$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa File: de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa (raw, json) Hash identifier: w/rDqED3GlElbbzW15JijpKrqVCmybrdCvnQMXGPfaM= Subject key identifier: 7F:D4:30:FB:B0:F5:11:1C:23:D8:17:40:80:EF:8A:E9:B0:3D:0A:16 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584B8BE21D3E232C1051C7B59F00 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 66.206.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1d:3e:23:2c:10:51:c7:b5:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=8c8b88a4-dbe7-41bc-a396-dc5f1459c3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:68:e6:f6:b4:5c:4d:3e:d5:d0:14:13:ed: a0:5d:e4:0c:0e:b8:82:6b:b1:0f:9e:d0:6e:b1:2f: ad:c4:81:82:7c:de:01:68:97:8c:f4:0e:e6:d8:99: 8a:63:05:60:9c:00:db:40:d1:60:b0:77:ae:5a:ca: ba:6e:7c:39:5a:d9:89:3c:01:84:45:59:cf:75:84: 0d:01:0d:32:34:9b:19:1b:fc:00:29:9d:e0:0f:39: 16:cf:48:81:92:7c:4f:54:87:5d:6a:a6:83:30:56: f4:a7:2b:43:e7:0a:11:49:7f:28:cc:fd:2a:90:fd: 54:dc:9c:b0:e4:84:df:33:77:90:de:98:4e:3e:30: ce:b2:25:76:1c:60:7f:1a:42:31:c9:ae:77:3c:cf: 80:6f:66:b1:a2:f3:13:c7:15:65:ab:dc:08:07:73: 57:1e:13:fa:5a:56:23:15:58:2c:f6:46:9b:da:d6: d2:4a:8a:63:95:e5:d4:77:34:d8:3f:ac:d1:d2:a8: fb:d8:af:ed:70:f9:c0:a2:d8:19:90:f9:cd:c1:f1: e0:61:a4:7c:43:c1:ba:55:a3:ee:19:41:31:dd:6f: 0e:80:fe:ec:7a:3e:e7:a5:ac:5e:18:f6:99:79:e5: 7f:f8:91:83:bf:24:aa:3a:1c:97:16:fb:d7:9d:39: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:30:FB:B0:F5:11:1C:23:D8:17:40:80:EF:8A:E9:B0:3D:0A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f4:45:20:70:96:b3:96:59:f3:69:6c:11:74:e2:b4:9f:05: 20:43:c6:9b:09:8d:cb:0e:ad:ca:08:28:63:57:b4:3e:07:0c: e4:c2:4d:2a:14:92:71:55:a7:89:21:49:02:67:e2:e8:7a:c8: f6:95:fe:e8:ba:d2:14:a0:a8:eb:49:14:e8:b5:3d:83:88:be: 96:e5:aa:ec:50:8e:8f:13:91:b7:91:8f:45:93:aa:4a:04:f2: ab:44:61:c8:aa:9f:b1:d0:ea:c7:6a:32:62:b9:f2:51:58:91: c1:7a:c9:0e:f7:f0:20:dd:3a:b4:05:08:9d:69:8c:20:99:01: 1b:a7:74:a9:8a:e1:d9:21:0e:ce:80:48:5d:18:e8:67:22:11: 2d:26:fb:32:2f:b7:76:a1:f6:ba:71:96:77:8b:6f:a7:bb:bd: 3a:b7:30:4d:c3:9e:46:e7:c7:ce:65:e7:9b:80:bb:c3:d7:47: 28:3e:6a:f9:c0:1a:87:52:74:bf:d7:1a:94:e9:24:a9:ae:60: 30:2a:09:5a:3f:a1:72:d6:b9:ab:39:9f:17:8b:2e:3b:e3:38: 91:75:89:e1:65:09:68:17:e6:c8:dc:48:41:2c:51:fb:54:08: b1:57:8a:a4:ab:99:f9:f8:34:5c:df:88:a9:8f:46:05:2a:12: 63:90:e9:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4h0+IywQUce1nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OGM4Yjg4YTQtZGJlNy00MWJjLWEzOTYtZGM1ZjE0NTljM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOlo5va0XE0+1dAUE+2gXeQMDriCa7EPntBu sS+txIGCfN4BaJeM9A7m2JmKYwVgnADbQNFgsHeuWsq6bnw5WtmJPAGERVnPdYQN AQ0yNJsZG/wAKZ3gDzkWz0iBknxPVIddaqaDMFb0pytD5woRSX8ozP0qkP1U3Jyw 5ITfM3eQ3phOPjDOsiV2HGB/GkIxya53PM+Ab2axovMTxxVlq9wIB3NXHhP6WlYj FVgs9kab2tbSSopjleXUdzTYP6zR0qj72K/tcPnAotgZkPnNwfHgYaR8Q8G6VaPu GUEx3W8OgP7sej7npaxeGPaZeeV/+JGDvySqOhyXFvvXnTkWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/UMPuw9REcI9gXQIDviumwPQoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvZGU4ZTc5OTYtYmZhOC0z NGI4LWIyYjgtYTAyNWI2YWRjOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs6tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC30RSBwlrOWWfNpbBF04rSfBSBDxpsJjcsOrcoIKGNXtD4HDOTCTSoU knFVp4khSQJn4uh6yPaV/ui60hSgqOtJFOi1PYOIvpblquxQjo8TkbeRj0WTqkoE 8qtEYciqn7HQ6sdqMmK58lFYkcF6yQ738CDdOrQFCJ1pjCCZARundKmK4dkhDs6A SF0Y6GciES0m+zIvt3ah9rpxlneLb6e7vTq3ME3Dnkbnx85l55uAu8PXRyg+avnA GodSdL/XGpTpJKmuYDAqCVo/oXLWuas5nxeLLjvjOJF1ieFlCWgX5sjcSEEsUftU CLFXiqSrmfn4NFzfiKmPRgUqEmOQ6Vo= -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:32 2025 by rpki-client