$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa File: 66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa (raw, json) Hash identifier: 1M25Bf3f98mLgbWMaLDuEDoNXWutEigGuC73x9uiuNk= Subject key identifier: 5A:DF:AC:10:72:7C:5C:4B:0D:B2:67:87:32:04:A3:B2:43:0B:A1:FC Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Certificate serial: 010D0C9F4328584B1D9C255E942398FA8C5E8420 Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 397376 IP address blocks: 142.202.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:25:5e:94:23:98:fa:8c:5e:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=5d6022e0-2bbc-425d-bf99-f3631392da50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:f0:ab:78:ad:d2:6e:e8:b1:2b:cd:27:61: bc:fc:bc:5c:b6:fa:1f:5c:e7:36:e2:55:6b:bf:3c: 61:42:c0:4f:52:e8:b1:76:fb:44:21:36:c2:ba:9e: c7:bd:ed:ec:db:29:ef:d9:19:24:8f:ce:6f:c7:5c: 64:59:08:f5:dc:6e:be:e4:d1:1a:32:61:aa:a3:54: ea:64:6b:06:d8:5f:81:5b:de:00:f8:6d:ad:67:f2: 9b:21:70:32:f8:7a:63:cb:28:39:9b:b3:a4:0a:d2: ed:56:dd:e0:25:f8:64:13:ed:dd:85:aa:6c:67:e2: a1:f9:0b:e0:66:77:d4:f7:11:33:c3:52:32:06:28: bc:2b:e6:fa:d1:1f:3e:59:38:60:b7:e4:70:44:3a: 3d:a2:e4:50:3d:40:6f:4f:57:92:77:f1:14:ae:33: bd:93:f6:b3:99:a5:e8:26:21:a8:4d:9f:10:36:42: d2:ef:a5:39:fe:2c:cd:38:52:20:dc:19:13:5a:3b: f1:01:65:72:bf:b3:ac:74:ac:c5:24:0b:ce:9e:24: a7:ac:31:66:46:75:de:58:95:f2:95:b9:ae:6e:79: 11:2f:da:53:44:b2:f3:cf:92:e5:1e:2c:b6:5f:d2: 7d:c6:8a:a2:33:6b:65:62:19:e3:01:26:b9:91:1e: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DF:AC:10:72:7C:5C:4B:0D:B2:67:87:32:04:A3:B2:43:0B:A1:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl X509v3 Authority Key Identifier: keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d3:52:6c:32:67:4a:c7:d5:a1:db:ff:36:f4:48:6d:76:90: d7:d5:60:e8:cb:1f:dc:67:2d:0a:5e:66:19:c0:b3:93:20:1c: f8:ae:78:31:3f:ae:7c:11:c8:65:0e:11:d1:5a:26:d2:6c:aa: 3d:58:58:cd:32:1d:eb:70:47:3b:d0:f8:da:ef:e3:49:9a:86: 96:ee:b1:19:2f:79:3f:44:22:6d:9f:40:89:19:2c:d1:67:fe: 57:04:fa:d8:0c:64:7d:5c:fd:e3:7a:78:86:3f:22:a3:43:b9: 7a:5f:2c:db:33:38:4d:74:a7:ed:c9:24:ee:39:c9:6f:e5:af: e0:bb:64:7c:b9:6d:15:2f:bb:56:83:7b:f4:0c:36:75:2e:0a: f3:39:75:1b:78:24:ae:48:09:54:14:53:4e:8c:a6:65:96:a1: f1:e6:94:d8:d7:d9:37:d7:2e:ff:f1:0f:ff:b1:89:6a:bd:87: e4:66:fa:99:8a:c1:9b:49:e0:a8:87:6f:d6:e0:89:f4:54:c0: 00:94:78:8f:0c:d2:79:d8:01:83:a9:93:e4:9d:03:cb:76:76: 44:fe:d0:c6:37:11:ac:1e:4f:e7:7d:86:13:e7:5d:f2:00:d1: fb:5a:6d:d4:28:0e:b2:10:a2:85:88:34:e2:06:2a:cb:d9:dc: 2e:68:e3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCVelCOY+oxehCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi MjNmMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NWQ2MDIyZTAtMmJiYy00MjVkLWJmOTktZjM2MzEzOTJkYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsPwq3it0m7osSvNJ2G8/LxctvofXOc24lVr vzxhQsBPUuixdvtEITbCup7Hve3s2ynv2Rkkj85vx1xkWQj13G6+5NEaMmGqo1Tq ZGsG2F+BW94A+G2tZ/KbIXAy+Hpjyyg5m7OkCtLtVt3gJfhkE+3dhapsZ+Kh+Qvg ZnfU9xEzw1IyBii8K+b60R8+WThgt+RwRDo9ouRQPUBvT1eSd/EUrjO9k/azmaXo JiGoTZ8QNkLS76U5/izNOFIg3BkTWjvxAWVyv7OsdKzFJAvOniSnrDFmRnXeWJXy lbmubnkRL9pTRLLzz5LlHiy2X9J9xoqiM2tlYhnjASa5kR4RTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrfrBByfFxLDbJnhzIEo7JDC6H8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvNjZiNWI4MmEtMzZiMy0z YTk3LWE5ZDctODFlYThkYWQ3ZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5 OWExZmIyM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3TUmwyZ0rH1aHb/zb0SG12kNfVYOjLH9xnLQpeZhnAs5MgHPiueDE/ rnwRyGUOEdFaJtJsqj1YWM0yHetwRzvQ+Nrv40mahpbusRkveT9EIm2fQIkZLNFn /lcE+tgMZH1c/eN6eIY/IqNDuXpfLNszOE10p+3JJO45yW/lr+C7ZHy5bRUvu1aD e/QMNnUuCvM5dRt4JK5ICVQUU06MpmWWofHmlNjX2TfXLv/xD/+xiWq9h+Rm+pmK wZtJ4KiHb9bgifRUwACUeI8M0nnYAYOpk+SdA8t2dkT+0MY3EaweT+d9hhPnXfIA 0ftabdQoDrIQooWINOIGKsvZ3C5o47s= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:40 2025 by rpki-client