$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa File: c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa (raw, json) Hash identifier: 0iSFgclyLkhAKh+ZXRMyLMboU7pnED3WSMOye8hkbU4= Subject key identifier: AE:FB:48:26:DD:47:37:1B:65:5C:D4:60:5C:D9:AE:4D:FB:07:F1:1A Certificate issuer: /CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094 Certificate serial: 010D0C9F4328584B715CA259453F897D674878C0 Authority key identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 11817 IP address blocks: 66.11.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a2:59:45:3f:89:7d:67:48:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=9236149e-f3d7-4751-989f-7616ab807bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:ed:59:65:97:88:18:4f:fe:b7:f6:ca:46: 89:0f:c0:c7:f5:df:b2:82:7a:06:a0:f0:1e:cb:78: 96:77:67:78:19:5f:ec:a8:ff:5a:cc:8b:9c:bc:d5: 74:bc:45:0e:be:19:52:96:d8:de:23:a5:92:5f:62: f4:97:c0:5e:6c:0f:aa:17:0b:10:ef:c1:53:5c:24: 3e:f0:cc:30:4e:84:6e:95:51:68:76:a2:09:f3:35: 93:01:b3:ce:82:59:e0:8c:11:b9:3a:65:f0:38:49: eb:23:3c:1c:1d:49:14:b5:bb:14:4a:5c:2b:c0:9d: 82:35:9a:bc:36:e4:8a:4d:ca:af:08:98:51:0b:4a: e3:40:70:f7:d6:fb:21:20:77:8b:c4:2d:9e:f3:ff: 3b:f4:5f:08:9d:c6:f1:fd:7a:1f:f4:8f:94:ec:5e: 0a:77:a2:71:8c:17:46:22:38:9a:8f:fa:3d:b3:c3: 14:59:7d:ed:27:cc:21:ea:3f:38:f5:58:ff:45:b1: fb:50:ad:45:90:c2:77:25:bd:32:1f:1e:0f:ec:09: b9:a6:12:c3:41:26:77:eb:4e:a0:df:ab:94:dd:3b: 02:f9:7f:1b:61:64:f2:45:92:96:4c:69:d9:bb:5a: b2:aa:0d:0d:e6:6e:eb:a8:02:6e:ac:8d:48:86:6f: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:48:26:DD:47:37:1B:65:5C:D4:60:5C:D9:AE:4D:FB:07:F1:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl X509v3 Authority Key Identifier: keyid:9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer sbgp-ipAddrBlock: critical IPv4: 66.11.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4b:e4:47:55:0b:7e:ae:46:fc:c6:ec:95:99:9e:e9:c8:98: 67:7b:f9:35:4b:41:28:06:bf:bc:4e:af:ae:40:be:01:05:81: 42:4b:f4:38:2a:0f:c0:bb:54:e3:d4:10:7b:bf:63:89:50:bc: 46:e9:09:82:ae:10:9a:7a:57:88:45:72:3d:bf:cd:7e:fd:8c: 7f:26:f6:4a:50:7e:50:cc:8e:4d:63:72:bc:97:32:7d:92:2e: e0:97:fe:95:e9:8e:44:ef:c7:3c:f2:11:b9:f3:fd:d5:4c:38: ae:fa:05:c6:fc:25:77:87:45:76:cb:dd:25:ed:08:b9:de:de: a9:89:ec:6c:52:08:81:a9:fd:14:2e:1c:81:47:80:d4:82:dc: ac:9b:bc:68:30:a3:40:2a:00:21:1e:9d:7c:eb:30:56:ba:e2: 41:00:62:a2:41:e6:c1:63:20:27:42:08:89:ad:4d:b3:8e:83: 1f:b8:b9:68:2c:20:ff:40:7e:45:7c:0f:17:1a:c8:29:9a:94: a4:96:27:72:9c:0d:24:7b:43:8c:e9:86:75:40:a5:5d:a2:d0: ac:5b:e0:f8:f5:63:93:db:05:31:2d:7b:77:be:ea:ac:49:a3: 61:82:75:7f:e3:88:55:19:aa:19:c8:54:4c:57:2d:f0:39:eb: 27:6e:26:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKJZRT+JfWdIeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVlZThkMmItOGRiYy00ODE5LTkxNDItNGIxYjQ1ZDVh MDk0MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OTIzNjE0OWUtZjNkNy00NzUxLTk4OWYtNzYxNmFiODA3YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpXtWWWXiBhP/rf2ykaJD8DH9d+ygnoGoPAe y3iWd2d4GV/sqP9azIucvNV0vEUOvhlSltjeI6WSX2L0l8BebA+qFwsQ78FTXCQ+ 8MwwToRulVFodqIJ8zWTAbPOglngjBG5OmXwOEnrIzwcHUkUtbsUSlwrwJ2CNZq8 NuSKTcqvCJhRC0rjQHD31vshIHeLxC2e8/879F8Incbx/Xof9I+U7F4Kd6JxjBdG Ijiaj/o9s8MUWX3tJ8wh6j849Vj/RbH7UK1FkMJ3Jb0yHx4P7Am5phLDQSZ3606g 36uU3TsC+X8bYWTyRZKWTGnZu1qyqg0N5m7rqAJurI1Ihm+ifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK77SCbdRzcbZVzUYFzZrk37B/EaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZWVl OGQyYi04ZGJjLTQ4MTktOTE0Mi00YjFiNDVkNWEwOTQvYzE3MDhjYWMtMzZkOC0z MDk4LWE1Y2QtY2ZlZjgyZTdiNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGVlZThkMmItOGRiYy00ODE5LTkx NDItNGIxYjQ1ZDVhMDk0LzBlZWU4ZDJiLThkYmMtNDgxOS05MTQyLTRiMWI0NWQ1 YTA5NC5jcmwwHwYDVR0jBBgwFoAUmzpRzdG2Oc3auX3SZbqMKoOEv7QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZWVlOGQyYi04ZGJjLTQ4MTktOTE0Mi00YjFi NDVkNWEwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQguAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANL5EdVC36uRvzG7JWZnunImGd7+TVLQSgGv7xOr65AvgEFgUJL9Dgq D8C7VOPUEHu/Y4lQvEbpCYKuEJp6V4hFcj2/zX79jH8m9kpQflDMjk1jcryXMn2S LuCX/pXpjkTvxzzyEbnz/dVMOK76Bcb8JXeHRXbL3SXtCLne3qmJ7GxSCIGp/RQu HIFHgNSC3KybvGgwo0AqACEenXzrMFa64kEAYqJB5sFjICdCCImtTbOOgx+4uWgs IP9AfkV8DxcayCmalKSWJ3KcDSR7Q4zphnVApV2i0Kxb4Pj1Y5PbBTEte3e+6qxJ o2GCdX/jiFUZqhnIVExXLfA56yduJqg= -----END CERTIFICATE-----Generated at Sun Oct 19 13:54:29 2025 by rpki-client