$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa File: 43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa (raw, json) Hash identifier: gozn+xK4LHmeffVH8GyDd5YR6yj52/WhX6kZJ81SS/Q= Subject key identifier: 0F:9B:4E:FE:85:C5:D8:7E:85:31:30:69:BE:4E:B6:78:8F:3A:26:11 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F4328584BA0D26BE904D1CD953F224080 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14434 IP address blocks: 66.185.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6b:e9:04:d1:cd:95:3f:22:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=3c07a58a-8ce6-4a8a-8459-c30fc7d1fde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ba:a4:98:ca:2f:32:7f:a6:49:fc:08:f0:82: 7e:d3:d9:d4:3f:3a:e8:f0:fe:50:7d:2f:69:ad:d2: a5:16:17:34:4d:90:da:ca:68:cc:f8:b6:22:8e:ce: b3:df:17:61:22:58:05:a3:e0:e1:c8:55:ae:fc:79: 9f:ca:d6:9c:59:e5:b2:47:df:42:53:05:c4:88:b9: d0:5a:d1:59:53:a5:2e:b2:17:25:ac:3b:b8:00:05: 9a:b9:98:6f:43:f4:2c:f4:04:02:79:d0:e3:5c:c0: 42:7c:66:d1:d1:0f:2b:4b:05:f4:48:19:69:a9:75: 41:fc:01:e5:90:5e:a2:8e:a7:1f:9d:5d:d8:cf:8e: 35:16:68:19:2e:9a:44:55:a1:8f:b0:56:ed:53:71: 51:5f:50:91:78:6f:af:5e:e2:ba:40:76:d6:02:95: 19:d0:0a:9e:94:c3:d1:96:c0:74:cd:28:b2:de:81: fc:c9:bb:16:32:57:1d:d4:2e:14:20:04:c0:49:d7: fc:2c:2d:a4:3c:c1:1d:89:d5:96:d7:1f:ea:e2:15: 86:6f:4c:1e:9e:38:8f:4b:07:2d:b7:dc:ad:a6:f3: ec:fe:e9:18:51:5a:7b:35:f9:30:5b:90:8b:a4:a5: b2:18:e4:98:ab:99:17:13:26:77:13:77:5c:10:f9: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9B:4E:FE:85:C5:D8:7E:85:31:30:69:BE:4E:B6:78:8F:3A:26:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv4: 66.185.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8e:57:7c:05:37:58:9c:fc:e7:ed:fc:c9:13:0d:8a:a0:75: a0:5a:9f:46:8f:87:72:65:ec:16:d5:7a:8a:1a:cb:23:20:2a: c1:eb:5b:7c:29:6c:95:aa:8f:22:27:fb:b5:fc:b3:c1:b7:65: 7b:00:ac:45:94:2f:09:65:e3:51:3e:7d:22:e0:cc:61:a7:b8: 14:65:99:96:b9:3c:a1:1f:bf:b7:a4:b4:a7:82:cf:3e:08:5d: b0:09:89:26:11:ca:3e:71:0c:11:2d:0b:9d:0a:d4:24:84:d0: ef:d0:c5:66:43:0a:69:5f:b5:c3:da:22:fa:02:ec:ab:d3:46: f5:be:56:92:72:f7:7b:a5:25:d7:b5:27:45:4b:44:bc:57:43: b2:c0:14:a9:b5:c6:d7:4e:8c:42:ac:e8:9b:82:2f:fc:01:14: f7:51:6b:25:45:20:33:65:a5:cc:53:3f:55:3d:b9:d2:93:01: 77:5a:63:4c:f0:8a:f3:a6:40:4a:5f:84:4a:42:ba:66:a0:f5: 3c:1b:d3:b2:ae:e5:bd:45:99:46:b0:7a:f9:05:f0:6e:3e:da: 9e:58:06:3c:08:5e:1f:19:63:d2:a9:bd:0d:03:7d:ff:e1:e2: dd:78:df:37:a1:35:96:96:19:65:fd:d0:92:3c:9f:74:72:19: cd:a5:f7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mvpBNHNlT8iQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk M2MwN2E1OGEtOGNlNi00YThhLTg0NTktYzMwZmM3ZDFmZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7qkmMovMn+mSfwI8IJ+09nUPzro8P5QfS9p rdKlFhc0TZDaymjM+LYijs6z3xdhIlgFo+DhyFWu/HmfytacWeWyR99CUwXEiLnQ WtFZU6UushclrDu4AAWauZhvQ/Qs9AQCedDjXMBCfGbR0Q8rSwX0SBlpqXVB/AHl kF6ijqcfnV3Yz441FmgZLppEVaGPsFbtU3FRX1CReG+vXuK6QHbWApUZ0AqelMPR lsB0zSiy3oH8ybsWMlcd1C4UIATASdf8LC2kPMEdidWW1x/q4hWGb0wenjiPSwct t9ytpvPs/ukYUVp7NfkwW5CLpKWyGOSYq5kXEyZ3E3dcEPmPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+bTv6Fxdh+hTEwab5OtniPOiYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvNDNjZjU2ZTItNWJkZS0z ZGJlLWE2YTMtNDA4MmMwNGM0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+OV3wFN1ic/Oft/MkTDYqgdaBan0aPh3Jl7BbVeooayyMgKsHrW3wp bJWqjyIn+7X8s8G3ZXsArEWULwll41E+fSLgzGGnuBRlmZa5PKEfv7ektKeCzz4I XbAJiSYRyj5xDBEtC50K1CSE0O/QxWZDCmlftcPaIvoC7KvTRvW+VpJy93ulJde1 J0VLRLxXQ7LAFKm1xtdOjEKs6JuCL/wBFPdRayVFIDNlpcxTP1U9udKTAXdaY0zw ivOmQEpfhEpCumag9Twb07Ku5b1FmUawevkF8G4+2p5YBjwIXh8ZY9KpvQ0Dff/h 4t143zehNZaWGWX90JI8n3RyGc2l98w= -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:38 2025 by rpki-client