$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f24c1e84-7667-30cc-923e-0b3f35bf808a.roa File: f24c1e84-7667-30cc-923e-0b3f35bf808a.roa (raw, json) Hash identifier: A9z8VbBzB2aaHg4JAYeT6BIAJc/70Gubz+6Zny7i7iI= Subject key identifier: 33:49:5F:15:B1:0E:E8:E3:9E:86:D7:54:57:8C:EA:B8:9F:0F:88:CC Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B2CF6D96F8B06853A338EDEA0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f24c1e84-7667-30cc-923e-0b3f35bf808a.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 209 IP address blocks: 66.211.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d9:6f:8b:06:85:3a:33:8e:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=ff693944-9fef-45a1-ab80-195e1ed02386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:71:2c:0c:e9:66:d7:ab:f2:18:4c:20:1e: 94:c8:c7:0a:19:15:32:20:59:74:69:40:b4:b1:12: 40:2a:6a:3a:10:ad:e7:fa:a9:9b:62:53:93:6e:2d: c9:1f:07:30:92:4e:e0:f4:bf:47:f4:e0:6f:70:6f: 6f:9c:b5:ad:05:ce:38:72:ee:08:c1:9f:26:ae:e4: 5b:4e:44:85:3a:a1:9f:9f:47:58:e2:d1:63:c9:0f: 92:e0:0a:bf:00:b4:dc:1f:b4:a0:12:4c:17:53:0c: 27:2f:3f:fa:7a:85:c3:58:b7:08:03:c7:5d:16:24: d9:de:02:81:e6:14:8a:10:97:bb:99:dc:88:7b:f7: ec:ae:ff:d9:90:d5:0b:69:6c:b8:9c:2a:b9:87:37: 69:2b:4c:75:da:50:e0:4f:79:65:d3:62:83:70:e0: fe:36:35:89:7e:41:16:ba:d7:a5:e8:82:06:58:b4: cc:1f:eb:fa:51:5f:ef:bc:e3:8e:76:8b:d3:a2:df: 56:1f:25:86:00:de:a6:80:23:29:be:eb:ae:d3:ba: 29:2b:40:17:5b:ee:3b:21:4b:c1:61:6d:9e:fd:ee: a9:33:e8:fc:8e:55:d2:3d:a5:ed:38:c1:18:50:ef: b3:fe:a1:02:2c:9b:9c:fb:54:6b:c0:c3:34:3e:a3: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:49:5F:15:B1:0E:E8:E3:9E:86:D7:54:57:8C:EA:B8:9F:0F:88:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f24c1e84-7667-30cc-923e-0b3f35bf808a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 66.211.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:35:ac:0c:3c:86:f2:5a:53:1c:93:37:64:db:21:80:a1:2c: 10:c1:fe:7e:ec:fd:90:09:6a:b3:3d:52:a4:fe:a8:bd:04:48: fa:3c:64:d0:8b:2e:6a:56:45:8d:bc:54:7b:78:41:d1:f7:28: 4b:9a:22:3a:f2:f0:eb:89:bd:f4:b7:d6:a7:6c:d6:47:11:ef: f4:b4:7f:34:f4:30:02:a4:29:ef:bd:23:33:8c:28:17:d4:a5: 87:92:a5:5f:de:86:01:05:5b:00:95:3a:0f:4b:3e:63:19:18: d6:1d:8c:4b:34:71:5c:0e:94:8c:19:f5:83:9c:43:8b:46:ea: 06:3b:93:c5:8c:92:00:77:12:f3:b9:bc:5a:81:1d:8f:49:eb: eb:11:c8:1e:7f:7e:25:3a:7e:40:71:23:f2:8e:04:33:8d:64: 61:d6:a3:0a:bc:ab:23:1c:ae:4a:74:d5:77:49:61:52:91:e1: d4:1f:29:b3:a2:ea:47:29:63:45:c1:19:3c:cd:1d:e2:5d:04: fb:05:ac:81:15:5f:6b:4c:4b:f1:b3:95:62:ee:d3:1a:b2:3c: 0c:c3:46:44:01:20:8e:13:1b:05:5a:7d:2a:b3:d2:b0:95:a8: 67:e6:0d:11:17:ef:9f:55:b4:65:ff:ab:bf:e2:52:d8:c6:a1: dc:c1:78:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tlviwaFOjOO3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmY2OTM5NDQtOWZlZi00NWExLWFiODAtMTk1ZTFlZDAyMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA155xLAzpZter8hhMIB6UyMcKGRUyIFl0aUC0 sRJAKmo6EK3n+qmbYlOTbi3JHwcwkk7g9L9H9OBvcG9vnLWtBc44cu4IwZ8mruRb TkSFOqGfn0dY4tFjyQ+S4Aq/ALTcH7SgEkwXUwwnLz/6eoXDWLcIA8ddFiTZ3gKB 5hSKEJe7mdyIe/fsrv/ZkNULaWy4nCq5hzdpK0x12lDgT3ll02KDcOD+NjWJfkEW utel6IIGWLTMH+v6UV/vvOOOdovTot9WHyWGAN6mgCMpvuuu07opK0AXW+47IUvB YW2e/e6pM+j8jlXSPaXtOMEYUO+z/qECLJuc+1RrwMM0PqOE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNJXxWxDujjnobXVFeM6rifD4jMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZjI0YzFlODQtNzY2Ny0z MGNjLTkyM2UtMGIzZjM1YmY4MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc1rAw8hvJaUxyTN2TbIYChLBDB/n7s/ZAJarM9UqT+qL0ESPo8ZNCL LmpWRY28VHt4QdH3KEuaIjry8OuJvfS31qds1kcR7/S0fzT0MAKkKe+9IzOMKBfU pYeSpV/ehgEFWwCVOg9LPmMZGNYdjEs0cVwOlIwZ9YOcQ4tG6gY7k8WMkgB3EvO5 vFqBHY9J6+sRyB5/fiU6fkBxI/KOBDONZGHWowq8qyMcrkp01XdJYVKR4dQfKbOi 6kcpY0XBGTzNHeJdBPsFrIEVX2tMS/GzlWLu0xqyPAzDRkQBII4TGwVafSqz0rCV qGfmDREX759VtGX/q7/iUtjGodzBeHE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:11 2025 by rpki-client