$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa File: 8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa (raw, json) Hash identifier: dKg2CQGE+n+MB4tQsROfUNx/6h1H3HYsbo8A2mtpMMs= Subject key identifier: A1:71:6E:D4:5A:40:4C:82:06:9E:C4:7C:3B:83:A3:33:CB:B6:72:F2 Certificate issuer: /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c Certificate serial: 010D0C9F4328584B4081E10B01A762338C0BF1AE Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 54981 IP address blocks: 66.118.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:e1:0b:01:a7:62:33:8c:0b:f1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=367e126e-7340-460a-a9c6-de642610c09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:41:e6:41:36:74:3f:b7:dd:7e:59:59:f8: 02:cf:9e:85:79:4d:e0:b9:75:e0:82:69:97:19:a9: a4:f5:66:61:27:01:98:40:74:b3:59:c9:50:71:fb: 4f:03:a2:99:cc:c5:b5:5b:9e:df:28:9e:f0:98:7f: 5a:b3:72:52:e6:26:a3:37:c8:03:e2:03:79:56:7c: 18:f9:e3:d6:d7:7c:e0:82:46:c3:a9:88:f4:b6:fe: 20:e4:23:14:1d:4c:0a:b5:90:3d:99:36:1c:b7:80: 9c:7d:a1:90:49:d4:b3:46:3d:2b:e0:2c:a3:38:6f: af:ff:e4:b9:ff:d8:31:8e:da:90:91:cc:7b:97:8e: 88:ad:3b:79:44:ce:99:c1:cc:80:c2:73:97:8f:35: b4:9d:c0:0a:29:5f:7f:58:9e:ba:43:b7:cd:2e:a3: a5:19:dd:9c:66:d5:b7:dd:4f:94:52:ae:aa:cf:a8: 82:e6:55:6a:f8:c0:51:b5:52:a8:ca:13:b4:fc:41: 1e:bc:95:fa:a1:fe:e5:20:69:9d:3d:96:48:da:24: dd:16:72:7a:22:08:95:0d:7d:7c:59:fa:10:e9:60: 8e:5b:ca:4f:3c:64:96:78:7d:37:db:fd:94:05:25: e2:97:d7:8e:1f:bc:bd:1e:7c:da:33:fd:22:cc:c3: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:6E:D4:5A:40:4C:82:06:9E:C4:7C:3B:83:A3:33:CB:B6:72:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl X509v3 Authority Key Identifier: keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer sbgp-ipAddrBlock: critical IPv4: 66.118.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ad:ba:bd:52:9e:fc:1b:fc:ea:1e:2c:b4:81:08:6f:d0:45: e1:34:7f:94:1a:43:a9:28:8e:f3:b3:46:9c:3e:f3:d9:2b:7d: ac:f3:7c:38:b4:86:de:56:04:7b:05:80:19:71:b4:ff:5c:f3: 61:67:43:62:3a:ed:40:10:c1:50:8a:cd:cf:04:6d:bd:bd:c1: a7:34:93:0c:8e:da:e4:4f:75:3f:3f:66:f8:16:37:3d:0b:99: 47:17:5b:dd:37:d2:f3:25:f4:ab:c1:e7:d0:3a:79:88:2c:ed: c4:62:ec:d1:06:84:31:79:6f:21:57:17:f7:9a:14:fe:42:eb: 8e:8f:95:e0:cb:c7:e2:2a:b4:64:3b:40:8b:e4:d7:22:cb:bc: 4e:d5:b0:97:f6:ef:3a:eb:a8:19:68:cf:ea:60:6b:73:7b:21: 8c:4b:7f:00:4f:c7:19:2a:8f:36:52:23:90:e5:21:6a:76:6a: 18:dc:21:d7:75:33:92:e3:6d:f7:a2:2e:27:8d:9f:df:0a:0e: dc:ca:28:b2:d2:11:ce:94:97:ba:c7:0e:13:b8:cc:24:d6:6d: 31:f1:12:31:99:49:d8:f5:b9:6c:d2:de:d2:66:d2:f9:93:e1: a5:21:e9:97:04:f4:a7:bf:a5:c3:a2:37:24:de:48:09:37:9d: d3:80:48:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgeELAadiM4wL8a4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmYzAxZGItZDdlNi00N2QxLWFkNGQtNzYxMmEzMjU4 MDVjMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MzY3ZTEyNmUtNzM0MC00NjBhLWE5YzYtZGU2NDI2MTBjMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJlB5kE2dD+33X5ZWfgCz56FeU3guXXggmmX Gamk9WZhJwGYQHSzWclQcftPA6KZzMW1W57fKJ7wmH9as3JS5iajN8gD4gN5VnwY +ePW13zggkbDqYj0tv4g5CMUHUwKtZA9mTYct4CcfaGQSdSzRj0r4CyjOG+v/+S5 /9gxjtqQkcx7l46IrTt5RM6ZwcyAwnOXjzW0ncAKKV9/WJ66Q7fNLqOlGd2cZtW3 3U+UUq6qz6iC5lVq+MBRtVKoyhO0/EEevJX6of7lIGmdPZZI2iTdFnJ6IgiVDX18 WfoQ6WCOW8pPPGSWeH032/2UBSXil9eOH7y9HnzaM/0izMOHJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFxbtRaQEyCBp7EfDuDozPLtnLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWZj MDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEyYTMyNTgwNWMvOGIyZWJkNDgtYTU3ZS0z MGIwLTk0ZTItZjQ0NGJiNWJhN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFmYzAxZGItZDdlNi00N2QxLWFk NGQtNzYxMmEzMjU4MDVjLzYxZmMwMWRiLWQ3ZTYtNDdkMS1hZDRkLTc2MTJhMzI1 ODA1Yy5jcmwwHwYDVR0jBBgwFoAUgZu/FDKVcC6B9/0YnZ6paVfbUEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWZjMDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEy YTMyNTgwNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFStur1Snvwb/OoeLLSBCG/QReE0f5QaQ6kojvOzRpw+89krfazzfDi0 ht5WBHsFgBlxtP9c82FnQ2I67UAQwVCKzc8Ebb29wac0kwyO2uRPdT8/ZvgWNz0L mUcXW9030vMl9KvB59A6eYgs7cRi7NEGhDF5byFXF/eaFP5C646PleDLx+IqtGQ7 QIvk1yLLvE7VsJf27zrrqBloz+pga3N7IYxLfwBPxxkqjzZSI5DlIWp2ahjcIdd1 M5LjbfeiLieNn98KDtzKKLLSEc6Ul7rHDhO4zCTWbTHxEjGZSdj1uWzS3tJm0vmT 4aUh6ZcE9Ke/pcOiNyTeSAk3ndOASKQ= -----END CERTIFICATE-----Generated at Thu Oct 9 01:36:48 2025 by rpki-client