a:ea: 31:0e:8c:e9:b6:30:2b:3b:3e:f5:de:c8:05:1b:12:39:7a:39: 83:6d:e8:6c:d4:3a:bd:f7:c3:0a:b9:4f:1e:d4:f0:c6:9e:5d: e7:c9:2c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eCfsSRcAYS+0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDgyMThjZDMtZGM4Yi00YTMzLTg4YTEtNWE5NTBjYjk5ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySHXtMEdxcYRRdZ5E0lPq0ZTt93nCdyn+Uvp v8qE+2SpiAyv9+RrolFZwPK8sZQ3xUqRO9HLrx9uABJ5umWuGguGxv6niKNMr6/o 4cSTO3sPugZPygLjVIaMWgflPoksZ08XWNVMiQPqYE9r7cv9UDU6LvcQH0Jf8suJ JFPHU6LQNU72VuIMOuMNdTWTHTTGn+BDaQTZBtC8ynXc8q9QMATZAZXZa4VZoOtJ GPj95CKdunC9A2E+fqIDPkKFB45AMaEvtWKI2oaGIGHgzZ09OJVD+wWy2AUWPTQH sHNudptwRLZle+vg59VcOq9/oTfM/eLEl+5NDCEhPYJR+ypDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2Dza4/u2/lvDAIC18N60+KOBo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvNDgwNDM0NDItNzc1Ni0z MTcwLWIxMmYtMTUyYjRlMzY1ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIfaQh65HyaPPDYKGKWHDCki1tsrtSIDEGmkuV7sBxO8hPjL8mG2gTN Xfm7FinHp2xqFB70oTlGs28wM/3hWGB07S44hYVxLcNfiFV6HikT4BhVuhDL0QTN UdrxECS2Ea+i6NWTSUTKH6oAUqfMvrM/uhIiHQJwOn8H7UNyoBn/sGxfIiU7yWUm BP1zuKpC45uYpa6DTAZcrMqeNLVlxmOzAWS0GAYTj4JhdU45gIxCGtdUFutX2Kt8 ZxIcaa3AfZeQBocV3q2QxgVXFHLTcWNZAQm3gV0K6jEOjOm2MCs7PvXeyAUbEjl6 OYNt6GzUOr33wwq5Tx7U8MaeXefJLHs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:50 2025 by rpki-client