$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa File: ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa (raw, json) Hash identifier: vwA9Zbv9k4/fOoR1Me6z9T/SIPmA3KRu522w4LOV9SY= Subject key identifier: DB:52:34:73:37:B3:C3:E9:11:6C:2C:63:E1:C3:9D:25:26:F3:96:8D Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584BA39D2637E0FC0D72CEDC49C0 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 2734 IP address blocks: 66.35.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:26:37:e0:fc:0d:72:ce:dc:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b8b7aae8-d6dc-4443-8a7c-ce5387c16b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:50:c9:a7:9f:d3:2b:84:4c:9f:f0:ec:b9: 99:5a:dc:08:08:10:2b:b4:e4:a9:0e:94:ce:5d:fe: 38:f9:9a:19:3f:0a:3a:c1:0c:1b:40:ab:dd:6c:5b: 13:a4:48:ff:a8:c8:61:6b:b5:4c:4e:f3:57:7b:98: ce:30:c8:a1:7f:23:93:a5:af:0d:b5:c5:cd:39:d7: b5:49:71:64:a2:b0:be:e3:1d:e1:a3:51:44:43:1e: 4b:5b:75:de:ec:c7:73:6a:03:36:56:ba:00:61:a9: b7:48:c5:fc:fd:22:90:74:f7:bd:d5:25:1b:5a:70: 6d:7f:47:76:03:67:04:c6:ef:56:15:d9:ef:c8:2b: 6c:8c:3f:6d:b7:09:4f:48:e4:55:d7:81:e8:2e:c0: d3:48:a1:67:5d:9a:af:34:3d:a1:81:8c:50:fb:87: 4e:96:fe:67:da:ec:d1:72:77:70:0b:d6:76:95:04: df:ad:95:dd:5f:de:fa:e1:84:6b:75:14:a4:32:07: 45:cf:4e:5b:de:2b:77:84:5d:d8:d8:b4:8a:08:95: b4:0f:70:3c:39:f1:da:89:b9:45:54:fa:69:2f:6c: 7d:08:ec:ed:bd:d1:42:76:5f:b4:71:79:5b:b3:d4: 39:f9:52:54:4c:f3:c7:e0:43:dd:d5:6a:d3:9f:d9: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:34:73:37:B3:C3:E9:11:6C:2C:63:E1:C3:9D:25:26:F3:96:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 66.35.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:0a:11:e9:f3:fb:79:06:88:b4:14:d1:c0:1a:48:53:91:04: 2c:d5:4c:33:29:2a:69:2e:f4:e6:4b:f3:06:3b:f2:c4:c4:98: a5:07:04:72:2c:da:19:cf:6b:94:e9:41:43:d4:34:79:d2:32: 3b:84:68:a7:70:f2:f2:d0:d9:5b:00:52:3c:d9:dc:df:ac:53: 32:34:85:2b:fb:a7:0f:28:d5:1b:78:a4:5a:ef:09:6d:a7:b3: 82:3a:27:b5:f0:ad:b0:77:b5:df:f2:c1:2d:47:b1:32:55:19: bd:73:63:49:48:44:ab:8c:24:8a:c1:69:b8:9d:f1:e3:60:d5: 56:8f:91:7d:c3:01:6c:6a:a6:cb:b0:27:70:44:f8:4f:ef:45: b5:09:ef:88:52:72:d8:68:51:71:0d:7c:da:b5:3c:77:25:2a: ed:60:fd:f3:1a:b4:d1:d9:29:aa:48:1f:39:1f:ac:a3:0f:d2: b9:f9:f5:71:0c:15:06:51:9d:3f:74:54:9e:bd:7d:9e:bd:1b: 2d:94:11:95:08:0e:4c:a1:b9:6a:37:b5:b4:87:ae:6c:53:6f: 9e:98:66:48:dc:5d:84:74:05:69:d0:5d:f0:14:a2:95:1c:73: 2b:3e:6e:c6:cc:f3:9d:a9:45:58:dc:aa:c0:ed:da:76:a5:08: 26:93:e0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSY34PwNcs7cScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjhiN2FhZTgtZDZkYy00NDQzLThhN2MtY2U1Mzg3YzE2YjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDZQyaef0yuETJ/w7LmZWtwICBArtOSpDpTO Xf44+ZoZPwo6wQwbQKvdbFsTpEj/qMhha7VMTvNXe5jOMMihfyOTpa8NtcXNOde1 SXFkorC+4x3ho1FEQx5LW3Xe7MdzagM2VroAYam3SMX8/SKQdPe91SUbWnBtf0d2 A2cExu9WFdnvyCtsjD9ttwlPSORV14HoLsDTSKFnXZqvND2hgYxQ+4dOlv5n2uzR cndwC9Z2lQTfrZXdX9764YRrdRSkMgdFz05b3it3hF3Y2LSKCJW0D3A8OfHaiblF VPppL2x9COztvdFCdl+0cXlbs9Q5+VJUTPPH4EPd1WrTn9k7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtSNHM3s8PpEWwsY+HDnSUm85aNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYWIxZGMxYmQtODIzYS0z YmQ3LThjNTctOTUwMjhiMWEyMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMKEenz+3kGiLQU0cAaSFORBCzVTDMpKmku9OZL8wY78sTEmKUHBHIs 2hnPa5TpQUPUNHnSMjuEaKdw8vLQ2VsAUjzZ3N+sUzI0hSv7pw8o1Rt4pFrvCW2n s4I6J7XwrbB3td/ywS1HsTJVGb1zY0lIRKuMJIrBabid8eNg1VaPkX3DAWxqpsuw J3BE+E/vRbUJ74hScthoUXENfNq1PHclKu1g/fMatNHZKapIHzkfrKMP0rn59XEM FQZRnT90VJ69fZ69Gy2UEZUIDkyhuWo3tbSHrmxTb56YZkjcXYR0BWnQXfAUopUc cys+bsbM852pRVjcqsDt2nalCCaT4H0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:51:11 2025 by rpki-client