$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa File: 8d688a7e-be14-37fa-9233-e8b2572cd686.roa (raw, json) Hash identifier: JENICv0qSdDo4rppV7RlO1WK6goudlk01MhYln1gG5g= Subject key identifier: 3A:99:6D:26:8A:88:18:FE:09:B0:31:E6:A9:74:5A:45:6B:2E:CA:A1 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584B0CDC1B54B7503E28FEB482CC Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 19740 IP address blocks: 66.249.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1b:54:b7:50:3e:28:fe:b4:82:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=ec6cfbaf-0113-4f4f-878b-c604fd3e7cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:60:19:74:cd:80:e3:e7:56:96:47:d8:b8: 56:76:50:f6:85:7a:3c:6c:9c:4d:52:54:de:cb:42: 7c:1a:57:30:79:a5:5a:7e:7c:6e:74:d6:24:79:18: a9:40:a4:c2:75:4b:f3:c9:fb:22:58:0a:92:eb:f8: 41:4c:0b:9e:3a:5a:44:92:a5:e8:8b:9d:ac:17:3c: 99:99:52:8f:d7:44:ff:17:78:89:39:08:99:ab:69: d8:48:1e:1e:de:b7:97:4b:f8:ff:32:e9:76:14:09: 85:e3:4b:72:2a:0c:42:7c:a2:1a:7d:41:d0:de:c1: bc:6d:d4:26:15:d3:03:ae:f0:f6:b3:41:d4:f5:c0: 8a:fe:eb:24:45:b3:14:d6:57:ff:a6:b4:fb:1a:e5: a2:7e:47:ea:61:9c:cb:a8:76:25:df:d7:56:28:06: 73:0d:42:e9:e6:7f:5b:a8:97:e7:a9:da:12:d6:f2: b0:64:ec:bd:36:ad:5f:34:cd:69:a0:d3:33:1d:6f: dc:54:db:12:1c:b8:40:c0:69:de:74:36:a5:36:9f: ec:98:01:08:26:59:e9:9e:45:3a:5e:12:13:cb:51: 73:bd:7c:77:f9:e1:9b:1b:77:2e:8f:71:bd:fd:2f: 32:57:c9:d4:80:8d:24:81:cb:4e:e0:09:01:41:62: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:6D:26:8A:88:18:FE:09:B0:31:E6:A9:74:5A:45:6B:2E:CA:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5f:f6:54:c4:b6:8a:ac:8b:f6:84:04:6e:80:d5:72:ad:b7: 0f:f0:be:22:e1:47:50:7e:3d:96:d6:d9:97:88:0f:f4:1d:a0: a3:9a:23:a2:17:5f:10:50:f3:b3:eb:d3:5d:c1:2f:c1:36:2a: 54:3b:f7:bb:cb:8c:0b:f0:8c:13:6c:cc:32:c1:2d:ee:0c:d1: b5:1a:14:f7:e7:4f:6f:67:9a:e1:ac:77:a9:a2:3c:f2:54:d4: 62:93:24:4a:46:73:83:68:e7:30:e3:d9:c4:e1:5d:f2:c0:6a: 56:3f:bc:78:d3:91:20:69:8e:e7:92:8b:ab:25:1b:62:9c:c6: bf:fa:d8:cc:aa:12:2d:31:b5:85:c9:55:f4:34:23:ac:7f:37: 2f:86:39:54:46:e1:a3:b8:7d:8e:7d:86:05:b8:05:66:5c:45: 2b:8e:c1:cd:fd:17:ab:b4:3d:08:5a:e8:75:7d:2e:4a:c8:e2: f6:74:9d:d3:aa:1f:7f:f2:68:e2:a6:00:f2:20:f8:b0:67:9d: 81:d3:5a:9c:88:3d:36:13:ab:80:c5:c8:f6:08:b9:35:c2:4f: 1a:ad:83:0b:fb:7c:e5:72:08:51:b2:44:d0:2f:e0:65:4b:fc: 3e:58:ce:70:46:96:95:df:c7:ff:49:44:d3:48:93:e8:6e:a5: 31:0a:0e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BtUt1A+KP60gswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZWM2Y2ZiYWYtMDExMy00ZjRmLTg3OGItYzYwNGZkM2U3Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g9gGXTNgOPnVpZH2LhWdlD2hXo8bJxNUlTe y0J8GlcweaVafnxudNYkeRipQKTCdUvzyfsiWAqS6/hBTAueOlpEkqXoi52sFzyZ mVKP10T/F3iJOQiZq2nYSB4e3reXS/j/Mul2FAmF40tyKgxCfKIafUHQ3sG8bdQm FdMDrvD2s0HU9cCK/uskRbMU1lf/prT7GuWifkfqYZzLqHYl39dWKAZzDULp5n9b qJfnqdoS1vKwZOy9Nq1fNM1poNMzHW/cVNsSHLhAwGnedDalNp/smAEIJlnpnkU6 XhITy1FzvXx3+eGbG3cuj3G9/S8yV8nUgI0kgctO4AkBQWJn8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqZbSaKiBj+CbAx5ql0WkVrLsqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvOGQ2ODhhN2UtYmUxNC0z N2ZhLTkyMzMtZThiMjU3MmNkNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5f9lTEtoqsi/aEBG6A1XKttw/wviLhR1B+PZbW2ZeID/QdoKOaI6IX XxBQ87Pr013BL8E2KlQ797vLjAvwjBNszDLBLe4M0bUaFPfnT29nmuGsd6miPPJU 1GKTJEpGc4No5zDj2cThXfLAalY/vHjTkSBpjueSi6slG2Kcxr/62MyqEi0xtYXJ VfQ0I6x/Ny+GOVRG4aO4fY59hgW4BWZcRSuOwc39F6u0PQha6HV9LkrI4vZ0ndOq H3/yaOKmAPIg+LBnnYHTWpyIPTYTq4DFyPYIuTXCTxqtgwv7fOVyCFGyRNAv4GVL /D5YznBGlpXfx/9JRNNIk+hupTEKDpo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:56:57 2025 by rpki-client