$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/94d82133-95cf-382d-bce3-00bb3d6e8418.roa File: 94d82133-95cf-382d-bce3-00bb3d6e8418.roa (raw, json) Hash identifier: K1p2lRToVHcIjeG72n866M9Mhk4DVKQ2e94w7A7RZ14= Subject key identifier: D6:35:36:83:7F:88:F4:6E:6B:05:DD:F8:6C:18:DC:3B:2E:52:E0:5E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA2378E971F98471DF1993EC0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/94d82133-95cf-382d-bce3-00bb3d6e8418.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 66.253.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8e:97:1f:98:47:1d:f1:99:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=04bad0cd-0911-48a5-8c71-e55ac8851e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4b:79:f8:ae:fc:ef:af:6f:4f:d1:78:ed:1d: b9:91:28:e7:51:fc:14:4c:cf:5c:15:5a:45:78:d0: 94:b3:71:55:8b:dd:77:21:8b:8f:b3:1e:fd:6b:fa: d1:bf:86:61:95:6c:13:3c:e4:53:c0:20:7f:15:71: fe:fd:c5:f1:7a:cf:56:6a:85:68:ee:f2:4c:44:5a: 01:b0:ef:f9:ab:8c:14:15:00:2a:3d:de:04:c0:c9: 10:6a:3f:36:44:81:10:7c:03:99:49:b5:03:73:53: 3e:b3:60:f4:51:4d:2e:a6:9b:15:a6:59:a2:aa:ef: 7c:fd:a6:04:17:86:5a:f7:65:00:ec:6b:0c:4c:e4: 16:3a:c5:13:07:83:21:ba:60:d8:00:e6:20:c8:38: 05:5a:36:52:1a:c7:99:f9:b0:c2:d2:9d:37:5f:42: 25:d2:12:ee:d6:d1:0a:8f:53:e3:97:41:35:57:02: 0f:f5:e5:99:84:1c:d5:ff:94:35:5d:e0:f5:26:9d: c4:60:b6:1c:0c:25:7e:54:5e:8e:93:9e:f4:d9:27: 50:02:77:7d:52:07:ad:66:8a:77:a2:af:79:e5:4e: 68:1c:63:80:b8:1f:1f:a1:d3:5e:47:be:c0:2a:08: 58:07:12:5c:7a:3d:cb:96:e9:90:b7:43:08:27:9d: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:36:83:7F:88:F4:6E:6B:05:DD:F8:6C:18:DC:3B:2E:52:E0:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/94d82133-95cf-382d-bce3-00bb3d6e8418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8b:13:38:10:97:c8:2f:7a:3e:2e:b3:c2:d3:40:f6:71:db: 11:e0:cd:42:99:dd:6f:01:bc:da:ba:b5:cc:e9:0a:42:e1:c3: e7:84:6e:dd:6e:c2:c4:80:3a:71:3f:d5:d0:a8:b4:fb:05:2a: bd:06:0a:a4:64:70:e5:69:5d:82:f0:c4:97:15:e5:cd:e0:03: d9:09:4f:11:ed:3a:46:05:83:c8:0c:c3:63:b6:01:fc:e3:77: e0:ef:d4:d5:ea:22:5c:ec:87:1c:e3:45:87:db:ac:f6:76:cf: 62:f0:bd:26:98:5b:d3:e7:ea:c1:ee:69:12:af:d0:95:ab:6a: 05:69:a1:28:8d:9a:04:23:92:c1:90:f2:05:18:9b:c4:72:68: 6f:18:b1:03:ca:ec:87:0b:dd:9a:df:7d:5a:5e:75:31:29:33: 08:e2:3f:a0:d9:5b:2d:18:0e:e7:4c:a7:09:dd:e4:7e:f7:81: 55:5f:f6:f2:a2:a3:fe:49:86:ed:a3:fe:e1:64:91:92:19:b9: 09:48:41:9f:a3:46:49:4b:1c:38:83:b5:52:cf:ab:cc:4e:9d: 24:ac:22:69:de:38:ad:8d:8d:c6:6b:0e:07:cf:a1:00:68:ec: 87:0f:4b:29:30:2a:81:e8:99:7a:ed:c2:bb:ad:4d:42:07:37: d9:a9:09:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN46XH5hHHfGZPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MDRiYWQwY2QtMDkxMS00OGE1LThjNzEtZTU1YWM4ODUxZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUt5+K78769vT9F47R25kSjnUfwUTM9cFVpF eNCUs3FVi913IYuPsx79a/rRv4ZhlWwTPORTwCB/FXH+/cXxes9WaoVo7vJMRFoB sO/5q4wUFQAqPd4EwMkQaj82RIEQfAOZSbUDc1M+s2D0UU0uppsVplmiqu98/aYE F4Za92UA7GsMTOQWOsUTB4MhumDYAOYgyDgFWjZSGseZ+bDC0p03X0Il0hLu1tEK j1Pjl0E1VwIP9eWZhBzV/5Q1XeD1Jp3EYLYcDCV+VF6Ok5702SdQAnd9UgetZop3 oq955U5oHGOAuB8fodNeR77AKghYBxJcej3LlumQt0MIJ51X7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY1NoN/iPRuawXd+GwY3DsuUuBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTRkODIxMzMtOTVjZi0z ODJkLWJjZTMtMDBiYjNkNmU4NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSLEzgQl8gvej4us8LTQPZx2xHgzUKZ3W8BvNq6tczpCkLhw+eEbt1u wsSAOnE/1dCotPsFKr0GCqRkcOVpXYLwxJcV5c3gA9kJTxHtOkYFg8gMw2O2Afzj d+Dv1NXqIlzshxzjRYfbrPZ2z2LwvSaYW9Pn6sHuaRKv0JWragVpoSiNmgQjksGQ 8gUYm8RyaG8YsQPK7IcL3ZrffVpedTEpMwjiP6DZWy0YDudMpwnd5H73gVVf9vKi o/5Jhu2j/uFkkZIZuQlIQZ+jRklLHDiDtVLPq8xOnSSsImneOK2NjcZrDgfPoQBo 7IcPSykwKoHomXrtwrutTUIHN9mpCSQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:43 2025 by rpki-client