$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa File: 25e4f701-0c1c-336e-b2fc-6226317b20ab.roa (raw, json) Hash identifier: 7ETG0s6t4C7PxZ6bJLxEr6X9PWNKv/kC1zHQ+m/MVfY= Subject key identifier: 31:4F:4A:85:C2:DA:9B:86:45:E8:42:B9:BB:20:E6:D0:0B:C1:90:26 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584BAEC7C2DB7F9FF5CA9AE8D380 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 20303 IP address blocks: 66.43.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c2:db:7f:9f:f5:ca:9a:e8:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=7dcf70d3-6920-49e3-9965-a6c3909dd982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:39:51:bc:dc:a2:09:81:27:55:f6:d2:7e: 72:be:d0:f9:4c:e9:50:c9:5e:99:63:a4:be:f6:68: 4c:7f:ce:51:f4:e4:06:7d:62:61:c4:e7:84:06:fa: 1c:50:ab:9b:cb:72:21:c2:c2:e6:d2:15:47:cf:88: c1:21:31:43:aa:18:26:f3:57:a3:42:bd:37:a3:b3: be:09:ff:5f:e4:5d:cb:cc:fb:08:06:fd:14:56:df: 54:73:01:32:9d:ff:bb:f2:8f:39:54:ea:fc:52:34: 2d:aa:a8:b2:7d:8e:78:8e:de:38:dd:70:cf:a6:34: fc:d9:c9:7e:7c:9c:a4:86:38:10:74:ca:6d:18:65: f5:1e:10:b1:35:3f:c0:d7:4f:66:71:96:a6:2e:8f: 64:bd:ac:c5:7f:81:08:38:ef:c4:de:e7:8c:74:52: 9c:24:df:1c:73:1f:10:e9:a3:58:8e:2f:4a:77:d2: c8:69:62:b6:7d:ef:b8:f1:67:37:27:4b:7c:83:53: e8:3c:00:c2:8d:3e:46:e6:ab:6b:81:cc:8a:da:f3: 66:63:68:0e:dd:c6:8e:23:f7:b1:65:72:b1:20:d0: f8:80:16:e5:b8:17:d8:1f:f7:47:ac:b5:c2:23:6d: a9:f1:a4:13:16:4e:28:91:60:43:26:04:44:bd:69: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4F:4A:85:C2:DA:9B:86:45:E8:42:B9:BB:20:E6:D0:0B:C1:90:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 66.43.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:48:58:36:ae:df:39:15:f3:d3:79:72:5a:90:89:89:c4:d3: 55:06:c1:3a:89:63:d2:f4:c4:df:e8:41:9e:46:a1:53:d1:21: 8c:89:a0:3e:8c:14:68:d1:52:a6:af:f5:31:c1:07:12:9c:d1: 6a:52:f9:cb:87:da:77:58:8a:e5:58:24:f7:55:7b:83:e2:15: cb:56:69:26:9e:4e:49:55:e7:4c:e6:7d:69:4b:6e:6c:50:54: 83:64:4e:61:68:2d:78:43:93:fd:1e:38:80:b3:f0:93:ca:05: d6:d8:9d:b2:ef:d2:02:2e:34:f1:2e:1d:ba:4c:55:44:8b:01: 74:07:62:93:61:0d:ff:a0:58:41:4a:8d:71:30:98:08:d8:7b: 1d:f6:68:bc:83:d2:64:e0:f9:3f:c8:f9:8a:c4:8e:7f:11:45: ba:c3:cd:f2:c1:1c:bb:c0:44:69:ad:c8:e3:45:78:82:0a:5e: e3:26:a1:82:86:3b:98:00:fc:4c:69:3e:b7:cb:67:66:c4:a7: 19:9d:4b:5b:d9:ff:3f:57:8d:5d:17:7e:4e:41:71:d9:c4:d2: fc:58:98:c8:20:a0:79:6a:20:b4:d4:e4:3f:66:22:49:d7:1a: 2e:53:4f:a9:d2:d9:bd:3c:89:32:9a:1a:22:89:21:65:92:20: 12:06:06:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8Lbf5/1ypro04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk N2RjZjcwZDMtNjkyMC00OWUzLTk5NjUtYTZjMzkwOWRkOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOU5UbzcogmBJ1X20n5yvtD5TOlQyV6ZY6S+ 9mhMf85R9OQGfWJhxOeEBvocUKuby3IhwsLm0hVHz4jBITFDqhgm81ejQr03o7O+ Cf9f5F3LzPsIBv0UVt9UcwEynf+78o85VOr8UjQtqqiyfY54jt443XDPpjT82cl+ fJykhjgQdMptGGX1HhCxNT/A109mcZamLo9kvazFf4EIOO/E3ueMdFKcJN8ccx8Q 6aNYji9Kd9LIaWK2fe+48Wc3J0t8g1PoPADCjT5G5qtrgcyK2vNmY2gO3caOI/ex ZXKxIND4gBbluBfYH/dHrLXCI22p8aQTFk4okWBDJgREvWlbFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFPSoXC2puGRehCubsg5tALwZAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMjVlNGY3MDEtMGMxYy0z MzZlLWIyZmMtNjIyNjMxN2IyMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQisIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN5IWDau3zkV89N5clqQiYnE01UGwTqJY9L0xN/oQZ5GoVPRIYyJoD6M FGjRUqav9THBBxKc0WpS+cuH2ndYiuVYJPdVe4PiFctWaSaeTklV50zmfWlLbmxQ VINkTmFoLXhDk/0eOICz8JPKBdbYnbLv0gIuNPEuHbpMVUSLAXQHYpNhDf+gWEFK jXEwmAjYex32aLyD0mTg+T/I+YrEjn8RRbrDzfLBHLvARGmtyONFeIIKXuMmoYKG O5gA/ExpPrfLZ2bEpxmdS1vZ/z9XjV0Xfk5BcdnE0vxYmMggoHlqILTU5D9mIknX Gi5TT6nS2b08iTKaGiKJIWWSIBIGBn4= -----END CERTIFICATE-----Generated at Tue Nov 4 03:57:26 2025 by rpki-client