$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa File: 4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa (raw, json) Hash identifier: sWIicyCa0wN3qFa1gDtsyjiaeG/wzsbEyYoB0xgXzeA= Subject key identifier: A8:D6:02:E1:3C:9E:1D:7C:2D:3D:3A:4C:20:31:25:8F:2F:40:C0:F2 Certificate issuer: /CN=0b60a007-9fb6-4096-9503-20f30414834b Certificate serial: 010D0C9F4328584BB45D27C35CA484EB2B979340 Authority key identifier: 9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 395800 IP address blocks: 66.133.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:27:c3:5c:a4:84:eb:2b:97:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b60a007-9fb6-4096-9503-20f30414834b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=ecc02f64-c453-4288-8b08-adef6c7d8c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:34:39:ae:97:9e:a4:1b:11:b2:05:0e:a6: c4:d4:4e:a2:5f:d3:39:1b:98:68:35:98:61:b3:9c: be:a8:d1:83:e4:4a:ca:83:d6:76:c1:f0:14:2a:ca: 04:7d:ce:8c:e2:28:21:28:57:07:fe:37:9d:2e:fa: 58:95:81:57:2e:2a:87:e1:a6:9c:1d:52:03:a4:e9: fb:a1:33:40:47:70:e8:7c:2f:0c:7c:be:bc:c3:78: b9:43:e4:f5:3a:fe:b4:f4:90:f0:65:79:47:fb:39: a7:ec:f6:c2:3b:51:a7:c0:ae:b3:41:6e:8f:cf:2f: d7:fe:73:89:d2:5d:e7:d6:2a:e0:2d:fc:94:9d:4d: 0a:c4:fb:19:86:8e:5a:5a:36:62:d2:bc:a5:57:d4: 23:44:95:4e:0d:19:64:f4:53:ca:f8:2f:90:7f:fe: 42:af:a4:ee:41:d7:a9:a1:d9:83:df:72:58:33:f3: 13:f9:2c:1a:c2:30:ad:50:6b:93:11:23:84:f8:d3: 28:3d:37:c1:c6:56:ef:50:3b:a2:c8:50:08:12:d9: 7d:14:fa:5c:0c:51:7c:13:d4:91:8a:ce:0f:1e:0e: 76:ba:5e:51:76:f5:be:31:05:c5:7f:d2:68:7e:20: a1:e1:7b:77:fd:8c:2a:8c:1c:dd:7c:0a:51:32:cb: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D6:02:E1:3C:9E:1D:7C:2D:3D:3A:4C:20:31:25:8F:2F:40:C0:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl X509v3 Authority Key Identifier: keyid:9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer sbgp-ipAddrBlock: critical IPv4: 66.133.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3d:7e:65:48:c9:6f:24:11:3d:5c:0b:4b:78:b7:0d:1c:dc: 23:1e:cd:40:7e:a0:4e:2e:09:90:19:48:16:12:c4:54:1b:7e: 98:7f:77:c2:2e:1c:e4:c5:53:ab:5d:a0:c5:52:8d:d8:e2:06: c3:9f:c5:b6:32:26:49:a8:27:ac:7a:ec:89:ff:79:af:69:f5: e4:c1:35:6a:9d:5e:6f:e9:a7:d5:ee:76:d5:c4:3a:e3:2c:95: c8:49:5e:56:13:4e:1c:1f:30:ad:ed:87:f7:54:b1:da:53:b7: c5:dd:f9:70:4e:60:37:da:ff:8d:27:7b:64:a1:e1:02:6e:cf: 3a:8a:8c:a6:1b:52:f8:f1:d9:b1:f1:d6:35:de:99:03:db:24: 18:32:e6:f8:e7:f7:54:73:06:bc:ae:9f:62:38:d1:75:a8:eb: 23:20:3e:d1:59:c7:a8:1b:5a:11:ab:31:c0:86:56:16:a1:ec: 7c:ff:01:58:96:66:83:99:af:c3:c1:43:fa:a6:a6:52:b8:6b: 2a:29:cf:87:0e:91:64:94:ad:95:12:cd:92:8b:6a:6e:13:0f: 91:0c:fe:7c:c6:eb:32:55:14:36:db:58:6c:f1:1a:ea:b6:0b: 5b:ae:ad:71:f2:f5:31:4d:a7:12:de:40:54:76:83:5e:f2:2f: 58:18:aa:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSfDXKSE6yuXk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MGEwMDctOWZiNi00MDk2LTk1MDMtMjBmMzA0MTQ4 MzRiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZWNjMDJmNjQtYzQ1My00Mjg4LThiMDgtYWRlZjZjN2Q4YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2I0Oa6XnqQbEbIFDqbE1E6iX9M5G5hoNZhh s5y+qNGD5ErKg9Z2wfAUKsoEfc6M4ighKFcH/jedLvpYlYFXLiqH4aacHVIDpOn7 oTNAR3DofC8MfL68w3i5Q+T1Ov609JDwZXlH+zmn7PbCO1GnwK6zQW6Pzy/X/nOJ 0l3n1irgLfyUnU0KxPsZho5aWjZi0rylV9QjRJVODRlk9FPK+C+Qf/5Cr6TuQdep odmD33JYM/MT+SwawjCtUGuTESOE+NMoPTfBxlbvUDuiyFAIEtl9FPpcDFF8E9SR is4PHg52ul5RdvW+MQXFf9JofiCh4Xt3/YwqjBzdfApRMsurpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjWAuE8nh18LT06TCAxJY8vQMDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYjYw YTAwNy05ZmI2LTQwOTYtOTUwMy0yMGYzMDQxNDgzNGIvNGI5NGVhN2EtZmQ4YS0z YzA0LWJmMWYtN2ZmZDk1NTdmNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGI2MGEwMDctOWZiNi00MDk2LTk1 MDMtMjBmMzA0MTQ4MzRiLzBiNjBhMDA3LTlmYjYtNDA5Ni05NTAzLTIwZjMwNDE0 ODM0Yi5jcmwwHwYDVR0jBBgwFoAUnzftiWy16x+oi7bFkK75FRydBwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYjYwYTAwNy05ZmI2LTQwOTYtOTUwMy0yMGYz MDQxNDgzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG89fmVIyW8kET1cC0t4tw0c3CMezUB+oE4uCZAZSBYSxFQbfph/d8Iu HOTFU6tdoMVSjdjiBsOfxbYyJkmoJ6x67In/ea9p9eTBNWqdXm/pp9XudtXEOuMs lchJXlYTThwfMK3th/dUsdpTt8Xd+XBOYDfa/40ne2Sh4QJuzzqKjKYbUvjx2bHx 1jXemQPbJBgy5vjn91RzBryun2I40XWo6yMgPtFZx6gbWhGrMcCGVhah7Hz/AViW ZoOZr8PBQ/qmplK4ayopz4cOkWSUrZUSzZKLam4TD5EM/nzG6zJVFDbbWGzxGuq2 C1uurXHy9TFNpxLeQFR2g17yL1gYqiw= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:52 2025 by rpki-client