$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa File: bdb594be-25b2-3939-93cb-470fe9e560e4.roa (raw, json) Hash identifier: uxW7hb9FFKhlfCL3e/spJoDrC0OX5WOco8hCFmGtVt4= Subject key identifier: AF:AC:8F:43:34:2C:83:28:EA:00:14:B9:73:57:3F:44:D3:53:CA:1D Certificate issuer: /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a Certificate serial: 010D0C9F4328584BAA97A4C28E144E7AAAD73100 Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 23483 IP address blocks: 66.244.0.0/20 maxlen: 20 66.244.16.0/20 maxlen: 20 66.244.32.0/20 maxlen: 20 66.244.48.0/20 maxlen: 20 2602:fd01::/38 maxlen: 38 2602:fd01:400::/38 maxlen: 38 2602:fd01:800::/38 maxlen: 38 2602:fd01:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:c2:8e:14:4e:7a:aa:d7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=91370e46-bf76-454d-a337-0d6fe451dd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:46:96:2e:4e:99:3f:71:26:9f:f7:44:b3: 6c:13:3e:b4:83:2d:e4:10:e1:73:ef:d2:e3:3d:ad: 45:09:3c:4e:6f:57:91:b5:8e:0b:70:e9:f5:f5:c4: 9f:20:e8:06:43:c0:fb:14:d1:e7:18:30:95:41:50: 5b:d5:14:14:52:85:6e:5b:c1:d7:fb:21:ae:89:11: 40:6a:a1:c0:26:f5:42:dc:61:f2:57:d8:af:e0:43: aa:c3:c2:ad:eb:f1:d4:7a:c7:6a:74:d5:54:cf:05: ab:51:45:35:22:99:ec:63:90:bc:c3:8a:b0:73:58: bf:7f:61:e1:bc:10:4d:37:5d:1c:90:50:b6:a8:f1: e8:97:2e:de:11:aa:6a:e5:15:58:13:a1:17:3d:fb: 47:9c:05:95:bd:40:4b:77:72:c6:8e:7f:8d:c0:4a: be:06:e4:7f:f0:fd:79:07:af:dd:fd:e2:84:47:45: 13:75:99:a1:b0:fc:48:a9:d7:5f:11:17:90:e5:a3: 14:11:b5:96:88:70:13:fe:33:5e:8e:28:72:99:34: 41:63:53:d3:97:dc:72:49:58:86:bd:01:ac:37:e8: a2:2a:04:a5:98:86:3c:94:4c:73:b7:b6:82:d0:85: 37:d0:0d:f6:7a:26:e2:af:6f:4f:a2:0c:b2:0e:5c: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:8F:43:34:2C:83:28:EA:00:14:B9:73:57:3F:44:D3:53:CA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl X509v3 Authority Key Identifier: keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer sbgp-ipAddrBlock: critical IPv4: 66.244.0.0/18 IPv6: 2602:fd01::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a4:8d:c7:2a:73:1a:d7:d8:b2:1a:47:0a:93:97:34:cc:6c: bd:0c:fa:76:ce:73:73:b6:a7:e0:f1:d7:73:be:2c:c5:83:e5: b2:9f:f3:05:3e:dd:5c:fe:1f:6c:69:58:dc:c8:a5:39:ec:b5: 28:0d:be:e1:63:8e:53:fc:31:ae:b2:79:85:41:a4:09:c5:37: 18:aa:1a:1b:6e:23:b3:46:9d:98:60:89:05:96:e6:00:0b:c7: 77:68:b4:bf:49:65:ff:f5:d9:13:26:8c:e9:59:24:70:6b:3a: 26:78:20:78:a8:b2:f4:7b:59:11:5f:08:67:57:e2:71:01:f4: 67:ee:60:ea:32:69:0e:4b:15:6d:e3:f1:9d:dd:60:08:80:df: 6c:b0:c4:cd:f9:19:a4:4e:02:7d:30:d5:d6:5f:5a:85:ba:7f: 4a:12:19:c0:ea:34:5e:0e:d3:ac:14:7f:28:8e:1e:a8:57:9b: b6:23:36:09:cb:42:76:04:96:37:18:28:2f:73:2c:c2:b1:b0: e9:a6:b5:a1:44:ba:db:44:66:43:05:a1:f7:d4:84:da:b0:f1: 98:73:46:3a:7b:25:0a:0c:01:b9:5b:3e:a4:36:64:0d:f2:6a: c3:6b:f0:97:6f:4f:9a:85:fb:f7:86:e9:00:09:ba:9e:e4:a4: 89:c6:d0:9f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuql6TCjhROeqrXMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNjMmJlODgtMjQwZi00MThhLWFlYTktM2M2YTA3NzZj ZTdhMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OTEzNzBlNDYtYmY3Ni00NTRkLWEzMzctMGQ2ZmU0NTFkZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj31Gli5OmT9xJp/3RLNsEz60gy3kEOFz79Lj Pa1FCTxOb1eRtY4LcOn19cSfIOgGQ8D7FNHnGDCVQVBb1RQUUoVuW8HX+yGuiRFA aqHAJvVC3GHyV9iv4EOqw8Kt6/HUesdqdNVUzwWrUUU1IpnsY5C8w4qwc1i/f2Hh vBBNN10ckFC2qPHoly7eEapq5RVYE6EXPftHnAWVvUBLd3LGjn+NwEq+BuR/8P15 B6/d/eKER0UTdZmhsPxIqddfEReQ5aMUEbWWiHAT/jNejihymTRBY1PTl9xySViG vQGsN+iiKgSlmIY8lExzt7aC0IU30A32eibir29PogyyDlwTTQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFK+sj0M0LIMo6gAUuXNXP0TTU8odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yY2My YmU4OC0yNDBmLTQxOGEtYWVhOS0zYzZhMDc3NmNlN2EvYmRiNTk0YmUtMjViMi0z OTM5LTkzY2ItNDcwZmU5ZTU2MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmNjMmJlODgtMjQwZi00MThhLWFl YTktM2M2YTA3NzZjZTdhLzJjYzJiZTg4LTI0MGYtNDE4YS1hZWE5LTNjNmEwNzc2 Y2U3YS5jcmwwHwYDVR0jBBgwFoAUnYa59kbeA/nTncD+EI1WiroUn9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yY2MyYmU4OC0yNDBmLTQxOGEtYWVhOS0zYzZh MDc3NmNlN2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQGQvQAMA4E AgACMAgDBgQmAv0BADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCapI3HKnMa19iyGkcKk5c0zGy9DPp2znNz tqfg8ddzvizFg+Wyn/MFPt1c/h9saVjcyKU57LUoDb7hY45T/DGusnmFQaQJxTcY qhobbiOzRp2YYIkFluYAC8d3aLS/SWX/9dkTJozpWSRwazomeCB4qLL0e1kRXwhn V+JxAfRn7mDqMmkOSxVt4/Gd3WAIgN9ssMTN+RmkTgJ9MNXWX1qFun9KEhnA6jRe DtOsFH8ojh6oV5u2IzYJy0J2BJY3GCgvcyzCsbDpprWhRLrbRGZDBaH31ITasPGY c0Y6eyUKDAG5Wz6kNmQN8mrDa/CXb0+ahfv3hukACbqe5KSJxtCf -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:09 2025 by rpki-client