$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa File: 3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa (raw, json) Hash identifier: Sno+KyP0YBONGVzyLp/Ya38cEk7sZEEU7O5s/5ppyOk= Subject key identifier: F7:C8:8A:3C:10:86:72:97:11:51:EB:F2:0F:BE:02:D4:F8:FC:EC:80 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584BAA97BBF05FD144C87E123A40 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16557 IP address blocks: 66.103.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bb:f0:5f:d1:44:c8:7e:12:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=68c405ff-f2aa-44b7-bac3-968df3b453fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:fa:04:79:53:a3:13:d3:c3:28:8c:10:cc: 21:08:52:12:dd:49:2c:21:b4:9a:95:b9:33:89:d9: e3:fd:ff:99:3d:fe:aa:04:e7:4f:ca:ec:3d:a2:d3: 25:72:e7:4c:2b:30:a3:4a:83:15:e7:d4:6b:87:fd: d0:51:1f:16:aa:22:bb:f1:9d:31:91:1b:a0:c7:7a: b5:73:f6:e0:cb:dc:ef:08:22:16:f3:1b:99:08:ae: 1d:db:ad:12:24:ad:80:c4:e3:c9:b8:14:9e:8b:51: 79:41:12:33:99:d8:1f:f3:31:0e:f3:3a:06:f7:3d: 57:88:b5:c9:ec:5d:5e:5d:c3:b6:db:de:0e:5b:72: c2:c3:af:b7:92:65:90:73:8d:a0:fa:1b:5d:df:43: 50:98:09:43:e4:36:06:9d:58:2e:e8:0b:14:4c:dc: fa:42:7b:ee:af:b0:dd:bf:5c:78:08:c1:2d:be:b2: 85:e4:65:39:82:88:45:fe:db:20:d4:1a:3d:96:25: 6c:d3:ad:92:30:89:67:51:98:b7:bb:84:28:64:0d: 20:04:92:cd:30:04:6a:18:46:7f:30:93:3d:46:f7: 37:f9:ee:a3:ff:53:e2:10:1a:a7:1d:0f:12:cb:34: 2c:5e:d5:e0:1a:0a:17:9f:a5:f5:80:20:da:b4:cb: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C8:8A:3C:10:86:72:97:11:51:EB:F2:0F:BE:02:D4:F8:FC:EC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/3cf61d3f-bc74-3d04-9b1e-f33c19709a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 66.103.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e8:9c:3c:20:ae:1f:42:0b:76:17:81:8d:ae:4b:e3:bc:1c: ae:0c:47:7d:00:9c:82:fc:28:61:7f:4f:8b:20:96:d8:05:10: 93:ce:8e:5e:41:c6:a5:69:e5:33:df:e6:d4:4d:68:26:dc:ce: 68:97:b6:5d:50:b9:7a:ef:19:9e:6d:05:2e:05:b1:e0:58:13: cb:72:fe:eb:9a:08:f9:ae:d5:b7:0f:21:94:11:d9:14:f1:69: ad:2c:6c:e8:a2:ee:33:e0:f7:c5:c2:19:ad:8f:38:5c:e4:38: 9b:22:31:a4:be:a2:41:b5:43:80:0c:fb:d6:ad:23:8f:da:01: 59:ee:eb:21:2e:3c:4a:c5:74:cb:f9:f9:b1:6c:5a:01:01:19: 5e:c7:f1:21:ce:d0:4e:fc:2d:1a:7e:c5:2e:89:c4:69:48:f4: d7:9d:60:3f:60:a6:2b:92:6e:70:59:a3:b1:ae:23:4a:64:07: 52:4a:56:b9:57:2f:19:66:e8:38:b0:9c:f5:d5:6e:bf:90:cc: a8:43:f0:cc:48:2f:37:a7:61:7a:22:17:f9:3b:a7:fb:38:34: 97:55:36:47:98:75:2e:98:ef:6d:02:26:e9:36:53:ac:71:76: 97:9e:5d:9a:05:dd:90:d0:6d:86:7f:80:db:f7:67:a9:a1:bc: 49:95:60:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7vwX9FEyH4SOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NjhjNDA1ZmYtZjJhYS00NGI3LWJhYzMtOTY4ZGYzYjQ1M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli76BHlToxPTwyiMEMwhCFIS3UksIbSalbkz idnj/f+ZPf6qBOdPyuw9otMlcudMKzCjSoMV59Rrh/3QUR8WqiK78Z0xkRugx3q1 c/bgy9zvCCIW8xuZCK4d260SJK2AxOPJuBSei1F5QRIzmdgf8zEO8zoG9z1XiLXJ 7F1eXcO2294OW3LCw6+3kmWQc42g+htd30NQmAlD5DYGnVgu6AsUTNz6Qnvur7Dd v1x4CMEtvrKF5GU5gohF/tsg1Bo9liVs062SMIlnUZi3u4QoZA0gBJLNMARqGEZ/ MJM9Rvc3+e6j/1PiEBqnHQ8SyzQsXtXgGgoXn6X1gCDatMusWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfIijwQhnKXEVHr8g++AtT4/OyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvM2NmNjFkM2YtYmM3NC0z ZDA0LTliMWUtZjMzYzE5NzA5YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnonDwgrh9CC3YXgY2uS+O8HK4MR30AnIL8KGF/T4sgltgFEJPOjl5B xqVp5TPf5tRNaCbczmiXtl1QuXrvGZ5tBS4FseBYE8ty/uuaCPmu1bcPIZQR2RTx aa0sbOii7jPg98XCGa2POFzkOJsiMaS+okG1Q4AM+9atI4/aAVnu6yEuPErFdMv5 +bFsWgEBGV7H8SHO0E78LRp+xS6JxGlI9NedYD9gpiuSbnBZo7GuI0pkB1JKVrlX Lxlm6DiwnPXVbr+QzKhD8MxILzenYXoiF/k7p/s4NJdVNkeYdS6Y720CJuk2U6xx dpeeXZoF3ZDQbYZ/gNv3Z6mhvEmVYJE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:12:26 2025 by rpki-client