$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f66ef70-866b-3a66-b6a3-8e045703bd06.roa File: 0f66ef70-866b-3a66-b6a3-8e045703bd06.roa (raw, json) Hash identifier: avNoQeniZCdMNOm42MVC1wyHweQufQZbVI0p1bj3DQk= Subject key identifier: 17:AF:20:99:70:FA:9D:AA:37:D6:FB:A6:E2:39:31:E8:11:8B:F6:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10BBDAC4E04590FDDCC1780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f66ef70-866b-3a66-b6a3-8e045703bd06.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7015 IP address blocks: 66.31.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:bd:ac:4e:04:59:0f:dd:cc:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=49aa0a89-5286-4af8-a704-d8d7683f089b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:f1:a7:9b:16:94:88:b6:71:2b:59:59:b1: a1:e9:b6:16:1e:bb:91:54:ee:55:b5:6a:0f:71:30: 07:4d:84:f8:6c:a5:07:e1:db:d9:c4:f8:38:40:11: eb:6f:80:8a:1f:99:41:b0:b0:fc:de:3a:bc:9d:37: d7:06:e4:cc:c7:e0:5f:cf:7a:b4:eb:bd:af:9d:c1: 15:17:07:7e:fc:15:c2:e5:c8:8e:55:89:99:d5:69: f3:c4:76:8b:a8:59:0e:c2:1c:aa:b0:f4:58:24:80: 54:a7:33:36:54:32:1d:4d:48:95:d2:e5:99:05:7f: 44:99:05:cd:d2:63:90:b7:65:8d:e9:47:bc:0f:7f: b9:71:56:76:37:de:50:35:69:12:b2:5e:40:ad:d2: fc:fb:5e:8c:3d:70:79:32:19:7e:bf:e7:f8:5d:db: 15:e6:1e:11:a8:46:2e:69:1c:af:85:e8:43:72:af: c1:3f:f4:cb:1c:32:5c:77:0e:4d:83:22:fe:fb:21: fb:10:20:06:a0:bb:c8:7f:83:8a:6c:a9:e8:51:96: a8:80:25:94:c0:ad:24:29:6a:35:a6:a9:f6:5b:e0: 42:3c:a6:5d:58:1e:38:6a:f0:27:1e:5c:24:cf:7e: 34:f1:36:b3:f5:63:43:75:d1:31:44:2e:fb:cc:74: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:20:99:70:FA:9D:AA:37:D6:FB:A6:E2:39:31:E8:11:8B:F6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f66ef70-866b-3a66-b6a3-8e045703bd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.31.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cd:61:ee:77:27:29:6d:5f:3c:57:a5:68:fb:37:29:24:78: 52:11:a8:a8:1a:42:5a:f1:36:d1:1f:06:7f:16:3e:a4:be:21: 6f:b7:ec:a5:b3:b2:ec:7f:ec:31:db:79:4f:3e:46:31:42:fc: 6a:3b:d6:18:e8:e5:31:da:d7:97:cd:f4:96:98:63:49:3a:a0: e6:2b:83:e0:3e:63:b2:a8:fe:01:ae:41:54:63:71:3b:b5:17: e1:1b:e5:65:ed:6f:28:fb:3c:9e:a8:f5:96:78:68:dd:30:fd: 63:e7:38:d9:73:b3:32:fe:6a:14:7c:e2:e0:a4:d0:e7:90:29: 1a:2a:d0:f7:e4:52:5e:6c:08:3e:80:21:fa:fb:b2:70:b3:a8: 97:80:1e:42:70:83:7a:24:c4:88:aa:19:f1:72:fc:38:8a:e7: a2:d7:e1:1d:35:d5:f1:71:01:35:d7:07:96:2d:1b:84:00:c5: 63:40:42:fd:2f:7d:67:56:95:19:d3:e4:9e:5e:a7:fb:22:58: e2:d3:9c:ea:4d:57:cc:be:88:0b:eb:13:09:3a:c7:1c:a1:7d: 6e:a5:05:9b:a9:4c:06:33:4e:cd:ed:e5:cf:91:2f:ad:72:5f: 5f:98:a0:23:03:58:01:db:52:0e:e0:76:16:a4:2e:ee:59:a1: fe:04:f8:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC72sTgRZD93MF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk NDlhYTBhODktNTI4Ni00YWY4LWE3MDQtZDhkNzY4M2YwODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Lxp5sWlIi2cStZWbGh6bYWHruRVO5VtWoP cTAHTYT4bKUH4dvZxPg4QBHrb4CKH5lBsLD83jq8nTfXBuTMx+Bfz3q0672vncEV Fwd+/BXC5ciOVYmZ1WnzxHaLqFkOwhyqsPRYJIBUpzM2VDIdTUiV0uWZBX9EmQXN 0mOQt2WN6Ue8D3+5cVZ2N95QNWkSsl5ArdL8+16MPXB5Mhl+v+f4XdsV5h4RqEYu aRyvhehDcq/BP/TLHDJcdw5NgyL++yH7ECAGoLvIf4OKbKnoUZaogCWUwK0kKWo1 pqn2W+BCPKZdWB44avAnHlwkz3408Taz9WNDddExRC77zHRIoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBevIJlw+p2qN9b7puI5MegRi/bpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY2NmVmNzAtODY2Yi0z YTY2LWI2YTMtOGUwNDU3MDNiZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQh9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnNYe53JyltXzxXpWj7NykkeFIRqKgaQlrxNtEfBn8WPqS+IW+37KWz sux/7DHbeU8+RjFC/Go71hjo5THa15fN9JaYY0k6oOYrg+A+Y7Ko/gGuQVRjcTu1 F+Eb5WXtbyj7PJ6o9ZZ4aN0w/WPnONlzszL+ahR84uCk0OeQKRoq0PfkUl5sCD6A Ifr7snCzqJeAHkJwg3okxIiqGfFy/DiK56LX4R011fFxATXXB5YtG4QAxWNAQv0v fWdWlRnT5J5ep/siWOLTnOpNV8y+iAvrEwk6xxyhfW6lBZupTAYzTs3t5c+RL61y X1+YoCMDWAHbUg7gdhakLu5Zof4E+JM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:02:33 2025 by rpki-client