$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4de84952-dc02-31e3-8005-0b11b1af8648.roa File: 4de84952-dc02-31e3-8005-0b11b1af8648.roa (raw, json) Hash identifier: BlRCMeFrkjmfrpC5ontzlEgMZGQYVba5796JgMo14Ic= Subject key identifier: 81:91:C2:66:90:84:5B:EB:91:86:BD:02:BE:8A:5C:13:13:02:B6:09 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AEC76367EB758E636ACA33000 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4de84952-dc02-31e3-8005-0b11b1af8648.roa Signing time: Wed 20 Aug 2025 22:29:43 +0000 ROA not before: Wed 20 Aug 2025 22:29:43 +0000 ROA not after: Tue 18 Nov 2025 23:29:43 +0000 asID: 23473 IP address blocks: 66.253.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:76:36:7e:b7:58:e6:36:ac:a3:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 22:29:43 2025 GMT Not After : Nov 18 23:29:43 2025 GMT Subject: CN=20116191-c0bd-4b02-bb9c-7cf8007d286c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:94:0f:42:cf:e2:47:ee:3a:da:fe:83:28: 47:5d:51:67:6b:63:2d:58:f6:e0:23:ca:9f:1a:53: c0:f3:4a:1a:57:b9:1c:37:14:4d:2e:20:34:55:67: c1:d5:fe:6a:91:00:cf:a1:65:20:b1:0d:8a:01:c8: 61:91:28:8e:3d:2a:4c:a0:b8:75:9b:bf:d4:d7:a9: c1:81:74:a3:74:36:8b:7b:75:bf:58:33:93:1e:6c: 34:75:a6:9a:61:fc:e9:15:64:bc:f9:14:e7:8d:ff: 9e:07:f5:b2:a4:93:38:84:b2:96:8f:7a:a5:4f:5d: f1:38:43:c5:28:a7:16:dd:33:a0:68:17:2a:d5:6e: 04:e2:b9:24:96:f8:84:48:a7:9b:0f:27:91:60:fc: c2:4b:5d:5c:36:ad:29:b2:a8:26:65:7c:06:2e:e8: a3:0a:b4:fc:a2:7f:48:1d:9a:08:0d:56:6f:fd:f0: 5d:95:d5:37:98:63:a6:0d:ef:28:b6:5f:2a:07:62: c8:75:9f:ac:1d:74:cd:a4:44:a9:97:7c:42:16:83: b1:61:6b:8f:d1:5b:3f:8a:d5:ca:6b:28:d6:55:96: 2e:f6:18:ab:87:f4:e1:d7:26:c1:bf:4d:7e:14:c4: 94:8d:bb:6d:0d:c6:d7:4f:3a:18:7b:3d:a4:b3:92: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:91:C2:66:90:84:5B:EB:91:86:BD:02:BE:8A:5C:13:13:02:B6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4de84952-dc02-31e3-8005-0b11b1af8648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6a:7d:a7:b5:a3:ff:59:a4:40:51:ca:17:9f:43:d2:32:5e: 63:a0:10:e6:5c:ab:f8:ad:54:95:1e:d5:67:2c:44:fe:75:4b: 27:97:27:2f:b3:aa:ef:45:7b:93:c3:27:d9:18:7d:6d:c9:9a: a8:8e:88:0a:64:dd:6f:ff:29:93:78:8a:fe:9f:5e:d1:03:8d: 0c:bc:e1:65:9b:72:ba:63:3b:2c:e3:58:05:8d:52:9f:3e:28: 0c:15:4e:d3:56:60:df:4f:82:ed:0f:fe:c5:ce:cc:d5:2c:c7: 69:7c:6d:38:4a:92:a7:80:e2:ce:42:28:f3:70:3a:7a:8e:a4: 40:62:36:f7:b3:43:f8:f1:d7:b8:ef:a0:41:17:ab:12:35:9e: f8:94:cf:a0:ff:1a:55:da:d1:9f:de:28:ce:85:e7:fa:32:9b: ff:5b:53:3e:c7:e2:e5:67:58:24:79:0f:b2:fc:cc:99:2b:31: 34:a7:32:ac:98:dd:be:fb:d4:a7:84:26:c1:e6:9c:6d:45:fe: 96:2f:05:f2:5f:98:d2:7f:4a:fb:d0:9a:0e:a6:4c:ef:a9:ce: c6:64:18:fe:59:25:0a:49:ce:45:ad:0d:6a:65:7c:48:0a:34: 18:9e:05:c5:6d:72:b4:1c:1a:69:44:de:78:b4:67:42:db:7c: 18:48:0c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsdjZ+t1jmNqyjMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgyMDIyMjk0M1oXDTI1MTExODIzMjk0M1owLzEtMCsGA1UEAxMk MjAxMTYxOTEtYzBiZC00YjAyLWJiOWMtN2NmODAwN2QyODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UGUD0LP4kfuOtr+gyhHXVFna2MtWPbgI8qf GlPA80oaV7kcNxRNLiA0VWfB1f5qkQDPoWUgsQ2KAchhkSiOPSpMoLh1m7/U16nB gXSjdDaLe3W/WDOTHmw0daaaYfzpFWS8+RTnjf+eB/WypJM4hLKWj3qlT13xOEPF KKcW3TOgaBcq1W4E4rkklviESKebDyeRYPzCS11cNq0psqgmZXwGLuijCrT8on9I HZoIDVZv/fBdldU3mGOmDe8otl8qB2LIdZ+sHXTNpESpl3xCFoOxYWuP0Vs/itXK ayjWVZYu9hirh/Th1ybBv01+FMSUjbttDcbXTzoYez2ks5IsUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGRwmaQhFvrkYa9Ar6KXBMTArYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNGRlODQ5NTItZGMwMi0z MWUzLTgwMDUtMGIxMWIxYWY4NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNqfae1o/9ZpEBRyhefQ9IyXmOgEOZcq/itVJUe1WcsRP51SyeXJy+z qu9Fe5PDJ9kYfW3JmqiOiApk3W//KZN4iv6fXtEDjQy84WWbcrpjOyzjWAWNUp8+ KAwVTtNWYN9Pgu0P/sXOzNUsx2l8bThKkqeA4s5CKPNwOnqOpEBiNvezQ/jx17jv oEEXqxI1nviUz6D/GlXa0Z/eKM6F5/oym/9bUz7H4uVnWCR5D7L8zJkrMTSnMqyY 3b771KeEJsHmnG1F/pYvBfJfmNJ/SvvQmg6mTO+pzsZkGP5ZJQpJzkWtDWplfEgK NBieBcVtcrQcGmlE3ni0Z0LbfBhIDLI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:10 2025 by rpki-client