$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa File: 66a0ccf2-be25-3812-acc8-c6922a2ae498.roa (raw, json) Hash identifier: lTADAAtpVnp4TQ+jqeejBncynW+uddKp2zaripws4W0= Subject key identifier: 0E:75:58:00:72:85:4B:CD:9D:CD:69:03:E4:19:7E:95:86:D9:CB:7D Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB7589A137785057AE1D8980 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 66.209.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:89:a1:37:78:50:57:ae:1d:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=5f01d197-1691-46f3-af53-0ac3d445b87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:62:26:f4:fb:3a:e9:e4:53:44:8a:9e:5e: c3:3c:99:92:cb:39:42:4c:69:ca:c7:9c:85:19:2e: 3c:9b:9f:59:b4:6f:cb:15:56:3e:32:25:ca:2a:81: a2:7f:7c:2e:d9:a0:74:34:c7:33:7f:31:ce:83:ba: 8a:0a:25:d5:fe:73:f5:93:cb:c7:34:7e:2c:b2:60: 46:1f:63:b2:73:fe:ca:fa:06:8f:76:65:d2:7f:bb: 56:76:ec:85:c2:54:87:99:24:98:6d:31:9f:8d:28: 97:67:20:b8:07:7d:08:f6:b4:70:58:e1:7a:60:e7: d9:31:c5:dc:ab:a3:2e:85:6a:fa:a6:67:69:0b:99: be:ac:94:23:13:a5:10:ec:ba:82:c4:05:8c:bf:89: 8b:30:b1:98:be:ec:a8:b1:9f:54:a4:d4:6b:cb:81: 22:ba:6f:bf:d3:0c:e7:cc:d9:5b:5a:92:6b:a2:55: 0c:5d:15:62:6a:f8:b1:25:e7:e3:cf:23:27:4c:cf: 6e:44:58:7e:98:5b:7a:84:bc:0e:e8:9e:c5:d9:e8: 22:7b:e5:be:2b:84:7c:3d:e5:98:49:e8:28:93:3c: 36:77:fa:8f:c5:58:f4:4e:8b:80:ba:63:77:8f:ca: 9f:5d:51:23:5c:75:b9:5c:01:bb:46:46:10:fb:29: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:58:00:72:85:4B:CD:9D:CD:69:03:E4:19:7E:95:86:D9:CB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/66a0ccf2-be25-3812-acc8-c6922a2ae498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:92:af:86:94:5c:f8:b6:27:cc:db:16:5b:c0:4b:d7:d8:18: 41:80:16:53:21:36:3b:ac:69:ed:f4:50:37:cf:c0:94:b4:4b: 42:b7:e1:f0:f1:25:73:7e:61:dc:9e:c1:68:17:d4:34:26:e5: 24:6a:32:ba:a9:8f:76:77:2b:95:95:d5:60:df:19:44:b6:6e: e7:75:9d:1c:d1:41:fd:d4:09:ea:ec:16:a9:a0:7b:cf:ea:d4: 7c:5a:95:fc:4e:66:5d:d7:5d:9b:b6:de:4e:8d:2b:d9:7a:44: f0:be:bf:b4:e3:c7:14:e8:a2:f8:54:1e:5f:4d:bd:2b:08:1b: 80:47:3c:81:83:bd:d2:ac:40:0c:d4:11:2f:97:3a:64:6a:d0: d1:53:ce:ff:0c:45:af:19:89:b7:fd:11:d4:70:62:fb:c0:09: c8:98:78:21:50:6c:1a:69:98:35:e7:3e:b9:fd:45:02:8c:a5: ed:b4:be:39:99:58:5e:48:f8:a3:67:f9:5b:de:03:ac:e2:fd: db:86:91:d8:6b:0e:2d:c3:16:fd:fb:74:46:58:79:42:1e:0a: e2:02:cb:bd:8d:92:84:59:fd:7f:36:9b:eb:5c:82:a2:65:54: a3:ff:bc:de:b4:1a:91:2b:93:04:3f:02:12:f3:51:d1:eb:8d: 0d:75:5a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYmhN3hQV64diYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NWYwMWQxOTctMTY5MS00NmYzLWFmNTMtMGFjM2Q0NDViODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofliJvT7OunkU0SKnl7DPJmSyzlCTGnKx5yF GS48m59ZtG/LFVY+MiXKKoGif3wu2aB0NMczfzHOg7qKCiXV/nP1k8vHNH4ssmBG H2Oyc/7K+gaPdmXSf7tWduyFwlSHmSSYbTGfjSiXZyC4B30I9rRwWOF6YOfZMcXc q6MuhWr6pmdpC5m+rJQjE6UQ7LqCxAWMv4mLMLGYvuyosZ9UpNRry4Eium+/0wzn zNlbWpJrolUMXRViavixJefjzyMnTM9uRFh+mFt6hLwO6J7F2egie+W+K4R8PeWY Segokzw2d/qPxVj0TouAumN3j8qfXVEjXHW5XAG7RkYQ+ylk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA51WAByhUvNnc1pA+QZfpWG2ct9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNjZhMGNjZjItYmUyNS0z ODEyLWFjYzgtYzY5MjJhMmFlNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtGHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeSr4aUXPi2J8zbFlvAS9fYGEGAFlMhNjusae30UDfPwJS0S0K34fDx JXN+YdyewWgX1DQm5SRqMrqpj3Z3K5WV1WDfGUS2bud1nRzRQf3UCersFqmge8/q 1HxalfxOZl3XXZu23k6NK9l6RPC+v7TjxxToovhUHl9NvSsIG4BHPIGDvdKsQAzU ES+XOmRq0NFTzv8MRa8Zibf9EdRwYvvACciYeCFQbBppmDXnPrn9RQKMpe20vjmZ WF5I+KNn+VveA6zi/duGkdhrDi3DFv37dEZYeUIeCuICy72NkoRZ/X82m+tcgqJl VKP/vN60GpErkwQ/AhLzUdHrjQ11WnQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:44:08 2025 by rpki-client