$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa File: ea5b8a17-465e-3806-935e-87cb1d092488.roa (raw, json) Hash identifier: fiFtO79cbqJK/bTRoYVniLwFAkS2PlEuLX4iep2PTTg= Subject key identifier: 56:58:77:25:20:1A:44:A3:F1:7C:3F:B3:0A:6A:AC:FF:F4:24:0F:7F Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1BED5859F56900E9497C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 66.152.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:be:d5:85:9f:56:90:0e:94:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=febf3b82-5a41-435f-811a-09f7bd73dd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:ae:76:2c:01:24:39:f6:ad:7f:94:ea:8b: 7c:b2:2a:5e:0c:c4:bd:33:d1:d0:d9:a8:3a:dc:f7: 65:ba:b9:ea:ec:1b:a5:c6:12:71:ba:50:be:3b:b3: 14:65:5b:14:12:ea:0f:9f:8b:9a:89:7b:9d:a0:c0: 28:ef:2b:85:87:da:8e:0a:5a:e6:bb:32:07:9f:12: 29:78:dc:74:bb:b4:ec:a1:4c:54:b7:84:fd:9c:f8: e6:17:aa:0d:63:ed:4a:e4:cb:fb:69:ea:44:87:67: 45:9e:63:7b:d8:3a:f9:bb:44:75:bc:7a:26:58:18: f6:37:28:09:cc:1f:76:19:fa:36:31:82:02:40:7e: 7e:f7:19:f3:42:c1:99:14:50:39:70:5a:c2:de:ae: dd:b7:75:71:08:e3:7f:80:b5:e2:05:a5:7d:c3:7b: e4:dc:b4:10:45:05:eb:20:6d:34:4a:11:07:67:bc: 4d:ad:91:1e:df:f4:c2:56:a7:64:60:58:c0:e5:03: 4b:da:0e:84:32:16:29:24:f7:cf:a4:6e:b0:b5:ec: f0:50:66:53:be:a3:be:e1:70:78:f8:1e:50:37:90: 40:43:aa:ca:7e:e5:15:41:0a:81:83:84:d7:d7:9e: d4:ba:20:53:6c:ae:ef:f3:f9:b1:b6:d2:59:a8:36: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:58:77:25:20:1A:44:A3:F1:7C:3F:B3:0A:6A:AC:FF:F4:24:0F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:70:7b:a5:46:e1:1c:4e:b3:f5:8b:f6:e1:7e:8a:9d:29:a0: fd:9e:77:a7:1e:f9:56:87:96:65:ef:4d:26:54:4a:5a:13:ee: 8e:68:2a:f3:a0:70:d6:77:49:22:c2:41:81:76:2b:eb:d7:e3: de:df:f9:8d:ae:e0:80:e8:7d:85:55:53:eb:8e:4e:6b:eb:b4: 4b:a1:76:b4:0c:30:1a:da:6a:ee:ba:ec:5d:07:5e:06:df:e7: b3:de:06:dc:dc:e1:a6:c3:e4:3f:94:77:5a:03:a2:cd:d9:14: a4:30:12:ea:b7:02:10:80:2a:f4:70:e9:a9:bf:50:70:e5:12: 30:12:cf:db:d0:a8:93:1e:77:37:77:bd:95:a6:f0:c0:d3:03: 9a:6d:6d:e6:23:2c:b2:dd:87:37:93:b0:fb:2a:b4:30:e7:65: a8:82:0a:85:00:ee:6b:33:1e:88:b4:0b:7f:ca:5d:e2:af:3d: e9:a2:36:b1:69:49:a9:60:9c:1a:61:77:88:ba:5d:fa:c6:ae: ee:38:fc:84:5d:29:db:06:c7:84:12:b3:7b:d3:f0:54:9c:39: 70:e1:79:76:4e:ea:5c:71:0c:74:95:96:1b:a6:73:aa:ae:ab: 5a:1e:a5:0e:e3:c8:0d:d4:7f:a4:26:e9:0a:9a:4e:6d:f0:de: 25:6d:c6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b7VhZ9WkA6Ul8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmViZjNiODItNWE0MS00MzVmLTgxMWEtMDlmN2JkNzNkZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIyudiwBJDn2rX+U6ot8sipeDMS9M9HQ2ag6 3Pdlurnq7BulxhJxulC+O7MUZVsUEuoPn4uaiXudoMAo7yuFh9qOClrmuzIHnxIp eNx0u7TsoUxUt4T9nPjmF6oNY+1K5Mv7aepEh2dFnmN72Dr5u0R1vHomWBj2NygJ zB92Gfo2MYICQH5+9xnzQsGZFFA5cFrC3q7dt3VxCON/gLXiBaV9w3vk3LQQRQXr IG00ShEHZ7xNrZEe3/TCVqdkYFjA5QNL2g6EMhYpJPfPpG6wtezwUGZTvqO+4XB4 +B5QN5BAQ6rKfuUVQQqBg4TX157UuiBTbK7v8/mxttJZqDb0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZYdyUgGkSj8Xw/swpqrP/0JA9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWE1YjhhMTctNDY1ZS0z ODA2LTkzNWUtODdjYjFkMDkyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5we6VG4RxOs/WL9uF+ip0poP2ed6ce+VaHlmXvTSZUSloT7o5oKvOg cNZ3SSLCQYF2K+vX497f+Y2u4IDofYVVU+uOTmvrtEuhdrQMMBraau667F0HXgbf 57PeBtzc4abD5D+Ud1oDos3ZFKQwEuq3AhCAKvRw6am/UHDlEjASz9vQqJMedzd3 vZWm8MDTA5ptbeYjLLLdhzeTsPsqtDDnZaiCCoUA7mszHoi0C3/KXeKvPemiNrFp SalgnBphd4i6XfrGru44/IRdKdsGx4QSs3vT8FScOXDheXZO6lxxDHSVlhumc6qu q1oepQ7jyA3Uf6Qm6QqaTm3w3iVtxkI= -----END CERTIFICATE-----Generated at Sat Oct 11 01:13:31 2025 by rpki-client