$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ee801551-736f-3cd5-a1aa-46e48de79a28.roa File: ee801551-736f-3cd5-a1aa-46e48de79a28.roa (raw, json) Hash identifier: bTHN9vQvFJmyy78iD/yymoiCcIhhrwO1xTVWEBWu4XQ= Subject key identifier: 04:1C:D4:1B:83:CF:88:E4:C2:46:BA:02:32:C4:6F:9B:54:12:FD:94 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584BB6DF41FCF9C1574431D90F80 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ee801551-736f-3cd5-a1aa-46e48de79a28.roa Signing time: Sat 01 Nov 2025 10:34:39 +0000 ROA not before: Sat 01 Nov 2025 10:34:39 +0000 ROA not after: Fri 30 Jan 2026 11:34:39 +0000 asID: 201217 IP address blocks: 66.235.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:df:41:fc:f9:c1:57:44:31:d9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Nov 1 10:34:39 2025 GMT Not After : Jan 30 11:34:39 2026 GMT Subject: CN=41450389-b302-4c4a-830e-fcadaf4ec60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:45:21:97:aa:26:38:08:6a:96:d9:59:4c: d8:83:8c:49:b0:32:1e:0b:28:ee:fc:59:c1:00:64: 58:15:62:38:c5:e4:99:79:0f:4b:a3:1b:b5:0a:46: ea:ca:8d:cf:49:20:81:c4:02:21:23:3a:d8:a7:4a: 26:5b:e5:89:ca:74:4c:cd:ad:c5:d7:99:06:c0:17: 67:1a:cc:76:a6:df:f1:4b:2c:62:03:6a:d0:0b:12: 2e:8a:f5:fa:bb:0d:a1:97:a5:ce:36:1f:9b:ff:77: d3:d9:8a:bb:64:12:a3:07:22:04:39:74:41:39:72: ba:e5:ee:65:80:86:73:58:31:a6:09:2a:52:57:ea: 55:f2:96:3b:25:e9:1a:c5:4a:02:30:f8:69:e4:d6: 2d:a6:43:62:eb:64:98:fa:65:37:2c:33:5e:01:33: 52:fc:d4:73:eb:eb:f8:cd:96:4e:c6:51:74:10:de: 96:79:50:2f:bb:3f:83:aa:9e:60:66:35:5c:7f:9d: 4b:4f:bc:a1:f5:d8:17:84:7f:26:58:21:25:d2:24: 45:73:99:e6:53:0d:2b:4b:a0:e7:6e:c0:89:5e:d8: 48:50:3c:46:a7:93:19:91:a5:ff:2e:73:51:9a:26: d1:20:72:3a:09:a6:f0:48:23:c6:74:5e:cb:8f:6b: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1C:D4:1B:83:CF:88:E4:C2:46:BA:02:32:C4:6F:9B:54:12:FD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ee801551-736f-3cd5-a1aa-46e48de79a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 66.235.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:31:db:5b:88:01:14:0f:6b:40:fe:b8:9b:20:74:13:33:4e: 8e:f7:42:81:a5:1e:d1:78:25:38:7a:f2:32:fd:26:27:99:f2: c6:6d:fa:1d:89:cd:28:6b:25:3e:db:11:7e:b4:90:f1:6d:93: cd:95:66:e2:95:81:3b:df:6a:58:24:a6:55:14:ee:a9:d3:9e: 72:3d:b5:07:32:bd:81:37:8f:3c:56:a6:d9:dd:bf:1a:dd:0a: 7c:24:45:3b:b6:09:d4:2f:bd:f8:8c:09:51:52:f5:02:25:71: e6:2a:db:2f:c2:46:1d:ff:8f:af:05:e0:d1:e1:a0:52:6d:c2: 31:23:1a:fb:bc:6e:82:57:a0:14:9a:0d:db:ae:c8:ea:3b:99: 0b:34:e4:33:65:cb:69:9f:f0:6e:d6:b2:e8:18:e9:a9:55:44: 68:15:d4:88:03:31:ba:98:e1:1c:59:c3:af:c2:bf:1a:d8:78: 9b:5c:90:c4:e4:dc:fa:c9:82:4b:2b:8c:cb:1b:08:36:1b:d5: 23:fc:82:91:8b:3d:f1:c4:fc:7e:d8:6f:ae:e6:09:f5:b1:06: 15:c7:c2:1f:ee:35:52:ae:46:57:9c:74:53:ca:11:e9:5c:17: 8b:47:5d:c3:23:7d:2d:10:a9:f9:5e:06:3b:99:1d:48:28:68: 0d:e2:f1:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu230H8+cFXRDHZD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MTEwMTEwMzQzOVoXDTI2MDEzMDExMzQzOVowLzEtMCsGA1UEAxMk NDE0NTAzODktYjMwMi00YzRhLTgzMGUtZmNhZGFmNGVjNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBBFIZeqJjgIapbZWUzYg4xJsDIeCyju/FnB AGRYFWI4xeSZeQ9Loxu1Ckbqyo3PSSCBxAIhIzrYp0omW+WJynRMza3F15kGwBdn Gsx2pt/xSyxiA2rQCxIuivX6uw2hl6XONh+b/3fT2Yq7ZBKjByIEOXRBOXK65e5l gIZzWDGmCSpSV+pV8pY7JekaxUoCMPhp5NYtpkNi62SY+mU3LDNeATNS/NRz6+v4 zZZOxlF0EN6WeVAvuz+Dqp5gZjVcf51LT7yh9dgXhH8mWCEl0iRFc5nmUw0rS6Dn bsCJXthIUDxGp5MZkaX/LnNRmibRIHI6CabwSCPGdF7Lj2uvRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQc1BuDz4jkwka6AjLEb5tUEv2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvZWU4MDE1NTEtNzM2Zi0z Y2Q1LWExYWEtNDZlNDhkZTc5YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAx21uIARQPa0D+uJsgdBMzTo73QoGlHtF4JTh68jL9JieZ8sZt+h2J zShrJT7bEX60kPFtk82VZuKVgTvfalgkplUU7qnTnnI9tQcyvYE3jzxWptndvxrd CnwkRTu2CdQvvfiMCVFS9QIlceYq2y/CRh3/j68F4NHhoFJtwjEjGvu8boJXoBSa DduuyOo7mQs05DNly2mf8G7WsugY6alVRGgV1IgDMbqY4RxZw6/CvxrYeJtckMTk 3PrJgksrjMsbCDYb1SP8gpGLPfHE/H7Yb67mCfWxBhXHwh/uNVKuRlecdFPKEelc F4tHXcMjfS0QqfleBjuZHUgoaA3i8UE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:53:29 2025 by rpki-client