$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa File: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (raw, json) Hash identifier: UftDK6dmjX76yCg2tI3fVCJ/aIdO/VNIhwO7/3RJ+Yk= Subject key identifier: 2E:0E:0C:8E:58:E1:1F:30:92:0A:F3:FF:C6:45:2F:B1:53:23:21:A5 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584B6631F64A13D6F9B23B42D380 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 399804 IP address blocks: 66.187.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f6:4a:13:d6:f9:b2:3b:42:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=e90896b6-f1e5-4291-b229-a2f73c99e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:f5:ff:41:dd:4a:6a:34:dc:0b:35:92:2e: de:33:66:66:6b:80:2a:14:83:19:b2:b2:10:bc:20: 1a:dd:02:87:c7:90:cf:88:69:42:c8:0a:19:c8:a9: 8c:cc:c7:ce:8e:9c:55:f7:8d:db:7d:18:e3:cc:53: 32:3e:8b:78:0f:a7:16:b5:31:6e:e4:fc:b1:6f:e5: ea:9e:1e:90:65:49:35:2d:0f:64:39:80:39:b8:76: 4c:cd:a8:db:e0:08:cc:e6:72:3b:95:4c:b6:39:96: 9d:58:5e:22:be:0d:d9:64:57:4a:17:e2:04:24:29: d4:33:8b:5c:ff:bc:e5:82:44:24:aa:63:d5:4d:0c: 85:85:5f:aa:cd:ac:e6:a9:bf:94:8b:dd:2c:52:a1: 21:8c:f2:79:89:9a:de:14:95:3a:73:71:c6:99:5f: 93:d7:6d:ae:79:ab:c1:86:f8:8e:0e:75:f9:8e:26: f4:d3:12:b8:48:6d:76:22:bd:84:de:73:ae:b9:e2: 05:c2:d1:fa:dd:19:ff:75:e3:1e:6f:e0:9f:65:e8: 50:72:83:f9:ae:36:2b:3d:c0:66:9b:ab:be:92:da: 92:e0:11:8b:cc:56:65:5b:c3:31:66:2b:d3:ce:37: 56:11:31:9f:88:e4:e1:21:17:82:4d:48:0a:87:5c: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0E:0C:8E:58:E1:1F:30:92:0A:F3:FF:C6:45:2F:B1:53:23:21:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:87:a4:7c:1b:b3:fe:38:71:cb:9c:c3:da:6d:3c:3f:32:68: 67:87:13:eb:9b:03:8a:85:4c:4e:22:85:4a:82:d0:b9:5d:5d: 7c:ee:cd:cf:08:ff:fb:73:4a:ae:6a:0d:97:61:66:5f:41:c9: 47:a7:83:ba:59:1b:a9:88:34:2f:32:d7:d6:a6:86:3b:78:50: d2:f4:a6:72:f9:67:c1:11:45:32:b6:d7:61:f7:c0:b4:f5:66: 3f:7e:b4:ed:a9:44:d4:3d:e5:fe:22:7e:1f:d7:54:80:09:74: 82:fd:2c:72:c9:81:bd:98:39:93:c2:02:b1:6b:31:9f:78:49: bc:41:3f:93:42:7b:25:ee:72:f1:4d:06:31:af:55:47:3d:40: 89:d6:a4:23:a6:e9:9f:42:73:bc:36:f0:4e:78:fa:b5:89:b3: 34:aa:9a:83:37:11:4f:5d:5e:f5:78:48:f2:a7:fd:fb:8b:f4: bd:7b:39:d2:f1:a9:d1:7d:e5:6a:20:1f:21:d6:5c:79:08:6d: 43:4a:46:93:bf:66:20:43:45:05:7d:56:5c:49:d7:2d:5d:f7: c7:e6:3c:e0:b4:16:c3:a4:6f:9a:51:f8:27:d0:d2:00:e1:0f: 33:3a:22:0f:d7:0c:e8:8b:3a:72:b8:9c:92:12:f4:ba:be:9d: b4:70:68:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfZKE9b5sjtC04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTkwODk2YjYtZjFlNS00MjkxLWIyMjktYTJmNzNjOTllNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRf1/0HdSmo03As1ki7eM2Zma4AqFIMZsrIQ vCAa3QKHx5DPiGlCyAoZyKmMzMfOjpxV943bfRjjzFMyPot4D6cWtTFu5Pyxb+Xq nh6QZUk1LQ9kOYA5uHZMzajb4AjM5nI7lUy2OZadWF4ivg3ZZFdKF+IEJCnUM4tc /7zlgkQkqmPVTQyFhV+qzazmqb+Ui90sUqEhjPJ5iZreFJU6c3HGmV+T122ueavB hviODnX5jib00xK4SG12Ir2E3nOuueIFwtH63Rn/deMeb+CfZehQcoP5rjYrPcBm m6u+ktqS4BGLzFZlW8MxZivTzjdWETGfiOThIReCTUgKh1yWVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4ODI5Y4R8wkgrz/8ZFL7FTIyGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvZDU3YzM5MGMtOWYwYS0z ODVjLWEwNDQtNmFjNjBjMzUwMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaHpHwbs/44ccucw9ptPD8yaGeHE+ubA4qFTE4ihUqC0LldXXzuzc8I //tzSq5qDZdhZl9ByUeng7pZG6mINC8y19amhjt4UNL0pnL5Z8ERRTK212H3wLT1 Zj9+tO2pRNQ95f4ifh/XVIAJdIL9LHLJgb2YOZPCArFrMZ94SbxBP5NCeyXucvFN BjGvVUc9QInWpCOm6Z9Cc7w28E54+rWJszSqmoM3EU9dXvV4SPKn/fuL9L17OdLx qdF95WogHyHWXHkIbUNKRpO/ZiBDRQV9VlxJ1y1d98fmPOC0FsOkb5pR+CfQ0gDh DzM6Ig/XDOiLOnK4nJIS9Lq+nbRwaCM= -----END CERTIFICATE-----Generated at Mon Oct 20 22:20:09 2025 by rpki-client