$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa File: 645ea1a4-621d-3847-9490-c2db7670fa6f.roa (raw, json) Hash identifier: 2X90Lbwciq3fxWKU/FUAPlyg6hGrK1MhScMt3FjfrIk= Subject key identifier: 9D:C0:BF:F3:05:0E:18:80:1D:67:69:9C:F0:97:7F:E6:3A:95:0E:BE Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB75898C11DE4F6011CE1E00 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 66.209.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:89:8c:11:de:4f:60:11:ce:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=f0601491-2a57-45e8-8da1-80420878d6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:41:89:db:88:82:dd:58:50:3a:00:73:3f: d3:05:64:23:fc:03:5f:c0:4f:a5:44:41:e7:c8:4b: 75:1d:d1:1d:88:30:4d:28:9e:f8:85:14:00:5f:14: 5a:d0:88:f0:b5:00:f3:cd:16:de:7e:e4:04:d0:2b: 6f:18:b6:d6:00:38:6e:42:ef:17:29:05:17:15:04: bf:cc:3c:1c:82:39:cc:0c:bc:f6:61:77:a1:28:fd: 7f:8a:38:8b:0c:b1:c1:a8:b5:95:52:e4:40:ee:fa: 05:7c:09:b7:8b:e5:70:c0:88:85:ff:7a:2c:4a:52: f6:a4:f6:f2:08:8d:5c:0d:78:b1:b3:e5:65:90:fa: b8:4d:b6:ee:6b:64:a3:58:d8:9c:03:8e:34:b0:cf: 61:0f:0e:df:d3:d2:47:95:73:1a:fd:fd:18:b1:54: 4b:4f:97:44:80:84:78:33:a0:e1:7b:6a:ec:83:4c: 8d:75:9b:8f:f6:1a:0a:24:8d:7f:0d:fd:13:05:49: a5:19:a7:8a:32:50:71:52:de:58:9f:15:d0:1c:66: 47:e8:4f:04:33:43:72:c2:20:99:5e:50:0b:fd:c5: da:64:b3:94:07:ea:4c:ba:18:7d:da:13:82:ee:5b: a3:5e:f8:20:d0:cc:15:db:c1:f2:ce:69:6c:93:e0: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:BF:F3:05:0E:18:80:1D:67:69:9C:F0:97:7F:E6:3A:95:0E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:91:a0:f2:ef:ea:87:b4:e9:38:fb:c3:9f:44:60:a1:6a:81: fa:3a:9b:a0:32:e6:92:f7:e2:8d:3c:36:29:3b:77:b8:03:8c: af:d6:52:d8:e7:f0:8f:1a:18:70:ad:8e:1c:2f:2d:39:f4:12: b0:a6:f4:3b:14:06:7e:c3:8e:92:e8:76:a1:fa:d6:89:14:17: 11:d1:fa:4b:de:50:a4:e3:50:ef:b6:ee:7d:17:d2:97:58:d0: 01:fe:00:55:62:93:a5:2c:57:ba:97:55:29:10:84:73:f4:38: 98:39:27:48:3c:e5:44:a3:a1:52:65:4d:12:36:a1:22:84:ea: 94:2d:68:b6:1a:f1:70:69:41:4a:82:81:f4:e5:5d:fc:e6:3b: 35:ad:ad:99:ff:3e:48:99:65:9d:73:de:b5:e9:ab:1f:78:4d: de:f4:c1:dc:9c:92:45:85:9a:d8:ac:c1:ce:a4:d8:4a:3c:1e: cc:c2:c5:59:c8:ce:6d:9a:2d:ed:e1:d3:6d:2a:fe:b7:dc:80: a1:4e:34:22:b1:66:8c:5a:5f:20:ca:ab:dc:5b:f4:ed:d3:62: 12:e5:37:9e:67:8d:4a:f5:d2:72:e2:d2:b8:28:f0:36:4b:66: 60:5c:42:d9:29:12:db:dc:d3:e8:9f:97:b5:37:7f:5b:84:9b: cc:fa:03:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYmMEd5PYBHOHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjA2MDE0OTEtMmE1Ny00NWU4LThkYTEtODA0MjA4NzhkNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm59BiduIgt1YUDoAcz/TBWQj/ANfwE+lREHn yEt1HdEdiDBNKJ74hRQAXxRa0IjwtQDzzRbefuQE0CtvGLbWADhuQu8XKQUXFQS/ zDwcgjnMDLz2YXehKP1/ijiLDLHBqLWVUuRA7voFfAm3i+VwwIiF/3osSlL2pPby CI1cDXixs+VlkPq4Tbbua2SjWNicA440sM9hDw7f09JHlXMa/f0YsVRLT5dEgIR4 M6Dhe2rsg0yNdZuP9hoKJI1/Df0TBUmlGaeKMlBxUt5YnxXQHGZH6E8EM0NywiCZ XlAL/cXaZLOUB+pMuhh92hOC7lujXvgg0MwV28Hyzmlsk+AI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3Av/MFDhiAHWdpnPCXf+Y6lQ6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNjQ1ZWExYTQtNjIxZC0z ODQ3LTk0OTAtYzJkYjc2NzBmYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmRoPLv6oe06Tj7w59EYKFqgfo6m6Ay5pL34o08Nik7d7gDjK/WUtjn 8I8aGHCtjhwvLTn0ErCm9DsUBn7DjpLodqH61okUFxHR+kveUKTjUO+27n0X0pdY 0AH+AFVik6UsV7qXVSkQhHP0OJg5J0g85USjoVJlTRI2oSKE6pQtaLYa8XBpQUqC gfTlXfzmOzWtrZn/PkiZZZ1z3rXpqx94Td70wdyckkWFmtiswc6k2Eo8HszCxVnI zm2aLe3h020q/rfcgKFONCKxZoxaXyDKq9xb9O3TYhLlN55njUr10nLi0rgo8DZL ZmBcQtkpEtvc0+ifl7U3f1uEm8z6A3w= -----END CERTIFICATE-----Generated at Tue Nov 4 23:50:54 2025 by rpki-client