$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa File: 976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json) Hash identifier: JnjMR5vD0mG3iW51eozuwrPLDa6uTOLisXTbSUJsKh4= Subject key identifier: B2:20:44:06:A7:7A:6A:FE:E4:42:DC:D0:FF:91:84:8A:7B:47:67:90 Certificate issuer: /CN=957264f8-0474-43d0-9a3b-5f53ce28790d Certificate serial: 010D0C9F4328584B8EACD39DC3401E203BD44500 Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 15344 IP address blocks: 66.212.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d3:9d:c3:40:1e:20:3b:d4:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=8f84fffd-ab43-439c-b7e7-27aef1b0e6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:ab:51:d8:61:ac:14:4e:22:7c:88:cd:d6: a1:1f:85:c9:10:49:5a:a8:09:ef:87:11:83:40:65: 4e:17:ed:58:45:a5:c0:bc:18:1b:90:95:36:dc:4f: 72:97:19:0b:08:aa:f0:37:c6:58:92:94:9e:62:94: 3d:26:57:64:91:42:c5:1e:7d:3f:72:ff:27:57:9d: 59:e1:91:d0:b3:ea:32:06:c8:9c:e7:46:dd:27:4e: d5:ec:27:ac:99:78:a5:ba:d2:f1:66:bb:f3:4a:6f: 9f:ff:82:cd:ae:cc:e5:7b:6a:87:ba:36:53:06:df: 5a:c6:61:92:c3:53:9a:e7:73:47:e9:e3:cd:67:fc: 6d:dc:b7:4a:2b:2a:38:0b:14:3b:d9:e6:36:a4:4a: 99:60:d7:ae:fa:0b:f0:b9:c8:d0:07:57:17:96:e2: 65:cc:27:77:97:bc:e7:7f:83:64:56:26:7d:66:3b: 0e:df:16:89:ec:3b:20:7e:26:77:f2:4d:ec:6e:a8: a5:2d:d1:99:3f:ca:bd:3f:92:61:df:56:c2:e0:0b: 99:9e:e4:1b:e8:19:a0:a1:12:27:7e:11:11:05:54: 7e:b7:00:47:3d:74:78:41:80:93:cb:c4:51:78:98: 02:cf:3c:81:b8:6e:2e:d6:05:f3:69:6a:a4:d4:33: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:20:44:06:A7:7A:6A:FE:E4:42:DC:D0:FF:91:84:8A:7B:47:67:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl X509v3 Authority Key Identifier: keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer sbgp-ipAddrBlock: critical IPv4: 66.212.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9d:ff:29:af:95:f1:38:ad:bd:f7:10:00:94:e3:78:59:3f: 9f:63:5f:ec:0a:b2:f1:29:7e:2c:c0:38:5a:a3:a7:31:4a:78: 4c:da:df:46:ec:d8:78:45:ef:16:06:c9:7e:12:77:ae:13:a7: 68:0c:91:6d:32:a3:e4:93:38:1e:19:ed:7c:78:60:10:2b:a2: 7f:c0:82:27:a4:c3:42:2d:fb:15:98:9f:84:1f:65:0d:72:96: 88:30:c1:97:35:fd:c1:c3:e2:92:65:46:26:a0:05:9e:71:d8: 9c:76:c3:f4:10:ac:f8:59:10:83:b8:cd:fa:a8:ce:63:0a:05: c4:ff:31:0b:dd:6b:b7:8c:09:f9:a8:2b:58:34:df:b6:64:38: 01:49:06:53:c4:aa:2e:40:f9:f4:2d:cf:e9:0d:8e:80:96:da: 6c:66:dc:30:e5:78:2f:fe:ed:8c:a3:5e:51:6c:79:61:72:28: 6b:25:e8:02:f2:ad:de:0c:a1:47:2f:4e:77:e5:b1:77:e5:cd: 80:ca:7d:85:89:29:d9:26:24:a4:60:d0:71:58:a7:4d:f2:ff: c5:25:b0:c6:16:79:5e:83:24:10:03:a3:2b:a4:cc:10:62:04: ac:70:14:00:80:79:e8:5f:00:ba:7d:c7:81:67:6f:c8:d2:70: a9:9f:76:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNOdw0AeIDvURQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3 OTBkMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OGY4NGZmZmQtYWI0My00MzljLWI3ZTctMjdhZWYxYjBlNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXurUdhhrBROInyIzdahH4XJEElaqAnvhxGD QGVOF+1YRaXAvBgbkJU23E9ylxkLCKrwN8ZYkpSeYpQ9JldkkULFHn0/cv8nV51Z 4ZHQs+oyBsic50bdJ07V7CesmXilutLxZrvzSm+f/4LNrszle2qHujZTBt9axmGS w1Oa53NH6ePNZ/xt3LdKKyo4CxQ72eY2pEqZYNeu+gvwucjQB1cXluJlzCd3l7zn f4NkViZ9ZjsO3xaJ7DsgfiZ38k3sbqilLdGZP8q9P5Jh31bC4AuZnuQb6BmgoRIn fhERBVR+twBHPXR4QYCTy8RReJgCzzyBuG4u1gXzaWqk1DMgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIgRAanemr+5ELc0P+RhIp7R2eQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvOTc2YmZmNjEtZThiZi0z NzExLTg4ZGMtYTRhYjljOThiNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4 NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz Y2UyODc5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtQ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSd/ymvlfE4rb33EACU43hZP59jX+wKsvEpfizAOFqjpzFKeEza30bs 2HhF7xYGyX4Sd64Tp2gMkW0yo+STOB4Z7Xx4YBAron/Agiekw0It+xWYn4QfZQ1y logwwZc1/cHD4pJlRiagBZ5x2Jx2w/QQrPhZEIO4zfqozmMKBcT/MQvda7eMCfmo K1g037ZkOAFJBlPEqi5A+fQtz+kNjoCW2mxm3DDleC/+7YyjXlFseWFyKGsl6ALy rd4MoUcvTnflsXflzYDKfYWJKdkmJKRg0HFYp03y/8UlsMYWeV6DJBADoyukzBBi BKxwFACAeehfALp9x4Fnb8jScKmfdvQ= -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:23 2025 by rpki-client