$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa File: cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa (raw, json) Hash identifier: HEGAF6kXY88/8vdVQOmX8xWTQa02qilnjQ4qv2Dta1c= Subject key identifier: B4:07:EF:52:60:58:3E:29:63:F9:FE:A3:92:C9:A4:45:20:B4:D1:8B Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584B9627B2462181B25E67696640 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa Signing time: Mon 20 Oct 2025 17:18:56 +0000 ROA not before: Mon 20 Oct 2025 17:18:56 +0000 ROA not after: Sun 18 Jan 2026 18:18:56 +0000 asID: 16509 IP address blocks: 66.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:27:b2:46:21:81:b2:5e:67:69:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Oct 20 17:18:56 2025 GMT Not After : Jan 18 18:18:56 2026 GMT Subject: CN=1b627fb9-49d5-461c-9ab8-bc336a893511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:2d:81:01:ab:4f:4d:1f:a2:c0:6a:f5:c8: f5:4f:3e:2e:4f:21:6f:7d:2f:d6:4b:96:e0:16:c9: 4e:d9:f3:20:fc:98:ee:98:ff:37:f7:a0:c8:14:a3: 22:2a:f6:ba:ad:d6:33:4a:22:37:64:84:03:c0:f0: 63:1a:7e:9e:6c:9a:51:80:b4:17:a4:c7:56:69:3b: c1:2b:4f:c6:3b:62:35:af:3f:38:57:6e:33:c6:2c: 7c:47:0d:30:1f:8b:a1:c7:21:3e:31:37:71:b0:34: 89:18:5b:ec:70:46:a3:ba:13:c4:ca:6d:15:b8:51: 27:7f:ad:31:5d:1c:6a:e2:47:a5:e0:49:db:3b:0e: db:3a:64:b2:e9:35:b9:ef:bf:0c:8d:66:a1:cb:ef: 12:a2:e8:a1:2b:96:ff:d9:59:ce:47:0f:f5:bd:80: 09:92:03:a6:d3:5d:2d:af:61:6b:06:27:6b:e2:2f: 03:ac:53:2f:31:16:dd:e4:67:2c:93:e4:b0:09:08: 12:f0:c4:2c:13:bc:09:79:dc:bc:3b:1a:55:2c:89: 52:ca:02:02:f8:b1:99:20:7e:7b:f4:b1:94:39:3c: cf:4c:80:89:f3:f5:43:bc:39:65:49:70:b6:53:cc: 76:bd:aa:b5:06:96:2e:40:4a:e7:07:54:ee:db:b3: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:EF:52:60:58:3E:29:63:F9:FE:A3:92:C9:A4:45:20:B4:D1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 66.114.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:97:82:ab:39:f2:1f:9b:f5:01:84:92:44:d5:26:95:90:42: 41:a9:74:36:67:50:3c:0d:de:38:f8:e6:72:df:40:8a:31:57: fa:fe:5e:b5:8a:37:e9:af:b1:9a:1c:bc:51:0b:08:e9:65:20: 6d:b1:e4:32:8c:a4:98:7f:6e:c5:74:51:2c:f5:76:82:97:e3: 76:17:14:dd:28:69:cf:b5:2d:d5:4f:4a:43:47:d0:6b:6c:ad: e8:46:66:5d:66:92:87:ac:6b:f5:6a:38:dc:fd:a2:62:4e:66: e9:7d:a4:f6:e2:21:49:0d:bb:7d:ba:7c:1f:7e:53:1a:b8:4d: 57:dc:fa:9c:24:db:05:a6:3c:7b:1f:66:90:06:2d:b2:d4:96: b2:c1:b6:41:ab:a3:07:8d:67:1e:7d:8b:63:4d:ae:ce:90:f4: 18:5c:b2:90:18:32:dd:16:55:47:17:75:b2:c7:a5:38:c5:ce: 29:12:b1:05:13:44:d6:41:00:e0:4c:27:85:8f:d4:e5:32:a5: 01:ca:0d:aa:ba:62:88:8d:6f:b3:1a:ef:55:57:e4:09:53:f0: 34:b8:14:b8:74:84:a2:44:6e:0e:e2:21:f3:d5:f3:27:88:b7: 01:aa:48:c3:b6:7e:02:fb:b2:73:b3:4f:00:b7:be:68:7e:9a: b8:39:2b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWJ7JGIYGyXmdpZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MTAyMDE3MTg1NloXDTI2MDExODE4MTg1NlowLzEtMCsGA1UEAxMk MWI2MjdmYjktNDlkNS00NjFjLTlhYjgtYmMzMzZhODkzNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0otgQGrT00fosBq9cj1Tz4uTyFvfS/WS5bg FslO2fMg/JjumP8396DIFKMiKva6rdYzSiI3ZIQDwPBjGn6ebJpRgLQXpMdWaTvB K0/GO2I1rz84V24zxix8Rw0wH4uhxyE+MTdxsDSJGFvscEajuhPEym0VuFEnf60x XRxq4kel4EnbOw7bOmSy6TW5778MjWahy+8SouihK5b/2VnORw/1vYAJkgOm010t r2FrBidr4i8DrFMvMRbd5Gcsk+SwCQgS8MQsE7wJedy8OxpVLIlSygIC+LGZIH57 9LGUOTzPTICJ8/VDvDllSXC2U8x2vaq1BpYuQErnB1Tu27Og3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQH71JgWD4pY/n+o5LJpEUgtNGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvY2JhNmMwNGQtYWQ1Zi0z MjkwLWFjYTItMmUzZDM3ZmRkMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGXgqs58h+b9QGEkkTVJpWQQkGpdDZnUDwN3jj45nLfQIoxV/r+XrWK N+mvsZocvFELCOllIG2x5DKMpJh/bsV0USz1doKX43YXFN0oac+1LdVPSkNH0Gts rehGZl1mkoesa/VqONz9omJOZul9pPbiIUkNu326fB9+Uxq4TVfc+pwk2wWmPHsf ZpAGLbLUlrLBtkGroweNZx59i2NNrs6Q9BhcspAYMt0WVUcXdbLHpTjFzikSsQUT RNZBAOBMJ4WP1OUypQHKDaq6YoiNb7Ma71VX5AlT8DS4FLh0hKJEbg7iIfPV8yeI twGqSMO2fgL7snOzTwC3vmh+mrg5K3o= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:34 2025 by rpki-client