$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/209c2dd9-033f-3995-848b-7b3bf7b2e8de.roa File: 209c2dd9-033f-3995-848b-7b3bf7b2e8de.roa (raw, json) Hash identifier: o2rwn4s0ZYcWFVt/QAnF8GfPGypI5E9AnDN2puUviJw= Subject key identifier: 58:0B:F3:CD:C1:B9:25:A8:B7:23:16:B6:FF:85:06:9E:00:A5:13:A8 Certificate issuer: /CN=d55c153d-2f1d-4d5f-842d-75b64073df8b Certificate serial: 010D0C9F4328584BC29D380E4C9D6C1AA401A240 Authority key identifier: A3:77:07:DA:D9:E3:11:E1:5A:26:E0:E9:4A:C8:12:35:37:7F:6A:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/209c2dd9-033f-3995-848b-7b3bf7b2e8de.roa Signing time: Wed 05 Nov 2025 15:31:18 +0000 ROA not before: Wed 05 Nov 2025 15:31:18 +0000 ROA not after: Tue 03 Feb 2026 15:31:18 +0000 asID: 208185 IP address blocks: 66.187.248.0/24 maxlen: 24 66.187.249.0/24 maxlen: 24 66.187.250.0/24 maxlen: 24 66.187.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/d55c153d-2f1d-4d5f-842d-75b64073df8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/d55c153d-2f1d-4d5f-842d-75b64073df8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:9d:38:0e:4c:9d:6c:1a:a4:01:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55c153d-2f1d-4d5f-842d-75b64073df8b Validity Not Before: Nov 5 15:31:18 2025 GMT Not After : Feb 3 15:31:18 2026 GMT Subject: CN=2a07c289-7008-4897-895e-d638f41e259b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:79:12:56:a1:66:a6:61:ef:7a:72:ac:47: d2:da:c5:ac:cc:79:9e:61:09:68:e3:cd:34:b9:67: 47:2a:03:a0:3c:be:52:67:6e:4d:33:11:c9:5f:ec: 35:98:82:2d:2a:9e:d1:f0:66:70:db:fe:f7:7b:1f: e3:26:30:b3:42:26:4d:ea:44:7e:a1:52:b2:2a:c1: 8d:0b:a9:9b:73:8e:84:59:5f:a9:63:14:b0:9e:d0: a5:03:03:fd:2a:c2:87:e3:11:cb:26:e0:cb:23:7e: 54:64:e6:7b:6e:ab:99:9c:12:eb:1d:ad:0c:ca:03: 82:64:94:f4:a0:ab:43:ad:fc:c0:87:60:06:81:07: fc:ed:ba:5b:69:ae:d4:63:3f:1c:db:e6:d3:c6:a5: 60:01:c8:4b:8c:5f:04:96:8f:5d:4a:f3:13:85:96: a7:32:31:9b:e1:ec:6f:63:53:6b:dc:c3:70:c6:e2: 5b:8b:a1:29:e5:cf:23:29:b8:74:3e:4f:69:8a:12: 9d:a2:21:67:d7:d8:e6:c0:6c:fc:f3:c8:85:28:b1: f2:07:cb:ba:2c:4e:e3:b3:91:be:e9:6c:99:70:0a: 05:1d:e2:ea:7b:44:79:b1:6c:4e:8d:cf:1e:ca:52: 69:63:26:c1:82:d9:14:88:68:c3:32:49:75:80:80: e2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:F3:CD:C1:B9:25:A8:B7:23:16:B6:FF:85:06:9E:00:A5:13:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/209c2dd9-033f-3995-848b-7b3bf7b2e8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/d55c153d-2f1d-4d5f-842d-75b64073df8b.crl X509v3 Authority Key Identifier: keyid:A3:77:07:DA:D9:E3:11:E1:5A:26:E0:E9:4A:C8:12:35:37:7F:6A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b.cer sbgp-ipAddrBlock: critical IPv4: 66.187.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:80:f1:dc:6c:8c:7c:e0:41:9a:ad:e0:14:de:84:33:db:77: b4:0e:06:83:ca:5b:a4:aa:8b:3f:07:76:27:13:8c:ad:9a:dc: d8:8f:fa:50:1b:16:fc:7e:55:d5:b5:f6:b1:4e:99:9e:f6:14: 4a:a9:14:a3:2f:0c:19:57:55:5b:27:2c:9d:ce:10:c4:67:fa: f6:c2:00:be:19:fe:ea:08:ef:9a:e0:30:9e:34:ee:0d:8b:12: 21:85:7c:9f:32:47:94:6c:ca:5b:de:8e:25:9b:9d:54:4f:68: 68:a7:b7:73:51:44:9d:cb:a9:c2:f3:e1:99:6e:b8:cb:ed:01: 6e:54:b8:87:73:2f:9f:a0:df:4a:bf:5e:6c:92:13:da:2f:f1: b6:3c:44:e3:26:c8:ad:04:0a:61:1a:3b:70:81:4d:b1:e8:47: 34:37:3c:b4:01:1e:db:f2:05:57:88:a8:df:a6:d4:81:9a:42: da:5c:5f:fa:36:81:83:d9:df:5b:53:cd:e3:d5:bb:e8:3a:53: 65:ea:b8:31:2c:78:7e:65:56:49:27:94:26:97:0d:7a:07:0c: 23:b5:30:4c:a3:8a:5f:64:7a:84:21:fc:9a:cd:b3:67:ab:f3: 95:4d:db:81:23:ff:7c:8a:71:f5:0c:10:31:ce:92:c6:f6:03: 75:5c:ce:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCnTgOTJ1sGqQBokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU1YzE1M2QtMmYxZC00ZDVmLTg0MmQtNzViNjQwNzNk ZjhiMB4XDTI1MTEwNTE1MzExOFoXDTI2MDIwMzE1MzExOFowLzEtMCsGA1UEAxMk MmEwN2MyODktNzAwOC00ODk3LTg5NWUtZDYzOGY0MWUyNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD15ElahZqZh73pyrEfS2sWszHmeYQlo4800 uWdHKgOgPL5SZ25NMxHJX+w1mIItKp7R8GZw2/73ex/jJjCzQiZN6kR+oVKyKsGN C6mbc46EWV+pYxSwntClAwP9KsKH4xHLJuDLI35UZOZ7bquZnBLrHa0MygOCZJT0 oKtDrfzAh2AGgQf87bpbaa7UYz8c2+bTxqVgAchLjF8Elo9dSvMThZanMjGb4exv Y1Nr3MNwxuJbi6Ep5c8jKbh0Pk9pihKdoiFn19jmwGz888iFKLHyB8u6LE7js5G+ 6WyZcAoFHeLqe0R5sWxOjc8eylJpYybBgtkUiGjDMkl1gIDiZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgL883BuSWotyMWtv+FBp4ApROoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTVj MTUzZC0yZjFkLTRkNWYtODQyZC03NWI2NDA3M2RmOGIvMjA5YzJkZDktMDMzZi0z OTk1LTg0OGItN2IzYmY3YjJlOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDU1YzE1M2QtMmYxZC00ZDVmLTg0 MmQtNzViNjQwNzNkZjhiL2Q1NWMxNTNkLTJmMWQtNGQ1Zi04NDJkLTc1YjY0MDcz ZGY4Yi5jcmwwHwYDVR0jBBgwFoAUo3cH2tnjEeFaJuDpSsgSNTd/avMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTVjMTUzZC0yZjFkLTRkNWYtODQyZC03NWI2 NDA3M2RmOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyA8dxsjHzgQZqt4BTehDPbd7QOBoPKW6Sqiz8HdicTjK2a3NiP+lAb Fvx+VdW19rFOmZ72FEqpFKMvDBlXVVsnLJ3OEMRn+vbCAL4Z/uoI75rgMJ407g2L EiGFfJ8yR5RsylvejiWbnVRPaGint3NRRJ3LqcLz4ZluuMvtAW5UuIdzL5+g30q/ XmySE9ov8bY8ROMmyK0ECmEaO3CBTbHoRzQ3PLQBHtvyBVeIqN+m1IGaQtpcX/o2 gYPZ31tTzePVu+g6U2XquDEseH5lVkknlCaXDXoHDCO1MEyjil9keoQh/JrNs2er 85VN24Ej/3yKcfUMEDHOksb2A3Vczvw= -----END CERTIFICATE-----Generated at Wed Nov 5 21:23:18 2025 by rpki-client