$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/356d3da4-86c5-3945-9f72-cec69a22da65.roa File: 356d3da4-86c5-3945-9f72-cec69a22da65.roa (raw, json) Hash identifier: xGf8NDB5y1e2apO1q5j2TD2cwynW8VWq5xd3kx/KmCc= Subject key identifier: B1:A5:5E:64:1B:F8:29:AB:E1:53:22:69:F1:48:9C:DC:80:96:BB:49 Certificate issuer: /CN=89a397c2-4860-4547-8d71-faf2481535cf Certificate serial: 010D0C9F4328584B50F7309B8018D9FD9BC50B00 Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/356d3da4-86c5-3945-9f72-cec69a22da65.roa Signing time: Thu 25 Sep 2025 22:30:25 +0000 ROA not before: Thu 25 Sep 2025 22:30:25 +0000 ROA not after: Wed 24 Dec 2025 23:30:25 +0000 asID: 13335 IP address blocks: 66.45.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:50:f7:30:9b:80:18:d9:fd:9b:c5:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf Validity Not Before: Sep 25 22:30:25 2025 GMT Not After : Dec 24 23:30:25 2025 GMT Subject: CN=b469d86d-720b-4c2e-8bed-165d1a1ea12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:07:19:49:ea:90:8a:8f:39:c9:65:6f:c6:85: 9a:6d:57:e6:9b:d4:0d:75:ed:ac:06:e3:ce:04:31: 84:db:54:67:f4:29:d0:e8:9e:6f:1d:3a:81:52:81: ff:08:8e:ad:96:1b:42:68:ff:fc:fd:4f:02:f0:08: 1e:35:95:a6:e3:90:d7:c0:a6:6f:c3:81:34:29:9b: 47:76:a1:5c:bf:99:cb:25:f6:eb:b3:6d:66:4a:af: 4f:33:2b:46:d9:f2:52:07:95:7c:52:09:69:a0:09: 45:8c:d5:d0:79:d9:44:e5:98:3f:06:a7:9b:0c:69: 15:5c:59:e0:a7:dc:43:af:0f:81:7b:66:26:6d:43: ec:06:d4:13:9b:0d:86:c2:9c:b6:bc:52:2e:52:1d: 19:89:2d:19:cf:6c:cf:37:b0:eb:9f:0d:42:fb:2b: c9:6c:86:15:59:c4:e8:16:f5:42:bd:3a:8f:b0:1c: d3:53:0d:d0:7f:3d:c9:3d:56:08:5b:c9:a8:5a:24: c0:15:ed:2b:2b:0c:d6:33:8c:73:09:84:56:72:c5: fc:44:77:f2:42:30:2d:1c:4a:c7:e7:73:9c:c4:44: 94:c8:8b:da:71:d8:e6:10:8e:69:1b:35:89:d8:ff: 84:24:5f:f6:68:49:05:40:c0:2e:ec:2b:eb:16:ff: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A5:5E:64:1B:F8:29:AB:E1:53:22:69:F1:48:9C:DC:80:96:BB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/356d3da4-86c5-3945-9f72-cec69a22da65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl X509v3 Authority Key Identifier: keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer sbgp-ipAddrBlock: critical IPv4: 66.45.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3a:6a:b6:e1:73:e4:4c:95:aa:62:22:02:c9:b8:fe:80:89: f2:62:26:4a:e3:18:16:f2:05:ff:00:e2:43:36:9f:ba:1d:ac: 36:c3:00:0e:9b:03:42:0b:5d:a5:f0:05:55:26:ab:b1:ea:45: 37:a6:d5:1e:16:8b:54:a9:af:1f:36:f1:1a:bb:ec:57:ae:94: fc:e7:c6:26:24:b0:0d:11:f9:df:89:98:26:12:19:0c:d1:a7: 68:97:1d:0b:c9:14:3b:1c:c1:8d:c5:ca:0a:10:f5:36:8c:4c: e9:54:4d:7f:81:5a:33:3c:b3:3e:95:9a:69:63:c9:8d:0b:07: 13:7b:20:88:55:f3:14:79:5f:a1:ec:dd:6c:4a:c4:1d:0f:81: d9:d1:38:6e:bc:85:28:e5:ec:78:f4:e5:5b:82:41:8f:ca:7b: e9:0a:58:a1:07:0d:8a:5d:93:be:39:ce:c2:91:02:ee:ea:fd: eb:f1:f8:00:3f:f5:48:fb:5c:ae:cd:b8:41:a0:d5:c2:db:07: e9:37:03:22:5f:1f:fe:95:07:5a:5d:1c:8e:f7:c5:b2:cc:bf: a7:f9:8a:bf:6a:7a:47:aa:75:a7:ed:75:0b:e6:9c:ab:f0:da: 6b:75:c6:04:b2:65:83:8e:f9:e8:f2:be:9b:12:d3:ad:25:1d: 34:ab:88:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtQ9zCbgBjZ/ZvFCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlhMzk3YzItNDg2MC00NTQ3LThkNzEtZmFmMjQ4MTUz NWNmMB4XDTI1MDkyNTIyMzAyNVoXDTI1MTIyNDIzMzAyNVowLzEtMCsGA1UEAxMk YjQ2OWQ4NmQtNzIwYi00YzJlLThiZWQtMTY1ZDFhMWVhMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AcZSeqQio85yWVvxoWabVfmm9QNde2sBuPO BDGE21Rn9CnQ6J5vHTqBUoH/CI6tlhtCaP/8/U8C8AgeNZWm45DXwKZvw4E0KZtH dqFcv5nLJfbrs21mSq9PMytG2fJSB5V8UglpoAlFjNXQedlE5Zg/BqebDGkVXFng p9xDrw+Be2YmbUPsBtQTmw2Gwpy2vFIuUh0ZiS0Zz2zPN7Drnw1C+yvJbIYVWcTo FvVCvTqPsBzTUw3Qfz3JPVYIW8moWiTAFe0rKwzWM4xzCYRWcsX8RHfyQjAtHErH 53OcxESUyIvacdjmEI5pGzWJ2P+EJF/2aEkFQMAu7CvrFv9hywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGlXmQb+Cmr4VMiafFInNyAlrtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OWEz OTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYyNDgxNTM1Y2YvMzU2ZDNkYTQtODZjNS0z OTQ1LTlmNzItY2VjNjlhMjJkYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODlhMzk3YzItNDg2MC00NTQ3LThk NzEtZmFmMjQ4MTUzNWNmLzg5YTM5N2MyLTQ4NjAtNDU0Ny04ZDcxLWZhZjI0ODE1 MzVjZi5jcmwwHwYDVR0jBBgwFoAU8HXuQsnRPwQOkovH/F2W9wvrvq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OWEzOTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYy NDgxNTM1Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ86arbhc+RMlapiIgLJuP6AifJiJkrjGBbyBf8A4kM2n7odrDbDAA6b A0ILXaXwBVUmq7HqRTem1R4Wi1Sprx828Rq77FeulPznxiYksA0R+d+JmCYSGQzR p2iXHQvJFDscwY3FygoQ9TaMTOlUTX+BWjM8sz6VmmljyY0LBxN7IIhV8xR5X6Hs 3WxKxB0PgdnROG68hSjl7Hj05VuCQY/Ke+kKWKEHDYpdk745zsKRAu7q/evx+AA/ 9Uj7XK7NuEGg1cLbB+k3AyJfH/6VB1pdHI73xbLMv6f5ir9qekeqdaftdQvmnKvw 2mt1xgSyZYOO+ejyvpsS060lHTSriPo= -----END CERTIFICATE-----Generated at Wed Nov 5 02:39:21 2025 by rpki-client