$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa File: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (raw, json) Hash identifier: ACTTcmj/YGVuocbFqLvivdQcITd2a0gRdhkTSNe6LTs= Subject key identifier: 00:17:17:5A:7B:08:7F:23:BC:D1:6E:EB:70:8D:E7:F5:57:5C:08:17 Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584BAEC7BF6B227EAECC076D3AC0 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 209242 IP address blocks: 66.118.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bf:6b:22:7e:ae:cc:07:6d:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=4f68e243-f3c4-42d4-8bc1-04638b912663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:91:0b:eb:a0:f6:6f:57:f4:97:f9:93:54: 48:b0:80:a6:c9:54:49:11:21:e6:80:c5:2f:2e:35: 19:44:c0:1f:fc:d7:77:6a:49:cd:c7:a5:fc:3d:fd: 0d:44:b3:fc:b6:cb:a5:5c:5d:b9:8b:bc:15:c0:49: 62:52:3f:1c:87:7f:ff:2a:9d:9c:93:b9:3c:97:da: a9:1c:91:f2:3f:c1:f2:b6:74:67:b7:52:0a:67:94: a8:76:f3:34:01:aa:5c:c0:95:1b:e2:2d:69:ea:b1: a0:1f:92:40:5c:51:d6:99:0a:d2:3e:b7:19:83:f8: 02:85:fb:47:f9:dd:cf:63:d8:48:92:b3:1e:b6:e8: ca:12:3a:d7:2d:83:b4:77:73:66:51:8f:e9:26:0a: 44:aa:a3:be:91:e6:d8:00:f3:ee:bd:43:74:ca:97: 06:6e:e1:b5:1b:56:61:1e:55:84:52:1f:d1:0f:8b: ac:2e:10:04:75:d3:c2:6c:ac:6f:57:2c:d6:55:22: f6:1e:db:a7:85:4b:1c:2c:bf:f8:0e:0f:9f:25:6d: fe:30:80:60:a1:b4:c5:53:51:eb:68:4f:1e:60:04: 7b:8c:1d:a4:3e:14:49:c6:95:30:a3:66:29:95:63: 3c:3d:55:ac:61:8f:7a:7f:2d:ca:52:5b:3e:bb:a5: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:17:5A:7B:08:7F:23:BC:D1:6E:EB:70:8D:E7:F5:57:5C:08:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:22:07:7f:42:5d:2f:f8:44:da:68:63:1e:d2:0f:52:ca:94: 2a:ab:8e:7a:fe:46:a1:31:62:73:02:86:e6:72:ab:6a:9c:8e: e6:24:8f:2a:d5:eb:f5:68:d2:fd:26:f7:f9:a4:89:2a:78:45: 08:9b:72:92:f0:6c:a2:b6:f3:e5:c4:38:cf:b9:49:87:42:be: d6:9f:e4:ba:18:e7:29:59:21:b8:c1:37:37:30:7c:4f:e0:72: 0e:8e:d0:56:bf:79:a7:fe:3c:fe:ea:ed:5a:66:29:56:51:d9: 44:4f:45:57:f2:91:04:d0:3c:5f:fc:04:13:34:bb:52:65:b9: 4b:cf:69:c1:46:05:60:df:0c:38:f6:6a:34:73:3d:dc:41:4f: b4:27:ee:f7:15:5d:57:11:a8:b1:76:34:15:c2:4c:67:b5:7a: 50:d4:24:a4:e2:7b:8f:57:b8:70:12:87:71:fb:be:ee:2b:86: 56:cb:80:1f:3f:58:19:b6:7e:52:11:82:3b:a5:77:1f:df:d1: ea:b3:40:2c:90:b9:0a:07:07:86:ce:d5:ec:61:a0:32:1a:5f: c7:9d:ae:75:6b:ec:53:38:2e:5a:e3:fc:8f:6a:ee:89:6a:a3: c4:71:45:ff:93:e1:19:59:40:52:bb:67:10:66:10:08:4f:b3: 40:6d:df:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux79rIn6uzAdtOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NGY2OGUyNDMtZjNjNC00MmQ0LThiYzEtMDQ2MzhiOTEyNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKGRC+ug9m9X9Jf5k1RIsICmyVRJESHmgMUv LjUZRMAf/Nd3aknNx6X8Pf0NRLP8tsulXF25i7wVwEliUj8ch3//Kp2ck7k8l9qp HJHyP8HytnRnt1IKZ5SodvM0AapcwJUb4i1p6rGgH5JAXFHWmQrSPrcZg/gChftH +d3PY9hIkrMetujKEjrXLYO0d3NmUY/pJgpEqqO+kebYAPPuvUN0ypcGbuG1G1Zh HlWEUh/RD4usLhAEddPCbKxvVyzWVSL2HtunhUscLL/4Dg+fJW3+MIBgobTFU1Hr aE8eYAR7jB2kPhRJxpUwo2YplWM8PVWsYY96fy3KUls+u6XDfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAXF1p7CH8jvNFu63CN5/VXXAgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvMzQ4MDU1MmUtNzhkOC0z MzgwLTk5NmQtZGQzZjk0N2JiNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAiB39CXS/4RNpoYx7SD1LKlCqrjnr+RqExYnMChuZyq2qcjuYkjyrV 6/Vo0v0m9/mkiSp4RQibcpLwbKK28+XEOM+5SYdCvtaf5LoY5ylZIbjBNzcwfE/g cg6O0Fa/eaf+PP7q7VpmKVZR2URPRVfykQTQPF/8BBM0u1JluUvPacFGBWDfDDj2 ajRzPdxBT7Qn7vcVXVcRqLF2NBXCTGe1elDUJKTie49XuHASh3H7vu4rhlbLgB8/ WBm2flIRgjuldx/f0eqzQCyQuQoHB4bO1exhoDIaX8edrnVr7FM4Llrj/I9q7olq o8RxRf+T4RlZQFK7ZxBmEAhPs0Bt39E= -----END CERTIFICATE-----Generated at Tue Nov 4 17:15:26 2025 by rpki-client