$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa File: aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa (raw, json) Hash identifier: dBUcYzYE/YCOX3O9GLmg+V57o/l15xhqtmht54uxn2E= Subject key identifier: 04:7B:38:30:95:29:A4:9F:16:7D:60:F0:E3:4A:C1:7F:F6:0C:4C:46 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584BB2F7AB344DB085C991C26E40 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 20150 IP address blocks: 66.187.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ab:34:4d:b0:85:c9:91:c2:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=c3d5d192-d452-40ee-98ba-02b06f7a9686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:6f:2d:7b:51:e2:9d:59:e9:e1:2c:7c:6b: 36:bb:19:15:d0:e1:81:8e:f2:aa:03:c2:e2:b8:a9: a0:17:07:d0:e8:89:03:e6:13:95:5c:c4:93:21:16: 28:3b:a2:93:ba:2a:9e:5a:28:e2:35:e7:eb:a2:cb: e9:19:5a:8a:54:bc:e7:2a:6c:cb:a2:ea:1f:6c:e3: 79:f8:55:b3:94:95:d5:c0:c4:b4:cd:f2:75:53:84: 3d:44:84:eb:de:f5:59:b6:87:c7:f8:da:51:de:be: 33:fb:0b:14:88:7a:e4:cb:f7:d6:3c:28:b7:ff:d8: e8:e9:b3:f6:19:a0:f6:51:03:0b:dc:bc:17:8a:65: 9b:02:60:9a:af:06:f3:89:76:0d:10:f3:17:17:fd: 0b:d5:6b:08:82:c9:85:b9:d8:58:56:24:80:a9:1e: 5b:15:89:62:9f:37:c0:eb:41:c1:1d:72:34:ee:26: 5d:fd:36:03:54:e6:1f:ee:32:28:be:4d:bd:28:4b: 67:4c:15:ea:6b:3c:38:73:77:50:d4:94:30:ff:7f: ef:79:4e:10:a6:14:63:68:84:47:89:fc:d3:58:6e: f8:63:6e:84:07:f1:d9:e4:c2:02:e9:d2:4f:a5:7b: ea:9e:b5:21:11:f3:0b:bf:1e:f4:10:dc:ef:62:43: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:38:30:95:29:A4:9F:16:7D:60:F0:E3:4A:C1:7F:F6:0C:4C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:73:c8:1f:2d:1d:81:52:ee:da:0e:64:07:61:71:4e:6a:1d: d7:eb:dd:7e:6e:67:b4:7a:83:b8:d6:b2:18:b2:b6:cc:1d:fd: 13:d8:c0:72:d1:75:e2:a2:25:59:f5:7c:10:7c:fb:44:1d:e6: 39:f8:64:ee:82:89:d3:f2:7d:cb:a7:7d:31:00:69:18:00:39: 42:1b:5e:df:ec:ea:43:9a:59:3c:0d:23:f9:53:33:31:58:53: d9:b6:f4:89:9a:cf:b3:c2:16:d5:cb:76:89:b6:fa:41:c0:5a: 5e:74:91:c5:dd:72:e8:ee:95:f9:b6:23:c6:29:88:8e:46:00: 79:05:e9:36:95:0d:51:1a:d0:15:5c:b5:7f:e9:a8:c9:d7:0e: a1:14:1c:b7:7c:dc:87:60:27:16:42:92:fe:2b:91:21:3c:e5: a4:f6:f2:8e:09:c7:7a:c0:e5:5d:10:39:46:f2:73:3f:4d:04: 4d:a2:aa:ba:5c:0a:6d:76:5f:a9:f8:5d:a1:a7:f1:a5:ce:ec: 24:47:ee:ab:6a:6d:26:28:2d:5b:7b:0d:7c:4d:28:58:73:26: b0:8f:4c:36:16:72:72:15:4a:d9:ff:5a:ce:8e:9b:44:67:0c: a8:2d:ee:e1:e4:0e:20:f2:cc:b0:db:15:e0:55:19:b8:ce:08: e6:47:6e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96s0TbCFyZHCbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YzNkNWQxOTItZDQ1Mi00MGVlLTk4YmEtMDJiMDZmN2E5Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sJvLXtR4p1Z6eEsfGs2uxkV0OGBjvKqA8Li uKmgFwfQ6IkD5hOVXMSTIRYoO6KTuiqeWijiNefrosvpGVqKVLznKmzLouofbON5 +FWzlJXVwMS0zfJ1U4Q9RITr3vVZtofH+NpR3r4z+wsUiHrky/fWPCi3/9jo6bP2 GaD2UQML3LwXimWbAmCarwbziXYNEPMXF/0L1WsIgsmFudhYViSAqR5bFYlinzfA 60HBHXI07iZd/TYDVOYf7jIovk29KEtnTBXqazw4c3dQ1JQw/3/veU4QphRjaIRH ifzTWG74Y26EB/HZ5MIC6dJPpXvqnrUhEfMLvx70ENzvYkMuuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR7ODCVKaSfFn1g8ONKwX/2DExGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvYWEzYWFlNGItZWY4My0z ZDE0LWI5YWQtZWVjZmVhZGYxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9zyB8tHYFS7toOZAdhcU5qHdfr3X5uZ7R6g7jWshiytswd/RPYwHLR deKiJVn1fBB8+0Qd5jn4ZO6CidPyfcunfTEAaRgAOUIbXt/s6kOaWTwNI/lTMzFY U9m29Imaz7PCFtXLdom2+kHAWl50kcXdcujulfm2I8YpiI5GAHkF6TaVDVEa0BVc tX/pqMnXDqEUHLd83IdgJxZCkv4rkSE85aT28o4Jx3rA5V0QOUbycz9NBE2iqrpc Cm12X6n4XaGn8aXO7CRH7qtqbSYoLVt7DXxNKFhzJrCPTDYWcnIVStn/Ws6Om0Rn DKgt7uHkDiDyzLDbFeBVGbjOCOZHbro= -----END CERTIFICATE-----Generated at Wed Nov 5 14:24:46 2025 by rpki-client