$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa File: 4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa (raw, json) Hash identifier: 4AGsR5niUr8Mk7MfrlW6wVlsSYZm6CaF7poC4e6fh/I= Subject key identifier: A1:13:FA:ED:CE:AF:F8:BA:0D:A6:5A:64:02:05:C2:CF:C3:5F:44:82 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584B84E77F2B9058C4CE24A1C300 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 35847 IP address blocks: 66.33.120.0/21 maxlen: 24 66.132.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7f:2b:90:58:c4:ce:24:a1:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9eab4863-17e2-4583-a536-735214ab3373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:52:e7:89:84:2b:9e:f8:ae:74:44:1d:43: 40:dc:60:5d:25:77:3a:fc:7a:dc:ba:57:c8:64:47: 5e:41:f1:86:fd:af:df:be:87:1b:33:72:ac:e2:e1: 14:b6:45:b3:41:d5:0e:75:b1:e6:fb:be:ba:e0:9c: 44:08:6a:70:d2:46:e9:1d:9e:36:98:a6:c0:ad:ef: 3a:a0:93:f4:53:bf:40:69:54:7e:74:db:1f:85:52: 7b:81:e7:1e:d6:91:8c:a4:55:8d:4f:6f:38:5b:32: cc:42:f6:6c:8e:97:5e:b4:bc:06:b7:df:e1:51:d8: 5d:dc:8e:c1:64:a5:af:97:aa:80:a9:8e:79:d6:7f: e0:92:a1:09:02:1c:c4:44:db:90:83:95:d7:d3:d6: 6c:82:f6:da:67:08:7e:97:50:19:ac:29:ee:ff:a6: 12:35:f0:e6:f8:90:18:7e:ae:0a:f2:71:f2:2b:ac: c1:8a:31:24:f2:8e:57:f0:da:31:17:27:aa:76:57: 68:54:c3:6f:3a:b2:a9:25:c1:78:2b:d7:ac:1b:03: 53:61:02:b5:2d:34:4f:fb:79:05:78:a8:46:5e:fb: 59:15:4f:21:00:3e:c9:01:b0:f9:de:c7:7e:14:73: b8:2b:e9:bc:50:21:2c:80:99:91:1a:15:9b:74:b0: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:13:FA:ED:CE:AF:F8:BA:0D:A6:5A:64:02:05:C2:CF:C3:5F:44:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 66.33.120.0/21 66.132.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f8:db:a3:da:d9:ea:13:3b:b5:76:ff:12:39:16:71:74:16: fd:d8:8b:6c:22:94:64:3d:41:eb:27:87:c4:78:98:98:92:02: 3d:cf:46:2b:6d:6c:4f:79:1b:e4:a8:18:4f:ce:4a:df:b3:2e: 39:c2:02:c8:16:36:ef:a8:3b:87:dd:e8:bd:a4:06:ad:6a:8e: 13:f7:0b:0a:e3:25:96:3c:4f:e0:a7:ea:47:96:e6:47:40:d1: b1:52:56:f9:9f:2e:56:7d:5b:3b:7d:72:66:5d:a2:fa:b1:41: be:30:b2:30:53:f4:81:41:64:86:24:9a:9f:04:aa:6c:2e:6e: a7:a8:1c:e3:b3:4c:4e:3f:b1:01:fb:01:65:4d:7f:8e:07:07: 3b:59:38:16:b0:13:c8:08:76:56:5b:d5:f0:54:ed:cd:b7:2b: bf:56:f1:ab:28:68:28:f9:e6:12:54:46:6c:d3:ea:41:e5:e3: 60:87:71:58:08:a6:8d:b6:21:32:a4:39:11:71:65:05:5b:7d: 8d:38:57:30:c0:6c:42:17:01:53:e6:42:47:73:e1:00:fe:c2: 52:12:85:44:a1:fa:35:07:36:86:72:b4:27:9f:6b:a2:d8:82: 20:e0:2b:3c:d5:6b:e3:6a:4c:ec:0a:bd:df:1c:3d:9a:13:d4: 04:06:f1:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuE538rkFjEziShwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OWVhYjQ4NjMtMTdlMi00NTgzLWE1MzYtNzM1MjE0YWIzMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7lS54mEK574rnREHUNA3GBdJXc6/HrculfI ZEdeQfGG/a/fvocbM3Ks4uEUtkWzQdUOdbHm+7664JxECGpw0kbpHZ42mKbAre86 oJP0U79AaVR+dNsfhVJ7gece1pGMpFWNT284WzLMQvZsjpdetLwGt9/hUdhd3I7B ZKWvl6qAqY551n/gkqEJAhzERNuQg5XX09ZsgvbaZwh+l1AZrCnu/6YSNfDm+JAY fq4K8nHyK6zBijEk8o5X8NoxFyeqdldoVMNvOrKpJcF4K9esGwNTYQK1LTRP+3kF eKhGXvtZFU8hAD7JAbD53sd+FHO4K+m8UCEsgJmRGhWbdLBYTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKET+u3Or/i6DaZaZAIFws/DX0SCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvNGQ4ZTkwZDUtMGVkNS0z NzJhLWEzNDAtZmQxODJiNmUzZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQiF4AwQD QoSgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAD426Pa2eoTO7V2/xI5FnF0Fv3Yi2wilGQ9Qesnh8R4mJiS Aj3PRittbE95G+SoGE/OSt+zLjnCAsgWNu+oO4fd6L2kBq1qjhP3CwrjJZY8T+Cn 6keW5kdA0bFSVvmfLlZ9Wzt9cmZdovqxQb4wsjBT9IFBZIYkmp8EqmwubqeoHOOz TE4/sQH7AWVNf44HBztZOBawE8gIdlZb1fBU7c23K79W8asoaCj55hJURmzT6kHl 42CHcVgIpo22ITKkORFxZQVbfY04VzDAbEIXAVPmQkdz4QD+wlIShUSh+jUHNoZy tCefa6LYgiDgKzzVa+NqTOwKvd8cPZoT1AQG8cM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:38 2025 by rpki-client