$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa File: d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa (raw, json) Hash identifier: ezUOGgXDfRh40+zA8Xw5s4/OVPS9CCExrqkBAK52ml4= Subject key identifier: FE:56:3E:D9:E5:95:83:93:C6:D5:E5:3E:67:D3:52:7C:0F:F1:6A:F3 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B9E07B4DEA416CB33EB6CB100 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 198949 IP address blocks: 66.163.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b4:de:a4:16:cb:33:eb:6c:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e233f437-be03-4275-b217-076aeb7a665c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:5e:09:73:6e:e1:e7:5c:07:c6:b5:70:54: e3:e0:0e:c3:80:fb:bd:d0:de:ed:f5:16:10:f3:e3: 1e:22:07:f7:9a:01:d5:dc:8d:d7:af:fa:cf:9d:fe: 8f:98:84:69:84:dc:ea:4d:71:05:64:ac:0f:31:e8: fe:fe:4f:52:d5:cc:4a:db:31:20:b3:4e:73:dc:94: 68:9d:f1:eb:14:c7:3c:82:42:c1:04:65:ed:f0:bd: 60:0c:1a:7b:ff:86:c2:6e:78:51:9d:11:70:fa:11: fd:49:0a:d4:57:c7:2d:02:0a:a6:64:01:6f:85:07: 2c:d1:f6:d3:4a:63:21:04:ac:93:d0:90:c5:0f:4a: 49:2e:95:bc:33:cd:75:a7:c1:25:31:ed:5b:d6:07: de:ef:25:40:6b:11:44:b5:2e:3c:cd:e8:99:4e:73: d6:47:b6:25:1f:46:3e:05:b1:75:eb:e2:b6:3f:d7: 2e:a0:c4:f1:51:83:69:e1:a9:a1:58:45:84:04:a9: c3:a5:bb:27:c7:61:9c:ff:3a:48:29:76:17:6e:89: f8:e0:05:7e:21:da:c4:65:68:7e:7f:bd:e6:c1:20: 23:22:81:a7:42:5f:5a:5d:e2:48:8b:65:1d:88:85: 8c:9a:1c:4e:49:54:63:b0:47:fc:2b:ab:63:32:d9: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:56:3E:D9:E5:95:83:93:C6:D5:E5:3E:67:D3:52:7C:0F:F1:6A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.163.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:11:42:16:47:2f:3c:9f:3e:a8:3b:8c:e2:64:6f:86:b1:cf: 50:35:53:23:d3:33:59:65:b7:13:ff:46:a4:3f:d8:15:68:98: ac:82:e7:9d:62:c7:e8:f6:4a:59:6e:94:2d:4c:c1:db:90:e0: b8:29:79:3f:65:84:fc:1b:c2:98:7e:60:92:63:07:75:09:72: 61:42:93:5a:a1:a2:bb:01:42:83:b5:1e:a1:0b:44:f6:46:11: 7c:ec:58:9b:b8:ac:18:17:53:19:48:3b:6e:68:72:f2:8a:93: 06:51:a1:d1:76:bb:4c:52:84:12:f3:c8:c8:1a:74:ae:df:8c: d0:4d:e4:ff:42:1f:a7:a3:80:18:80:46:d4:53:88:e3:23:aa: 9b:88:58:9c:94:b9:ea:51:0e:aa:c4:f8:a9:46:1b:cf:39:ce: ae:ad:2b:72:75:3a:e9:1a:16:d6:2d:9d:e8:c5:34:15:4b:4e: c1:ab:70:24:5f:0a:8d:05:1c:e2:0d:c7:2b:7d:ee:d0:1b:ca: 72:87:f3:d9:ac:af:93:ca:4e:bb:e6:b3:14:cf:8d:0f:11:9e: 3f:17:e3:69:ab:fc:42:a8:1c:0e:71:43:04:dc:0e:56:5c:44: 92:d0:00:13:fe:9a:40:48:7f:55:b8:08:3e:1e:ee:23:c7:aa: 2d:36:f7:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7TepBbLM+tssQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTIzM2Y0MzctYmUwMy00Mjc1LWIyMTctMDc2YWViN2E2NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgdeCXNu4edcB8a1cFTj4A7DgPu90N7t9RYQ 8+MeIgf3mgHV3I3Xr/rPnf6PmIRphNzqTXEFZKwPMej+/k9S1cxK2zEgs05z3JRo nfHrFMc8gkLBBGXt8L1gDBp7/4bCbnhRnRFw+hH9SQrUV8ctAgqmZAFvhQcs0fbT SmMhBKyT0JDFD0pJLpW8M811p8ElMe1b1gfe7yVAaxFEtS48zeiZTnPWR7YlH0Y+ BbF16+K2P9cuoMTxUYNp4amhWEWEBKnDpbsnx2Gc/zpIKXYXbon44AV+IdrEZWh+ f73mwSAjIoGnQl9aXeJIi2UdiIWMmhxOSVRjsEf8K6tjMtmqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5WPtnllYOTxtXlPmfTUnwP8WrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZDhhODQyOGMtNWQwZS0z NTBiLTkyN2UtZmM3OGU2ZDI4MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8RQhZHLzyfPqg7jOJkb4axz1A1UyPTM1lltxP/RqQ/2BVomKyC551i x+j2SllulC1MwduQ4LgpeT9lhPwbwph+YJJjB3UJcmFCk1qhorsBQoO1HqELRPZG EXzsWJu4rBgXUxlIO25ocvKKkwZRodF2u0xShBLzyMgadK7fjNBN5P9CH6ejgBiA RtRTiOMjqpuIWJyUuepRDqrE+KlGG885zq6tK3J1OukaFtYtnejFNBVLTsGrcCRf Co0FHOINxyt97tAbynKH89msr5PKTrvmsxTPjQ8Rnj8X42mr/EKoHA5xQwTcDlZc RJLQABP+mkBIf1W4CD4e7iPHqi029+U= -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:11 2025 by rpki-client