$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/2f654c3f-2bac-363c-b763-0d0a0171c6be.roa File: 2f654c3f-2bac-363c-b763-0d0a0171c6be.roa (raw, json) Hash identifier: +zdbV/aBNUZSSOcC0vZoNINJZbDHyhLaTro4b+qpbyg= Subject key identifier: 58:34:08:AC:4D:D0:6C:34:BF:1C:1D:F4:87:4A:74:32:18:54:E0:E2 Certificate issuer: /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751 Certificate serial: 010D0C9F4328584BBD9D57514320FF17451F6C40 Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/2f654c3f-2bac-363c-b763-0d0a0171c6be.roa Signing time: Mon 03 Nov 2025 20:32:30 +0000 ROA not before: Mon 03 Nov 2025 20:32:30 +0000 ROA not after: Sun 01 Feb 2026 20:32:30 +0000 asID: 812 IP address blocks: 66.207.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:9d:57:51:43:20:ff:17:45:1f:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751 Validity Not Before: Nov 3 20:32:30 2025 GMT Not After : Feb 1 20:32:30 2026 GMT Subject: CN=6373705b-57e3-4739-b66b-348db6441c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:e3:1c:4d:a9:23:d8:97:bc:e2:a5:09:a1: 5e:18:33:ae:63:60:5a:44:39:db:bc:e4:35:6b:c4: 29:95:d4:2e:cc:ff:32:b0:64:93:58:21:ae:2c:2d: 1d:fc:e0:40:55:c3:b6:eb:1b:04:c9:0a:b7:84:a5: 90:7e:90:55:f1:cf:8f:01:1f:09:5c:91:87:34:fd: ab:f6:ca:12:3e:a2:ec:9b:ee:6a:ee:48:1c:67:aa: 5a:47:63:fb:df:56:d4:30:33:1a:28:7c:eb:4f:48: 88:92:84:66:27:3e:88:84:b3:f1:af:82:2e:c0:f0: 44:a3:c7:cd:bb:82:5c:80:e5:c4:49:4d:f3:5c:be: 52:8b:60:6b:83:da:82:4f:a9:54:e0:c5:a9:f4:69: f4:de:f3:d9:20:b4:44:bd:b8:18:28:49:e1:11:cf: 36:b9:d9:b7:38:51:dc:5b:f4:7a:08:21:b0:23:fa: fe:55:a1:13:e6:b3:61:30:78:52:42:fb:05:24:18: 11:46:55:84:db:67:34:8c:13:c4:62:db:cb:e9:81: b8:e1:b1:f6:4f:3d:92:f3:10:71:c6:58:a3:dc:3d: 21:9c:5a:a7:de:cc:3d:e6:dc:ed:aa:2b:61:94:15: 92:41:d1:45:d6:a0:8f:d2:de:a9:75:a4:e7:35:c7: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:34:08:AC:4D:D0:6C:34:BF:1C:1D:F4:87:4A:74:32:18:54:E0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/2f654c3f-2bac-363c-b763-0d0a0171c6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl X509v3 Authority Key Identifier: keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer sbgp-ipAddrBlock: critical IPv4: 66.207.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9b:15:e6:8e:c2:7b:dc:73:74:8b:a8:0f:6d:b4:7d:37:61: 71:20:c1:c0:d9:91:0d:d6:98:b8:76:0a:b6:9d:01:bc:49:b0: df:8a:42:5a:8c:29:1f:45:02:0e:f3:93:ce:9b:3b:c8:49:f9: 34:76:28:df:c0:cb:58:7b:54:43:3d:65:bd:e8:bc:cc:5f:2b: c2:98:70:95:16:52:93:9f:59:6e:f9:f1:fe:d0:a9:be:51:70: d3:2a:b2:80:f8:68:a1:bb:d3:c6:9c:d5:b2:4c:e8:69:e6:64: ce:5e:99:49:b2:67:52:b1:9b:54:6e:ab:ad:dd:b5:77:31:89: f4:86:c5:4a:b5:bf:44:77:71:1e:a6:9c:a2:45:09:b8:67:0b: ed:97:c8:6f:e1:55:0f:32:b1:7c:fe:bb:38:64:bf:70:ff:94: 8a:e2:85:7d:40:19:36:fb:f8:08:97:00:53:1f:c9:13:22:d7: e9:5b:b4:7f:4a:61:fa:bb:09:fd:b9:41:d9:92:d0:7c:c2:aa: 6f:c8:d0:cc:88:bd:f3:76:da:37:e5:44:b4:65:35:61:e4:51: e9:85:75:1e:86:4c:68:e4:af:8e:a9:b6:14:0a:e5:03:75:4a: 8d:49:50:8e:21:0c:b0:67:de:f8:28:67:a5:56:8e:cf:c6:55: 4b:5c:98:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu9nVdRQyD/F0UfbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0 NzUxMB4XDTI1MTEwMzIwMzIzMFoXDTI2MDIwMTIwMzIzMFowLzEtMCsGA1UEAxMk NjM3MzcwNWItNTdlMy00NzM5LWI2NmItMzQ4ZGI2NDQxYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+rjHE2pI9iXvOKlCaFeGDOuY2BaRDnbvOQ1 a8QpldQuzP8ysGSTWCGuLC0d/OBAVcO26xsEyQq3hKWQfpBV8c+PAR8JXJGHNP2r 9soSPqLsm+5q7kgcZ6paR2P731bUMDMaKHzrT0iIkoRmJz6IhLPxr4IuwPBEo8fN u4JcgOXESU3zXL5Si2Brg9qCT6lU4MWp9Gn03vPZILREvbgYKEnhEc82udm3OFHc W/R6CCGwI/r+VaET5rNhMHhSQvsFJBgRRlWE22c0jBPEYtvL6YG44bH2Tz2S8xBx xlij3D0hnFqn3sw95tztqithlBWSQdFF1qCP0t6pdaTnNcfjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg0CKxN0Gw0vxwd9IdKdDIYVODiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvMmY2NTRjM2YtMmJhYy0z NjNjLWI3NjMtMGQwYTAxNzFjNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQs9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHibFeaOwnvcc3SLqA9ttH03YXEgwcDZkQ3WmLh2CradAbxJsN+KQlqM KR9FAg7zk86bO8hJ+TR2KN/Ay1h7VEM9Zb3ovMxfK8KYcJUWUpOfWW758f7Qqb5R cNMqsoD4aKG708ac1bJM6GnmZM5emUmyZ1Kxm1Ruq63dtXcxifSGxUq1v0R3cR6m nKJFCbhnC+2XyG/hVQ8ysXz+uzhkv3D/lIrihX1AGTb7+AiXAFMfyRMi1+lbtH9K Yfq7Cf25QdmS0HzCqm/I0MyIvfN22jflRLRlNWHkUemFdR6GTGjkr46pthQK5QN1 So1JUI4hDLBn3vgoZ6VWjs/GVUtcmJs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:15 2025 by rpki-client