$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa File: 58025c98-ad3f-3b15-8090-1fa374b27453.roa (raw, json) Hash identifier: CywMSdyk+QMR2mTXyrqtp6eQ/DymUS6zqSSdGNvYIUk= Subject key identifier: 31:2B:32:03:50:2E:E4:14:D8:4F:40:E2:7B:BC:08:92:80:03:58:FA Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584B7C87606A7A3CA1CB13D3C410 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 400610 IP address blocks: 66.219.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:60:6a:7a:3c:a1:cb:13:d3:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=b27de5e6-6e49-461b-924c-89a34a4398e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:9d:81:01:ad:87:88:3c:b1:36:4b:a9:0f: 88:86:e6:16:60:88:db:72:5f:a4:1b:de:81:22:77: 5a:66:5f:4b:87:2a:e5:36:2a:80:be:3a:3b:77:52: f1:c5:c7:96:21:81:72:c7:25:3d:62:f1:b9:c4:f1: 3b:fa:c6:cb:4f:a7:32:20:35:2e:49:9c:40:dd:fc: ea:36:b1:dc:9f:3b:c4:58:50:d4:69:d0:70:04:83: e9:10:07:f0:c0:9d:90:68:58:7f:5b:25:da:01:eb: 65:11:98:66:61:1a:25:14:35:2b:11:c7:11:61:8d: 3a:8c:5e:6c:4e:12:44:15:5a:38:4e:f7:19:c4:1c: 8c:0b:eb:6b:7e:0f:2d:c6:82:14:b2:8b:19:1c:b6: be:a1:96:79:31:df:20:6c:8a:6a:63:95:a1:e5:01: 0b:0f:b8:56:6d:cb:7e:33:4a:62:1a:41:b9:26:d7: 6d:05:cf:cf:9a:05:77:32:f5:4f:ee:e4:31:fc:2d: af:32:48:df:48:ef:da:f6:53:b7:83:c6:77:63:89: 55:2e:e4:88:e3:5f:de:0c:4e:a7:81:3a:86:f2:87: e9:4e:d2:9d:c4:e1:6a:e8:40:b3:0f:f9:4f:e4:95: 6b:e8:cf:b6:c8:35:d2:72:2a:c8:c4:1c:95:62:a1: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2B:32:03:50:2E:E4:14:D8:4F:40:E2:7B:BC:08:92:80:03:58:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:25:7b:88:26:45:0c:16:94:0c:6c:a3:bd:1f:eb:be:1a:87: 7d:ad:a6:f5:0a:bc:f6:2c:51:5f:d8:4d:67:b1:e8:72:78:14: 60:ad:53:d4:1f:14:b8:ab:61:15:f3:ab:44:77:27:c1:34:94: 11:66:92:8b:c3:dd:04:a1:31:08:5f:86:38:09:9a:46:af:c0: 59:66:6f:b9:2f:9c:ef:35:14:b1:59:bd:14:43:67:be:c4:7b: 0f:b4:7f:0c:08:e0:f4:c4:0b:07:15:de:2d:f0:2e:f2:e1:ec: 97:e6:a9:1a:82:43:55:b9:c5:52:28:1b:10:23:c5:e4:55:36: 5c:77:8c:29:9c:ed:b8:24:ff:80:94:7d:4b:95:3e:d5:d3:88: 9d:13:1e:71:0f:3c:d6:ee:09:4f:4d:28:fe:fa:f4:9f:d8:cb: fe:c0:ce:35:4a:09:bc:a3:88:b4:90:8a:27:86:00:19:15:7e: ea:f0:38:a0:6b:54:60:10:b8:a5:a2:e3:9f:22:fb:45:b7:dc: f1:2d:f7:5a:68:11:68:b8:d8:36:ca:9e:c4:cb:4d:e1:0c:56: a7:85:5a:13:a2:24:02:cb:f6:f2:be:8d:12:f9:9a:92:00:24: 0f:6d:e3:54:7b:29:a5:df:4a:59:99:a7:3c:ad:80:7d:50:75: 6e:c5:1f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2BqejyhyxPTxBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YjI3ZGU1ZTYtNmU0OS00NjFiLTkyNGMtODlhMzRhNDM5OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjmdgQGth4g8sTZLqQ+IhuYWYIjbcl+kG96B IndaZl9LhyrlNiqAvjo7d1LxxceWIYFyxyU9YvG5xPE7+sbLT6cyIDUuSZxA3fzq NrHcnzvEWFDUadBwBIPpEAfwwJ2QaFh/WyXaAetlEZhmYRolFDUrEccRYY06jF5s ThJEFVo4TvcZxByMC+trfg8txoIUsosZHLa+oZZ5Md8gbIpqY5Wh5QELD7hWbct+ M0piGkG5JtdtBc/PmgV3MvVP7uQx/C2vMkjfSO/a9lO3g8Z3Y4lVLuSI41/eDE6n gTqG8ofpTtKdxOFq6ECzD/lP5JVr6M+2yDXScirIxByVYqFdcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDErMgNQLuQU2E9A4nu8CJKAA1j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvNTgwMjVjOTgtYWQzZi0z YjE1LTgwOTAtMWZhMzc0YjI3NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgle4gmRQwWlAxso70f674ah32tpvUKvPYsUV/YTWex6HJ4FGCtU9Qf FLirYRXzq0R3J8E0lBFmkovD3QShMQhfhjgJmkavwFlmb7kvnO81FLFZvRRDZ77E ew+0fwwI4PTECwcV3i3wLvLh7JfmqRqCQ1W5xVIoGxAjxeRVNlx3jCmc7bgk/4CU fUuVPtXTiJ0THnEPPNbuCU9NKP769J/Yy/7AzjVKCbyjiLSQiieGABkVfurwOKBr VGAQuKWi458i+0W33PEt91poEWi42DbKnsTLTeEMVqeFWhOiJALL9vK+jRL5mpIA JA9t41R7KaXfSlmZpzytgH1QdW7FHx8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:27 2025 by rpki-client