$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa File: 31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa (raw, json) Hash identifier: EE3DC0ABQoDH7qtttJkt/Qq+ie8Ar1AaAGdBWRislB4= Subject key identifier: 6D:58:CA:F6:3C:E5:17:DE:E5:1E:C7:64:28:7E:A2:AA:C5:E7:77:79 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC773A6351EB7E118E1B8300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa Signing time: Wed 20 Aug 2025 22:31:46 +0000 ROA not before: Wed 20 Aug 2025 22:31:46 +0000 ROA not after: Tue 18 Nov 2025 23:31:46 +0000 asID: 23473 IP address blocks: 66.253.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:77:3a:63:51:eb:7e:11:8e:1b:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 22:31:46 2025 GMT Not After : Nov 18 23:31:46 2025 GMT Subject: CN=de88e399-8695-4086-bd8c-f5e0e29f2933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:c7:82:bb:81:71:cf:5c:cf:10:4f:a5:37: 39:58:58:b2:97:5d:2c:66:be:c7:e3:65:fd:67:94: 49:65:27:d3:b6:08:82:0c:45:98:6f:d9:38:47:8a: ad:0a:15:88:0d:ce:b0:47:ab:81:7d:87:78:62:92: 9f:e4:e6:e2:d6:cf:3b:6d:f6:26:a9:e1:a2:01:cd: 4c:6e:90:ce:95:c7:99:c7:c2:80:b0:6d:0a:cc:e0: b5:12:80:c6:2f:c4:9a:f4:a4:8f:96:77:43:f3:98: 93:15:4b:42:8f:de:11:67:48:e4:78:bc:53:4d:e7: 5c:c5:c0:6a:d2:7a:8d:b8:44:53:1a:16:5f:16:42: 97:4c:06:35:72:37:14:e4:95:b7:55:bf:55:35:1f: ed:7b:a4:da:5d:13:07:dd:e3:5d:cc:e4:e1:69:0e: 29:ca:69:f1:aa:d5:e8:56:ef:7f:6e:23:58:5f:d2: be:44:a7:3e:38:8c:1e:7c:6e:2b:8a:c2:25:ad:bd: 3f:a5:60:78:ef:81:5b:10:d4:09:a8:ff:ea:94:c2: 2c:04:83:5a:5c:1c:74:b5:d7:49:c9:56:e0:9e:f7: 9b:27:2c:27:1e:ac:7a:85:d1:22:1e:ea:33:39:d9: 7f:fd:16:32:e4:8d:c6:02:67:36:69:ec:03:b2:a6: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:58:CA:F6:3C:E5:17:DE:E5:1E:C7:64:28:7E:A2:AA:C5:E7:77:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:90:64:28:d7:a0:0e:74:b1:77:0f:d0:19:09:b4:35:73:4e: ac:1b:62:68:7a:21:10:b8:42:aa:62:84:5b:9a:71:97:f2:15: 0a:24:bd:1b:f1:5c:65:5b:3c:56:d5:14:13:d5:c5:cb:9e:1b: e7:63:ca:f9:9a:a3:dc:0d:4c:bb:94:14:08:94:55:76:cd:da: 06:1c:76:cf:6c:27:0c:92:7d:28:b0:86:05:89:78:71:58:f2: 25:42:ff:09:65:20:5f:ad:6f:18:c5:a9:16:a5:37:07:e3:6f: b7:a3:7c:91:98:d5:fb:cf:28:c5:c1:89:6b:76:df:2b:97:4e: 95:54:e5:3f:58:ad:c3:ff:af:e3:b5:42:55:92:bb:c1:f0:13: 03:1d:20:a0:f9:fd:1d:46:69:29:74:ea:16:16:48:61:5a:96: fb:7a:93:71:f6:9f:32:e2:36:0a:7b:3a:eb:b8:df:5a:09:26: ca:03:eb:79:9c:33:7d:ec:0b:ed:5a:e5:da:9a:cd:1f:95:bb: 4b:e1:05:b3:42:9c:ea:f8:bd:11:be:2d:3d:78:6e:62:d3:44: 65:46:77:4b:dc:ec:51:17:95:4a:21:f2:a6:d6:36:78:c0:cd: f6:e4:6c:90:7e:96:e0:83:79:dd:31:75:09:f2:58:b5:1d:61: c3:23:2c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsdzpjUet+EY4bgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIyMzE0NloXDTI1MTExODIzMzE0NlowLzEtMCsGA1UEAxMk ZGU4OGUzOTktODY5NS00MDg2LWJkOGMtZjVlMGUyOWYyOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFLHgruBcc9czxBPpTc5WFiyl10sZr7H42X9 Z5RJZSfTtgiCDEWYb9k4R4qtChWIDc6wR6uBfYd4YpKf5Obi1s87bfYmqeGiAc1M bpDOlceZx8KAsG0KzOC1EoDGL8Sa9KSPlndD85iTFUtCj94RZ0jkeLxTTedcxcBq 0nqNuERTGhZfFkKXTAY1cjcU5JW3Vb9VNR/te6TaXRMH3eNdzOThaQ4pymnxqtXo Vu9/biNYX9K+RKc+OIwefG4risIlrb0/pWB474FbENQJqP/qlMIsBINaXBx0tddJ yVbgnvebJywnHqx6hdEiHuozOdl//RYy5I3GAmc2aewDsqYsqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1YyvY85Rfe5R7HZCh+oqrF53d5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzFmOGJkZDktNzVhYy0z Y2VkLTk2MzctOGE4MTY0YjY0ZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv27MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuQZCjXoA50sXcP0BkJtDVzTqwbYmh6IRC4QqpihFuacZfyFQokvRvx XGVbPFbVFBPVxcueG+djyvmao9wNTLuUFAiUVXbN2gYcds9sJwySfSiwhgWJeHFY 8iVC/wllIF+tbxjFqRalNwfjb7ejfJGY1fvPKMXBiWt23yuXTpVU5T9YrcP/r+O1 QlWSu8HwEwMdIKD5/R1GaSl06hYWSGFalvt6k3H2nzLiNgp7Ouu431oJJsoD63mc M33sC+1a5dqazR+Vu0vhBbNCnOr4vRG+LT14bmLTRGVGd0vc7FEXlUoh8qbWNnjA zfbkbJB+luCDed0xdQnyWLUdYcMjLEw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:10 2025 by rpki-client