$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa File: 45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa (raw, json) Hash identifier: Lzyi3Nw5t5ZIjWT9AX2UiGWXDVxZVFh38lq6JWWS9ko= Subject key identifier: 4C:3E:4D:68:40:0C:0F:38:D7:43:BE:0C:D8:56:04:70:86:FA:97:56 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B99D79FF3AA5F89315201DF60 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 6312 IP address blocks: 66.231.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9f:f3:aa:5f:89:31:52:01:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5c4f57b6-026d-43ac-acd3-3d8f6a518cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:75:cd:8a:7d:11:64:5a:60:a9:bf:f6:37: b9:35:fe:a5:92:e2:3f:97:00:4c:8e:d9:d1:6d:e2: 08:ff:08:82:f1:d2:bd:ad:b8:6e:26:c3:64:f2:87: c7:1e:73:bc:fa:b9:e0:fb:c1:c6:9e:cd:61:b8:c6: 91:0a:a4:ba:e9:b5:b8:8b:89:79:68:92:51:35:6e: e3:78:5e:ac:74:ab:d8:3c:af:85:00:59:aa:e7:17: cc:e4:ae:b0:0e:b6:0e:11:39:16:94:db:40:0f:b0: 4c:c2:46:f5:c5:1c:9c:a4:e0:4e:f3:ef:40:e3:f3: ad:e4:d4:dc:f9:72:c4:a2:9c:b5:af:02:10:44:5e: 1e:77:97:b0:b7:bc:05:c9:67:a9:2f:61:15:9b:2a: c4:83:7a:b1:b4:aa:f2:9e:5d:ce:ed:14:22:ad:36: 7c:62:28:ba:f3:d6:c2:d2:c9:34:d6:4a:e1:11:9e: dc:bd:8f:17:fe:be:46:07:2d:c1:1c:15:61:4c:7b: 48:c2:9e:16:ee:dc:cd:23:9d:ff:1b:5f:be:d8:23: 0c:5c:64:67:1a:b6:3f:46:37:0c:b0:cc:05:b1:c8: 94:2e:55:88:14:47:e9:c1:21:e5:f2:3f:ee:2f:80: fa:a3:04:f8:13:9e:fb:d7:de:97:8a:3d:11:c4:0b: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3E:4D:68:40:0C:0F:38:D7:43:BE:0C:D8:56:04:70:86:FA:97:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/45a36f7f-1a52-34cf-91b2-82f7226dd6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6b:4e:d1:5e:48:8f:1a:b9:04:da:3e:1c:72:a8:79:15:22: 4c:1d:5a:8d:e3:a8:ef:4c:a8:41:28:56:ff:e9:df:3f:34:d3: 6a:23:bd:8b:9f:08:0f:02:a2:26:a3:95:99:9a:c4:6a:a7:c1: 71:32:74:78:92:eb:8c:3e:0c:b5:16:ee:c2:ac:6d:f9:f9:11: f7:3c:71:2c:5b:a3:a2:e8:be:4b:c8:f9:e1:63:e9:ba:01:8b: de:04:0e:f3:42:b0:ce:97:0a:6c:32:28:e5:0a:2e:f9:40:86: 96:ed:de:f0:be:d8:fb:81:45:f9:0f:e9:73:f5:fc:09:a2:fb: 41:5d:0c:90:29:79:99:4a:5a:12:80:ac:9f:b6:a9:a8:e2:25: a3:b2:47:82:60:e7:35:09:7d:84:5c:52:0e:21:d4:63:3d:b8: 8d:ac:c8:dc:9a:46:41:7b:b6:47:9a:b1:ac:35:4e:7c:ec:47: 05:69:2a:2a:da:2f:5c:35:f3:bc:1f:46:5a:8b:26:db:2d:66: e4:f4:c0:0c:cb:ed:6a:4a:c2:70:50:b5:2b:48:49:33:ec:be: f7:bf:cc:49:b9:ac:29:3c:ef:61:a5:ff:54:5b:61:bb:7e:6a: a0:02:7f:32:0c:37:65:68:35:7e:e6:c3:de:d5:3e:87:ec:27: 08:c1:9a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15/zql+JMVIB32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWM0ZjU3YjYtMDI2ZC00M2FjLWFjZDMtM2Q4ZjZhNTE4Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7t1zYp9EWRaYKm/9je5Nf6lkuI/lwBMjtnR beII/wiC8dK9rbhuJsNk8ofHHnO8+rng+8HGns1huMaRCqS66bW4i4l5aJJRNW7j eF6sdKvYPK+FAFmq5xfM5K6wDrYOETkWlNtAD7BMwkb1xRycpOBO8+9A4/Ot5NTc +XLEopy1rwIQRF4ed5ewt7wFyWepL2EVmyrEg3qxtKrynl3O7RQirTZ8Yii689bC 0sk01krhEZ7cvY8X/r5GBy3BHBVhTHtIwp4W7tzNI53/G1++2CMMXGRnGrY/RjcM sMwFsciULlWIFEfpwSHl8j/uL4D6owT4E577196Xij0RxAsUiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw+TWhADA8410O+DNhWBHCG+pdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDVhMzZmN2YtMWE1Mi0z NGNmLTkxYjItODJmNzIyNmRkNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdrTtFeSI8auQTaPhxyqHkVIkwdWo3jqO9MqEEoVv/p3z8002ojvYuf CA8CoiajlZmaxGqnwXEydHiS64w+DLUW7sKsbfn5Efc8cSxbo6LovkvI+eFj6boB i94EDvNCsM6XCmwyKOUKLvlAhpbt3vC+2PuBRfkP6XP1/Ami+0FdDJApeZlKWhKA rJ+2qajiJaOyR4Jg5zUJfYRcUg4h1GM9uI2syNyaRkF7tkeasaw1TnzsRwVpKira L1w187wfRlqLJtstZuT0wAzL7WpKwnBQtStISTPsvve/zEm5rCk872Gl/1RbYbt+ aqACfzIMN2VoNX7mw97VPofsJwjBmsk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:59 2025 by rpki-client