$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a54e0cce-82d6-37b1-9d60-a550f54ea218.roa File: a54e0cce-82d6-37b1-9d60-a550f54ea218.roa (raw, json) Hash identifier: moNOE0QVlHmPpVsRNef6xmHYHU0jyrklFGTfuLfD8K0= Subject key identifier: B3:A3:A8:EE:C6:86:65:2A:FC:D1:FB:C5:32:67:76:6E:A0:56:47:7A Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F4328584B99D77B8FB09D7C6DDAEE8F80 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a54e0cce-82d6-37b1-9d60-a550f54ea218.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33717 IP address blocks: 66.171.118.0/24 maxlen: 24 66.171.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7b:8f:b0:9d:7c:6d:da:ee:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=cd115ce9-a77f-4bd0-9879-061cd879e3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:a8:f6:9d:cf:cd:a4:3b:14:11:d1:18:aa: 81:01:32:11:37:2e:0f:56:5b:c2:45:8e:44:c8:6b: 83:31:f8:70:95:ac:ea:51:74:26:7d:d3:15:61:8b: 17:4b:f4:eb:43:95:64:2e:b3:a8:d0:bb:b2:2b:d1: 99:bf:41:39:41:36:27:ec:c8:f6:b3:bb:74:f2:a5: 30:cc:77:2f:7f:8d:18:0c:8d:b5:78:dc:29:af:9f: a8:dd:25:58:a8:af:ee:12:74:19:3f:52:92:42:c2: e0:92:86:22:03:2e:37:38:6c:3f:9e:f9:2d:ab:0e: 06:23:ae:cb:49:2f:3c:3b:00:2e:0a:ac:3a:e3:1f: c4:a1:0c:a2:85:eb:63:1c:6e:25:4b:9e:2e:b3:a8: d6:73:ca:c0:a4:27:07:9b:cc:bc:03:2c:da:a8:ae: 9a:2f:df:56:7f:0a:34:4e:0f:c2:6b:23:6a:fc:76: f3:6d:7d:4c:9b:24:ce:f0:1e:dc:06:59:a2:48:b2: d8:69:90:36:18:8a:ab:0b:80:4b:35:bc:05:a4:95: c8:3d:b0:8e:a6:2b:30:51:ad:63:29:36:95:57:80: 25:97:85:f9:eb:49:fb:73:6d:5a:95:ef:26:6d:e2: f2:ca:91:b7:5d:89:b0:81:fd:14:36:2d:ba:35:e9: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A3:A8:EE:C6:86:65:2A:FC:D1:FB:C5:32:67:76:6E:A0:56:47:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a54e0cce-82d6-37b1-9d60-a550f54ea218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 66.171.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2d:d7:30:78:c6:15:70:96:77:3d:1b:71:7b:68:97:38:7e: ef:0f:56:12:c5:f1:41:b9:b3:b1:61:c1:81:30:a7:bd:8f:0c: d4:ed:42:f0:e6:5e:7e:b8:43:ba:b7:c7:23:76:08:5f:e9:4e: 97:b2:e0:27:db:1a:54:ee:e9:45:ea:fa:c0:56:a9:60:08:4f: f1:d8:b0:aa:37:de:bd:9b:86:4e:e4:08:b5:ab:7f:44:f6:f7: 7b:f6:7d:0e:3d:f4:e2:d1:cd:4f:83:c5:cb:d0:07:64:5d:70: 70:69:a6:d4:e1:7f:39:83:49:9a:28:ca:24:3a:9c:54:fc:92: 5e:c4:24:4c:57:ae:40:16:d5:0d:49:53:b2:cd:e6:11:99:67: 96:18:15:85:e6:c7:c9:82:75:8b:84:24:e4:92:8e:72:a9:32: d4:5a:37:49:d9:14:23:6a:9e:12:06:a8:23:4a:18:3c:1a:8a: b2:d4:74:d1:3e:91:c5:ae:25:03:d1:49:72:1a:3d:61:eb:0b: 68:5a:18:04:c5:19:5b:65:7e:63:d9:10:4c:fc:02:6a:39:2c: 8c:32:2a:89:d9:62:34:1e:1b:13:ba:0d:06:28:4d:63:7e:3b: 94:0e:4b:31:12:d4:d0:1c:4b:16:a4:70:dd:66:fc:67:cd:54: 18:91:a6:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13uPsJ18bdruj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2QxMTVjZTktYTc3Zi00YmQwLTk4NzktMDYxY2Q4NzllM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudOo9p3PzaQ7FBHRGKqBATIRNy4PVlvCRY5E yGuDMfhwlazqUXQmfdMVYYsXS/TrQ5VkLrOo0LuyK9GZv0E5QTYn7Mj2s7t08qUw zHcvf40YDI21eNwpr5+o3SVYqK/uEnQZP1KSQsLgkoYiAy43OGw/nvktqw4GI67L SS88OwAuCqw64x/EoQyihetjHG4lS54us6jWc8rApCcHm8y8AyzaqK6aL99Wfwo0 Tg/CayNq/HbzbX1MmyTO8B7cBlmiSLLYaZA2GIqrC4BLNbwFpJXIPbCOpiswUa1j KTaVV4All4X560n7c21ale8mbeLyypG3XYmwgf0UNi26NekvawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOjqO7GhmUq/NH7xTJndm6gVkd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvYTU0ZTBjY2UtODJkNi0z N2IxLTlkNjAtYTU1MGY1NGVhMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJct1zB4xhVwlnc9G3F7aJc4fu8PVhLF8UG5s7FhwYEwp72PDNTtQvDm Xn64Q7q3xyN2CF/pTpey4CfbGlTu6UXq+sBWqWAIT/HYsKo33r2bhk7kCLWrf0T2 93v2fQ499OLRzU+DxcvQB2RdcHBpptThfzmDSZooyiQ6nFT8kl7EJExXrkAW1Q1J U7LN5hGZZ5YYFYXmx8mCdYuEJOSSjnKpMtRaN0nZFCNqnhIGqCNKGDwairLUdNE+ kcWuJQPRSXIaPWHrC2haGATFGVtlfmPZEEz8Amo5LIwyKonZYjQeGxO6DQYoTWN+ O5QOSzES1NAcSxakcN1m/GfNVBiRphM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:29 2025 by rpki-client