$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/226b32ca-ad89-3cf4-96a8-369a5696412e.roa File: 226b32ca-ad89-3cf4-96a8-369a5696412e.roa (raw, json) Hash identifier: nN9mMir8edIxmcva+UDji0ygHV2cWAH7ex2K3DmN1qU= Subject key identifier: EA:DE:8C:35:D1:88:3A:1A:AD:B3:34:A9:3D:36:88:7D:91:22:39:94 Certificate issuer: /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Certificate serial: 010D0C9F4328584B9EE34ED9D1D20C753A33E380 Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/226b32ca-ad89-3cf4-96a8-369a5696412e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 394584 IP address blocks: 66.43.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:e3:4e:d9:d1:d2:0c:75:3a:33:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=69bf10bb-11bf-4163-8396-05cddf4020ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:f9:44:d2:81:30:f1:c6:3c:84:3e:c4:fa: f3:01:e3:de:2e:00:af:d5:cb:b4:a5:e2:e7:83:4f: bc:61:8a:16:9a:9e:be:65:a7:77:44:e9:e0:f1:43: c6:95:29:4f:3d:58:9a:a6:bf:66:bd:af:4a:4f:58: 74:b3:0f:34:50:14:6e:20:7d:fe:ea:c5:67:e8:48: 43:29:26:68:5c:37:2a:ff:ab:9e:86:c9:c5:f8:cd: fb:60:cc:cb:6f:ca:0c:03:4c:38:b0:04:52:54:66: 3e:6a:8b:e7:93:29:01:e5:9b:34:e7:ea:db:83:3b: 06:f5:d9:c5:bf:d6:b4:69:24:e0:98:0e:e2:fc:e7: 89:25:3e:18:d1:1c:1e:e4:37:2d:0e:43:e2:2a:2f: a5:fd:2e:65:7e:ab:2f:80:ac:c7:2e:ca:a0:94:09: 00:d1:da:43:55:fb:7d:03:91:bf:b9:a1:8f:1b:84: 62:59:4a:e3:92:56:42:98:b5:1c:89:d7:da:fe:88: c0:c4:a4:1f:af:f3:b1:4e:93:ce:0a:00:60:79:20: 88:e2:04:66:db:13:d7:91:36:44:18:a9:8e:c9:f4: 56:8e:6f:d3:2c:da:be:df:fb:6d:24:db:dd:b0:8d: 0a:bd:3a:7b:a7:54:b4:ee:29:8e:69:f1:c6:3d:f8: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DE:8C:35:D1:88:3A:1A:AD:B3:34:A9:3D:36:88:7D:91:22:39:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/226b32ca-ad89-3cf4-96a8-369a5696412e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl X509v3 Authority Key Identifier: keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer sbgp-ipAddrBlock: critical IPv4: 66.43.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a7:f6:92:41:d7:7e:94:81:86:1f:6b:8b:af:63:45:83:ea: 12:6c:9e:dd:20:2f:f1:63:56:5b:7c:78:6c:49:0b:82:4a:87: 6e:72:16:ef:28:5d:1e:01:dc:d0:8c:0a:00:63:0d:c5:47:8b: 43:f1:f1:e9:cc:eb:ab:f6:a5:74:25:42:4a:dd:a9:76:1e:52: 16:b6:cb:ee:9f:9d:6a:88:37:99:ab:c7:1e:3d:90:40:4e:d5: 97:7f:da:22:df:bd:6b:67:ea:32:b5:0b:6a:f4:6f:c6:9f:51: d8:c1:0a:d7:6b:51:18:e7:a2:ec:9d:7c:75:2b:91:87:20:f7: da:ce:37:a5:78:c0:95:ba:62:a9:84:14:54:d4:32:2e:5b:f2: 76:4e:65:fa:c8:c2:0a:ce:fd:1e:7a:54:e4:75:6c:df:b8:6d: 5d:30:ee:32:10:e7:8f:3b:56:a6:59:de:2a:b7:e0:92:5f:6a: c8:d2:f4:02:8f:78:98:68:60:3b:c7:24:ce:84:70:22:56:d3: d9:1c:9f:10:06:9c:d0:f1:5e:ca:60:3f:1a:34:0f:e7:a5:f9: 94:84:27:62:76:b2:ee:f4:7f:27:15:33:08:c1:a1:9e:68:b6: 77:74:48:04:27:0b:01:c6:9a:16:dc:8b:45:a6:4f:2a:5d:64: 0f:15:ff:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEue407Z0dIMdToz44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjOWE5NWUtNTNjMS00ZTFlLTljN2ItMzlmOGYyNDI0 MThlMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjliZjEwYmItMTFiZi00MTYzLTgzOTYtMDVjZGRmNDAyMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi75RNKBMPHGPIQ+xPrzAePeLgCv1cu0peLn g0+8YYoWmp6+Zad3ROng8UPGlSlPPViapr9mva9KT1h0sw80UBRuIH3+6sVn6EhD KSZoXDcq/6uehsnF+M37YMzLb8oMA0w4sARSVGY+aovnkykB5Zs05+rbgzsG9dnF v9a0aSTgmA7i/OeJJT4Y0Rwe5DctDkPiKi+l/S5lfqsvgKzHLsqglAkA0dpDVft9 A5G/uaGPG4RiWUrjklZCmLUcidfa/ojAxKQfr/OxTpPOCgBgeSCI4gRm2xPXkTZE GKmOyfRWjm/TLNq+3/ttJNvdsI0KvTp7p1S07imOafHGPfh05QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrejDXRiDoarbM0qT02iH2RIjmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmM5 YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4ZjI0MjQxOGUvMjI2YjMyY2EtYWQ4OS0z Y2Y0LTk2YTgtMzY5YTU2OTY0MTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjOWE5NWUtNTNjMS00ZTFlLTlj N2ItMzlmOGYyNDI0MThlLzFmYzlhOTVlLTUzYzEtNGUxZS05YzdiLTM5ZjhmMjQy NDE4ZS5jcmwwHwYDVR0jBBgwFoAUv7hHWl8zbbcL3sRLmQA2rGdA0N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmM5YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4 ZjI0MjQxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQisAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKn9pJB136UgYYfa4uvY0WD6hJsnt0gL/FjVlt8eGxJC4JKh25yFu8o XR4B3NCMCgBjDcVHi0Px8enM66v2pXQlQkrdqXYeUha2y+6fnWqIN5mrxx49kEBO 1Zd/2iLfvWtn6jK1C2r0b8afUdjBCtdrURjnouydfHUrkYcg99rON6V4wJW6YqmE FFTUMi5b8nZOZfrIwgrO/R56VOR1bN+4bV0w7jIQ5487VqZZ3iq34JJfasjS9AKP eJhoYDvHJM6EcCJW09kcnxAGnNDxXspgPxo0D+el+ZSEJ2J2su70fycVMwjBoZ5o tnd0SAQnCwHGmhbci0WmTypdZA8V/8s= -----END CERTIFICATE-----Generated at Wed Nov 5 03:15:06 2025 by rpki-client