$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/65a82de9-be43-3fc9-ad61-3d73f417c879.roa File: 65a82de9-be43-3fc9-ad61-3d73f417c879.roa (raw, json) Hash identifier: f8JlD+Ofly+zDYWOQVAjx8JG7Mph+wgHvdoWbh9Nf4Q= Subject key identifier: F3:4C:0A:CC:F6:67:6F:04:C2:11:CE:B2:38:15:4D:83:4D:91:77:C9 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BB45D0DA3FBD92661E659D99A Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/65a82de9-be43-3fc9-ad61-3d73f417c879.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 23473 IP address blocks: 66.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0d:a3:fb:d9:26:61:e6:59:d9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=fa55f567-01af-48f4-9147-3f71a6d0377f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:84:01:6a:bf:a7:ea:51:a9:b8:ab:55:02: 64:1e:97:90:80:55:dd:13:d6:92:9f:a9:65:03:d4: 66:db:8a:9c:78:49:4e:08:ee:2a:d5:7c:06:16:ac: fa:fb:e9:7c:74:c0:53:54:dc:23:7c:bc:2a:89:31: 77:96:8d:b7:29:73:da:5f:5f:4b:6f:ba:37:ec:5b: aa:a1:bf:79:fc:67:ce:46:2e:b5:e4:28:72:b8:21: 37:f8:b1:e1:78:90:35:0f:db:54:24:b5:1e:50:d1: aa:e6:83:f3:4d:af:77:8f:f1:3f:d2:7a:72:a5:36: aa:c8:46:b9:b2:bf:14:47:83:97:1b:06:58:03:94: f2:42:dc:f0:d7:66:b9:0d:ab:5b:2c:29:57:fa:28: 68:6b:8e:db:12:4a:13:65:a6:ee:e2:fa:ea:08:07: ed:68:e4:8d:45:cc:56:e3:ce:00:b7:5e:07:23:ee: 88:4d:f7:70:14:5b:01:1d:11:a6:4a:89:86:6d:66: c3:64:6c:b9:55:5b:47:2d:2a:0c:58:24:b6:0a:39: 35:36:43:92:ba:2b:16:a7:b7:5f:56:99:6a:c8:2e: 52:42:e0:30:53:ef:51:99:4a:93:51:e3:20:a8:17: f7:3a:f7:5d:09:53:42:c3:1a:dd:d7:1e:9c:06:91: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4C:0A:CC:F6:67:6F:04:C2:11:CE:B2:38:15:4D:83:4D:91:77:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/65a82de9-be43-3fc9-ad61-3d73f417c879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4b:2b:62:15:8a:82:c0:e5:ec:e9:16:7c:46:50:a4:c8:5c: c1:7e:c4:4c:1f:c6:7e:d7:81:51:da:91:fa:4a:fd:46:76:10: 71:32:46:31:ab:10:1e:8d:59:cb:4a:6f:ef:42:a5:6b:37:d2: 38:3f:83:8b:77:e3:bb:46:3a:73:2f:1d:5d:c4:6f:40:32:d9: db:39:b9:2a:a9:9e:24:2d:28:47:f8:d3:91:c7:0e:7c:5c:4a: f7:db:72:e4:4b:2b:5f:cf:bd:95:51:90:b6:8a:45:a9:fa:0d: 50:63:97:18:9c:3b:c1:c9:ea:ab:52:ff:61:3b:71:a0:65:ff: e7:ea:01:d4:47:bb:6d:03:cc:0d:62:53:6a:d3:8c:b8:a7:bc: f9:48:84:86:e1:cb:04:9b:c1:82:7f:4e:9d:8b:ed:37:26:e4: 63:da:46:6f:b5:0f:8e:24:08:d3:55:1c:21:a2:e9:4a:3b:d0: 43:d9:f7:8b:12:9f:6c:ac:9c:2c:95:ed:92:5e:18:74:8b:53: a3:7c:ab:84:58:c9:40:99:27:3e:bd:c7:90:6a:96:94:dc:33: 91:62:c3:be:47:49:0a:cd:a8:5d:ed:0d:8d:11:5c:ad:a5:ce: 8b:b1:d8:70:9c:b4:55:f8:c0:2a:93:19:0d:81:cd:e6:76:50: a9:29:a8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ2j+9kmYeZZ2ZowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZmE1NWY1NjctMDFhZi00OGY0LTkxNDctM2Y3MWE2ZDAzNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUyEAWq/p+pRqbirVQJkHpeQgFXdE9aSn6ll A9Rm24qceElOCO4q1XwGFqz6++l8dMBTVNwjfLwqiTF3lo23KXPaX19Lb7o37Fuq ob95/GfORi615ChyuCE3+LHheJA1D9tUJLUeUNGq5oPzTa93j/E/0npypTaqyEa5 sr8UR4OXGwZYA5TyQtzw12a5DatbLClX+ihoa47bEkoTZabu4vrqCAftaOSNRcxW 484At14HI+6ITfdwFFsBHRGmSomGbWbDZGy5VVtHLSoMWCS2Cjk1NkOSuisWp7df VplqyC5SQuAwU+9RmUqTUeMgqBf3OvddCVNCwxrd1x6cBpG/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNMCsz2Z28EwhHOsjgVTYNNkXfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNjVhODJkZTktYmU0My0z ZmM5LWFkNjEtM2Q3M2Y0MTdjODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpLK2IVioLA5ezpFnxGUKTIXMF+xEwfxn7XgVHakfpK/UZ2EHEyRjGr EB6NWctKb+9CpWs30jg/g4t347tGOnMvHV3Eb0Ay2ds5uSqpniQtKEf405HHDnxc SvfbcuRLK1/PvZVRkLaKRan6DVBjlxicO8HJ6qtS/2E7caBl/+fqAdRHu20DzA1i U2rTjLinvPlIhIbhywSbwYJ/Tp2L7Tcm5GPaRm+1D44kCNNVHCGi6Uo70EPZ94sS n2ysnCyV7ZJeGHSLU6N8q4RYyUCZJz69x5BqlpTcM5Fiw75HSQrNqF3tDY0RXK2l zoux2HCctFX4wCqTGQ2BzeZ2UKkpqHM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:06 2025 by rpki-client