$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af6f4c5d-7efc-3cb0-887a-a150c08a1d30.roa File: af6f4c5d-7efc-3cb0-887a-a150c08a1d30.roa (raw, json) Hash identifier: gPcRvQF2gakxgykLid5OV8JPUvLBAGLp6AylqMllm6U= Subject key identifier: D1:B5:37:8A:C1:A2:4D:88:CF:1B:C3:D8:CA:71:C1:F6:F3:28:AD:CE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D77D7A880DD82CF463080 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af6f4c5d-7efc-3cb0-887a-a150c08a1d30.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22046 IP address blocks: 66.189.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:77:d7:a8:80:dd:82:cf:46:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c27f7c3e-18e1-48fa-a334-40840d957ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:7c:ff:75:32:ac:34:18:26:5d:eb:b4:12: 9d:3b:af:bc:70:04:a1:ad:ec:21:b6:c3:35:13:93: 8f:d9:94:15:98:28:21:2b:21:28:c0:e9:01:d6:78: c7:7b:6d:a1:dd:1f:3a:9a:58:c5:60:15:b1:03:59: c9:7f:a0:66:58:b5:40:19:f7:a8:c4:5e:cf:64:30: d6:98:09:b9:93:4c:7a:c6:20:41:07:d4:64:bd:4d: 94:65:93:bb:8e:3f:2d:ca:1a:ad:74:39:42:ea:33: 1a:97:c4:67:49:e6:9f:19:65:57:4d:a4:32:ab:22: 60:d0:9f:0a:61:d6:4f:11:cf:c3:96:db:ab:fb:9d: 07:47:4d:7f:93:92:3d:a3:4c:2f:a7:a1:ed:da:79: 34:b1:fa:59:83:22:04:40:84:3f:87:bd:21:88:6d: aa:be:fd:5b:57:99:13:2c:06:a6:76:de:17:88:c8: e9:eb:6a:ba:59:39:da:6a:c4:a6:22:f3:ff:3a:a4: 5f:44:c2:57:d9:7c:ba:18:80:c9:7a:5e:11:47:ed: 5c:83:25:26:9a:ac:98:3c:bc:9c:b9:70:5d:a0:3b: be:06:bd:c2:a8:22:4d:c9:be:ca:e2:c8:41:67:d4: 11:0d:b0:51:91:55:b6:48:fe:2e:31:07:41:50:8a: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:37:8A:C1:A2:4D:88:CF:1B:C3:D8:CA:71:C1:F6:F3:28:AD:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af6f4c5d-7efc-3cb0-887a-a150c08a1d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.189.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b9:b4:f0:25:a3:5d:5f:d1:a8:e2:71:b4:d0:9a:79:40:9e: 28:6a:8a:70:31:11:46:74:c1:61:bc:2a:93:6e:31:80:1f:a2: 32:ed:8d:65:ed:ec:72:07:c7:85:98:6f:99:bc:2c:d4:43:ea: 25:18:ec:e3:d9:c0:fa:89:a0:b8:5d:01:12:07:43:92:22:01: af:8e:87:9d:43:ac:16:22:e7:01:78:1a:01:68:2a:65:9c:11: 86:8d:33:fa:09:c6:14:ce:b4:d6:42:b2:2b:dd:59:cb:12:53: 97:94:77:a5:81:a3:5b:f8:f2:95:d0:a6:82:3b:de:c7:46:92: 90:70:0d:0a:b0:7b:65:e7:30:d2:49:99:3c:f7:fb:96:1d:5b: 24:6f:97:1a:71:9a:e0:52:56:d5:ee:fd:b1:0d:69:1c:c1:f5: f3:36:4a:db:94:3d:3c:49:cc:3c:c5:53:66:69:ca:d2:63:e6: 50:a5:f3:1b:2e:b9:aa:42:6c:72:4d:f2:3c:dc:83:72:19:ea: 3c:b8:26:f4:ab:7c:d9:e4:46:e1:2f:d6:b9:66:8f:c9:ca:2a: e8:8d:cf:a8:44:d2:41:80:aa:80:da:1d:71:a3:e6:f7:4b:a9: 4f:cc:62:85:32:80:f9:2d:3a:72:9d:68:ab:44:ee:c5:4b:61: f9:d8:3f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHXfXqIDdgs9GMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzI3ZjdjM2UtMThlMS00OGZhLWEzMzQtNDA4NDBkOTU3YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYh8/3UyrDQYJl3rtBKdO6+8cAShrewhtsM1 E5OP2ZQVmCghKyEowOkB1njHe22h3R86mljFYBWxA1nJf6BmWLVAGfeoxF7PZDDW mAm5k0x6xiBBB9RkvU2UZZO7jj8tyhqtdDlC6jMal8RnSeafGWVXTaQyqyJg0J8K YdZPEc/Dltur+50HR01/k5I9o0wvp6Ht2nk0sfpZgyIEQIQ/h70hiG2qvv1bV5kT LAamdt4XiMjp62q6WTnaasSmIvP/OqRfRMJX2Xy6GIDJel4RR+1cgyUmmqyYPLyc uXBdoDu+Br3CqCJNyb7K4shBZ9QRDbBRkVW2SP4uMQdBUIr+qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG1N4rBok2IzxvD2MpxwfbzKK3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWY2ZjRjNWQtN2VmYy0z Y2IwLTg4N2EtYTE1MGMwOGExZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQr37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi5tPAlo11f0ajicbTQmnlAnihqinAxEUZ0wWG8KpNuMYAfojLtjWXt 7HIHx4WYb5m8LNRD6iUY7OPZwPqJoLhdARIHQ5IiAa+Oh51DrBYi5wF4GgFoKmWc EYaNM/oJxhTOtNZCsivdWcsSU5eUd6WBo1v48pXQpoI73sdGkpBwDQqwe2XnMNJJ mTz3+5YdWyRvlxpxmuBSVtXu/bENaRzB9fM2StuUPTxJzDzFU2ZpytJj5lCl8xsu uapCbHJN8jzcg3IZ6jy4JvSrfNnkRuEv1rlmj8nKKuiNz6hE0kGAqoDaHXGj5vdL qU/MYoUygPktOnKdaKtE7sVLYfnYP9c= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:46 2025 by rpki-client