$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa File: 69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa (raw, json) Hash identifier: QIim5BaYVWgM+2ZtnxTMHoT7phOhjgVLZz/cbfPa3BE= Subject key identifier: 2F:B4:8C:02:F3:A9:C4:EC:03:E1:74:92:1D:6A:94:29:53:53:AF:84 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B9E07C04551E3B7C9BA196E80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 13445 IP address blocks: 66.163.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c0:45:51:e3:b7:c9:ba:19:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fa31d1ca-edf7-4e55-8d2e-a274105c0c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:1c:a5:9c:07:b3:a0:0e:2c:94:b3:f4:77: 97:87:8e:98:1a:87:97:64:84:4a:f4:84:de:18:5a: de:7b:93:55:18:30:cc:e3:ef:48:6e:f2:c4:e4:b9: b1:30:ad:f0:f2:9f:0f:56:fe:d9:a5:7c:16:67:87: bf:2e:83:2f:96:cc:f3:8d:cd:e0:e5:7e:f5:38:74: 84:04:df:8d:00:40:a0:f2:df:7d:8d:75:19:eb:b1: 0c:cd:bd:9b:8b:86:39:21:13:a2:8f:97:34:56:44: 74:43:b1:25:03:8f:1c:b0:54:4a:fc:dd:67:4d:d6: f9:f4:9e:de:03:0d:4b:1b:fc:35:75:dc:35:b9:42: 83:e1:26:e8:b6:51:5f:9f:47:4d:fb:a4:cb:37:cf: 6d:bb:bd:62:cb:b9:ef:7d:5b:d9:76:3e:29:56:37: d5:64:ea:d1:c1:5e:45:20:92:79:ab:48:04:77:39: 88:e5:d6:d6:87:3a:5b:0b:43:e8:44:a0:5e:b9:5e: a2:5f:18:41:2a:79:2c:e8:a7:36:26:b1:bc:c0:d5: 00:00:6b:cc:3d:92:70:d1:f0:a1:52:3b:64:20:af: af:db:df:e1:d5:19:a8:7c:c2:56:fe:04:40:01:db: e1:e9:51:38:5d:56:cd:76:33:18:16:13:00:10:03: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B4:8C:02:F3:A9:C4:EC:03:E1:74:92:1D:6A:94:29:53:53:AF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.163.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7e:9b:10:91:42:bc:9a:d7:00:f7:24:ca:19:e4:f0:fa:1c: 2d:6d:b5:ed:c7:ec:36:6e:4c:d2:52:1b:6c:61:da:ae:15:c1: a8:b9:5f:27:60:1a:ab:ba:31:36:fc:e3:b2:e4:c3:98:2b:e8: 69:1e:a4:d4:56:82:f3:8e:20:6a:25:d8:49:b6:ce:44:7a:ef: 05:7f:ee:ad:0f:09:71:6a:ee:53:83:d6:19:9c:fb:bb:e2:78: 31:0b:9e:ff:12:d9:a8:81:d8:3c:5d:c7:fa:be:ac:bb:26:bf: c8:9b:e1:75:42:24:fa:3c:82:b1:ab:c2:d4:48:c9:11:51:bf: 90:30:29:27:a5:6c:dd:b0:29:df:67:db:77:bb:e2:7d:36:08: 8c:40:0d:89:76:4b:99:ca:46:d0:ea:21:7f:a9:fb:af:b8:ae: 5f:2d:47:d0:d3:22:d4:7f:fd:6e:75:9e:d8:be:a3:fc:f5:a9: 6a:ad:f9:aa:67:02:d7:59:46:9f:de:c4:96:eb:19:2a:14:1f: c3:56:d8:1e:ac:d2:8a:0b:44:9a:fc:7c:29:12:55:b1:58:3e: 9f:ed:a3:96:fb:45:b5:dc:7e:ff:52:7e:bc:83:9b:8c:8c:6e: 41:5b:77:16:57:b0:bb:17:9e:e2:e4:49:75:dd:bf:68:34:bb: ad:44:87:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8BFUeO3yboZboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmEzMWQxY2EtZWRmNy00ZTU1LThkMmUtYTI3NDEwNWMwYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOkcpZwHs6AOLJSz9HeXh46YGoeXZIRK9ITe GFree5NVGDDM4+9IbvLE5LmxMK3w8p8PVv7ZpXwWZ4e/LoMvlszzjc3g5X71OHSE BN+NAECg8t99jXUZ67EMzb2bi4Y5IROij5c0VkR0Q7ElA48csFRK/N1nTdb59J7e Aw1LG/w1ddw1uUKD4SbotlFfn0dN+6TLN89tu71iy7nvfVvZdj4pVjfVZOrRwV5F IJJ5q0gEdzmI5dbWhzpbC0PoRKBeuV6iXxhBKnks6Kc2JrG8wNUAAGvMPZJw0fCh UjtkIK+v29/h1RmofMJW/gRAAdvh6VE4XVbNdjMYFhMAEAO/xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+0jALzqcTsA+F0kh1qlClTU6+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNjllZWY2YWMtZDNhMC0z YzJkLWFkMWQtNjA2ODg5YzBkNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ+mxCRQrya1wD3JMoZ5PD6HC1tte3H7DZuTNJSG2xh2q4Vwai5Xydg Gqu6MTb847Lkw5gr6GkepNRWgvOOIGol2Em2zkR67wV/7q0PCXFq7lOD1hmc+7vi eDELnv8S2aiB2Dxdx/q+rLsmv8ib4XVCJPo8grGrwtRIyRFRv5AwKSelbN2wKd9n 23e74n02CIxADYl2S5nKRtDqIX+p+6+4rl8tR9DTItR//W51nti+o/z1qWqt+apn AtdZRp/exJbrGSoUH8NW2B6s0ooLRJr8fCkSVbFYPp/to5b7RbXcfv9SfryDm4yM bkFbdxZXsLsXnuLkSXXdv2g0u61Eh+g= -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:40 2025 by rpki-client