$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/6dadc9da-5e7f-30b5-887e-51c41be833ef.roa File: 6dadc9da-5e7f-30b5-887e-51c41be833ef.roa (raw, json) Hash identifier: gSC3YjTbgAR/Pnle49Mp9lJFPMZxABJjKzgq658SJrA= Subject key identifier: 41:E9:BC:C1:E9:0F:C3:52:CB:43:FB:2F:B3:CD:D1:A3:71:2D:F9:B7 Certificate issuer: /CN=dc81e524-050d-4a15-9043-39314922cc81 Certificate serial: 010D0C9F4328584B583C8E61562A6666906F71A0 Authority key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/6dadc9da-5e7f-30b5-887e-51c41be833ef.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 400146 IP address blocks: 66.33.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:61:56:2a:66:66:90:6f:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc81e524-050d-4a15-9043-39314922cc81 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=4c27a5bd-69ad-4220-8157-109eee5f66f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:e6:bf:f2:bd:e6:ce:e9:af:44:46:49:0d: b8:25:16:e3:07:12:d8:af:e6:d2:bf:ce:fe:ca:79: 4d:89:a9:79:ef:ac:2c:1f:15:2b:3d:37:66:3a:3b: 22:5a:00:74:78:55:fe:68:d9:4a:dc:af:d7:fc:0d: 59:27:75:79:7e:b0:d6:53:e4:2b:48:ca:64:83:ee: bb:00:e2:c9:58:02:67:5e:d5:66:1f:19:07:08:ae: 7f:b3:2b:bf:95:bf:c4:57:8d:81:3d:73:e5:e9:d7: c6:a6:a4:2d:5d:75:1e:d4:99:df:38:a6:c7:26:55: 18:45:4b:53:09:e7:2f:95:5f:4e:98:c2:5e:88:05: d9:49:96:10:cf:a9:cb:50:45:f6:ed:3d:d6:e7:ff: d1:02:27:5a:06:21:eb:48:95:6b:67:9b:b7:86:99: 1c:cd:ea:83:97:c3:16:93:cb:15:f3:ea:fe:ea:17: ab:f8:c7:25:04:e5:76:70:44:0b:dd:f8:66:ef:e8: 7a:5d:41:77:ad:ea:32:b8:3e:ee:45:80:3a:5d:3c: f7:59:29:b2:57:bf:8e:39:38:f2:60:61:8a:a0:34: aa:3d:ff:11:64:1d:e8:41:3b:63:58:74:74:68:de: 27:5d:60:69:4a:0d:16:bb:f3:1d:ae:ae:d9:9d:eb: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E9:BC:C1:E9:0F:C3:52:CB:43:FB:2F:B3:CD:D1:A3:71:2D:F9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/6dadc9da-5e7f-30b5-887e-51c41be833ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl X509v3 Authority Key Identifier: keyid:12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer sbgp-ipAddrBlock: critical IPv4: 66.33.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d0:65:28:c5:39:e4:2a:12:dc:10:bc:a6:2e:ba:6b:2c:43: b0:52:f6:17:f5:4c:6b:cf:c6:46:d9:7d:71:1b:2d:16:0c:61: 04:c8:7e:7d:9f:bc:84:48:57:7f:62:82:a4:db:8c:3e:fa:b3: 94:62:bc:a0:ba:17:ab:92:66:1f:b4:b5:5d:47:ed:9e:e7:33: e3:83:44:29:af:df:8a:ab:48:69:1c:d6:24:e1:40:6b:ae:79: 76:64:ed:0f:62:d9:c2:5c:52:cc:5b:36:4c:5d:08:2b:b6:47: e2:e4:15:ff:12:f4:17:50:6b:4b:fd:83:8e:7d:6a:e7:e6:c9: e5:e5:a6:d8:71:a5:c7:9b:76:0a:91:d5:e5:fd:68:9e:f5:7e: 30:b3:8f:dc:44:a3:d6:bb:c8:39:3c:68:d0:47:7a:eb:ea:63: 15:7d:2c:f6:60:88:45:01:24:25:ec:51:38:18:55:0e:8d:e6: 09:4d:f5:c1:42:3e:af:75:c3:9e:ed:46:d8:88:ac:f7:9f:9f: 52:4c:d7:60:2d:d3:69:02:fb:a2:1c:03:27:33:a9:39:b6:14: 1d:12:a5:2f:ec:67:db:e7:4c:ca:ef:58:21:04:00:86:a8:17: c6:ac:82:85:61:33:3c:39:f5:7b:97:7c:1b:b5:75:f7:ec:e4: 8e:75:00:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI5hVipmZpBvcaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4MWU1MjQtMDUwZC00YTE1LTkwNDMtMzkzMTQ5MjJj YzgxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGMyN2E1YmQtNjlhZC00MjIwLTgxNTctMTA5ZWVlNWY2NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArezmv/K95s7pr0RGSQ24JRbjBxLYr+bSv87+ ynlNial576wsHxUrPTdmOjsiWgB0eFX+aNlK3K/X/A1ZJ3V5frDWU+QrSMpkg+67 AOLJWAJnXtVmHxkHCK5/syu/lb/EV42BPXPl6dfGpqQtXXUe1JnfOKbHJlUYRUtT CecvlV9OmMJeiAXZSZYQz6nLUEX27T3W5//RAidaBiHrSJVrZ5u3hpkczeqDl8MW k8sV8+r+6her+MclBOV2cEQL3fhm7+h6XUF3reoyuD7uRYA6XTz3WSmyV7+OOTjy YGGKoDSqPf8RZB3oQTtjWHR0aN4nXWBpSg0Wu/Mdrq7Znet+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHpvMHpD8NSy0P7L7PN0aNxLfm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzgx ZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMxNDkyMmNjODEvNmRhZGM5ZGEtNWU3Zi0z MGI1LTg4N2UtNTFjNDFiZTgzM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM4MWU1MjQtMDUwZC00YTE1LTkw NDMtMzkzMTQ5MjJjYzgxL2RjODFlNTI0LTA1MGQtNGExNS05MDQzLTM5MzE0OTIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUEirDPp0cLJshVn/ps+gDh/3GVlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzgxZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMx NDkyMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnQZSjFOeQqEtwQvKYuumssQ7BS9hf1TGvPxkbZfXEbLRYMYQTIfn2f vIRIV39igqTbjD76s5RivKC6F6uSZh+0tV1H7Z7nM+ODRCmv34qrSGkc1iThQGuu eXZk7Q9i2cJcUsxbNkxdCCu2R+LkFf8S9BdQa0v9g459aufmyeXlpthxpcebdgqR 1eX9aJ71fjCzj9xEo9a7yDk8aNBHeuvqYxV9LPZgiEUBJCXsUTgYVQ6N5glN9cFC Pq91w57tRtiIrPefn1JM12At02kC+6IcAyczqTm2FB0SpS/sZ9vnTMrvWCEEAIao F8asgoVhMzw59XuXfBu1dffs5I51AL0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:15 2025 by rpki-client