$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/18d9220d-9699-3c66-bf1a-4fb1963f43c9.roa File: 18d9220d-9699-3c66-bf1a-4fb1963f43c9.roa (raw, json) Hash identifier: gbOj9nQLtLw/cmDSXZZkVJf2dWdfAPlAnsq60s3ipAQ= Subject key identifier: 92:B6:BF:19:1E:C0:B1:1D:24:B8:8F:A1:CB:DC:F8:AF:F2:42:F7:D1 Certificate issuer: /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68 Certificate serial: 010D0C9F4328584B966F42CD7407A3957C22B380 Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/18d9220d-9699-3c66-bf1a-4fb1963f43c9.roa Signing time: Mon 20 Oct 2025 19:43:08 +0000 ROA not before: Mon 20 Oct 2025 19:43:08 +0000 ROA not after: Sun 18 Jan 2026 20:43:08 +0000 asID: 14450 IP address blocks: 66.185.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:6f:42:cd:74:07:a3:95:7c:22:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68 Validity Not Before: Oct 20 19:43:08 2025 GMT Not After : Jan 18 20:43:08 2026 GMT Subject: CN=5d7d4035-2475-4936-bcf2-bca23b7a4ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:96:85:16:52:b6:2d:66:4d:38:31:87:77:d2: 01:af:71:17:80:41:ff:a8:e8:46:71:ab:56:e9:cf: 6c:d4:a9:00:26:98:53:8c:69:ac:b2:c6:af:89:c4: 19:10:96:b1:fb:67:f7:2d:2d:19:51:d7:03:b8:29: 97:5d:8c:19:e7:16:16:30:d0:d5:b7:60:43:36:16: 0d:4d:12:8a:d7:d0:27:2f:b1:0d:93:2d:f3:c0:e7: 12:51:c1:25:44:54:6d:4d:d2:c2:eb:83:27:69:d4: 08:2c:93:85:2b:e4:df:79:1b:e8:16:fa:90:ea:00: 3e:ff:86:0e:d6:72:49:92:9f:a6:66:48:f6:90:4e: 5b:cf:25:ed:2a:2f:81:e7:be:d9:93:a3:28:6d:e4: 0e:91:4d:b2:ac:db:92:d5:ce:0d:45:79:21:2f:6c: 25:f0:a8:5c:99:f1:3b:d8:c4:d5:08:92:45:50:f8: 64:36:ae:6e:68:ae:2a:dd:e2:96:38:81:f0:d8:54: 96:35:c6:1d:ee:02:03:fa:88:11:66:ff:45:0c:b0: ac:1b:fe:25:7c:cc:ba:6b:9d:5f:40:1f:02:5f:c4: 81:97:5c:92:9b:13:dc:31:0e:d1:68:2e:1b:75:6c: cf:b9:92:99:6f:d8:7d:e2:2e:eb:8b:d4:ce:45:59: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:BF:19:1E:C0:B1:1D:24:B8:8F:A1:CB:DC:F8:AF:F2:42:F7:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/18d9220d-9699-3c66-bf1a-4fb1963f43c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl X509v3 Authority Key Identifier: keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer sbgp-ipAddrBlock: critical IPv4: 66.185.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8b:e2:0b:d6:4d:3a:23:08:61:8b:a7:b9:b9:e6:a3:68:45: a7:75:c0:09:b1:ef:f1:d7:07:96:d8:a9:ed:4a:c6:ac:74:6f: 97:9d:16:eb:45:f7:91:46:9a:08:79:e9:b1:7d:cb:58:2a:51: 59:97:0b:9b:f3:c8:de:45:c6:fa:7a:03:6a:27:51:41:6e:62: 68:f5:da:c6:60:b5:67:06:20:f4:11:b5:d7:d1:c7:36:0a:bd: 36:df:c6:76:df:af:92:69:ad:83:c5:69:da:70:c2:18:6c:eb: a5:46:66:c6:11:a4:c6:7e:c7:e9:ec:f4:d5:ed:69:5e:54:57: 13:70:a9:bb:af:e0:2b:c5:de:d8:28:c0:10:c7:28:95:6a:d9: 48:74:6f:40:0f:85:aa:ca:32:53:cf:7c:7d:cc:9b:74:9c:65: 90:e8:ba:e3:76:0c:fb:21:3a:5a:cf:98:49:b3:da:7e:76:4c: ab:93:1f:f2:d9:f7:37:bc:06:c1:83:d5:55:e2:82:5b:85:d7: 5f:b2:77:7d:e6:d3:2b:93:ea:71:bc:68:20:e1:30:a4:ab:ec: c1:2b:af:0b:fc:e6:aa:1c:c2:d0:e3:29:5c:ff:9f:d3:33:61: e1:55:16:d4:d5:76:0a:1c:3e:89:e3:4f:17:d4:f3:df:1f:7b: 1b:06:d3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWb0LNdAejlXwis4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdlMjEwYTEtN2I4YS00MjU2LWE0ZDItYzAxMjM0MDk1 YzY4MB4XDTI1MTAyMDE5NDMwOFoXDTI2MDExODIwNDMwOFowLzEtMCsGA1UEAxMk NWQ3ZDQwMzUtMjQ3NS00OTM2LWJjZjItYmNhMjNiN2E0ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpaFFlK2LWZNODGHd9IBr3EXgEH/qOhGcatW 6c9s1KkAJphTjGmsssavicQZEJax+2f3LS0ZUdcDuCmXXYwZ5xYWMNDVt2BDNhYN TRKK19AnL7ENky3zwOcSUcElRFRtTdLC64MnadQILJOFK+TfeRvoFvqQ6gA+/4YO 1nJJkp+mZkj2kE5bzyXtKi+B577Zk6MobeQOkU2yrNuS1c4NRXkhL2wl8KhcmfE7 2MTVCJJFUPhkNq5uaK4q3eKWOIHw2FSWNcYd7gID+ogRZv9FDLCsG/4lfMy6a51f QB8CX8SBl1ySmxPcMQ7RaC4bdWzPuZKZb9h94i7ri9TORVnVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK2vxkewLEdJLiPocvc+K/yQvfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Uy MTBhMS03YjhhLTQyNTYtYTRkMi1jMDEyMzQwOTVjNjgvMThkOTIyMGQtOTY5OS0z YzY2LWJmMWEtNGZiMTk2M2Y0M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdlMjEwYTEtN2I4YS00MjU2LWE0 ZDItYzAxMjM0MDk1YzY4L2Y3ZTIxMGExLTdiOGEtNDI1Ni1hNGQyLWMwMTIzNDA5 NWM2OC5jcmwwHwYDVR0jBBgwFoAUcGSmUQSRXVwaiHDXb2xULSerY3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2UyMTBhMS03YjhhLTQyNTYtYTRkMi1jMDEy MzQwOTVjNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyL4gvWTTojCGGLp7m55qNoRad1wAmx7/HXB5bYqe1Kxqx0b5edFutF 95FGmgh56bF9y1gqUVmXC5vzyN5Fxvp6A2onUUFuYmj12sZgtWcGIPQRtdfRxzYK vTbfxnbfr5JprYPFadpwwhhs66VGZsYRpMZ+x+ns9NXtaV5UVxNwqbuv4CvF3tgo wBDHKJVq2Uh0b0APharKMlPPfH3Mm3ScZZDouuN2DPshOlrPmEmz2n52TKuTH/LZ 9ze8BsGD1VXigluF11+yd33m0yuT6nG8aCDhMKSr7MErrwv85qocwtDjKVz/n9Mz YeFVFtTVdgocPonjTxfU898fexsG0xQ= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:14 2025 by rpki-client