$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/3efd5904-9b89-3ad5-83ab-a5a6c0dac0a9.roa File: 3efd5904-9b89-3ad5-83ab-a5a6c0dac0a9.roa (raw, json) Hash identifier: mwcEq7h+PmDBHQK0qfocsYY2uCUcUm1P7bcCMqziKBE= Subject key identifier: 70:FD:7D:7E:79:46:C1:84:1D:CA:1A:02:10:94:76:54:E2:1C:FC:90 Certificate issuer: /CN=eecc445c-064d-41ee-91f1-3ef708241983 Certificate serial: 010D0C9F4328584B2B919207406818AD9687B500 Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/3efd5904-9b89-3ad5-83ab-a5a6c0dac0a9.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 394270 IP address blocks: 66.85.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:92:07:40:68:18:ad:96:87:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=0b00a026-12a7-4e7a-993b-e828298599d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:1e:5d:10:7c:a3:94:f2:62:68:8a:cd:a4: 83:bc:2f:c1:7d:26:20:be:88:ab:c3:10:01:95:5a: ad:6c:12:e8:44:3b:71:85:1b:ec:c4:59:0e:6d:41: 8b:48:ed:f8:28:44:73:40:9f:32:5b:81:ef:00:d2: 4c:1c:76:7c:a4:49:cc:be:27:40:28:0f:5a:ff:a6: d4:b7:c6:1f:55:92:cd:8b:fb:64:31:b7:47:77:ce: 63:49:23:4c:5b:13:ad:f8:91:09:57:c7:9b:21:cc: a3:93:90:31:d1:bd:5a:76:27:c0:ca:a8:23:65:49: a9:5c:0f:5a:d3:b3:50:09:f6:46:d2:1a:ce:ca:f3: 1d:c5:6b:9b:87:61:0f:2b:3d:e6:77:d6:63:eb:90: 00:ba:ca:1e:ab:6e:2a:76:8a:9f:24:c8:23:d2:08: 32:69:c5:3e:89:d4:0b:2f:4f:13:b5:d0:ce:7d:0e: 97:4f:8e:f3:49:d9:e8:4b:33:2b:c7:78:39:fe:34: cc:f1:6c:14:e8:3e:85:64:26:66:81:5e:37:5b:ce: 89:67:bf:1d:9e:74:dd:e7:89:a7:b5:e5:37:d9:e0: 11:58:ab:98:fa:ea:4a:03:d9:07:33:1c:8d:9b:c3: ae:4b:d4:2c:8b:47:93:c4:9b:4e:ef:12:12:5e:09: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:7D:7E:79:46:C1:84:1D:CA:1A:02:10:94:76:54:E2:1C:FC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/3efd5904-9b89-3ad5-83ab-a5a6c0dac0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl X509v3 Authority Key Identifier: keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer sbgp-ipAddrBlock: critical IPv4: 66.85.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:56:a7:18:77:9d:48:82:b5:85:a6:d9:d6:29:1d:fc:58:c3: b2:5c:94:d8:e3:15:46:57:b6:9f:d5:8b:19:a8:3b:ef:4f:1e: c5:2e:f5:1c:51:3d:e9:b2:69:59:3f:28:cd:37:37:31:52:3d: d5:46:0b:a4:c2:b7:64:36:78:d1:fd:6a:c8:42:c7:16:0e:05: 43:77:f2:64:fb:cb:aa:a0:a0:c8:52:c6:92:64:9b:46:1a:ce: 88:48:91:9b:17:c7:51:3c:88:ad:2a:e8:a4:66:7c:d7:cf:2a: bf:e6:db:50:c2:da:82:67:6f:b5:10:30:0f:5c:91:2e:35:8d: fd:da:08:29:4e:67:a2:64:98:64:18:f4:e3:0f:2e:6b:18:b4: df:3c:5f:cb:44:e4:05:12:6f:46:39:cb:17:57:66:cb:bf:af: d3:b5:97:43:bd:aa:ea:c5:20:df:3f:10:46:c7:86:da:4a:88: bd:6e:f3:58:e5:a7:8f:e7:a6:6c:4a:69:e1:7e:9f:cb:0b:50: f6:93:20:a2:aa:0c:43:11:5c:f5:ac:b8:bd:5b:a8:87:c9:83: e0:c9:21:db:5f:17:b4:2d:70:1a:4f:9d:95:8b:05:99:4d:af: e0:ad:08:06:b9:cf:55:5d:05:33:d1:66:e7:ca:99:3a:ab:34: a6:71:22:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZIHQGgYrZaHtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVjYzQ0NWMtMDY0ZC00MWVlLTkxZjEtM2VmNzA4MjQx OTgzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MGIwMGEwMjYtMTJhNy00ZTdhLTk5M2ItZTgyODI5ODU5OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvskeXRB8o5TyYmiKzaSDvC/BfSYgvoirwxAB lVqtbBLoRDtxhRvsxFkObUGLSO34KERzQJ8yW4HvANJMHHZ8pEnMvidAKA9a/6bU t8YfVZLNi/tkMbdHd85jSSNMWxOt+JEJV8ebIcyjk5Ax0b1adifAyqgjZUmpXA9a 07NQCfZG0hrOyvMdxWubh2EPKz3md9Zj65AAusoeq24qdoqfJMgj0ggyacU+idQL L08TtdDOfQ6XT47zSdnoSzMrx3g5/jTM8WwU6D6FZCZmgV43W86JZ78dnnTd54mn teU32eARWKuY+upKA9kHMxyNm8OuS9Qsi0eTxJtO7xISXgnolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD9fX55RsGEHcoaAhCUdlTiHPyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNj NDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3MDgyNDE5ODMvM2VmZDU5MDQtOWI4OS0z YWQ1LTgzYWItYTVhNmMwZGFjMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWVjYzQ0NWMtMDY0ZC00MWVlLTkx ZjEtM2VmNzA4MjQxOTgzL2VlY2M0NDVjLTA2NGQtNDFlZS05MWYxLTNlZjcwODI0 MTk4My5jcmwwHwYDVR0jBBgwFoAUzUCROQ67xHz8aYwLu+ubI2atMYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNjNDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3 MDgyNDE5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFWpxh3nUiCtYWm2dYpHfxYw7JclNjjFUZXtp/VixmoO+9PHsUu9RxR PemyaVk/KM03NzFSPdVGC6TCt2Q2eNH9ashCxxYOBUN38mT7y6qgoMhSxpJkm0Ya zohIkZsXx1E8iK0q6KRmfNfPKr/m21DC2oJnb7UQMA9ckS41jf3aCClOZ6JkmGQY 9OMPLmsYtN88X8tE5AUSb0Y5yxdXZsu/r9O1l0O9qurFIN8/EEbHhtpKiL1u81jl p4/npmxKaeF+n8sLUPaTIKKqDEMRXPWsuL1bqIfJg+DJIdtfF7QtcBpPnZWLBZlN r+CtCAa5z1VdBTPRZufKmTqrNKZxIsM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:09:51 2025 by rpki-client