$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa File: cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa (raw, json) Hash identifier: 9ybdAZJU1yrsTeoHGpGFOxd3kduUSzAxqUGZQDoIt5A= Subject key identifier: AE:01:94:7F:6B:A7:DE:35:A4:BF:EC:9F:02:04:97:8F:89:DF:EE:7A Certificate issuer: /CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02 Certificate serial: 010D0C9F4328584BA0D2664E0ECFD3C16AB78148 Authority key identifier: 1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14532 IP address blocks: 66.203.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:66:4e:0e:cf:d3:c1:6a:b7:81:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=d282d0a6-18bb-4563-90c4-08c8bf9f7890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:6d:31:8c:7a:ac:ac:3d:f1:c9:6d:0e:b7: f4:5e:3d:aa:77:08:71:78:2e:50:1b:5f:d6:17:55: ad:4b:b5:c6:6d:a8:c5:aa:64:88:0e:61:50:c9:bd: f8:3f:60:57:d5:aa:8f:48:87:7a:95:68:fd:06:7a: 17:3c:d0:5d:21:6c:a9:c2:0e:cf:85:e9:ca:a1:60: 68:dc:67:91:91:79:3b:7a:cd:20:23:34:4a:89:19: a3:59:2c:47:03:69:5a:40:95:45:7f:70:8a:a0:4b: e5:d7:13:e3:62:a2:58:a0:a6:11:b4:48:9f:b6:a7: 19:f2:c6:a9:77:04:a5:42:3c:de:12:ad:78:d0:cf: 3f:e5:b9:b0:55:85:f1:8f:b9:f8:ad:46:75:d3:e0: 0f:72:b7:b1:71:8f:c2:60:e1:2e:dd:c2:e7:b0:ff: 0c:6c:af:b2:f9:6b:ad:42:d4:b3:64:87:4d:4c:a8: 42:c0:53:c4:41:e3:1f:7f:d9:05:3f:dc:11:5f:8f: fa:08:1b:ce:80:de:0b:8e:a9:41:c3:b0:86:c7:8f: e4:49:d5:a8:57:cd:bb:4e:c7:9f:70:fe:a2:86:a2: fc:e3:b8:5e:7d:0e:96:fa:fd:2d:58:37:94:e5:5c: 60:76:30:b0:2f:9c:96:94:36:f2:f5:28:f7:15:0b: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:01:94:7F:6B:A7:DE:35:A4:BF:EC:9F:02:04:97:8F:89:DF:EE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/cec13f1c-2894-3fc6-b1f5-a75573f57e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl X509v3 Authority Key Identifier: keyid:1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer sbgp-ipAddrBlock: critical IPv4: 66.203.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:11:51:0d:3a:01:41:35:56:7d:77:21:52:c9:a1:78:a7:c5: 3b:f6:1b:d2:83:97:4d:74:c9:1c:52:d3:1a:ab:2d:dd:2e:a8: 75:01:1d:5c:e2:c3:d9:df:e3:dc:62:d8:1c:87:a8:af:bd:06: b6:21:09:13:d5:ee:bd:d7:33:06:00:fa:26:28:d1:b1:2a:66: 9a:60:44:be:3a:6f:81:d6:64:ee:d4:92:77:95:f6:b6:d8:3c: e7:7e:a2:16:c2:07:bb:f2:51:f3:a7:3c:21:80:9a:50:9a:f2: 67:1c:be:b9:bc:72:fc:d9:e7:e5:60:1b:71:07:b3:de:13:ae: 21:99:ed:92:22:d7:10:ea:cc:74:1a:50:bc:12:1d:63:a5:9f: 6f:df:c6:ca:a6:4a:d0:1d:61:cf:46:dc:ff:8e:3b:12:01:86: c3:44:ee:cf:09:5e:fc:00:87:64:3a:9c:5b:06:64:63:f5:78: 6b:07:60:a9:81:5b:af:9d:1e:54:54:11:d6:96:12:4f:01:54: 25:98:a9:ab:1b:af:1a:bd:40:79:dc:b5:57:a3:11:81:92:ca: 91:f0:8f:da:98:74:47:2d:66:d5:7f:dd:c6:ca:e4:49:87:3c: ff:4f:1a:0c:52:1b:aa:82:b7:2c:be:ca:0d:df:12:49:6b:dc: db:2c:ef:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mZODs/TwWq3gUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdiMzQxY2YtYWJjOS00MmMzLWEwYmItMzFmNTY5YTFh ZTAyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZDI4MmQwYTYtMThiYi00NTYzLTkwYzQtMDhjOGJmOWY3ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW5tMYx6rKw98cltDrf0Xj2qdwhxeC5QG1/W F1WtS7XGbajFqmSIDmFQyb34P2BX1aqPSId6lWj9BnoXPNBdIWypwg7PhenKoWBo 3GeRkXk7es0gIzRKiRmjWSxHA2laQJVFf3CKoEvl1xPjYqJYoKYRtEiftqcZ8sap dwSlQjzeEq140M8/5bmwVYXxj7n4rUZ10+APcrexcY/CYOEu3cLnsP8MbK+y+Wut QtSzZIdNTKhCwFPEQeMff9kFP9wRX4/6CBvOgN4LjqlBw7CGx4/kSdWoV827Tsef cP6ihqL847hefQ6W+v0tWDeU5VxgdjCwL5yWlDby9Sj3FQtaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4BlH9rp941pL/snwIEl4+J3+56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Iz NDFjZi1hYmM5LTQyYzMtYTBiYi0zMWY1NjlhMWFlMDIvY2VjMTNmMWMtMjg5NC0z ZmM2LWIxZjUtYTc1NTczZjU3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdiMzQxY2YtYWJjOS00MmMzLWEw YmItMzFmNTY5YTFhZTAyL2Y3YjM0MWNmLWFiYzktNDJjMy1hMGJiLTMxZjU2OWEx YWUwMi5jcmwwHwYDVR0jBBgwFoAUHMDl+3kEP+pNPR+qNayFSpmm1K0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2IzNDFjZi1hYmM5LTQyYzMtYTBiYi0zMWY1 NjlhMWFlMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQssAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYRUQ06AUE1Vn13IVLJoXinxTv2G9KDl010yRxS0xqrLd0uqHUBHVzi w9nf49xi2ByHqK+9BrYhCRPV7r3XMwYA+iYo0bEqZppgRL46b4HWZO7UkneV9rbY POd+ohbCB7vyUfOnPCGAmlCa8mccvrm8cvzZ5+VgG3EHs94TriGZ7ZIi1xDqzHQa ULwSHWOln2/fxsqmStAdYc9G3P+OOxIBhsNE7s8JXvwAh2Q6nFsGZGP1eGsHYKmB W6+dHlRUEdaWEk8BVCWYqasbrxq9QHnctVejEYGSypHwj9qYdEctZtV/3cbK5EmH PP9PGgxSG6qCtyy+yg3fEklr3Nss76Q= -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:54 2025 by rpki-client