$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00faed4a-e010-3681-a985-9fec4d69a99c.roa File: 00faed4a-e010-3681-a985-9fec4d69a99c.roa (raw, json) Hash identifier: 1NkrCqenjUDtTF1vmEI49MU657LGUt6DzPDfy/l9V48= Subject key identifier: 42:E6:9E:2C:5E:B3:E8:86:B6:E7:C8:11:41:04:45:2D:EC:42:45:98 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584BAA979B35A834B4B5D54EA180 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00faed4a-e010-3681-a985-9fec4d69a99c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 22843 IP address blocks: 66.159.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9b:35:a8:34:b4:b5:d5:4e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=b53d16af-31f3-441f-bf5a-3595fc2337f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:bd:2a:98:b5:15:5f:f1:4c:b4:a0:de:05: c5:00:06:aa:01:48:eb:9a:5c:ec:65:1e:1d:d7:04: d9:c2:a6:8a:c8:2b:05:01:90:a2:ac:3a:c1:83:76: 8b:e9:ce:a5:2d:8a:c7:aa:e5:de:95:c5:bb:ef:2d: f8:c1:c6:2d:cd:cf:c3:73:2b:de:1d:5c:cd:89:a6: e5:0b:5e:e7:00:1a:ae:50:47:90:6d:95:98:df:07: 44:e4:47:a5:3e:de:59:46:31:5c:04:9a:42:1f:18: 72:d6:e2:f7:4d:41:35:04:2d:0a:96:ab:5f:96:4b: 11:99:15:39:8a:4d:96:16:f3:eb:d4:12:f0:ba:76: 51:53:c3:84:94:4c:0c:10:f4:5b:21:c0:c0:a9:e6: 7b:4f:d2:65:3f:2a:f9:0e:b8:04:10:78:53:15:d7: 9b:97:2b:23:9e:4a:b6:0f:96:37:5c:f8:1b:b2:57: 03:c4:ce:0a:ff:91:f6:35:52:c1:b2:d6:a4:96:de: f1:f2:60:c0:dd:89:3d:25:ac:e3:99:a1:74:42:a0: a7:59:3a:a5:9f:5f:b0:ba:cf:8b:28:06:fb:e0:76: 2f:45:a0:0a:fb:b0:11:e8:f1:d0:ed:45:5d:9e:9d: 08:e3:dd:5b:df:01:fe:67:f2:06:a4:ae:7a:fd:aa: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:9E:2C:5E:B3:E8:86:B6:E7:C8:11:41:04:45:2D:EC:42:45:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00faed4a-e010-3681-a985-9fec4d69a99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 66.159.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c8:db:cf:2b:a5:54:75:6c:f6:0e:81:5d:cc:fd:b2:4c:6a: c3:26:af:5d:fe:05:f9:ce:61:1b:6f:b8:f8:72:c5:59:ae:59: 24:f7:8a:d1:19:64:83:51:95:6b:d9:28:68:3c:d8:cd:d3:74: 9a:9c:a1:6d:8d:f6:55:53:af:e9:b0:cf:5b:22:5e:9b:6e:34: c5:cd:ef:de:15:35:d8:09:18:14:5a:a7:e4:73:97:c7:4d:d2: a4:b7:cf:39:1e:e5:f5:bb:03:38:69:93:1b:b4:35:6a:17:b7: 1c:58:90:c2:68:58:61:01:32:d7:38:6d:5b:b6:51:71:93:05: 82:7d:90:16:f6:a9:0f:17:3f:12:e6:b3:71:e3:66:e5:56:26: 3f:cc:d4:fb:7f:b4:89:c5:fc:75:9b:ed:23:c0:84:43:ec:17: 6f:c3:5a:a0:fc:19:17:e7:b0:55:69:15:64:11:68:6e:35:ed: 59:2a:4c:23:20:89:4e:56:7e:e5:fc:14:2c:80:b0:9f:6f:5e: ea:ec:d6:28:da:58:29:c7:6d:86:fe:f4:65:ec:1f:c4:ff:e9: 6a:dd:95:a3:45:d8:82:36:77:d2:de:bf:65:b8:4b:c8:ec:28: 36:98:61:dd:88:a2:c1:fa:31:7f:a7:31:06:2a:1f:5e:f0:1c: cc:a9:bf:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5s1qDS0tdVOoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YjUzZDE2YWYtMzFmMy00NDFmLWJmNWEtMzU5NWZjMjMzN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArki9Kpi1FV/xTLSg3gXFAAaqAUjrmlzsZR4d 1wTZwqaKyCsFAZCirDrBg3aL6c6lLYrHquXelcW77y34wcYtzc/DcyveHVzNiabl C17nABquUEeQbZWY3wdE5EelPt5ZRjFcBJpCHxhy1uL3TUE1BC0KlqtflksRmRU5 ik2WFvPr1BLwunZRU8OElEwMEPRbIcDAqeZ7T9JlPyr5DrgEEHhTFdeblysjnkq2 D5Y3XPgbslcDxM4K/5H2NVLBstaklt7x8mDA3Yk9JazjmaF0QqCnWTqln1+wus+L KAb74HYvRaAK+7AR6PHQ7UVdnp0I491b3wH+Z/IGpK56/aoDjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELmnixes+iGtufIEUEERS3sQkWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvMDBmYWVkNGEtZTAxMC0z NjgxLWE5ODUtOWZlYzRkNjlhOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQp/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3I288rpVR1bPYOgV3M/bJMasMmr13+BfnOYRtvuPhyxVmuWST3itEZ ZINRlWvZKGg82M3TdJqcoW2N9lVTr+mwz1siXptuNMXN794VNdgJGBRap+Rzl8dN 0qS3zzke5fW7Azhpkxu0NWoXtxxYkMJoWGEBMtc4bVu2UXGTBYJ9kBb2qQ8XPxLm s3HjZuVWJj/M1Pt/tInF/HWb7SPAhEPsF2/DWqD8GRfnsFVpFWQRaG417VkqTCMg iU5WfuX8FCyAsJ9vXurs1ijaWCnHbYb+9GXsH8T/6WrdlaNF2II2d9Lev2W4S8js KDaYYd2IosH6MX+nMQYqH17wHMypvwA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:47 2025 by rpki-client