$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/462feaa2-dd37-351c-9267-d73fcb143a99.roa File: 462feaa2-dd37-351c-9267-d73fcb143a99.roa (raw, json) Hash identifier: XZPKmGXPGuXdJDi/seGCojIEWasDe/q2SUBoHHGQ2ow= Subject key identifier: C4:09:C4:A3:BE:7D:6E:CB:77:D3:82:46:A8:11:3E:B9:0D:2C:7E:E2 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB758976EDD2BA0C30E1A380 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/462feaa2-dd37-351c-9267-d73fcb143a99.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 66.209.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:89:76:ed:d2:ba:0c:30:e1:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=0a907899-255a-4e8e-9ed8-fafc9bb798e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:b2:c3:3a:bc:1f:81:c2:41:92:e5:89:b3: a1:81:a0:66:7e:e5:5c:3e:d1:1d:06:7a:35:9c:a3: df:3f:f1:a7:49:a6:89:65:ad:47:92:10:f4:a5:5f: db:2f:85:85:ea:b2:3f:6c:6d:0f:ab:72:4c:b3:4a: ed:d6:bb:73:55:cc:76:9c:1f:1d:08:cf:ca:8a:e1: 42:bc:dc:9b:a6:56:46:a6:97:a3:06:2c:3f:cc:78: 75:8b:18:0d:ac:3b:ef:f0:ff:11:72:cf:fa:f8:2b: cd:b2:3a:24:2c:90:3d:13:ed:02:51:97:59:f3:49: 54:4c:f5:db:cf:36:51:45:34:e5:ca:ae:95:3d:42: dd:da:dc:e0:ed:5d:bf:a1:54:9c:54:92:b4:b9:cc: 58:a1:d8:d8:f3:de:67:5e:fc:42:2d:93:40:2f:29: cf:3e:be:aa:e3:aa:a3:f3:6f:9e:f9:21:30:38:a5: a9:64:f8:d4:4e:1a:c0:f6:7c:7c:28:3b:d0:72:92: 1d:16:b9:36:3c:8b:d5:c3:f7:44:3e:3c:9d:54:1f: 28:36:8e:1c:0f:3f:40:99:13:1a:ec:71:23:88:9a: 1f:22:a3:d4:9a:df:52:62:e5:1a:5d:7a:8c:12:b4: cd:d2:9c:d4:bc:6f:57:a3:88:b8:d7:47:51:5b:86: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:09:C4:A3:BE:7D:6E:CB:77:D3:82:46:A8:11:3E:B9:0D:2C:7E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/462feaa2-dd37-351c-9267-d73fcb143a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9d:43:16:35:93:bf:22:31:3d:29:44:1f:da:20:19:98:88: e5:8f:ad:3b:6a:c4:3e:42:0e:2a:8e:19:88:9a:46:6e:15:52: a0:df:52:7f:a9:ce:66:fe:be:f9:fe:b3:cf:86:4e:4d:cc:b7: 4c:96:b9:94:ee:2d:68:74:9a:1e:4e:ee:f0:fd:ae:67:0a:33: 06:c7:3b:37:ed:eb:31:ec:34:0f:d8:69:5f:b4:63:31:60:af: 70:a3:fd:1f:7d:34:6e:42:74:05:9b:ec:55:27:c3:a7:db:79: 20:68:c2:46:3e:9e:f2:ea:c0:b0:69:80:4e:0b:fc:5b:9b:8d: 21:74:2c:a3:cb:6d:c1:b6:69:a5:b2:4f:12:aa:46:17:2c:1f: 58:77:45:1a:c5:50:e4:65:df:ef:ae:06:fc:8f:7f:47:06:e3: 8e:5f:a2:af:5c:b4:f4:0c:80:c7:9b:a1:2a:94:b6:95:20:79: 42:95:ee:28:da:c8:05:d4:10:4b:55:ae:e6:e2:1b:1b:d6:54: 3b:6c:be:bd:fd:d3:b0:80:25:ee:05:bf:32:c0:95:fc:94:bb: 7f:32:44:82:0c:a4:74:bb:58:cb:5f:35:a6:71:25:67:03:f6: 93:4d:6a:d8:7b:d8:a6:57:68:0e:bb:13:32:60:e0:b0:14:58: b0:fb:34:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYl27dK6DDDho4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MGE5MDc4OTktMjU1YS00ZThlLTllZDgtZmFmYzliYjc5OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHqywzq8H4HCQZLlibOhgaBmfuVcPtEdBno1 nKPfP/GnSaaJZa1HkhD0pV/bL4WF6rI/bG0Pq3JMs0rt1rtzVcx2nB8dCM/KiuFC vNybplZGppejBiw/zHh1ixgNrDvv8P8Rcs/6+CvNsjokLJA9E+0CUZdZ80lUTPXb zzZRRTTlyq6VPULd2tzg7V2/oVScVJK0ucxYodjY895nXvxCLZNALynPPr6q46qj 82+e+SEwOKWpZPjUThrA9nx8KDvQcpIdFrk2PIvVw/dEPjydVB8oNo4cDz9AmRMa 7HEjiJofIqPUmt9SYuUaXXqMErTN0pzUvG9Xo4i410dRW4ZEUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQJxKO+fW7Ld9OCRqgRPrkNLH7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNDYyZmVhYTItZGQzNy0z NTFjLTkyNjctZDczZmNiMTQzYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKdQxY1k78iMT0pRB/aIBmYiOWPrTtqxD5CDiqOGYiaRm4VUqDfUn+p zmb+vvn+s8+GTk3Mt0yWuZTuLWh0mh5O7vD9rmcKMwbHOzft6zHsNA/YaV+0YzFg r3Cj/R99NG5CdAWb7FUnw6fbeSBowkY+nvLqwLBpgE4L/FubjSF0LKPLbcG2aaWy TxKqRhcsH1h3RRrFUORl3++uBvyPf0cG445foq9ctPQMgMeboSqUtpUgeUKV7ija yAXUEEtVrubiGxvWVDtsvr3907CAJe4FvzLAlfyUu38yRIIMpHS7WMtfNaZxJWcD 9pNNath72KZXaA67EzJg4LAUWLD7NNM= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:44 2025 by rpki-client