$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81aae9be-04cb-38f6-a6b6-0763770e52a4.roa File: 81aae9be-04cb-38f6-a6b6-0763770e52a4.roa (raw, json) Hash identifier: mW6p2E86+RtoP4hcy2C3uS0Qd7IYDurph8PMjxhMhU4= Subject key identifier: 05:06:34:02:F9:45:92:4A:65:9E:86:10:64:39:40:55:AD:26:F3:8C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA2378F3686DA71C0BA562380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81aae9be-04cb-38f6-a6b6-0763770e52a4.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 66.253.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8f:36:86:da:71:c0:ba:56:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=b1738b38-7565-4e87-a663-42ef244a3b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:01:2a:fa:6a:8e:a1:f1:50:88:c2:3c:c2: 65:6f:57:08:e3:1e:93:04:ea:f9:a2:a1:9a:c0:06: b7:47:07:74:d7:39:5c:dc:11:06:cd:f9:1c:73:c5: 32:fb:31:6c:12:d5:14:fa:57:fd:c1:77:cf:d9:48: a5:c3:cb:14:bd:26:8d:48:a3:f4:55:82:46:db:66: c5:a8:ba:2b:4d:41:22:8c:1e:2d:5b:19:d9:4f:8c: d8:19:ac:c7:49:c2:05:4b:ff:e5:de:6c:e2:18:bc: 9f:8a:2d:58:a9:a1:37:42:f4:58:e5:1e:2b:95:a3: 01:4c:03:48:54:b3:80:8e:32:dd:77:20:01:1f:5f: 7f:81:48:09:8d:45:ec:9e:c6:a8:b7:b7:7f:76:db: c1:fd:02:64:22:76:17:c9:67:39:57:eb:dc:ca:a3: 46:ae:52:e9:92:55:55:52:18:74:1a:ef:72:d0:c1: be:93:26:9c:46:6d:2c:b3:1f:b7:35:53:f2:03:0d: 93:ca:9c:f0:4c:8f:6a:05:07:2a:92:92:cc:58:a7: 01:d6:bc:e2:b4:b3:cf:e1:6d:82:7e:f1:37:d0:5f: cb:35:03:1c:2b:c9:36:d3:82:d7:61:65:1d:18:f3: cf:c4:eb:24:31:f8:f1:6b:0f:e6:d0:2d:3f:70:aa: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:34:02:F9:45:92:4A:65:9E:86:10:64:39:40:55:AD:26:F3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81aae9be-04cb-38f6-a6b6-0763770e52a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f3:b5:fb:d0:9f:15:dd:a1:a5:8f:89:18:d2:94:f5:e5:6c: 12:59:69:d7:d0:fb:94:3d:61:32:20:13:f5:f8:36:40:a6:ca: 5e:6f:8c:13:58:9a:08:b1:dc:7c:64:4d:ba:64:31:01:eb:a5: 09:e0:c3:a3:1f:4b:83:14:8b:2d:4c:4a:63:a9:c4:af:d7:9b: 82:18:bb:26:78:37:33:77:1a:86:c2:67:08:84:c2:f5:1d:19: 0d:5b:98:45:f4:48:a4:7d:35:36:fa:3a:83:e6:4f:a0:65:68: e2:a9:0e:14:5a:04:7b:d2:6f:4e:44:9d:0a:03:16:7c:25:a4: 50:3b:4f:20:f1:8b:ab:14:3a:cc:7d:64:e5:ba:2b:4d:a1:c0: eb:93:d8:26:92:b4:41:5a:71:f8:50:62:1e:fc:92:33:f4:cc: 2b:3c:a7:09:8e:49:5b:f5:15:c5:fc:4e:8d:3e:86:54:69:b1: 6b:ef:33:b2:3b:ef:a5:c7:1f:0d:7b:86:a0:46:c6:e3:fb:51: 60:0d:9e:ba:a1:60:93:cf:d2:15:0f:6f:dd:a1:e2:c9:4f:77: be:fc:b1:bc:d6:44:c9:06:cf:b6:4f:33:ac:cf:b8:51:31:d7: 83:cc:13:fd:b9:51:5b:1b:71:36:23:f8:10:f3:fc:bb:f8:ee: ad:7e:1d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN482htpxwLpWI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk YjE3MzhiMzgtNzU2NS00ZTg3LWE2NjMtNDJlZjI0NGEzYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT0BKvpqjqHxUIjCPMJlb1cI4x6TBOr5oqGa wAa3Rwd01zlc3BEGzfkcc8Uy+zFsEtUU+lf9wXfP2Uilw8sUvSaNSKP0VYJG22bF qLorTUEijB4tWxnZT4zYGazHScIFS//l3mziGLyfii1YqaE3QvRY5R4rlaMBTANI VLOAjjLddyABH19/gUgJjUXsnsaot7d/dtvB/QJkInYXyWc5V+vcyqNGrlLpklVV Uhh0Gu9y0MG+kyacRm0ssx+3NVPyAw2TypzwTI9qBQcqkpLMWKcB1rzitLPP4W2C fvE30F/LNQMcK8k204LXYWUdGPPPxOskMfjxaw/m0C0/cKpp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUGNAL5RZJKZZ6GEGQ5QFWtJvOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODFhYWU5YmUtMDRjYi0z OGY2LWE2YjYtMDc2Mzc3MGU1MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHztfvQnxXdoaWPiRjSlPXlbBJZadfQ+5Q9YTIgE/X4NkCmyl5vjBNY mgix3HxkTbpkMQHrpQngw6MfS4MUiy1MSmOpxK/Xm4IYuyZ4NzN3GobCZwiEwvUd GQ1bmEX0SKR9NTb6OoPmT6BlaOKpDhRaBHvSb05EnQoDFnwlpFA7TyDxi6sUOsx9 ZOW6K02hwOuT2CaStEFacfhQYh78kjP0zCs8pwmOSVv1FcX8To0+hlRpsWvvM7I7 76XHHw17hqBGxuP7UWANnrqhYJPP0hUPb92h4slPd778sbzWRMkGz7ZPM6zPuFEx 14PME/25UVsbcTYj+BDz/Lv47q1+HdM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:45 2025 by rpki-client