$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/ea7c7205-d328-3398-a599-10d3729c3424.roa File: ea7c7205-d328-3398-a599-10d3729c3424.roa (raw, json) Hash identifier: Qn5PmDWFW4aOjfv7xPyQF/yk8t8VvGuF8BqoC6GQ5P4= Subject key identifier: C2:A5:08:84:0E:09:F1:19:99:78:8D:4E:C0:75:5C:9C:9F:F9:E8:17 Certificate issuer: /CN=c171481d-6579-4949-8249-70529ec0d0f0 Certificate serial: 010D0C9F4328584B1D9C1F4925837E44EBFA6080 Authority key identifier: 37:74:6E:72:DC:83:87:D0:42:29:6F:C9:D5:AB:F9:39:6D:B0:DE:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/ea7c7205-d328-3398-a599-10d3729c3424.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 20332 IP address blocks: 66.84.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:1f:49:25:83:7e:44:eb:fa:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c171481d-6579-4949-8249-70529ec0d0f0 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=960798f8-ad0e-4771-abd2-94f8be9a305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:ae:28:d5:4c:c1:c6:bd:fe:2f:8c:94:83: ea:b6:1a:14:19:81:18:40:39:c8:df:3d:83:7f:e7: 2a:ff:ed:ee:c6:dc:da:16:83:c3:36:86:3e:ea:f0: f6:61:f4:4b:fa:fb:bf:4e:a3:55:15:35:bd:61:dd: 2e:64:e9:e7:0f:54:01:dd:64:11:3f:cf:69:f7:d1: 34:58:72:9e:02:ad:e1:87:e1:0a:2d:56:7e:f9:11: f6:fe:d1:4c:57:5a:56:1a:83:be:86:8c:27:a1:e2: 29:8a:14:15:e6:3c:72:6c:e2:43:51:ca:20:85:c5: 5f:04:59:49:cc:16:52:b0:f0:85:00:a9:08:22:fe: 3d:9d:73:7c:00:af:72:42:6c:cb:65:82:a7:8b:0a: 55:b6:28:46:71:ea:30:cf:ad:94:80:16:85:8b:5e: 6a:6b:52:5e:fc:11:7b:7b:84:b6:8d:89:8c:b4:aa: c9:bf:f8:3a:6f:91:35:2c:0c:f9:bb:34:e9:7e:2c: 9c:82:0a:c4:ac:82:3f:fd:32:65:e7:ed:19:83:7d: 19:b7:fa:88:db:a0:92:40:cd:e1:c8:0f:62:4e:97: b0:18:5a:80:69:9f:fd:7a:72:08:ad:19:98:5f:12: f6:43:14:eb:03:20:7d:3d:76:a7:f7:2e:11:5b:07: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A5:08:84:0E:09:F1:19:99:78:8D:4E:C0:75:5C:9C:9F:F9:E8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/ea7c7205-d328-3398-a599-10d3729c3424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.crl X509v3 Authority Key Identifier: keyid:37:74:6E:72:DC:83:87:D0:42:29:6F:C9:D5:AB:F9:39:6D:B0:DE:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer sbgp-ipAddrBlock: critical IPv4: 66.84.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:81:1d:ff:24:5a:1f:5e:1c:40:f0:57:37:b5:85:80:48:61: b0:6e:41:d0:b3:d5:9c:25:ba:a4:cf:22:9f:1c:b2:ee:0d:e6: 47:d4:d3:d5:4c:ca:dc:50:97:87:1f:3a:74:56:43:f8:95:cd: e5:57:5a:82:36:8d:6a:03:b2:8a:7d:ef:27:3b:0c:94:cc:85: e0:e9:26:56:db:41:f1:97:6e:e5:77:e8:d9:55:eb:71:6e:60: 45:26:f5:7e:4e:79:09:4b:08:78:38:fc:88:4b:99:3d:a9:9a: ac:77:bf:3f:e5:b0:5a:c5:c0:37:0b:ea:63:04:48:e8:f1:d4: 33:6d:85:f6:03:81:8c:b3:f0:80:41:be:86:82:3d:89:02:0a: ad:5b:a3:36:1b:32:8e:b2:c1:a7:0c:e6:39:e8:f7:a2:59:d7: 56:05:04:32:44:13:70:12:b2:99:bf:32:9c:b6:8c:1e:0d:b9: a1:50:21:c2:ed:34:ca:4b:f6:18:f8:7d:d2:73:9c:59:8c:c2: 2d:99:7f:68:1a:e3:f1:0b:d6:15:cf:be:a4:a4:75:79:8f:91: 31:97:57:21:c0:33:6b:f1:5b:0a:43:61:b0:47:eb:60:a5:a4: 75:59:9e:c5:e3:50:90:db:7b:50:76:65:f2:f4:e4:17:e2:d2: 3f:f1:bc:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnB9JJYN+ROv6YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3MTQ4MWQtNjU3OS00OTQ5LTgyNDktNzA1MjllYzBk MGYwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk OTYwNzk4ZjgtYWQwZS00NzcxLWFiZDItOTRmOGJlOWEzMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3puuKNVMwca9/i+MlIPqthoUGYEYQDnI3z2D f+cq/+3uxtzaFoPDNoY+6vD2YfRL+vu/TqNVFTW9Yd0uZOnnD1QB3WQRP89p99E0 WHKeAq3hh+EKLVZ++RH2/tFMV1pWGoO+hownoeIpihQV5jxybOJDUcoghcVfBFlJ zBZSsPCFAKkIIv49nXN8AK9yQmzLZYKniwpVtihGceowz62UgBaFi15qa1Je/BF7 e4S2jYmMtKrJv/g6b5E1LAz5uzTpfiycggrErII//TJl5+0Zg30Zt/qI26CSQM3h yA9iTpewGFqAaZ/9enIIrRmYXxL2QxTrAyB9PXan9y4RWwc/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKlCIQOCfEZmXiNTsB1XJyf+egXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jMTcx NDgxZC02NTc5LTQ5NDktODI0OS03MDUyOWVjMGQwZjAvZWE3YzcyMDUtZDMyOC0z Mzk4LWE1OTktMTBkMzcyOWMzNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzE3MTQ4MWQtNjU3OS00OTQ5LTgy NDktNzA1MjllYzBkMGYwL2MxNzE0ODFkLTY1NzktNDk0OS04MjQ5LTcwNTI5ZWMw ZDBmMC5jcmwwHwYDVR0jBBgwFoAUN3RuctyDh9BCKW/J1av5OW2w3t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jMTcxNDgxZC02NTc5LTQ5NDktODI0OS03MDUy OWVjMGQwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaBHf8kWh9eHEDwVze1hYBIYbBuQdCz1ZwluqTPIp8csu4N5kfU09VM ytxQl4cfOnRWQ/iVzeVXWoI2jWoDsop97yc7DJTMheDpJlbbQfGXbuV36NlV63Fu YEUm9X5OeQlLCHg4/IhLmT2pmqx3vz/lsFrFwDcL6mMESOjx1DNthfYDgYyz8IBB voaCPYkCCq1bozYbMo6ywacM5jno96JZ11YFBDJEE3ASspm/Mpy2jB4NuaFQIcLt NMpL9hj4fdJznFmMwi2Zf2ga4/EL1hXPvqSkdXmPkTGXVyHAM2vxWwpDYbBH62Cl pHVZnsXjUJDbe1B2ZfL05Bfi0j/xvIQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:05:26 2025 by rpki-client