$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa File: 9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa (raw, json) Hash identifier: MngLCDncXCpHLGs/KUhFL9kQnT/Pj0LxzjMjy/QrCGc= Subject key identifier: B0:C4:02:B7:88:89:0B:F3:78:10:E1:65:CB:1F:2F:29:C0:12:4A:E3 Certificate issuer: /CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Certificate serial: 010D0C9F4328584B6ECD975E96990BCD3F9B3080 Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa Signing time: Mon 06 Oct 2025 15:00:52 +0000 ROA not before: Mon 06 Oct 2025 15:00:52 +0000 ROA not after: Sun 04 Jan 2026 16:00:52 +0000 asID: 53889 IP address blocks: 66.235.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:cd:97:5e:96:99:0b:cd:3f:9b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Validity Not Before: Oct 6 15:00:52 2025 GMT Not After : Jan 4 16:00:52 2026 GMT Subject: CN=d022ac02-dd94-4f2f-832a-7655dedbd3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:76:1a:4f:f0:d1:90:36:3f:eb:0f:f3:3c: 3d:df:f4:a6:93:d2:f2:24:6b:75:75:46:27:a4:81: 2f:4d:e2:4b:ce:f5:59:94:35:9c:6d:db:a8:a3:2f: 17:e0:4a:e0:91:89:66:e6:f2:03:22:0f:3e:fa:ee: e5:a0:fd:01:bd:f4:60:56:ec:26:69:03:2b:14:8d: 00:05:60:b7:53:d3:80:d9:7b:a8:76:17:5d:d7:1a: bb:ad:63:94:0e:31:0d:a5:c1:e0:d0:65:4f:1e:10: e3:5d:e6:3b:b4:0d:fd:d2:cc:93:50:42:80:89:e9: 62:12:99:16:c2:95:8a:6f:0c:43:f9:d9:4e:16:7d: b6:75:65:54:8e:a3:08:fa:2d:f0:2d:5b:a9:f2:74: 37:d6:e6:7a:43:02:09:b2:22:24:73:13:7a:41:2b: 57:3f:a7:dc:9a:49:01:ea:12:5f:76:59:41:03:a4: 71:84:38:b6:74:31:3f:8b:9a:7a:4f:86:e2:04:58: a1:bc:13:cc:42:9a:85:73:a4:e8:49:d5:c3:d1:71: a1:f9:51:80:68:69:59:d3:22:fd:8b:f8:66:c0:cb: dd:79:3c:bb:02:5b:69:f0:99:fa:4b:2c:96:fb:ae: d5:9b:2e:54:c4:c0:cd:6f:87:ee:bb:d1:d5:33:35: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:02:B7:88:89:0B:F3:78:10:E1:65:CB:1F:2F:29:C0:12:4A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl X509v3 Authority Key Identifier: keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer sbgp-ipAddrBlock: critical IPv4: 66.235.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a2:78:00:95:d7:b1:19:7a:21:1a:eb:e4:9e:e6:71:31:bb: 5f:92:a4:2a:f1:e7:48:6c:86:ed:4e:3c:5f:90:46:40:14:ce: d0:12:ed:a0:89:f7:ca:12:03:43:9f:4f:cb:27:c5:00:5b:dc: 3d:1e:a6:13:5a:10:d9:97:3b:06:33:04:48:3e:12:bf:8f:4d: 21:9e:5e:ba:84:58:9b:e7:26:b4:32:57:c7:9a:53:0b:da:1e: 52:4d:e6:e6:27:90:1a:76:61:8f:e2:63:92:57:f6:5b:53:03: 72:6c:f5:ae:e8:f5:62:4d:4c:30:4a:a4:d0:2b:13:61:b8:19: cd:25:73:b0:04:89:ca:9e:a6:b0:e0:09:ff:30:30:23:7a:7b: 16:5c:46:83:2d:bb:a6:48:bd:ae:30:36:7e:8d:37:fb:d8:09: 03:15:e0:ec:1f:e7:9b:16:20:46:2c:a9:43:a6:54:fc:96:5c: 70:0a:c3:d2:91:ed:9f:3e:52:e8:b9:a6:a3:1c:51:15:25:ca: e7:28:9a:23:07:f0:84:88:c8:98:e4:7b:09:e2:33:67:0a:d4: 97:33:9b:bb:7e:66:a0:f2:db:89:21:07:9b:6f:9c:6f:49:21: 5a:aa:1e:76:8e:c3:8a:25:61:33:1d:71:0c:6c:df:85:4a:fa: b5:2b:f8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtuzZdelpkLzT+bMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ4OGI3YjktZWY2ZS00MDk3LTkyMDctOTQwYmM2MjI4 OWYxMB4XDTI1MTAwNjE1MDA1MloXDTI2MDEwNDE2MDA1MlowLzEtMCsGA1UEAxMk ZDAyMmFjMDItZGQ5NC00ZjJmLTgzMmEtNzY1NWRlZGJkM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiet2Gk/w0ZA2P+sP8zw93/Smk9LyJGt1dUYn pIEvTeJLzvVZlDWcbduooy8X4ErgkYlm5vIDIg8++u7loP0BvfRgVuwmaQMrFI0A BWC3U9OA2Xuodhdd1xq7rWOUDjENpcHg0GVPHhDjXeY7tA390syTUEKAieliEpkW wpWKbwxD+dlOFn22dWVUjqMI+i3wLVup8nQ31uZ6QwIJsiIkcxN6QStXP6fcmkkB 6hJfdllBA6RxhDi2dDE/i5p6T4biBFihvBPMQpqFc6ToSdXD0XGh+VGAaGlZ0yL9 i/hmwMvdeTy7Altp8Jn6SyyW+67Vmy5UxMDNb4fuu9HVMzVwmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDEAreIiQvzeBDhZcsfLynAEkrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4 YjdiOS1lZjZlLTQwOTctOTIwNy05NDBiYzYyMjg5ZjEvOWI0NTdiYWMtOTE4MS0z ZWNjLThiOGQtNmZhZGQzMDMyY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjQ4OGI3YjktZWY2ZS00MDk3LTky MDctOTQwYmM2MjI4OWYxL2Y0ODhiN2I5LWVmNmUtNDA5Ny05MjA3LTk0MGJjNjIy ODlmMS5jcmwwHwYDVR0jBBgwFoAUPxxUDNtcDmXdBrbdYFiUOGPEBQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4YjdiOS1lZjZlLTQwOTctOTIwNy05NDBi YzYyMjg5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuieACV17EZeiEa6+Se5nExu1+SpCrx50hshu1OPF+QRkAUztAS7aCJ 98oSA0OfT8snxQBb3D0ephNaENmXOwYzBEg+Er+PTSGeXrqEWJvnJrQyV8eaUwva HlJN5uYnkBp2YY/iY5JX9ltTA3Js9a7o9WJNTDBKpNArE2G4Gc0lc7AEicqeprDg Cf8wMCN6exZcRoMtu6ZIva4wNn6NN/vYCQMV4Owf55sWIEYsqUOmVPyWXHAKw9KR 7Z8+Uui5pqMcURUlyucomiMH8ISIyJjkewniM2cK1Jczm7t+ZqDy24khB5tvnG9J IVqqHnaOw4olYTMdcQxs34VK+rUr+FY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:54 2025 by rpki-client