$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c94c390-9805-33c8-be1f-e38fb76f713f.roa File: 9c94c390-9805-33c8-be1f-e38fb76f713f.roa (raw, json) Hash identifier: vY35FWZxaHVwIl1aycpKbjj/ZWPXH9tKA3B0uslZ2Y8= Subject key identifier: 86:F9:30:AB:C2:87:E1:58:F1:FE:49:A9:F6:E2:B3:8E:F8:81:0B:25 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B477C9BFEC9A6929361B4B480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c94c390-9805-33c8-be1f-e38fb76f713f.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 23473 IP address blocks: 66.253.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9b:fe:c9:a6:92:93:61:b4:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=2490675d-44e0-4ebe-ae1b-b59d467a598c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:da:2b:65:d7:cc:d7:d0:e2:d3:14:b9:36: 61:5b:44:5e:0a:d7:49:ac:79:55:64:7f:63:9e:a6: 78:42:02:bd:cf:fc:ac:e5:ba:34:38:32:f1:b7:c1: c4:1a:ae:5d:27:6c:1c:d8:4f:64:05:a0:c2:26:79: 82:1c:44:37:c6:01:c2:e7:9f:4d:58:9d:b0:80:12: 49:20:12:df:52:62:a9:60:71:93:17:bf:aa:36:47: 89:a4:a3:97:fa:a6:71:0d:f0:ff:96:9d:f1:0c:cb: 90:26:d9:f9:02:55:02:86:f9:0f:5f:13:5b:87:0e: 1d:0b:1b:b5:7e:8d:87:26:8c:43:b0:a0:19:16:be: e4:dd:90:4e:02:aa:a5:22:30:61:94:05:30:00:cf: 9c:bc:01:2d:04:c5:53:00:b7:08:da:32:22:4e:ec: 35:58:eb:ae:b9:3b:8b:d4:6b:8b:a7:12:ea:19:69: f2:fc:50:21:f4:42:a6:8c:d2:7b:c3:a7:a1:f1:e7: 45:dd:83:84:85:d6:98:58:c5:72:e5:8a:d1:06:26: ef:87:86:0a:8e:01:99:ad:fb:c0:2c:0b:98:63:14: d9:e1:6c:ee:98:55:cb:c6:d3:8c:cb:e2:01:0f:9a: 79:56:48:e1:fd:c8:7c:22:a5:1c:9d:8b:3e:b4:3c: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:30:AB:C2:87:E1:58:F1:FE:49:A9:F6:E2:B3:8E:F8:81:0B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c94c390-9805-33c8-be1f-e38fb76f713f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b1:4e:6b:4d:99:2d:b0:f3:7a:db:af:7f:ff:f3:cf:0e:84: 9f:7e:90:53:53:4a:ba:17:44:7f:75:0e:05:33:28:16:37:c6: 64:80:84:1d:8d:66:36:cc:07:5d:96:23:2c:63:ea:e3:ea:6f: 13:f5:87:ee:b9:10:a7:e8:49:83:cb:fd:2a:7e:1e:bf:27:dc: fa:3f:bc:53:84:b2:ce:03:17:29:f5:57:ab:d3:65:ea:9d:b1: 05:7c:cb:11:ed:66:51:4a:e7:91:39:93:50:6e:67:8d:38:f1: 60:0e:96:b9:72:5a:af:ba:90:ea:82:ff:47:a0:d5:f0:61:b7: 4b:7a:a6:f9:c6:fb:57:85:b9:e6:92:76:a9:fc:12:ce:80:74: ca:46:92:e8:f6:34:e4:5f:ea:51:d0:2d:05:85:5f:94:95:89: 01:e4:24:1b:08:cb:71:ff:79:ee:95:41:48:a2:d9:2f:81:aa: 5f:8f:3e:4b:f3:9f:ae:ea:30:4f:27:4b:e0:a1:2d:00:a8:5a: b3:d5:31:0d:4e:d7:58:cf:91:c3:25:15:85:dd:56:2a:72:21: f8:b0:ff:78:2c:23:eb:3c:48:72:12:98:67:c0:c6:e1:e5:2c: 62:a1:b6:88:56:fc:6f:5f:df:6e:f7:ae:4b:32:83:7c:df:77: 08:37:cd:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJv+yaaSk2G0tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MjQ5MDY3NWQtNDRlMC00ZWJlLWFlMWItYjU5ZDQ2N2E1OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinnaK2XXzNfQ4tMUuTZhW0ReCtdJrHlVZH9j nqZ4QgK9z/ys5bo0ODLxt8HEGq5dJ2wc2E9kBaDCJnmCHEQ3xgHC559NWJ2wgBJJ IBLfUmKpYHGTF7+qNkeJpKOX+qZxDfD/lp3xDMuQJtn5AlUChvkPXxNbhw4dCxu1 fo2HJoxDsKAZFr7k3ZBOAqqlIjBhlAUwAM+cvAEtBMVTALcI2jIiTuw1WOuuuTuL 1GuLpxLqGWny/FAh9EKmjNJ7w6eh8edF3YOEhdaYWMVy5YrRBibvh4YKjgGZrfvA LAuYYxTZ4WzumFXLxtOMy+IBD5p5Vkjh/ch8IqUcnYs+tDy6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb5MKvCh+FY8f5Jqfbis474gQslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOWM5NGMzOTAtOTgwNS0z M2M4LWJlMWYtZTM4ZmI3NmY3MTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKxTmtNmS2w83rbr3//888OhJ9+kFNTSroXRH91DgUzKBY3xmSAhB2N ZjbMB12WIyxj6uPqbxP1h+65EKfoSYPL/Sp+Hr8n3Po/vFOEss4DFyn1V6vTZeqd sQV8yxHtZlFK55E5k1BuZ4048WAOlrlyWq+6kOqC/0eg1fBht0t6pvnG+1eFueaS dqn8Es6AdMpGkuj2NORf6lHQLQWFX5SViQHkJBsIy3H/ee6VQUii2S+Bql+PPkvz n67qME8nS+ChLQCoWrPVMQ1O11jPkcMlFYXdVipyIfiw/3gsI+s8SHISmGfAxuHl LGKhtohW/G9f3273rksyg3zfdwg3zeg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:37:07 2025 by rpki-client