$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa File: 566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa (raw, json) Hash identifier: rOFYUiB9j1sBCVVAxRTaMdsNXtunpwzJag4bAe50nCc= Subject key identifier: 67:73:9B:C8:AB:12:B2:CF:1A:81:F5:9E:27:C0:E4:9E:05:EF:C7:2D Certificate issuer: /CN=48416e40-8d51-4528-a6af-36dd93cf14ee Certificate serial: 010D0C9F4328584B32374F4536ADCD758A6F7A60 Authority key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa Signing time: Sun 14 Sep 2025 22:09:34 +0000 ROA not before: Sun 14 Sep 2025 22:09:34 +0000 ROA not after: Sat 13 Dec 2025 23:09:34 +0000 asID: 30625 IP address blocks: 208.66.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:37:4f:45:36:ad:cd:75:8a:6f:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48416e40-8d51-4528-a6af-36dd93cf14ee Validity Not Before: Sep 14 22:09:34 2025 GMT Not After : Dec 13 23:09:34 2025 GMT Subject: CN=8a098bd1-3b2f-41e6-ba4d-614c9b124bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f3:1c:a6:13:1f:eb:09:88:6f:7b:c6:53:f8: 02:70:ca:47:86:71:66:74:5c:b8:13:f3:61:8d:97: 51:6e:41:99:54:f2:a3:aa:47:95:5a:6d:8a:a1:0a: 12:b1:bc:01:f7:1f:29:af:b2:28:55:4c:21:ca:fd: 64:51:cb:30:a0:9a:51:65:04:b2:b6:53:8b:07:25: e6:48:45:5a:ba:8a:61:3a:c3:4b:0e:34:e2:9e:92: dd:be:d4:02:aa:e3:b9:ff:b9:88:01:bf:94:de:f4: e9:03:30:f6:c6:5a:84:70:d4:4a:df:db:62:81:34: 75:9f:5b:ad:d3:13:1c:94:e2:26:b0:5e:e7:c6:c4: e9:5d:ae:66:45:92:58:30:0f:e3:02:66:0f:4c:2f: 93:56:d5:c1:b0:43:f0:da:6f:95:4a:7f:68:8f:8a: 9d:52:e6:09:48:a3:47:f6:7c:29:60:37:40:18:eb: 72:86:83:26:dd:d7:49:23:1e:a6:b6:d9:54:19:2e: 7f:38:c0:ab:22:0e:07:21:6c:fd:a0:66:7c:0a:45: 6e:fd:78:64:6f:d6:45:10:af:26:c3:ce:5c:45:0a: c4:a5:89:c2:9e:a4:a3:54:fc:e6:62:66:b8:bf:30: b3:d6:b5:f2:d5:b8:c4:61:a8:fd:25:7d:90:60:01: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:73:9B:C8:AB:12:B2:CF:1A:81:F5:9E:27:C0:E4:9E:05:EF:C7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl X509v3 Authority Key Identifier: keyid:58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer sbgp-ipAddrBlock: critical IPv4: 208.66.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6d:3e:00:78:9f:c7:ed:c9:58:db:0a:9b:b5:00:3c:0f:e7: 03:b7:a5:6a:98:04:9a:9c:94:33:85:7e:f6:64:21:d3:29:34: 8c:cd:2a:d9:a3:ce:ad:22:ba:a8:f6:17:cf:10:5d:cf:b7:0f: ef:07:d5:4d:ab:53:a6:62:c0:76:95:2f:49:af:57:a8:83:5a: 70:d2:37:f2:02:cb:c8:28:f4:95:f0:a4:a5:e4:65:87:64:74: 98:93:72:0e:75:3d:f4:4d:7f:c9:40:34:7d:79:4e:38:a9:09: 30:91:31:85:d4:a0:23:4f:d8:be:68:5e:2c:9d:67:bf:83:62: c0:34:8b:2a:50:da:d1:9d:62:dc:e5:68:a0:6c:04:d3:a9:18: 4b:38:82:8a:ff:54:e0:91:84:3d:5d:74:6b:8e:23:84:2e:f5: af:c5:6f:4e:46:01:f2:07:de:2b:ae:ab:58:d2:ad:13:ee:1f: 74:73:dd:f3:5c:78:b7:79:4c:f9:29:11:18:71:d7:ee:e6:c4: 86:f1:be:54:76:c5:40:bb:c8:7a:cf:9d:5b:e9:74:a9:95:6d: 8d:7e:f1:f8:a7:bc:80:67:22:12:bf:eb:32:d0:cf:0e:15:4e: 66:57:87:be:42:75:d9:6d:fa:83:9a:be:92:60:e0:83:4a:bb: 8f:dc:47:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyN09FNq3NdYpvemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0MTZlNDAtOGQ1MS00NTI4LWE2YWYtMzZkZDkzY2Yx NGVlMB4XDTI1MDkxNDIyMDkzNFoXDTI1MTIxMzIzMDkzNFowLzEtMCsGA1UEAxMk OGEwOThiZDEtM2IyZi00MWU2LWJhNGQtNjE0YzliMTI0YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/McphMf6wmIb3vGU/gCcMpHhnFmdFy4E/Nh jZdRbkGZVPKjqkeVWm2KoQoSsbwB9x8pr7IoVUwhyv1kUcswoJpRZQSytlOLByXm SEVauophOsNLDjTinpLdvtQCquO5/7mIAb+U3vTpAzD2xlqEcNRK39tigTR1n1ut 0xMclOImsF7nxsTpXa5mRZJYMA/jAmYPTC+TVtXBsEPw2m+VSn9oj4qdUuYJSKNH 9nwpYDdAGOtyhoMm3ddJIx6mttlUGS5/OMCrIg4HIWz9oGZ8CkVu/Xhkb9ZFEK8m w85cRQrEpYnCnqSjVPzmYma4vzCz1rXy1bjEYaj9JX2QYAGvPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdzm8irErLPGoH1nifA5J4F78ctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ODQx NmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRkOTNjZjE0ZWUvNTY2ZTJhOWEtZjFmNy0z ZTJiLThjZDEtYTQ1NDlmYWUyMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDg0MTZlNDAtOGQ1MS00NTI4LWE2 YWYtMzZkZDkzY2YxNGVlLzQ4NDE2ZTQwLThkNTEtNDUyOC1hNmFmLTM2ZGQ5M2Nm MTRlZS5jcmwwHwYDVR0jBBgwFoAUWKxhHbmnpfo9UM9IUZv8FPqkxv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ODQxNmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRk OTNjZjE0ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFtPgB4n8ftyVjbCpu1ADwP5wO3pWqYBJqclDOFfvZkIdMpNIzNKtmj zq0iuqj2F88QXc+3D+8H1U2rU6ZiwHaVL0mvV6iDWnDSN/ICy8go9JXwpKXkZYdk dJiTcg51PfRNf8lANH15TjipCTCRMYXUoCNP2L5oXiydZ7+DYsA0iypQ2tGdYtzl aKBsBNOpGEs4gor/VOCRhD1ddGuOI4Qu9a/Fb05GAfIH3iuuq1jSrRPuH3Rz3fNc eLd5TPkpERhx1+7mxIbxvlR2xUC7yHrPnVvpdKmVbY1+8finvIBnIhK/6zLQzw4V TmZXh75Cddlt+oOavpJg4INKu4/cR9s= -----END CERTIFICATE-----Generated at Wed Oct 8 19:20:03 2025 by rpki-client