$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa File: 2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa (raw, json) Hash identifier: BxgWWL3s/0JE7SSscpzzzgtp95hTnK+TpCBRIe3Y4Eo= Subject key identifier: 8A:3C:5F:FB:F7:21:AA:BA:49:39:4F:7B:7E:53:15:78:60:E6:73:0E Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B9E079E2215D26A212AEFD240 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 66.22.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9e:22:15:d2:6a:21:2a:ef:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fef43eca-c7fe-44ad-a882-a00088641fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:41:14:7d:fa:8d:6e:4f:2b:d2:60:74:5e: 3b:09:72:3a:b6:d6:10:ad:77:98:b0:e2:86:95:4e: 35:25:ed:96:70:95:e1:9f:49:9c:4d:d0:5b:d2:e4: cd:9e:da:30:a8:2f:9a:e3:cb:9b:04:ed:cf:c4:d9: 0b:75:2f:15:dc:94:17:0e:13:f0:32:c5:22:53:bc: b0:ae:12:c6:f7:40:31:08:a1:39:72:6d:29:44:92: 8c:e6:f6:28:bf:cc:27:aa:96:b5:f6:fc:9a:34:8a: 82:f0:0f:f9:0c:fe:1a:75:3f:10:11:4e:71:d4:f4: 02:3b:6a:05:f9:75:17:4b:8f:27:cb:98:cb:fb:c9: 6f:e7:37:20:f1:b0:74:bf:07:a6:ec:85:e9:06:b2: cf:8a:ec:b2:05:2c:64:20:1d:83:4e:42:bb:0a:91: c8:15:13:b9:c1:18:96:42:20:39:a6:29:c7:3c:be: bf:ad:26:e2:f1:86:32:6a:6d:4a:e8:02:6f:d3:43: df:4d:d0:a1:33:e7:c2:4c:a7:9b:d7:19:ed:1a:9b: b3:32:b4:ed:49:95:c2:02:06:18:ec:a4:96:a3:cf: 20:ee:6c:55:6b:9c:3f:c6:70:1a:4a:7f:2d:f4:46: 3e:d9:37:00:ac:3d:c7:4c:7b:e7:70:b1:bf:89:72: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3C:5F:FB:F7:21:AA:BA:49:39:4F:7B:7E:53:15:78:60:E6:73:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2cfb0ce9-af01-31ae-8ed6-e6a4f457b790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 66.22.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a7:4b:77:99:d3:46:0b:55:2c:9f:2f:8d:44:46:85:7e:64: 12:59:d3:ad:ee:48:cd:d8:ff:0b:1b:1c:6b:50:c7:7a:8a:0f: 88:69:1a:a3:45:02:1c:12:52:0f:2c:53:66:a9:2d:47:0f:9a: d5:ad:74:8a:02:b5:4f:05:81:68:be:66:a1:2f:15:e3:3b:de: 8a:79:c7:b8:d5:c1:c7:31:7c:ca:94:7f:cc:fc:aa:54:19:b4: 0a:33:dc:6a:33:93:4e:69:f6:55:2f:51:1c:68:a4:d5:00:ef: 4e:c1:86:c6:26:b8:0e:41:5a:4e:61:fb:ef:6f:8f:a5:1f:46: 38:f4:3d:3f:32:d8:49:53:f8:5d:24:17:9b:98:c7:29:1e:db: 22:4e:0f:83:b7:44:be:89:e0:0a:52:43:a1:66:14:fb:64:58: 25:74:3e:bf:ae:4b:57:e2:7e:68:aa:a9:b0:47:7e:e3:3f:0b: 52:51:40:e0:e2:50:c5:fd:9b:b5:d9:76:d9:ed:03:f2:a4:e6: 7b:cc:68:7e:86:d2:5e:8c:a6:83:9a:e9:c8:c2:65:f1:7e:8a: b8:76:68:02:d5:b5:af:44:ea:ff:bd:30:d2:c9:b2:65:6d:0b: ed:4c:0e:2f:d7:61:dd:6b:52:87:27:60:49:d9:5f:a0:c3:30: ac:d6:fd:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB54iFdJqISrv0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmVmNDNlY2EtYzdmZS00NGFkLWE4ODItYTAwMDg4NjQxZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPRBFH36jW5PK9JgdF47CXI6ttYQrXeYsOKG lU41Je2WcJXhn0mcTdBb0uTNntowqC+a48ubBO3PxNkLdS8V3JQXDhPwMsUiU7yw rhLG90AxCKE5cm0pRJKM5vYov8wnqpa19vyaNIqC8A/5DP4adT8QEU5x1PQCO2oF +XUXS48ny5jL+8lv5zcg8bB0vwem7IXpBrLPiuyyBSxkIB2DTkK7CpHIFRO5wRiW QiA5pinHPL6/rSbi8YYyam1K6AJv00PfTdChM+fCTKeb1xntGpuzMrTtSZXCAgYY 7KSWo88g7mxVa5w/xnAaSn8t9EY+2TcArD3HTHvncLG/iXI1RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo8X/v3Iaq6STlPe35TFXhg5nMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMmNmYjBjZTktYWYwMS0z MWFlLThlZDYtZTZhNGY0NTdiNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOnS3eZ00YLVSyfL41ERoV+ZBJZ063uSM3Y/wsbHGtQx3qKD4hpGqNF AhwSUg8sU2apLUcPmtWtdIoCtU8FgWi+ZqEvFeM73op5x7jVwccxfMqUf8z8qlQZ tAoz3Gozk05p9lUvURxopNUA707BhsYmuA5BWk5h++9vj6UfRjj0PT8y2ElT+F0k F5uYxyke2yJOD4O3RL6J4ApSQ6FmFPtkWCV0Pr+uS1fifmiqqbBHfuM/C1JRQODi UMX9m7XZdtntA/Kk5nvMaH6G0l6MpoOa6cjCZfF+irh2aALVta9E6v+9MNLJsmVt C+1MDi/XYd1rUocnYEnZX6DDMKzW/Rw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:38 2025 by rpki-client