$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json) Hash identifier: VJAa/ioSp7W8LF5MW5Be/AsfVJx7r8vtTt74Y1COJP0= Subject key identifier: AF:F8:0B:E9:EE:F8:94:AA:9A:1A:DD:82:A6:43:A7:06:00:DF:CD:53 Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F4328584B7C875CB3A118185F7A9E676F Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 46694 IP address blocks: 66.209.240.0/20 maxlen: 24 192.68.190.0/24 maxlen: 24 2607:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5c:b3:a1:18:18:5f:7a:9e:67:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=b812c5d0-70dd-4680-95d3-5824464a7d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:ec:17:0a:31:7f:1c:d5:a6:ed:8b:cc:26: 33:8d:4f:96:da:5b:86:1a:ce:a7:af:4d:78:3a:31: 49:bc:92:bf:c7:8f:79:62:cb:a0:40:ec:ae:b6:34: 06:91:55:05:c7:d8:b0:ba:c2:a1:56:43:bc:2b:4b: b0:f6:14:f7:82:7e:40:44:ca:e4:53:3c:45:3f:6f: 65:a7:f0:c4:8d:49:33:cc:79:3e:ca:53:5e:aa:84: 3c:75:a8:ae:51:8a:d4:0a:cf:ad:af:2c:fd:c6:72: 16:c4:d1:d7:2e:1e:d7:dc:ea:d8:98:9d:b7:c0:23: 3b:20:1b:d9:b2:7d:40:e5:53:c9:b2:b1:05:c8:e7: f1:46:91:bf:de:a0:54:96:26:05:7f:5e:04:fd:fd: a1:a1:a3:98:58:3f:dc:78:2a:07:f9:67:83:ce:a2: a3:8f:cb:72:f0:3f:e9:03:04:81:d8:f7:eb:14:52: 54:9d:17:42:b3:9f:dd:55:30:6f:ca:22:6c:9d:27: 76:a8:5c:3a:16:9b:4b:e1:93:18:42:c4:d6:d0:be: b6:bf:0b:77:8d:b4:da:33:b4:fe:c9:d7:05:b1:74: e9:33:d2:09:fa:a0:70:ba:1b:14:e2:56:41:8e:91: c0:d5:06:ac:a0:3d:64:f9:71:d4:3f:e3:ad:07:5e: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:0B:E9:EE:F8:94:AA:9A:1A:DD:82:A6:43:A7:06:00:DF:CD:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 192.68.190.0/24 IPv6: 2607:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:44:6a:8c:9e:67:6d:13:c3:7b:ea:ad:4e:6b:ea:22:5c:e4: 1e:cc:e9:06:e2:5b:3d:4f:d9:ea:b7:cc:00:ad:5d:5e:9f:53: f6:96:e2:f7:12:5f:11:70:56:8c:7b:0b:8b:75:dd:c5:1e:77: dd:c0:8e:0b:07:24:fc:92:88:2c:b4:85:c7:dd:c3:46:a2:a4: d7:c3:eb:5a:6f:8f:90:35:e9:8b:ff:a2:e8:4c:43:e9:c7:30: 77:00:d3:d1:04:b7:d2:13:3a:2f:ab:65:5e:4d:b0:9f:ea:21: 9a:15:72:79:70:79:07:c8:05:97:97:91:7c:04:41:8a:e2:98: ea:69:e8:d0:12:1d:21:7a:81:8e:a0:d7:32:31:63:8b:b5:f0: 0c:d7:b4:eb:0f:f7:9a:fa:31:79:a8:54:f8:c9:d0:fb:e2:63: 3c:37:9e:25:0b:c8:1b:a9:c1:33:46:9d:f8:9d:fb:fa:1f:b8: 36:a1:26:d4:23:b1:43:6c:e0:1e:39:fa:93:d8:37:22:de:b7: ca:b9:92:75:f8:41:4d:e1:f3:89:d5:e4:19:fd:9c:64:32:e4: eb:4f:96:85:34:b8:a7:be:17:1c:59:a6:a7:f5:e0:45:67:83: 81:f6:24:d9:07:9d:c1:a6:cb:07:e0:87:c9:1b:85:f2:d7:9b: 30:a3:39:4e -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEt8h1yzoRgYX3qeZ28wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YjgxMmM1ZDAtNzBkZC00NjgwLTk1ZDMtNTgyNDQ2NGE3ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxvsFwoxfxzVpu2LzCYzjU+W2luGGs6nr014 OjFJvJK/x495YsugQOyutjQGkVUFx9iwusKhVkO8K0uw9hT3gn5ARMrkUzxFP29l p/DEjUkzzHk+ylNeqoQ8daiuUYrUCs+tryz9xnIWxNHXLh7X3OrYmJ23wCM7IBvZ sn1A5VPJsrEFyOfxRpG/3qBUliYFf14E/f2hoaOYWD/ceCoH+WeDzqKjj8ty8D/p AwSB2PfrFFJUnRdCs5/dVTBvyiJsnSd2qFw6FptL4ZMYQsTW0L62vwt3jbTaM7T+ ydcFsXTpM9IJ+qBwuhsU4lZBjpHA1QasoD1k+XHUP+OtB17ZMwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFK/4C+nu+JSqmhrdgqZDpwYA381TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjc3YzllOTQtYzQ1Yi0z NDVjLThhNDAtYTk3NWZhZDhjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQtHwAwQA wES+MA0EAgACMAcDBQAmB2KAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACdEaoyeZ20Tw3vqrU5r6iJc5B7M 6QbiWz1P2eq3zACtXV6fU/aW4vcSXxFwVox7C4t13cUed93AjgsHJPySiCy0hcfd w0aipNfD61pvj5A16Yv/ouhMQ+nHMHcA09EEt9ITOi+rZV5NsJ/qIZoVcnlweQfI BZeXkXwEQYrimOpp6NASHSF6gY6g1zIxY4u18AzXtOsP95r6MXmoVPjJ0PviYzw3 niULyBupwTNGnfid+/ofuDahJtQjsUNs4B45+pPYNyLet8q5knX4QU3h84nV5Bn9 nGQy5OtPloU0uKe+FxxZpqf14EVng4H2JNkHncGmywfgh8kbhfLXmzCjOU4= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:30 2025 by rpki-client