$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa File: 0752d7a5-5222-310c-85f3-05e84bd2890b.roa (raw, json) Hash identifier: lxJffWFvNPh0/infH9I/vCGNFTWzrt23kaUvivA98cc= Subject key identifier: 4A:F0:AD:F5:96:18:8B:4A:9F:90:45:BB:C7:31:21:18:A3:2B:76:1D Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584B540C6921B7318E442DFE3680 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 4213 IP address blocks: 66.172.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:69:21:b7:31:8e:44:2d:fe:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=74bba7ac-54b8-4cf9-8d4d-4fd372a5e5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:17:ab:39:c3:53:c9:d9:8d:d6:8c:89:e1: 41:a2:c2:3a:60:40:92:93:fd:ca:89:c3:35:11:71: a4:94:d8:b0:dc:3e:09:84:76:77:1d:5f:c7:14:ad: b2:b8:5a:47:38:f5:cc:fd:d1:bc:ad:b9:d2:e7:5e: f8:a4:aa:6c:36:81:74:e1:1c:41:b4:c5:05:9e:f2: af:e1:e7:37:e7:82:66:89:f9:be:b2:7c:a7:27:05: a2:40:83:af:aa:8a:9f:f6:b3:81:80:f6:dc:ac:e3: b0:40:32:08:54:d2:63:87:1c:26:15:73:fd:f5:7d: cc:b5:a1:48:80:2f:00:20:02:ff:e9:b0:46:6e:39: 7a:d1:50:d4:a2:d7:ab:25:0e:81:10:f9:11:ce:58: 88:6e:57:3d:fa:c5:29:d2:1d:8c:fc:2c:0b:44:21: ec:d4:3d:d8:bf:53:08:e7:98:f5:2b:46:fb:94:c9: a6:e8:93:87:e1:c7:0f:07:36:74:91:c5:24:ac:d7: cb:cc:1c:b3:ef:04:20:6e:c4:88:3b:14:30:a0:a3: 89:04:2d:5e:af:b4:55:4a:c7:a5:80:b1:ae:31:07: 3e:7e:8e:67:64:3d:e8:21:e1:a2:71:c9:27:d8:e2: 63:6d:05:b5:ff:77:51:f1:d1:85:e2:c0:5f:67:b5: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:AD:F5:96:18:8B:4A:9F:90:45:BB:C7:31:21:18:A3:2B:76:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 66.172.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:48:d7:9a:7c:e7:31:1f:2b:90:58:71:91:8c:33:63:9d:1e: 5b:21:e1:fa:c8:cc:d0:3d:7e:04:fc:cf:d1:5e:87:41:8f:53: 9d:1e:76:55:ac:b9:8f:6b:6e:b5:e8:83:a1:4b:77:d3:47:85: ae:2a:5d:4a:a6:b1:f8:c9:cf:d5:c7:d5:2e:0c:f6:1f:60:26: 12:7b:0e:1e:24:e5:75:dc:6b:d1:39:8d:84:77:3a:f6:fa:70: b7:d8:41:58:83:ae:04:93:33:61:75:0a:32:61:ab:b3:c3:40: e6:6e:b3:96:0b:c3:64:5a:70:77:da:06:08:5e:d0:f6:a4:5c: a6:5c:54:79:7a:44:5b:e2:1b:a8:91:b3:67:f7:e3:86:c2:27: 81:7f:c1:51:65:78:df:12:49:7a:77:3a:d3:5e:a5:92:54:64: fa:ba:75:47:e6:be:08:5b:7a:32:c0:ef:a9:ce:cb:cf:09:c4: c2:cd:f5:ae:9a:3c:55:0a:9b:a9:77:22:63:42:f3:e4:83:ee: b1:ef:09:a9:03:64:54:6c:07:a3:cc:c7:a3:3b:ca:f7:9c:13: 42:ac:fb:00:21:8d:94:8c:d9:52:77:a6:34:45:d2:9a:21:f3: 2e:6a:1b:ab:52:bf:66:ff:8c:18:93:c3:70:26:8b:14:5d:33: 0c:1c:b8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGkhtzGORC3+NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NzRiYmE3YWMtNTRiOC00Y2Y5LThkNGQtNGZkMzcyYTVlNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUXqznDU8nZjdaMieFBosI6YECSk/3KicM1 EXGklNiw3D4JhHZ3HV/HFK2yuFpHOPXM/dG8rbnS5174pKpsNoF04RxBtMUFnvKv 4ec354Jmifm+snynJwWiQIOvqoqf9rOBgPbcrOOwQDIIVNJjhxwmFXP99X3MtaFI gC8AIAL/6bBGbjl60VDUoterJQ6BEPkRzliIblc9+sUp0h2M/CwLRCHs1D3Yv1MI 55j1K0b7lMmm6JOH4ccPBzZ0kcUkrNfLzByz7wQgbsSIOxQwoKOJBC1er7RVSsel gLGuMQc+fo5nZD3oIeGicckn2OJjbQW1/3dR8dGF4sBfZ7VJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErwrfWWGItKn5BFu8cxIRijK3YdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMDc1MmQ3YTUtNTIyMi0z MTBjLTg1ZjMtMDVlODRiZDI4OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQqwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1I15p85zEfK5BYcZGMM2OdHlsh4frIzNA9fgT8z9Feh0GPU50edlWs uY9rbrXog6FLd9NHha4qXUqmsfjJz9XH1S4M9h9gJhJ7Dh4k5XXca9E5jYR3Ovb6 cLfYQViDrgSTM2F1CjJhq7PDQOZus5YLw2RacHfaBghe0PakXKZcVHl6RFviG6iR s2f344bCJ4F/wVFleN8SSXp3OtNepZJUZPq6dUfmvghbejLA76nOy88JxMLN9a6a PFUKm6l3ImNC8+SD7rHvCakDZFRsB6PMx6M7yvecE0Ks+wAhjZSM2VJ3pjRF0poh 8y5qG6tSv2b/jBiTw3AmixRdMwwcuD0= -----END CERTIFICATE-----Generated at Mon Oct 27 20:28:32 2025 by rpki-client