$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/97d7be3f-44c3-3037-9e33-27813208e6f4.roa File: 97d7be3f-44c3-3037-9e33-27813208e6f4.roa (raw, json) Hash identifier: zxG4E3abRFyjg0kRerXssyh2xeHPIfw2gsDWekGefrM= Subject key identifier: F5:C6:D1:CA:EB:D2:74:14:C9:F1:F7:B7:C5:1D:D0:C0:E6:F9:E9:E1 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B970CDEFAD3302F73F44E0A00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/97d7be3f-44c3-3037-9e33-27813208e6f4.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 13768 IP address blocks: 66.199.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:de:fa:d3:30:2f:73:f4:4e:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=676564bb-05c5-4c0a-8782-63bc612913ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:59:59:28:3e:5d:38:c3:4b:f5:2f:0f:28: 7e:0c:5b:ba:89:fc:6c:9a:53:87:fc:21:8a:55:d1: 5d:2c:f9:de:b2:f8:86:db:4d:4a:ed:a2:86:ea:db: 52:b7:3d:be:fa:90:24:17:c4:f6:fa:64:45:f0:60: b0:42:e4:f3:af:1d:70:0f:fa:10:26:b6:77:7b:fd: f4:cf:4f:7d:2c:5a:a1:8f:3f:87:a7:f6:25:46:61: c2:79:76:15:9a:1c:30:0b:1f:04:a3:08:08:7c:ee: 5d:8c:d1:5d:11:c5:91:7d:a8:08:e2:42:07:0a:f9: d9:89:42:58:4c:65:8a:d2:b2:57:f9:b1:0a:ca:94: 31:c2:2e:1a:78:c2:0d:b5:67:ee:7b:51:24:13:89: c6:e4:04:36:cf:20:09:b8:31:11:03:72:49:59:ea: 96:bd:29:ed:1a:ef:ee:0f:93:ca:c5:bc:63:71:ce: 53:0c:08:ee:04:bb:ed:5d:83:29:96:01:88:e4:ee: 59:d6:85:5f:1d:93:36:f0:02:94:3b:fa:e9:0a:ff: ea:a2:55:16:27:2b:9c:cc:9f:50:e7:20:75:a4:6e: 9e:c1:ea:e8:36:f7:a2:4e:88:d9:8b:dc:11:d6:48: d7:52:84:86:81:d5:8c:32:98:70:fd:41:2e:43:12: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C6:D1:CA:EB:D2:74:14:C9:F1:F7:B7:C5:1D:D0:C0:E6:F9:E9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/97d7be3f-44c3-3037-9e33-27813208e6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.199.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:95:ff:0f:41:cf:2f:bf:1b:26:13:30:a2:20:b2:45:cd:c4: a3:35:ba:f0:1e:59:d8:f4:82:96:c1:b0:77:27:54:f6:fd:12: df:2c:dc:17:7a:de:a9:aa:17:2a:a8:8d:42:03:51:8c:db:57: dd:a4:da:90:57:70:62:bf:f6:62:db:5e:ff:f7:4a:73:0b:dc: 6b:7f:ed:03:1d:77:d1:c8:52:c2:0b:c1:36:76:aa:da:46:21: 47:48:09:56:f3:56:ee:75:74:f7:7f:e5:d5:0f:8a:d6:cb:ab: 8b:48:ac:48:1f:2d:ff:a4:c0:20:cf:45:23:b2:9f:3b:f9:ab: 43:2c:62:a4:3b:10:60:32:8d:7c:fd:83:1e:c0:23:b4:ae:24: 6c:9c:d9:47:b2:f8:86:a0:e1:e2:fb:3b:23:38:b9:8b:67:3e: 9f:89:c5:e0:3a:ec:a7:2d:8b:31:b2:12:55:82:27:0f:05:f2: 52:15:03:0d:73:af:62:c6:64:15:b5:d7:f6:fc:6a:77:1f:1a: 3e:50:a2:16:d0:dc:55:a6:11:4a:a4:92:22:e6:3b:e6:f0:ce: be:3b:33:93:3a:0b:c3:80:04:fb:8d:ac:15:b8:4c:f8:af:09: c2:0f:03:b7:4c:f8:7c:e6:d0:fb:ed:96:6e:a0:0f:c2:74:6b: 8a:4e:23:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDN760zAvc/ROCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Njc2NTY0YmItMDVjNS00YzBhLTg3ODItNjNiYzYxMjkxM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0BZWSg+XTjDS/UvDyh+DFu6ifxsmlOH/CGK VdFdLPnesviG201K7aKG6ttStz2++pAkF8T2+mRF8GCwQuTzrx1wD/oQJrZ3e/30 z099LFqhjz+Hp/YlRmHCeXYVmhwwCx8EowgIfO5djNFdEcWRfagI4kIHCvnZiUJY TGWK0rJX+bEKypQxwi4aeMINtWfue1EkE4nG5AQ2zyAJuDERA3JJWeqWvSntGu/u D5PKxbxjcc5TDAjuBLvtXYMplgGI5O5Z1oVfHZM28AKUO/rpCv/qolUWJyuczJ9Q 5yB1pG6eweroNveiTojZi9wR1kjXUoSGgdWMMphw/UEuQxKrmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXG0crr0nQUyfH3t8Ud0MDm+enhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOTdkN2JlM2YtNDRjMy0z MDM3LTllMzMtMjc4MTMyMDhlNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQseEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWV/w9Bzy+/GyYTMKIgskXNxKM1uvAeWdj0gpbBsHcnVPb9Et8s3Bd6 3qmqFyqojUIDUYzbV92k2pBXcGK/9mLbXv/3SnML3Gt/7QMdd9HIUsILwTZ2qtpG IUdICVbzVu51dPd/5dUPitbLq4tIrEgfLf+kwCDPRSOynzv5q0MsYqQ7EGAyjXz9 gx7AI7SuJGyc2Uey+Iag4eL7OyM4uYtnPp+JxeA67KctizGyElWCJw8F8lIVAw1z r2LGZBW11/b8ancfGj5QohbQ3FWmEUqkkiLmO+bwzr47M5M6C8OABPuNrBW4TPiv CcIPA7dM+Hzm0Pvtlm6gD8J0a4pOIxo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:52:09 2025 by rpki-client