$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa File: 2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa (raw, json) Hash identifier: XjhTjdSinXXShxrgCOyumhImWWme2ZvpuFX36VY7h28= Subject key identifier: 77:EC:5A:90:B3:8A:10:1B:F8:9E:B9:93:3D:47:5C:CF:84:12:C0:38 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B3AEC3AA144AB31FC13C09740 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 215081 IP address blocks: 66.118.236.0/24 maxlen: 24 66.118.238.0/24 maxlen: 24 104.249.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3a:a1:44:ab:31:fc:13:c0:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=6c1a8399-f414-4c58-b14d-3518840d6d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:bb:8b:7e:33:09:a5:97:39:bf:91:c5:98: 2c:11:0f:76:ef:14:16:b9:23:29:7e:1e:cb:77:f6: ce:05:d4:bf:e5:0c:e0:2b:f2:fb:61:e4:cf:96:a6: 1d:58:85:02:3f:fb:01:49:a1:e9:bb:71:07:4e:eb: 6b:a5:e4:89:1d:1a:7a:c4:f6:d0:bf:25:45:f0:22: 82:6f:80:ec:54:fa:54:14:1c:cc:3f:34:36:0e:9d: 23:0a:bc:7e:ac:f0:55:9b:df:d5:8a:79:41:c4:8d: 52:67:f1:22:a6:55:52:37:80:51:da:c1:1f:e0:38: 21:19:7e:89:9a:e7:ae:1e:54:b3:50:20:bd:dc:4c: b6:ba:f3:51:ed:b8:4a:27:ef:0a:0c:3e:0e:6e:7f: 0c:d7:d9:fc:f8:8f:0d:30:8e:61:a9:cf:2b:de:12: 54:75:c1:23:96:44:04:b9:1f:d0:49:76:ed:67:19: 66:d9:66:94:e8:40:00:bf:bf:04:0c:fa:81:04:7c: 17:f1:9a:6a:92:cb:45:45:23:59:5d:76:cb:ad:28: 59:3f:a1:18:41:03:42:87:28:7e:44:55:b7:6e:17: 88:74:3b:da:fb:4c:27:d0:50:41:f2:6a:1a:6d:15: c5:5f:d8:95:10:d9:ae:78:9c:2b:89:9c:e2:35:35: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EC:5A:90:B3:8A:10:1B:F8:9E:B9:93:3D:47:5C:CF:84:12:C0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.236.0/24 66.118.238.0/24 104.249.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4e:1a:0b:61:e6:25:8b:4b:9e:33:e4:da:9f:5f:42:4e:6d: 04:d8:75:c2:b0:01:d3:80:5a:f7:f9:70:c9:d9:ab:bf:a5:a5: 30:c8:65:bf:7d:13:fe:6e:f6:e9:c4:d8:60:95:14:32:26:c4: 30:dd:5f:93:dd:5a:af:af:ad:31:93:2c:f0:69:63:5e:d0:b2: f8:19:22:e0:34:92:b7:cd:a3:96:bd:bd:65:e8:0f:e5:7f:00: d0:8e:e5:d2:10:3e:9c:4f:68:b9:7c:0d:70:4a:9e:60:94:a0: 68:a3:bc:8b:a5:8c:f0:2e:e4:e3:ad:74:6c:4e:27:78:db:22: 7e:53:33:90:7d:d6:df:fd:fb:56:cb:9f:94:4c:07:8a:1e:d2: 9d:99:b1:a7:80:40:17:4b:4f:b3:6a:03:91:a7:fa:bf:63:65: a7:91:7b:d2:52:ca:99:9d:2d:79:cb:d7:64:fa:dd:1b:e4:25: 44:ec:12:20:75:6e:27:a2:e3:ea:33:b6:7e:d8:de:63:18:65: ea:aa:1a:16:4a:ec:43:b4:d8:f1:cf:a2:5c:1d:ce:8b:94:2a: d2:71:b0:e1:a2:62:ed:0b:52:8b:55:f1:7e:3e:1d:a4:d7:6a: 18:5a:26:9d:ad:d8:dc:54:c9:f0:f4:75:cd:2d:1e:1c:15:5b: 98:a7:01:d5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEs67DqhRKsx/BPAl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk NmMxYTgzOTktZjQxNC00YzU4LWIxNGQtMzUxODg0MGQ2ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5G7i34zCaWXOb+RxZgsEQ927xQWuSMpfh7L d/bOBdS/5QzgK/L7YeTPlqYdWIUCP/sBSaHpu3EHTutrpeSJHRp6xPbQvyVF8CKC b4DsVPpUFBzMPzQ2Dp0jCrx+rPBVm9/VinlBxI1SZ/EiplVSN4BR2sEf4DghGX6J mueuHlSzUCC93Ey2uvNR7bhKJ+8KDD4Obn8M19n8+I8NMI5hqc8r3hJUdcEjlkQE uR/QSXbtZxlm2WaU6EAAv78EDPqBBHwX8ZpqkstFRSNZXXbLrShZP6EYQQNChyh+ RFW3bheIdDva+0wn0FBB8moabRXFX9iVENmueJwriZziNTXaSwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFHfsWpCzihAb+J65kz1HXM+EEsA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhZDhkM2UtNWY1Yy0z MGFmLTg4ODMtOTc2MThjMmJlZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQnbsAwQA QnbuAwQAaPmBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADhOGgth5iWLS54z5NqfX0JObQTYdcKwAdOAWvf5 cMnZq7+lpTDIZb99E/5u9unE2GCVFDImxDDdX5PdWq+vrTGTLPBpY17QsvgZIuA0 krfNo5a9vWXoD+V/ANCO5dIQPpxPaLl8DXBKnmCUoGijvIuljPAu5OOtdGxOJ3jb In5TM5B91t/9+1bLn5RMB4oe0p2ZsaeAQBdLT7NqA5Gn+r9jZaeRe9JSypmdLXnL 12T63RvkJUTsEiB1biei4+oztn7Y3mMYZeqqGhZK7EO02PHPolwdzouUKtJxsOGi Yu0LUotV8X4+HaTXahhaJp2t2NxUyfD0dc0tHhwVW5inAdU= -----END CERTIFICATE-----Generated at Wed Oct 22 07:11:15 2025 by rpki-client