$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3bf63f96-7c2c-39bf-920a-331eaa16a4c9.roa File: 3bf63f96-7c2c-39bf-920a-331eaa16a4c9.roa (raw, json) Hash identifier: 6DOCKm1LOb3A4dCQAP88pTs/BEuBm2UgBDsu0kn6nxA= Subject key identifier: CE:EA:A7:21:D2:6D:F5:02:E7:B1:48:67:66:48:40:68:CC:16:DD:7F Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584BAA9797A4C839FE4A836E5D80 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3bf63f96-7c2c-39bf-920a-331eaa16a4c9.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 26211 IP address blocks: 66.159.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:97:a4:c8:39:fe:4a:83:6e:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=7fb073e3-4209-40cc-993a-a3eb44bdfcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:75:64:dd:12:28:54:80:12:0e:f8:30:30: 23:cc:d7:a6:9d:cd:0a:90:c4:5a:1d:e2:40:18:f2: f1:e4:a0:87:c1:54:1d:9c:eb:e8:26:10:2c:62:d1: ce:08:b4:1c:ef:47:b4:80:8a:d5:37:27:76:e5:67: 41:0e:03:a5:42:11:89:6b:81:46:70:be:f1:9d:86: 0f:b4:b8:34:b2:60:64:3a:2b:27:3e:cc:e6:66:b5: f7:76:a7:82:e2:8d:1e:32:d6:48:9f:fe:3d:68:ef: 2d:85:db:ea:38:65:e7:0a:45:eb:55:64:71:47:82: e2:8a:92:2c:25:64:a7:d5:63:36:2e:0f:25:d6:af: bd:9e:15:94:23:70:f9:75:46:67:95:db:2d:f3:d3: d4:a7:ce:4a:ac:f6:8e:c9:06:3c:6c:89:68:48:92: b6:b9:86:ef:03:f7:c3:09:16:f0:9b:f3:b4:a1:02: d0:3a:90:f6:45:01:fa:97:ed:97:85:a0:8c:43:e8: 1f:de:da:87:43:07:89:04:d8:7d:00:20:72:9e:4e: d3:8b:33:53:1e:3e:09:47:24:c1:6c:a5:8b:2d:3e: 59:a6:f6:d7:89:6e:9d:8d:da:e6:a8:b2:d4:b5:5a: 66:95:fb:aa:76:b9:4a:f8:34:27:a0:f7:07:dd:94: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:A7:21:D2:6D:F5:02:E7:B1:48:67:66:48:40:68:CC:16:DD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3bf63f96-7c2c-39bf-920a-331eaa16a4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 66.159.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b6:67:15:96:0b:cb:1c:cd:44:0f:44:a3:d1:6e:89:8b:42: 9b:7f:77:01:47:bb:a2:41:47:45:f7:e7:c5:70:f7:b0:7b:c4: 51:29:71:39:67:43:07:36:74:61:3c:01:8d:9f:3e:d9:a5:53: 4b:56:24:78:e8:52:c8:e8:cf:3b:33:07:61:73:e8:74:73:ca: 65:92:db:77:a1:85:ae:a7:9b:67:37:ef:00:87:70:3b:4d:b0: 53:43:4b:2d:9c:54:82:58:03:1b:26:42:e4:a4:e5:17:20:08: 3c:44:4a:d1:55:7a:03:2f:7c:32:2e:7a:9d:e7:85:ba:02:b6: a6:af:5d:9a:e7:55:8e:e5:04:ee:86:cd:2a:3d:c4:ca:27:d6: 12:e4:a6:e7:5e:78:b4:35:fb:f1:f9:8b:b5:0e:c3:50:3a:2e: b1:dd:7c:50:86:96:16:e7:fc:fd:83:2f:df:69:11:d1:c1:17: 6f:65:58:1c:f2:c4:04:36:2c:83:cb:13:5d:65:8f:30:4e:18: c9:12:ff:b5:bf:9a:54:d8:22:4a:a7:50:86:60:1b:0f:1a:e8: 2c:ae:d7:c2:7a:c6:d7:33:23:c3:bb:c3:a4:a0:af:f5:68:3c: dc:b7:b7:7e:ba:4b:17:05:14:a4:23:b6:a0:13:2d:b7:95:69: 92:ed:50:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5ekyDn+SoNuXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk N2ZiMDczZTMtNDIwOS00MGNjLTk5M2EtYTNlYjQ0YmRmY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+t1ZN0SKFSAEg74MDAjzNemnc0KkMRaHeJA GPLx5KCHwVQdnOvoJhAsYtHOCLQc70e0gIrVNyd25WdBDgOlQhGJa4FGcL7xnYYP tLg0smBkOisnPszmZrX3dqeC4o0eMtZIn/49aO8thdvqOGXnCkXrVWRxR4LiipIs JWSn1WM2Lg8l1q+9nhWUI3D5dUZnldst89PUp85KrPaOyQY8bIloSJK2uYbvA/fD CRbwm/O0oQLQOpD2RQH6l+2XhaCMQ+gf3tqHQweJBNh9ACBynk7TizNTHj4JRyTB bKWLLT5ZpvbXiW6djdrmqLLUtVpmlfuqdrlK+DQnoPcH3ZQj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7qpyHSbfUC57FIZ2ZIQGjMFt1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvM2JmNjNmOTYtN2MyYy0z OWJmLTkyMGEtMzMxZWFhMTZhNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQp/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO2ZxWWC8sczUQPRKPRbomLQpt/dwFHu6JBR0X358Vw97B7xFEpcTln Qwc2dGE8AY2fPtmlU0tWJHjoUsjozzszB2Fz6HRzymWS23ehha6nm2c37wCHcDtN sFNDSy2cVIJYAxsmQuSk5RcgCDxEStFVegMvfDIuep3nhboCtqavXZrnVY7lBO6G zSo9xMon1hLkpudeeLQ1+/H5i7UOw1A6LrHdfFCGlhbn/P2DL99pEdHBF29lWBzy xAQ2LIPLE11ljzBOGMkS/7W/mlTYIkqnUIZgGw8a6Cyu18J6xtczI8O7w6Sgr/Vo PNy3t366SxcFFKQjtqATLbeVaZLtUD8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:05 2025 by rpki-client