$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/e25e5d8c-0b63-3525-83d3-e46676f36e0b.roa File: e25e5d8c-0b63-3525-83d3-e46676f36e0b.roa (raw, json) Hash identifier: sQUtSzRQCLcjBTWQCEAe3nJlh4/V9enqfCX0U1Cp0OQ= Subject key identifier: 52:7E:6B:63:C6:AB:AA:86:5B:86:BD:F1:59:BD:09:03:71:6F:1C:A9 Certificate issuer: /CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Certificate serial: 010D0C9F4328584B61069480DC454DCEFAA4C530 Authority key identifier: 36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/e25e5d8c-0b63-3525-83d3-e46676f36e0b.roa Signing time: Wed 01 Oct 2025 16:34:22 +0000 ROA not before: Wed 01 Oct 2025 16:34:22 +0000 ROA not after: Tue 30 Dec 2025 17:34:22 +0000 asID: 17113 IP address blocks: 66.181.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:06:94:80:dc:45:4d:ce:fa:a4:c5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Validity Not Before: Oct 1 16:34:22 2025 GMT Not After : Dec 30 17:34:22 2025 GMT Subject: CN=f4afbcab-275c-4872-bc85-e533c481e2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:dc:99:71:25:2f:68:fd:de:f1:85:63:21: 25:15:8f:ef:6c:16:93:27:bb:9e:b5:0d:2a:13:71: 39:3f:49:ac:2a:3f:c5:2f:f4:ae:f9:ca:c6:4e:9c: 60:45:79:14:ca:6e:5d:8d:55:10:0d:27:89:3b:ba: d7:46:c7:7e:ba:8a:f6:a4:e5:e2:ea:af:77:79:b9: 66:79:7c:09:ea:f6:52:51:bd:1f:a8:1a:b3:0a:6f: c5:93:b7:4a:ad:be:91:6c:d4:4e:a0:6c:ff:26:f9: cf:31:eb:58:ec:2c:71:88:e7:35:43:d6:2c:46:8b: 76:4f:9c:a2:a6:40:25:bb:00:8e:83:a6:91:82:cf: cb:5d:cf:4d:92:13:7d:00:17:53:d5:47:e3:63:46: 0c:a5:fd:26:eb:29:da:97:ce:6c:cd:5b:36:34:f7: 6e:8c:dc:1b:53:c3:93:6f:92:f7:b4:b9:37:f8:47: 68:7c:9d:e1:36:87:d4:d8:1f:38:f8:af:55:38:c0: ef:28:15:67:91:cf:e3:b0:00:2d:d7:10:12:e8:4b: 1f:cd:35:0a:f8:fd:a0:6c:29:8b:14:c7:55:a2:25: f8:67:ab:3a:62:af:dc:b0:da:c0:ee:34:1a:36:30: c2:71:23:f7:2a:86:d7:35:bb:6b:3c:e9:d0:f3:4e: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:6B:63:C6:AB:AA:86:5B:86:BD:F1:59:BD:09:03:71:6F:1C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/e25e5d8c-0b63-3525-83d3-e46676f36e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl X509v3 Authority Key Identifier: keyid:36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer sbgp-ipAddrBlock: critical IPv4: 66.181.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7b:54:66:74:51:1f:a4:f6:73:b6:d6:ef:f9:35:54:9a:47: 22:c8:20:77:73:52:6d:8b:bd:cc:86:9e:b8:14:8e:06:42:2b: 6b:88:19:9e:1d:30:a1:e3:25:9e:8e:92:a7:0f:4e:8d:d4:d5: 70:6c:4c:39:b6:80:2b:32:20:dd:da:ac:94:96:68:e6:07:08: 65:80:12:e9:84:df:84:58:2b:b3:2a:83:e3:0e:b1:96:9b:b6: 21:b2:d7:36:b8:87:61:1d:01:02:a0:ea:87:47:3c:4d:6d:85: ea:6e:de:c4:78:43:cc:24:e0:12:61:82:92:b5:fa:40:cd:a5: c3:76:ef:5c:49:23:a4:cb:4b:aa:22:58:9f:7b:e3:eb:8a:4b: 83:0c:ba:f4:5d:99:e6:d7:5c:c6:da:fc:78:e3:3e:56:c2:cf: d8:4c:3c:0d:b3:91:ed:e2:8a:03:a6:00:eb:5d:17:77:50:05: 4e:5f:8c:b3:62:91:b6:d1:f5:c6:aa:c7:93:1d:6a:2d:e7:b8: ed:1a:dc:96:d8:e7:bf:c5:bd:ef:ce:61:26:2d:2c:d4:f3:85: 14:f0:66:c1:b7:71:bb:1e:7c:71:c7:5e:23:15:ef:3b:47:a4: 67:e7:11:cb:33:e2:6a:e2:0b:01:f5:b7:b8:2c:0c:ab:ea:61: 9f:67:38:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthBpSA3EVNzvqkxTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOWQ4NzEtYTA4YS00MTE0LWFmODYtM2NjNmQwNGRl MGUxMB4XDTI1MTAwMTE2MzQyMloXDTI1MTIzMDE3MzQyMlowLzEtMCsGA1UEAxMk ZjRhZmJjYWItMjc1Yy00ODcyLWJjODUtZTUzM2M0ODFlMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxncmXElL2j93vGFYyElFY/vbBaTJ7uetQ0q E3E5P0msKj/FL/Su+crGTpxgRXkUym5djVUQDSeJO7rXRsd+uor2pOXi6q93eblm eXwJ6vZSUb0fqBqzCm/Fk7dKrb6RbNROoGz/JvnPMetY7CxxiOc1Q9YsRot2T5yi pkAluwCOg6aRgs/LXc9NkhN9ABdT1UfjY0YMpf0m6ynal85szVs2NPdujNwbU8OT b5L3tLk3+EdofJ3hNofU2B84+K9VOMDvKBVnkc/jsAAt1xAS6EsfzTUK+P2gbCmL FMdVoiX4Z6s6Yq/csNrA7jQaNjDCcSP3KobXNbtrPOnQ807vqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ+a2PGq6qGW4a98Vm9CQNxbxypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5 ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2ZDA0ZGUwZTEvZTI1ZTVkOGMtMGI2My0z NTI1LTgzZDMtZTQ2Njc2ZjM2ZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmEyOWQ4NzEtYTA4YS00MTE0LWFm ODYtM2NjNmQwNGRlMGUxLzJhMjlkODcxLWEwOGEtNDExNC1hZjg2LTNjYzZkMDRk ZTBlMS5jcmwwHwYDVR0jBBgwFoAUNqECD3qHkM7KFhMPC6avuEeW9jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2 ZDA0ZGUwZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA17VGZ0UR+k9nO21u/5NVSaRyLIIHdzUm2LvcyGnrgUjgZCK2uIGZ4d MKHjJZ6OkqcPTo3U1XBsTDm2gCsyIN3arJSWaOYHCGWAEumE34RYK7Mqg+MOsZab tiGy1za4h2EdAQKg6odHPE1thepu3sR4Q8wk4BJhgpK1+kDNpcN271xJI6TLS6oi WJ974+uKS4MMuvRdmebXXMba/HjjPlbCz9hMPA2zke3iigOmAOtdF3dQBU5fjLNi kbbR9caqx5Mdai3nuO0a3JbY57/Fve/OYSYtLNTzhRTwZsG3cbsefHHHXiMV7ztH pGfnEcsz4mriCwH1t7gsDKvqYZ9nOGs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:32 2025 by rpki-client