$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/284d8a0b-e317-329e-979e-ab5922693166.roa File: 284d8a0b-e317-329e-979e-ab5922693166.roa (raw, json) Hash identifier: yrFT763eLfvRuGaUCft+uUx4vizkuDT8KA5iNWXKCSc= Subject key identifier: 02:60:86:62:CD:26:6A:04:F6:55:C0:19:F0:AE:E4:DE:85:CA:2B:01 Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584BAA979BAD7D8333FDA546CF80 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/284d8a0b-e317-329e-979e-ab5922693166.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 46562 IP address blocks: 66.71.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9b:ad:7d:83:33:fd:a5:46:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=05ad9cfb-af5d-474d-a6b6-5d4f3299b683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:5c:3c:85:29:1c:84:d8:d3:66:48:02:fc: 88:18:42:ba:59:50:ec:60:0d:e4:59:54:9e:c2:8d: 9a:65:d1:d4:74:48:6f:72:d9:6f:fe:e9:74:5a:f9: 26:21:55:56:37:ed:6d:78:c0:51:95:8f:dd:6a:ac: 9b:9f:a9:7c:b1:e1:89:77:03:2b:56:0e:df:2d:8b: 4f:53:9c:4d:c7:4e:45:9b:0d:67:a5:c4:5a:60:c5: 02:89:4e:e1:40:dc:43:8f:e0:cd:07:75:eb:f6:52: ec:2b:d7:00:e0:e0:2c:d5:35:3a:cf:12:39:07:e4: 71:dd:39:61:b9:08:39:f7:cd:89:71:90:1c:04:96: 0c:3d:4b:39:c8:d7:3e:d4:fe:d0:e2:96:41:e6:ca: fe:92:be:25:e6:5a:9e:ff:fa:3c:17:8e:c6:d2:1b: 24:85:5d:6d:bf:f9:06:5f:85:25:82:6e:96:f6:fc: c4:93:6f:c2:b2:87:5c:e3:dc:1a:f0:32:61:4a:16: 68:85:b4:32:be:17:67:d1:68:f4:a1:33:e5:43:c8: 0c:93:9b:c0:8d:9e:0a:00:03:58:be:80:0d:de:3b: 24:9a:ff:cd:c0:8d:d7:6b:36:c9:73:2a:fa:45:65: 7a:b8:fb:74:d0:16:55:be:e7:c8:98:26:35:ce:b3: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:60:86:62:CD:26:6A:04:F6:55:C0:19:F0:AE:E4:DE:85:CA:2B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/284d8a0b-e317-329e-979e-ab5922693166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 66.71.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7a:64:34:28:54:2e:64:c8:d4:4a:b9:28:58:78:41:ad:5e: ac:d9:f1:2c:2e:2c:ab:d0:41:18:ce:39:42:64:1b:c0:39:e4: 72:f9:6a:9f:75:9a:5f:6f:42:93:96:5e:f4:95:04:96:bc:84: ce:28:95:bc:f0:19:a5:6e:b4:38:68:68:56:8b:27:9f:a4:9d: 02:2a:0d:60:c2:3e:b6:19:52:9f:2c:9c:fc:53:16:a4:61:9c: 0c:48:3e:48:6c:8f:ba:83:9e:8a:65:b8:05:93:b3:d2:0b:c1: 6f:51:98:cb:f7:66:8d:63:43:7c:17:1b:1c:6b:ad:7e:ae:1f: b0:cc:e5:de:23:13:34:c4:fa:9c:09:b0:36:c7:25:20:f9:a7: 18:c1:f3:6a:28:c4:7b:d8:d9:3e:17:eb:a3:4f:8a:cc:84:90: 5d:92:c9:9b:19:a0:91:7f:f9:6d:16:1c:3f:01:be:14:f0:a9: e7:e3:85:fb:10:87:a1:9a:ce:33:07:37:1f:15:f3:aa:4c:cb: d9:ad:17:b7:7a:08:31:a5:e0:cb:df:1e:56:89:86:c9:fe:e7: 02:7d:56:57:0e:cc:4b:67:6e:27:8c:eb:31:5c:15:56:62:a4: 7e:b2:45:27:99:fe:f1:30:68:1d:50:dd:10:88:60:d2:e2:a7: 27:a9:f7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5utfYMz/aVGz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDVhZDljZmItYWY1ZC00NzRkLWE2YjYtNWQ0ZjMyOTliNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cRcPIUpHITY02ZIAvyIGEK6WVDsYA3kWVSe wo2aZdHUdEhvctlv/ul0WvkmIVVWN+1teMBRlY/daqybn6l8seGJdwMrVg7fLYtP U5xNx05Fmw1npcRaYMUCiU7hQNxDj+DNB3Xr9lLsK9cA4OAs1TU6zxI5B+Rx3Tlh uQg5982JcZAcBJYMPUs5yNc+1P7Q4pZB5sr+kr4l5lqe//o8F47G0hskhV1tv/kG X4Ulgm6W9vzEk2/Csodc49wa8DJhShZohbQyvhdn0Wj0oTPlQ8gMk5vAjZ4KAANY voAN3jskmv/NwI3XazbJcyr6RWV6uPt00BZVvufImCY1zrNV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJghmLNJmoE9lXAGfCu5N6FyisBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvMjg0ZDhhMGItZTMxNy0z MjllLTk3OWUtYWI1OTIyNjkzMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQkfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB96ZDQoVC5kyNRKuShYeEGtXqzZ8SwuLKvQQRjOOUJkG8A55HL5ap91 ml9vQpOWXvSVBJa8hM4olbzwGaVutDhoaFaLJ5+knQIqDWDCPrYZUp8snPxTFqRh nAxIPkhsj7qDnopluAWTs9ILwW9RmMv3Zo1jQ3wXGxxrrX6uH7DM5d4jEzTE+pwJ sDbHJSD5pxjB82ooxHvY2T4X66NPisyEkF2SyZsZoJF/+W0WHD8BvhTwqefjhfsQ h6GazjMHNx8V86pMy9mtF7d6CDGl4MvfHlaJhsn+5wJ9VlcOzEtnbieM6zFcFVZi pH6yRSeZ/vEwaB1Q3RCIYNLipyep9yg= -----END CERTIFICATE-----Generated at Sun Nov 2 21:27:59 2025 by rpki-client