$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa File: 4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa (raw, json) Hash identifier: NajK3MxglOS7z85fKE1esBe8vUxA1rwv3O1+892GOac= Subject key identifier: 8E:9A:5B:DB:04:D2:EE:11:FB:A8:74:A2:C7:DA:A4:46:05:CD:82:3A Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584BAA97983FCA9C91F3F08C5B00 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 46562 IP address blocks: 66.115.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:98:3f:ca:9c:91:f3:f0:8c:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=e5d27ce8-1b60-4fbe-b3b4-3042415b4988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:c7:e6:8f:32:c1:4a:3d:46:a0:2d:88:8c: 6c:e9:21:67:c4:22:11:4d:af:a2:e5:bd:5d:c3:7c: 8e:52:8d:8c:16:ab:2b:dc:9f:0a:37:2b:a8:a6:a0: 8d:d8:ab:2a:dd:0a:03:2d:f6:83:ee:6b:15:38:05: 72:14:2e:8e:0e:da:05:11:e0:9a:da:27:58:9c:05: 34:69:c5:97:d3:16:67:2a:28:f3:36:80:70:61:14: d1:76:47:10:dd:d3:f2:8e:06:0c:6e:f1:4b:18:b4: 25:64:51:cf:40:37:fd:56:05:d8:20:c9:97:5e:c1: b5:85:a0:4b:cb:59:8f:d5:c2:96:05:19:96:d5:3e: 59:7d:48:77:49:f2:3e:65:ef:9d:13:51:5b:d4:53: 5a:a5:65:50:72:98:e7:35:1a:ef:2e:be:21:1f:5e: 65:33:29:6a:f1:26:57:d8:6c:f7:68:3c:4d:4f:d5: 0b:9c:5c:95:42:f3:4f:1a:c8:b1:e4:3e:c1:bd:4c: 5f:c5:3e:6d:54:da:3c:ca:b5:d7:7e:c7:32:77:3a: 6d:05:85:81:bd:a9:7a:27:f1:bb:83:f8:e8:59:6f: 00:38:3e:88:a5:fe:52:54:bf:f1:16:0c:ca:85:37: c3:72:33:95:ed:b7:b0:8a:2b:94:ea:f3:40:4a:19: 91:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:5B:DB:04:D2:EE:11:FB:A8:74:A2:C7:DA:A4:46:05:CD:82:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 66.115.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:46:23:a3:22:b7:f9:ea:b4:40:bd:13:5c:2f:f3:e1:34:48: 30:a0:0e:cc:f2:a6:79:29:26:3c:f8:27:b1:fa:f7:ac:3b:13: 07:ff:cf:43:55:fb:ef:5e:a2:aa:5a:e0:0b:a8:9f:59:88:80: 1b:02:9e:71:95:ff:20:89:51:ae:9f:0f:c3:ec:d5:d4:a9:6b: 18:1d:a6:b5:ba:43:cb:89:89:a0:a7:64:ea:5e:20:b3:bd:67: a6:12:47:d7:b4:a1:4b:d2:f3:9e:3e:43:ad:67:51:52:2e:61: b4:c1:a7:9a:52:f8:73:b3:71:0a:44:34:af:66:68:ae:ec:d5: 29:7d:66:20:4a:94:57:5f:a3:14:8c:aa:31:b5:01:ad:19:84: d7:d6:33:91:64:23:61:13:6e:8b:24:cd:69:f3:29:7c:ce:db: e9:61:a7:5a:2d:87:a3:7e:f9:8f:c3:41:0a:c1:5d:76:c1:0c: 92:fa:e3:3c:3f:07:08:5e:d4:1e:c8:37:d2:25:9a:c0:8f:3e: b8:83:53:4e:ab:3c:2d:cc:86:48:ae:4e:d0:b3:71:24:f5:ab: 4a:27:a8:01:f7:06:eb:93:b3:f5:b6:a4:ed:c0:13:24:de:ad: 01:c2:cc:af:7a:69:fb:1f:95:a4:23:00:aa:07:42:20:de:ef: 04:f5:d7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5g/ypyR8/CMWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZTVkMjdjZTgtMWI2MC00ZmJlLWIzYjQtMzA0MjQxNWI0OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjjH5o8ywUo9RqAtiIxs6SFnxCIRTa+i5b1d w3yOUo2MFqsr3J8KNyuopqCN2Ksq3QoDLfaD7msVOAVyFC6ODtoFEeCa2idYnAU0 acWX0xZnKijzNoBwYRTRdkcQ3dPyjgYMbvFLGLQlZFHPQDf9VgXYIMmXXsG1haBL y1mP1cKWBRmW1T5ZfUh3SfI+Ze+dE1Fb1FNapWVQcpjnNRrvLr4hH15lMylq8SZX 2Gz3aDxNT9ULnFyVQvNPGsix5D7BvUxfxT5tVNo8yrXXfscydzptBYWBval6J/G7 g/joWW8AOD6Ipf5SVL/xFgzKhTfDcjOV7bewiiuU6vNAShmR1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6aW9sE0u4R+6h0osfapEYFzYI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvNGVkYTdlYWEtMTg2Zi0z ZDJiLWE4ODAtYTQzODJhYjg5OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQnOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdGI6Mit/nqtEC9E1wv8+E0SDCgDszypnkpJjz4J7H696w7Ewf/z0NV ++9eoqpa4Auon1mIgBsCnnGV/yCJUa6fD8Ps1dSpaxgdprW6Q8uJiaCnZOpeILO9 Z6YSR9e0oUvS854+Q61nUVIuYbTBp5pS+HOzcQpENK9maK7s1Sl9ZiBKlFdfoxSM qjG1Aa0ZhNfWM5FkI2ETboskzWnzKXzO2+lhp1oth6N++Y/DQQrBXXbBDJL64zw/ Bwhe1B7IN9IlmsCPPriDU06rPC3MhkiuTtCzcST1q0onqAH3BuuTs/W2pO3AEyTe rQHCzK96afsflaQjAKoHQiDe7wT118s= -----END CERTIFICATE-----Generated at Sun Nov 2 21:28:00 2025 by rpki-client