$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa File: 421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa (raw, json) Hash identifier: laJTqNsSyVtv8a7/vpAt232/uVCtj3zfKLJGLD0vlEw= Subject key identifier: 12:A2:6A:F5:8E:56:B8:FC:DD:E9:7B:1D:90:56:56:32:D1:F3:70:57 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E71A808B99CE6C0D70B980 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 66.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1a:80:8b:99:ce:6c:0d:70:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=812e7bee-a5f9-46f3-a47f-8653b29b8429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:5a:08:38:2e:97:37:0d:eb:eb:d2:7f:4a: 6b:a4:ad:1e:8b:ac:ad:6f:45:e9:02:de:a8:9f:bd: 28:b9:d8:89:e0:4f:4f:0a:f6:0d:12:55:b5:3c:dc: 56:f1:eb:44:77:c9:42:ce:3b:81:b4:6d:d2:b6:86: b6:0f:31:80:cf:f8:9a:a6:0f:8c:be:c3:ca:24:5a: 08:ac:87:eb:69:05:14:b6:48:5a:9d:2b:fe:e2:d4: 39:1c:6f:f0:f3:0d:aa:9b:b3:99:7e:ff:cf:bf:5b: 5c:61:e0:6a:dd:e4:c4:3d:63:4b:bb:9f:41:30:5b: bb:c5:2e:e5:7c:88:38:6a:23:30:31:19:da:30:71: dd:c5:2c:71:33:d1:a2:e8:7b:ff:96:91:0f:49:19: ca:a1:1b:db:99:ca:7e:45:20:88:cb:53:43:40:e1: 27:c6:be:18:ce:75:07:c1:69:59:d3:f3:e8:f2:d1: 8c:1b:cc:9b:21:bb:80:4f:17:79:8c:2f:78:1c:71: d2:5d:fc:19:f5:02:45:25:98:9a:b9:0b:47:5c:a1: 85:cd:f0:f6:73:ca:0d:53:dd:af:8c:53:b7:4a:fe: 1a:65:e0:f2:36:fe:ae:01:e8:3d:ec:7e:8d:06:84: 71:f0:7c:b8:6f:f2:12:88:68:05:84:f3:3e:a7:5f: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A2:6A:F5:8E:56:B8:FC:DD:E9:7B:1D:90:56:56:32:D1:F3:70:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c7:e1:5d:bd:c4:9a:af:cb:b2:4a:60:e1:b7:df:c7:4d:df: 8e:76:66:64:37:9a:8b:a0:b4:be:f9:ac:36:a9:3c:dd:bc:54: 33:0d:d1:b2:56:ae:44:7d:8e:c7:f1:20:7c:58:f1:c8:c3:06: 06:02:36:05:23:d1:34:ba:a9:7f:d9:d9:2e:dd:39:31:a3:66: fe:42:30:23:cb:c9:62:9e:42:e5:40:aa:b8:2e:6f:25:0f:e6: f3:e9:40:80:92:4f:29:31:17:85:aa:11:05:9b:00:dd:8b:a1: a1:22:be:a1:d2:23:c4:31:24:f1:b3:0d:ff:4a:05:6a:01:cf: 51:3b:9b:1e:68:4d:4d:b2:11:27:5c:be:d0:f5:af:5d:9e:70: d3:06:cd:8f:03:04:3d:01:52:08:eb:58:95:01:41:9e:3e:f3: 90:a5:39:15:24:31:30:07:7d:e0:61:17:1e:e8:09:85:23:5a: ca:01:f2:19:63:23:04:1e:6a:f0:26:6a:4b:54:0d:cf:f6:d6: 5a:76:89:b5:91:cd:d7:6d:4c:3a:61:b2:d9:ea:1e:6b:f0:76: 9c:95:67:8b:00:77:d8:32:51:88:1a:3b:ce:54:10:29:69:fa: f0:17:f5:fa:41:9f:e0:3b:b6:a2:0c:96:08:57:95:cd:d1:79: d3:1e:79:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xqAi5nObA1wuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODEyZTdiZWUtYTVmOS00NmYzLWE0N2YtODY1M2IyOWI4NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOBaCDgulzcN6+vSf0prpK0ei6ytb0XpAt6o n70oudiJ4E9PCvYNElW1PNxW8etEd8lCzjuBtG3Stoa2DzGAz/iapg+MvsPKJFoI rIfraQUUtkhanSv+4tQ5HG/w8w2qm7OZfv/Pv1tcYeBq3eTEPWNLu59BMFu7xS7l fIg4aiMwMRnaMHHdxSxxM9Gi6Hv/lpEPSRnKoRvbmcp+RSCIy1NDQOEnxr4YznUH wWlZ0/Po8tGMG8ybIbuATxd5jC94HHHSXfwZ9QJFJZiauQtHXKGFzfD2c8oNU92v jFO3Sv4aZeDyNv6uAeg97H6NBoRx8Hy4b/ISiGgFhPM+p19hQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKiavWOVrj83el7HZBWVjLR83BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDIxZDFiODktY2I1Yy0z ZTQyLWI1NzYtZmEzNGU1MGYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPH4V29xJqvy7JKYOG338dN3452ZmQ3mougtL75rDapPN28VDMN0bJW rkR9jsfxIHxY8cjDBgYCNgUj0TS6qX/Z2S7dOTGjZv5CMCPLyWKeQuVAqrgubyUP 5vPpQICSTykxF4WqEQWbAN2LoaEivqHSI8QxJPGzDf9KBWoBz1E7mx5oTU2yESdc vtD1r12ecNMGzY8DBD0BUgjrWJUBQZ4+85ClORUkMTAHfeBhFx7oCYUjWsoB8hlj IwQeavAmaktUDc/21lp2ibWRzddtTDphstnqHmvwdpyVZ4sAd9gyUYgaO85UEClp +vAX9fpBn+A7tqIMlghXlc3RedMeeQM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:36:36 2025 by rpki-client