$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/b54f4809-2dff-3704-8197-22477f1dc5c7.roa File: b54f4809-2dff-3704-8197-22477f1dc5c7.roa (raw, json) Hash identifier: Q1cMXVoU156u4rZmojtxj0rSmzTvEU18ljlcm0NCYzQ= Subject key identifier: EC:33:6D:A6:90:CA:B0:E0:7E:CB:08:69:20:F5:3D:63:82:F1:58:A6 Certificate issuer: /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Certificate serial: 010D0C9F4328584BAA97B2438C591DA982D4F280 Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/b54f4809-2dff-3704-8197-22477f1dc5c7.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 11070 IP address blocks: 66.128.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b2:43:8c:59:1d:a9:82:d4:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=ae107861-49d6-4e11-b770-971a03edf56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:6c:ab:3c:0c:8a:99:7e:08:9a:0c:36:92: f5:0f:48:23:15:5f:17:33:ac:92:a9:89:ee:4a:a7: ee:2c:7d:73:ec:66:fd:b1:d8:91:0e:41:3b:dd:d1: 9b:ac:14:9f:7e:d9:f2:20:7a:a4:d4:47:66:55:69: ef:41:e3:90:ec:58:ed:0c:b8:a5:cb:25:46:af:fe: bc:9b:92:ff:e0:fb:8b:4f:8a:f5:e8:7a:e1:54:08: 5c:a1:39:a7:ef:91:8f:44:ea:25:8c:76:2f:ff:c9: bd:2f:f3:47:51:3e:e2:8e:5f:08:6e:f0:cf:9b:2f: e7:a8:09:85:b9:24:a2:84:29:09:e6:2a:3f:2b:1a: 8b:a5:df:7b:8f:34:08:7b:38:a0:ec:ee:fa:67:50: 73:09:2e:5a:5c:a1:10:dd:15:c1:89:69:9f:e6:ce: 5a:de:60:60:d2:19:d7:ea:e6:bd:73:f9:60:c4:64: 6f:0e:3c:d8:ed:a8:29:a4:11:cf:96:5b:f1:2d:81: 52:68:82:10:8b:5e:c1:5d:ec:22:a3:55:5c:90:9f: 8f:db:97:8a:2d:2f:a3:6f:8b:bf:43:5b:50:01:e5: 16:69:ce:50:ec:60:52:9d:f3:e1:ce:93:2c:55:67: 79:24:2b:93:50:a4:4a:47:fe:8d:78:84:e9:e9:48: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:33:6D:A6:90:CA:B0:E0:7E:CB:08:69:20:F5:3D:63:82:F1:58:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/b54f4809-2dff-3704-8197-22477f1dc5c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl X509v3 Authority Key Identifier: keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer sbgp-ipAddrBlock: critical IPv4: 66.128.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e2:5e:0c:30:09:ea:47:f9:f1:c2:58:03:92:ae:6d:09:45: 77:f1:5f:3b:96:73:c5:14:fa:a0:dd:f8:c0:91:59:13:7d:0f: 0e:ea:94:28:38:e1:40:c2:65:cd:db:bc:6e:01:0e:b4:f0:97: ef:8f:69:41:d9:59:c3:79:0f:8f:91:bd:05:05:e4:bd:d6:05: 77:05:d7:65:e0:f3:b3:53:96:28:2d:6f:c5:59:71:6b:03:10: bf:c8:b5:5a:3b:98:4d:7e:1b:3e:21:75:14:f2:47:ae:6d:e3: e9:dc:40:a1:d8:af:22:54:41:44:a0:d7:62:8a:f1:e0:74:39: 4e:c2:25:1f:4c:b7:55:c8:92:99:7f:6c:3e:1c:8f:d6:e8:5b: a9:0b:c6:2a:44:de:e3:f5:ab:8f:e0:de:70:ca:2f:55:d1:54: 67:2b:5b:1e:b2:e4:76:19:9b:3a:d8:1a:e0:75:68:68:28:4a: de:1a:45:3b:b8:5b:24:9e:67:6b:49:4f:28:71:53:a3:cc:dd: 69:30:81:2d:8b:bd:1d:03:42:db:76:80:36:5d:00:f9:82:80: 48:d7:da:aa:6e:0d:7c:32:d2:7f:b1:b9:3e:7c:d6:48:f7:c9: ec:ec:bf:04:d1:48:ed:18:3f:1b:bb:e8:0c:f1:e0:d6:75:d7: ce:9d:8c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7JDjFkdqYLU8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3 OGVhMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YWUxMDc4NjEtNDlkNi00ZTExLWI3NzAtOTcxYTAzZWRmNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNRsqzwMipl+CJoMNpL1D0gjFV8XM6ySqYnu SqfuLH1z7Gb9sdiRDkE73dGbrBSfftnyIHqk1EdmVWnvQeOQ7FjtDLilyyVGr/68 m5L/4PuLT4r16HrhVAhcoTmn75GPROoljHYv/8m9L/NHUT7ijl8IbvDPmy/nqAmF uSSihCkJ5io/KxqLpd97jzQIezig7O76Z1BzCS5aXKEQ3RXBiWmf5s5a3mBg0hnX 6ua9c/lgxGRvDjzY7agppBHPllvxLYFSaIIQi17BXewio1VckJ+P25eKLS+jb4u/ Q1tQAeUWac5Q7GBSnfPhzpMsVWd5JCuTUKRKR/6NeITp6UjvTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwzbaaQyrDgfssIaSD1PWOC8VimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvYjU0ZjQ4MDktMmRmZi0z NzA0LTgxOTctMjI0NzdmMWRjNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1 OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAviXgwwCepH+fHCWAOSrm0JRXfxXzuWc8UU+qDd+MCRWRN9Dw7qlCg4 4UDCZc3bvG4BDrTwl++PaUHZWcN5D4+RvQUF5L3WBXcF12Xg87NTligtb8VZcWsD EL/ItVo7mE1+Gz4hdRTyR65t4+ncQKHYryJUQUSg12KK8eB0OU7CJR9Mt1XIkpl/ bD4cj9boW6kLxipE3uP1q4/g3nDKL1XRVGcrWx6y5HYZmzrYGuB1aGgoSt4aRTu4 WySeZ2tJTyhxU6PM3WkwgS2LvR0DQtt2gDZdAPmCgEjX2qpuDXwy0n+xuT581kj3 yezsvwTRSO0YPxu76Azx4NZ1186djG8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:55 2025 by rpki-client