$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66a2e27a-6d15-3a98-b75e-6440afe6b047.roa File: 66a2e27a-6d15-3a98-b75e-6440afe6b047.roa (raw, json) Hash identifier: yISyItJyWc+nwghLcKmXPRgwcH7xGYsw73xbTZJ4nhA= Subject key identifier: 0A:9E:E3:C0:65:25:C5:F3:76:F8:4B:4D:F9:A1:CF:D0:53:BE:FB:EE Certificate issuer: /CN=4cbd1783-5272-4e33-b882-bdd928a5e339 Certificate serial: 010D0C9F4328584B99D7FD095AF5EA957AE44380 Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66a2e27a-6d15-3a98-b75e-6440afe6b047.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 31996 IP address blocks: 209.198.2.0/24 maxlen: 24 209.198.3.0/24 maxlen: 24 216.189.120.0/24 maxlen: 24 216.189.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fd:09:5a:f5:ea:95:7a:e4:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=8966c397-3698-46ce-ba12-efe0fb17a26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:41:a3:ed:4f:81:89:71:de:bc:b6:d6:08: ac:5f:12:03:ac:4d:0e:1d:33:8c:47:35:e3:c1:84: 73:fe:18:11:85:17:67:2e:be:8e:01:3f:61:bb:47: 60:72:02:32:c7:08:ff:07:88:a8:07:87:bd:94:05: 4e:1b:b4:9e:fc:01:fc:42:5e:d4:d5:96:3a:f7:74: 75:e6:31:8c:bc:39:94:25:fa:f9:c8:ee:66:c6:40: 34:7a:88:70:30:15:07:d2:cd:de:5e:48:b6:3c:00: 45:ca:ea:10:ba:4f:b8:6b:1f:fb:1f:84:66:98:45: 7c:b9:35:4e:35:b8:98:9a:f6:52:41:98:85:7a:11: 23:87:05:48:dc:ba:02:6a:5f:e3:c6:fa:9a:4a:57: 9d:5c:83:4e:9c:40:42:89:3e:e2:e6:3b:69:95:fb: 05:58:fe:ff:5d:4c:75:b2:08:35:a7:6f:4a:53:c2: 9d:42:dd:92:8e:02:7f:b8:63:ca:fd:c8:65:4c:ad: 4e:08:50:e5:5c:23:48:fa:fc:42:cc:5a:0d:b5:d5: 79:be:9c:4a:5e:d3:2e:92:fb:f9:d5:58:ca:cb:5d: f9:f2:50:22:df:c6:5f:27:89:3e:9b:a2:81:1e:b4: d7:30:90:da:c4:c5:16:d6:5b:a0:09:12:60:81:07: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:E3:C0:65:25:C5:F3:76:F8:4B:4D:F9:A1:CF:D0:53:BE:FB:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66a2e27a-6d15-3a98-b75e-6440afe6b047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl X509v3 Authority Key Identifier: keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer sbgp-ipAddrBlock: critical IPv4: 209.198.2.0/23 216.189.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:99:33:81:26:bc:bc:4c:8e:6c:23:08:70:03:38:05:6a:b8: c4:5e:b1:9d:89:58:d2:12:df:be:23:43:d5:bd:63:e7:47:a4: 2f:4e:9c:96:88:cf:bb:17:57:99:e7:ae:a8:c9:d8:36:c1:d0: e0:dd:e8:a1:70:41:ab:c6:45:96:6b:4a:49:33:38:25:17:98: 51:03:cf:7e:0a:c7:13:61:6f:f1:59:46:a0:c1:ea:da:f5:f0: a4:b5:b2:ef:67:e2:6c:e5:2d:b4:66:38:3c:ea:18:19:1d:aa: 24:1c:99:3b:89:1f:77:16:5c:bd:0f:94:02:ce:89:e4:b9:00: a5:d1:22:6d:27:12:34:12:a3:b5:ff:0d:81:2b:b1:cb:d5:11: 8c:5f:56:87:cd:00:d9:0b:81:e4:c3:33:ce:8f:64:8a:e9:54: 51:d8:58:d1:bb:6c:7f:e5:b2:e4:1f:26:d1:8f:1c:a3:3c:72: 9c:5c:f8:4f:e7:a4:42:b8:47:5d:6a:68:98:68:08:3a:dd:b5: c6:07:7c:0b:27:05:6a:de:f5:ba:66:4c:16:43:13:90:b4:c7: 72:32:11:2e:da:52:e6:c2:5e:6e:a4:7a:08:8c:0f:11:03:f2: 34:bf:f8:aa:bb:24:5b:05:3d:9d:c6:c7:b9:9d:3b:bd:be:94: 3f:67:cd:1a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ1/0JWvXqlXrkQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNiZDE3ODMtNTI3Mi00ZTMzLWI4ODItYmRkOTI4YTVl MzM5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODk2NmMzOTctMzY5OC00NmNlLWJhMTItZWZlMGZiMTdhMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMFBo+1PgYlx3ry21gisXxIDrE0OHTOMRzXj wYRz/hgRhRdnLr6OAT9hu0dgcgIyxwj/B4ioB4e9lAVOG7Se/AH8Ql7U1ZY693R1 5jGMvDmUJfr5yO5mxkA0eohwMBUH0s3eXki2PABFyuoQuk+4ax/7H4RmmEV8uTVO NbiYmvZSQZiFehEjhwVI3LoCal/jxvqaSledXINOnEBCiT7i5jtplfsFWP7/XUx1 sgg1p29KU8KdQt2SjgJ/uGPK/chlTK1OCFDlXCNI+vxCzFoNtdV5vpxKXtMukvv5 1VjKy1358lAi38ZfJ4k+m6KBHrTXMJDaxMUW1lugCRJggQe5uQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAqe48BlJcXzdvhLTfmhz9BTvvvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Y2Jk MTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5MjhhNWUzMzkvNjZhMmUyN2EtNmQxNS0z YTk4LWI3NWUtNjQ0MGFmZTZiMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGNiZDE3ODMtNTI3Mi00ZTMzLWI4 ODItYmRkOTI4YTVlMzM5LzRjYmQxNzgzLTUyNzItNGUzMy1iODgyLWJkZDkyOGE1 ZTMzOS5jcmwwHwYDVR0jBBgwFoAUBHyAUw64RhKpLHGzqNzKbVrcWU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80Y2JkMTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5 MjhhNWUzMzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0cYCAwQB 2L14MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ6ZM4EmvLxMjmwjCHADOAVquMResZ2JWNIS374jQ9W9Y+dH pC9OnJaIz7sXV5nnrqjJ2DbB0ODd6KFwQavGRZZrSkkzOCUXmFEDz34KxxNhb/FZ RqDB6tr18KS1su9n4mzlLbRmODzqGBkdqiQcmTuJH3cWXL0PlALOieS5AKXRIm0n EjQSo7X/DYErscvVEYxfVofNANkLgeTDM86PZIrpVFHYWNG7bH/lsuQfJtGPHKM8 cpxc+E/npEK4R11qaJhoCDrdtcYHfAsnBWre9bpmTBZDE5C0x3IyES7aUubCXm6k egiMDxED8jS/+Kq7JFsFPZ3Gx7mdO72+lD9nzRo= -----END CERTIFICATE-----Generated at Wed Oct 22 07:41:10 2025 by rpki-client