$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/33b525e6-c444-3860-9026-bdf50ed1ea77.roa File: 33b525e6-c444-3860-9026-bdf50ed1ea77.roa (raw, json) Hash identifier: WEalgMlHi2wK82g/o7GRF4ktoKpJOK8+89JRLdPsX+A= Subject key identifier: 1B:22:F7:3D:74:FC:A4:72:04:F9:9F:46:F5:94:AE:AB:97:1A:BB:45 Certificate issuer: /CN=6157cf71-d190-4be0-86fe-894ed130459b Certificate serial: 010D0C9F4328584B79BCB0DACA3C71A43E637180 Authority key identifier: 49:36:2B:6A:7E:28:78:52:A9:B2:9F:84:A9:12:9F:6A:AA:7E:14:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/33b525e6-c444-3860-9026-bdf50ed1ea77.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 66.59.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:da:ca:3c:71:a4:3e:63:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6157cf71-d190-4be0-86fe-894ed130459b Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=223f006b-248a-48f3-8cb8-cb6ec7b2a849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:45:f9:28:f8:20:2a:1a:21:1e:cc:56:da: 02:16:a6:0a:68:6c:08:eb:07:1c:45:5a:91:12:71: d6:3f:e5:93:17:59:7b:30:ba:8c:00:03:57:58:42: 7f:b3:86:8c:db:e7:a6:ab:cb:2b:b7:3e:17:56:e1: 3d:f4:0e:6e:af:65:9b:2a:6c:79:85:67:ea:2d:cf: 46:b5:a4:0d:ab:e7:f0:5e:51:5a:44:74:a4:f3:b7: 18:ac:11:ba:d2:f2:e9:05:aa:81:c9:b9:7d:33:76: 64:d7:11:d7:78:b1:af:05:4f:64:d1:52:c6:1e:46: 26:b1:4a:45:ae:3f:9c:ad:a7:96:9e:59:56:98:2d: 9f:fd:20:5b:67:8f:37:e1:8a:3c:1a:b8:bf:05:ec: b3:2b:6e:6f:b5:0d:79:8f:76:d2:ae:42:6b:d0:83: 69:a3:11:26:63:e6:4c:e6:e1:62:7c:5a:c8:44:15: 0e:90:f7:a4:19:e9:f8:d0:40:ac:c7:49:be:7e:30: 76:ed:dc:76:cf:bf:d8:81:21:f5:a2:8a:ea:6e:31: 07:44:19:ba:27:af:34:19:20:28:26:22:9a:d2:e4: c9:4f:dc:47:ae:9b:17:38:95:9e:4b:db:78:95:80: ce:57:d7:46:8b:89:59:06:65:5c:5a:e1:c1:d2:87: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:22:F7:3D:74:FC:A4:72:04:F9:9F:46:F5:94:AE:AB:97:1A:BB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/33b525e6-c444-3860-9026-bdf50ed1ea77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.crl X509v3 Authority Key Identifier: keyid:49:36:2B:6A:7E:28:78:52:A9:B2:9F:84:A9:12:9F:6A:AA:7E:14:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer sbgp-ipAddrBlock: critical IPv4: 66.59.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:bf:c9:0d:0a:33:53:d1:76:41:eb:77:c7:5f:53:0e:00:09: 86:20:13:2f:a5:96:c5:2b:ad:4b:f2:8c:a9:89:3d:6f:34:8d: 80:da:b1:f7:d3:6a:07:04:71:bc:39:22:d7:94:3e:ba:fc:df: f4:23:97:3a:e6:d9:b6:77:ed:4e:49:29:65:2e:35:7e:2c:3f: 8b:c8:82:d2:c3:a1:e7:48:0c:30:55:96:6e:e7:47:e0:3f:7c: 23:bd:b2:48:a2:e5:96:46:ab:d6:80:ba:fa:af:b1:cd:b5:02: 3b:ba:4e:73:a4:76:4a:74:e8:d9:f6:83:aa:e1:4b:da:a9:ce: 82:b8:40:b0:6b:41:35:76:99:35:af:19:1e:89:6f:1d:35:6f: d3:d9:95:72:55:91:97:76:ab:5b:f3:dc:f9:ff:68:e3:f2:af: 90:09:26:73:3c:70:f3:03:2f:f0:ef:c0:26:19:11:32:b0:e6: f8:9f:0e:b0:08:8f:05:d9:51:35:9f:b7:29:e0:0d:57:31:cf: 3d:7d:57:f3:8f:0b:0e:d7:a9:4a:74:aa:2b:4f:d0:89:e6:2a: f4:0c:c2:4c:0c:c6:df:4e:06:37:7c:a3:9d:e8:0d:db:55:75: 95:d5:15:11:bb:2a:6e:1b:4b:ae:dd:7e:35:f9:39:db:28:24: 7c:06:55:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLDayjxxpD5jcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1N2NmNzEtZDE5MC00YmUwLTg2ZmUtODk0ZWQxMzA0 NTliMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MjIzZjAwNmItMjQ4YS00OGYzLThjYjgtY2I2ZWM3YjJhODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl5F+Sj4ICoaIR7MVtoCFqYKaGwI6wccRVqR EnHWP+WTF1l7MLqMAANXWEJ/s4aM2+emq8srtz4XVuE99A5ur2WbKmx5hWfqLc9G taQNq+fwXlFaRHSk87cYrBG60vLpBaqBybl9M3Zk1xHXeLGvBU9k0VLGHkYmsUpF rj+craeWnllWmC2f/SBbZ4834Yo8Gri/BeyzK25vtQ15j3bSrkJr0INpoxEmY+ZM 5uFifFrIRBUOkPekGen40ECsx0m+fjB27dx2z7/YgSH1oorqbjEHRBm6J680GSAo JiKa0uTJT9xHrpsXOJWeS9t4lYDOV9dGi4lZBmVcWuHB0of+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsi9z10/KRyBPmfRvWUrquXGrtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MTU3 Y2Y3MS1kMTkwLTRiZTAtODZmZS04OTRlZDEzMDQ1OWIvMzNiNTI1ZTYtYzQ0NC0z ODYwLTkwMjYtYmRmNTBlZDFlYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjE1N2NmNzEtZDE5MC00YmUwLTg2 ZmUtODk0ZWQxMzA0NTliLzYxNTdjZjcxLWQxOTAtNGJlMC04NmZlLTg5NGVkMTMw NDU5Yi5jcmwwHwYDVR0jBBgwFoAUSTYran4oeFKpsp+EqRKfaqp+FDkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82MTU3Y2Y3MS1kMTkwLTRiZTAtODZmZS04OTRl ZDEzMDQ1OWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjs9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW/yQ0KM1PRdkHrd8dfUw4ACYYgEy+llsUrrUvyjKmJPW80jYDasffT agcEcbw5IteUPrr83/Qjlzrm2bZ37U5JKWUuNX4sP4vIgtLDoedIDDBVlm7nR+A/ fCO9skii5ZZGq9aAuvqvsc21Aju6TnOkdkp06Nn2g6rhS9qpzoK4QLBrQTV2mTWv GR6Jbx01b9PZlXJVkZd2q1vz3Pn/aOPyr5AJJnM8cPMDL/DvwCYZETKw5vifDrAI jwXZUTWftyngDVcxzz19V/OPCw7XqUp0qitP0InmKvQMwkwMxt9OBjd8o53oDdtV dZXVFRG7Km4bS67dfjX5OdsoJHwGVRQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:40 2025 by rpki-client