$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ea88b523-896a-343e-9e6e-04f731205cb7.roa File: ea88b523-896a-343e-9e6e-04f731205cb7.roa (raw, json) Hash identifier: 2HEpq0+sMcOVWvuIEAoz3LRrJKKPPRpJGE4O34gikm8= Subject key identifier: DE:1F:00:25:EF:4C:DA:F7:21:34:0C:92:C6:9A:D2:EF:DF:51:B8:1F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA2378F22728D46EFD546D240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ea88b523-896a-343e-9e6e-04f731205cb7.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 66.253.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8f:22:72:8d:46:ef:d5:46:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=ba01a052-d5be-431e-8a9a-24f6b1a1f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:43:e1:c4:b5:e5:6b:f4:19:4c:31:3c:d2: 8c:45:e7:65:d4:61:b9:b0:60:8f:06:02:fc:87:ed: de:06:ca:24:93:f7:17:97:02:bc:65:2c:74:4f:92: 57:b2:73:d9:55:59:cb:93:65:48:a3:34:c9:a6:9a: 69:1f:4b:08:6c:d6:93:10:a3:5f:60:37:97:98:28: 0a:8e:10:49:60:9b:7b:8c:2d:2c:c3:97:77:4f:b0: 7d:ec:32:26:44:d8:f6:05:b0:ce:83:a9:b4:d9:2d: b9:72:55:2b:dd:54:7b:01:ba:bc:4f:a8:70:1e:7e: fd:a5:31:25:c1:9f:33:77:a9:c7:ff:b5:59:c2:ba: 9a:35:38:fd:c3:8a:65:e3:80:57:ae:1b:e3:93:2f: ae:12:82:cf:40:fa:ef:08:75:27:6c:fc:7a:71:9f: a2:bb:40:8c:6b:f1:a2:4e:81:72:e4:7b:d9:a7:a9: 12:f3:65:6f:f8:dd:65:31:34:0c:95:72:5d:d2:e7: 4e:b3:97:7c:e3:26:4d:b4:63:22:89:a4:aa:a0:79: 60:d0:61:05:69:c2:e0:ce:8a:cb:36:e9:bb:86:62: 83:d2:c9:04:15:91:d3:51:4e:8e:10:1c:23:aa:92: 48:db:78:93:04:65:be:20:ab:81:63:ae:09:c3:c8: 73:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1F:00:25:EF:4C:DA:F7:21:34:0C:92:C6:9A:D2:EF:DF:51:B8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ea88b523-896a-343e-9e6e-04f731205cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a7:e4:5f:22:cd:37:2d:b2:65:8d:90:00:97:3f:e6:35:96: 9d:60:6c:18:d0:f2:3c:1c:fe:34:6b:cb:65:13:8a:b2:b1:b8: 19:2d:02:04:bb:83:c5:84:71:16:0f:b1:62:28:ac:25:05:71: b5:42:1a:4e:48:9e:df:1b:98:fc:21:92:64:18:4a:04:be:5b: 80:41:8e:46:13:94:11:6e:30:d3:9f:be:96:b4:e2:eb:6c:1d: fe:93:c0:01:0b:39:c7:7c:ce:fa:59:c1:ff:7d:3f:be:54:e1: cc:dc:09:1a:98:ac:45:0b:c5:12:e2:f2:72:17:29:f3:db:67: 1e:81:1d:07:8c:19:4c:56:0b:38:03:9c:83:79:76:25:8f:0c: a2:af:07:c2:b1:c7:5b:f1:94:78:cf:ed:2a:d8:64:94:ed:52: f7:47:fa:ca:28:80:17:ea:f9:4f:05:d7:3c:75:69:28:59:d9: 03:63:56:e1:23:0b:cc:7a:ae:1b:6d:5d:91:71:f9:c8:30:7f: 20:ee:00:fc:8a:2d:00:1d:04:0f:0b:47:b7:33:2b:37:3e:7a: 18:6c:07:7c:52:82:98:a9:0f:5b:c5:ff:25:ac:37:de:c2:9b: d4:45:29:f8:1f:62:06:1c:8c:4f:e2:b5:4d:d4:5d:ca:ba:f5: 79:70:cc:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN48ico1G79VG0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk YmEwMWEwNTItZDViZS00MzFlLThhOWEtMjRmNmIxYTFmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LhD4cS15Wv0GUwxPNKMRedl1GG5sGCPBgL8 h+3eBsokk/cXlwK8ZSx0T5JXsnPZVVnLk2VIozTJppppH0sIbNaTEKNfYDeXmCgK jhBJYJt7jC0sw5d3T7B97DImRNj2BbDOg6m02S25clUr3VR7Abq8T6hwHn79pTEl wZ8zd6nH/7VZwrqaNTj9w4pl44BXrhvjky+uEoLPQPrvCHUnbPx6cZ+iu0CMa/Gi ToFy5HvZp6kS82Vv+N1lMTQMlXJd0udOs5d84yZNtGMiiaSqoHlg0GEFacLgzorL Num7hmKD0skEFZHTUU6OEBwjqpJI23iTBGW+IKuBY64Jw8hznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4fACXvTNr3ITQMksaa0u/fUbgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZWE4OGI1MjMtODk2YS0z NDNlLTllNmUtMDRmNzMxMjA1Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmn5F8izTctsmWNkACXP+Y1lp1gbBjQ8jwc/jRry2UTirKxuBktAgS7 g8WEcRYPsWIorCUFcbVCGk5Int8bmPwhkmQYSgS+W4BBjkYTlBFuMNOfvpa04uts Hf6TwAELOcd8zvpZwf99P75U4czcCRqYrEULxRLi8nIXKfPbZx6BHQeMGUxWCzgD nIN5diWPDKKvB8Kxx1vxlHjP7SrYZJTtUvdH+soogBfq+U8F1zx1aShZ2QNjVuEj C8x6rhttXZFx+cgwfyDuAPyKLQAdBA8LR7czKzc+ehhsB3xSgpipD1vF/yWsN97C m9RFKfgfYgYcjE/itU3UXcq69XlwzK8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:06:09 2025 by rpki-client