$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa File: a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa (raw, json) Hash identifier: GGeSCljVZwBoosLsXW5x+jq5d0su8ZcDsv6aPC00yhA= Subject key identifier: 70:BC:B0:FC:31:63:69:77:5D:1C:82:7D:8B:BD:E3:4B:F7:08:C9:42 Certificate issuer: /CN=41415190-afe9-4f90-902f-9102f69180fb Certificate serial: 010D0C9F4328584BAEC7B864732C47F8CB396480 Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 6556 IP address blocks: 66.248.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b8:64:73:2c:47:f8:cb:39:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=ef17d77e-a969-4a9d-b779-097a2b1d79f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:65:49:22:b5:88:d8:93:21:dc:dd:d8:1c: 40:10:b8:df:fc:56:db:ca:b9:ba:cc:f6:57:b2:66: 1e:61:94:4c:dd:34:ec:e0:2c:ad:b0:c7:8f:53:af: 87:53:12:78:a0:63:88:fe:74:ed:01:59:35:b9:a6: 18:f9:42:3f:e2:8a:03:d7:86:8a:1b:a1:fc:1f:60: 89:59:25:d2:ba:f6:3c:53:83:86:74:49:ee:9c:c7: ac:2d:f8:a3:cc:7f:b1:8f:bf:ad:62:50:41:f1:7b: e6:27:52:b2:b5:89:0d:1b:21:cb:95:95:04:e6:5b: b8:89:6e:4d:aa:63:b9:ad:d1:47:a5:ef:84:6d:aa: b5:4f:e5:69:a8:d1:e2:f9:bc:a5:50:5c:1b:90:95: fb:16:13:c6:32:ba:db:b9:81:fa:e0:69:95:24:72: b0:3c:48:13:b5:15:cb:80:74:f4:fb:6c:86:e7:bf: bb:66:f8:ac:3b:9c:33:bd:fd:f9:c5:77:08:f0:8d: 4d:6e:8e:87:60:4a:31:38:ca:1f:6d:71:a2:81:26: 4f:49:31:41:13:ae:69:31:35:be:80:ba:b6:1b:0c: e5:1c:86:36:0a:46:e8:0d:9c:40:c4:9c:94:9a:bf: 08:83:b5:bd:ca:0e:cf:be:a8:e2:10:94:e7:a5:b8: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BC:B0:FC:31:63:69:77:5D:1C:82:7D:8B:BD:E3:4B:F7:08:C9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/a3e0eb2d-8feb-3382-8fe4-79e58eda698c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl X509v3 Authority Key Identifier: keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer sbgp-ipAddrBlock: critical IPv4: 66.248.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:32:1a:86:1c:69:09:9d:b2:b9:35:69:5b:26:47:ba:fa:90: 45:39:7d:c4:c0:5e:d6:d0:a1:81:d4:fc:cf:bd:82:5e:fe:b7: 17:0e:6a:0e:74:e3:93:e1:c6:37:83:0f:b7:d9:e5:3c:03:6f: a9:fe:94:04:f9:65:ec:d5:f8:89:67:cb:7a:d5:1e:91:0c:f8: c9:f7:58:3c:5f:55:9a:68:d2:0b:ca:5b:da:46:d5:90:a5:5a: f4:ac:88:16:95:57:73:d2:e1:ce:ce:3a:a6:60:2e:8b:26:2a: 4b:1f:c0:d9:9e:e6:bf:b9:a0:9b:01:f3:df:c1:dd:fe:bd:fa: 04:26:86:d3:49:49:30:21:ae:91:df:34:c6:0b:33:29:6b:35: 83:84:30:81:ef:96:bb:44:ec:24:72:0a:44:0d:39:8e:c4:d0: 47:92:32:6d:f1:ce:46:6f:37:03:cc:9f:2f:25:0d:1e:f4:21: d0:2a:13:ec:6a:41:a3:38:e5:b5:38:70:e6:5a:59:d8:f0:29: 2d:07:ec:ce:5a:eb:84:73:fb:fa:4f:2d:fd:b5:5e:cd:dd:1d: b6:6c:07:64:39:a3:b1:c8:6c:ee:bb:79:a5:df:c0:c0:76:33: 40:15:10:01:d2:21:41:3c:fa:9e:81:20:e6:b1:96:4a:e7:82: fb:8b:33:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7hkcyxH+Ms5ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE0MTUxOTAtYWZlOS00ZjkwLTkwMmYtOTEwMmY2OTE4 MGZiMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZWYxN2Q3N2UtYTk2OS00YTlkLWI3NzktMDk3YTJiMWQ3OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqRlSSK1iNiTIdzd2BxAELjf/Fbbyrm6zPZX smYeYZRM3TTs4CytsMePU6+HUxJ4oGOI/nTtAVk1uaYY+UI/4ooD14aKG6H8H2CJ WSXSuvY8U4OGdEnunMesLfijzH+xj7+tYlBB8XvmJ1KytYkNGyHLlZUE5lu4iW5N qmO5rdFHpe+Ebaq1T+VpqNHi+bylUFwbkJX7FhPGMrrbuYH64GmVJHKwPEgTtRXL gHT0+2yG57+7ZvisO5wzvf35xXcI8I1Nbo6HYEoxOMofbXGigSZPSTFBE65pMTW+ gLq2GwzlHIY2CkboDZxAxJyUmr8Ig7W9yg7PvqjiEJTnpbgCTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHC8sPwxY2l3XRyCfYu940v3CMlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80MTQx NTE5MC1hZmU5LTRmOTAtOTAyZi05MTAyZjY5MTgwZmIvYTNlMGViMmQtOGZlYi0z MzgyLThmZTQtNzllNThlZGE2OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDE0MTUxOTAtYWZlOS00ZjkwLTkw MmYtOTEwMmY2OTE4MGZiLzQxNDE1MTkwLWFmZTktNGY5MC05MDJmLTkxMDJmNjkx ODBmYi5jcmwwHwYDVR0jBBgwFoAUnTIT2A5DjTx4bz0c1yX6nCJZafowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MTQxNTE5MC1hZmU5LTRmOTAtOTAyZi05MTAy ZjY5MTgwZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0yGoYcaQmdsrk1aVsmR7r6kEU5fcTAXtbQoYHU/M+9gl7+txcOag50 45PhxjeDD7fZ5TwDb6n+lAT5ZezV+Ilny3rVHpEM+Mn3WDxfVZpo0gvKW9pG1ZCl WvSsiBaVV3PS4c7OOqZgLosmKksfwNme5r+5oJsB89/B3f69+gQmhtNJSTAhrpHf NMYLMylrNYOEMIHvlrtE7CRyCkQNOY7E0EeSMm3xzkZvNwPMny8lDR70IdAqE+xq QaM45bU4cOZaWdjwKS0H7M5a64Rz+/pPLf21Xs3dHbZsB2Q5o7HIbO67eaXfwMB2 M0AVEAHSIUE8+p6BIOaxlkrngvuLM7I= -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:20 2025 by rpki-client