$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ce2040b-ec7b-38ef-82b4-37ee66d8eeb4.roa File: 0ce2040b-ec7b-38ef-82b4-37ee66d8eeb4.roa (raw, json) Hash identifier: 3sZeRliD8AH0TvwdWm5ETD7CXa84U1UZTwET89/DiP0= Subject key identifier: E1:D4:7C:03:B3:60:62:BF:AE:12:18:D9:15:AD:E5:58:9F:87:7D:94 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7993367C536F8336FA7B7580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ce2040b-ec7b-38ef-82b4-37ee66d8eeb4.roa Signing time: Fri 10 Oct 2025 11:37:08 +0000 ROA not before: Fri 10 Oct 2025 11:37:08 +0000 ROA not after: Thu 08 Jan 2026 12:37:08 +0000 asID: 9304 IP address blocks: 66.93.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:36:7c:53:6f:83:36:fa:7b:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:37:08 2025 GMT Not After : Jan 8 12:37:08 2026 GMT Subject: CN=58f64df9-e390-4b6a-b368-383fc0e01323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:76:ca:6b:e3:a7:b0:a3:45:23:b6:e3:30: 4c:1a:a1:c6:b7:d4:4e:4a:2e:53:ea:8e:25:fe:a0: 09:f1:0f:4d:b1:93:cc:fd:01:0b:18:09:f5:2b:1a: bd:f4:bc:08:cd:5f:85:91:5d:ad:b5:80:30:f4:6f: cb:dc:c6:af:5d:9a:4d:8c:0e:fb:dc:1c:39:5e:00: 9d:9c:e7:22:41:ff:a3:5b:35:b2:34:56:0f:33:42: d7:f9:18:ef:94:22:4a:8f:d5:c3:3a:92:4a:24:fc: e8:e1:d9:19:7e:44:02:ee:15:87:60:97:fc:c8:fd: a6:bb:6b:9a:76:e5:98:f5:c2:84:2b:7a:87:4c:e8: 25:17:a3:7b:46:c0:44:07:b6:58:02:4c:60:cc:cf: a4:59:ba:25:dc:41:07:a7:45:6e:4f:5e:c6:38:0b: 95:2f:a9:3e:7b:dc:5b:1b:f0:6d:00:53:c5:d5:f0: 84:3f:19:0a:54:25:ed:9c:f0:ec:4b:0a:95:68:56: a0:01:56:e6:70:a8:a2:02:7c:9f:40:9e:c9:56:81: 85:3e:a2:43:e8:79:93:57:54:63:d4:27:d8:6f:5d: 37:20:5f:2a:a9:ea:00:8e:31:c0:85:19:79:20:7b: a1:33:84:d1:6e:68:bd:78:8d:59:c3:76:ff:a7:5a: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D4:7C:03:B3:60:62:BF:AE:12:18:D9:15:AD:E5:58:9F:87:7D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ce2040b-ec7b-38ef-82b4-37ee66d8eeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9a:9f:64:a3:ab:6c:ed:f2:2c:dd:2b:c2:dd:83:cd:97:3f: 41:b1:ac:ed:3a:5b:21:b3:e8:1b:7b:0b:ce:fd:b9:ce:82:66: b1:1c:c8:40:61:0a:6c:1c:7a:52:ce:f7:ba:ec:fb:a3:cb:1c: 5c:2a:cc:64:f7:c4:3f:be:4e:1b:e2:02:f9:9c:e8:17:8a:13: af:fc:18:3e:19:f3:c6:d1:42:8d:25:41:cd:74:3b:b8:5f:53: b1:90:5d:f2:d4:d0:95:51:62:52:55:6a:3c:6a:3c:4e:a0:de: 96:f1:21:21:3d:f1:2b:f1:35:5b:61:a0:8a:10:f9:a2:1e:ac: 57:e6:0a:8e:fd:f5:be:b1:e6:fe:8f:fa:8c:93:3f:c7:a7:63: c7:56:4d:62:c9:c6:17:f8:64:2f:7a:72:41:c9:d6:2e:d2:11: ab:a1:6d:56:cc:42:20:b3:1b:8b:8b:85:f9:7b:d2:6c:46:ae: 43:8c:e3:0b:20:45:73:22:28:bc:1e:71:88:50:23:7a:24:7d: c2:2b:1e:47:34:e5:7f:43:e5:a1:79:fe:82:85:b2:4d:74:e2: 38:27:2c:a2:7d:c1:0b:37:73:37:8c:49:21:69:89:de:33:0d: 9f:e7:fd:01:8a:d1:45:9e:02:63:46:44:ef:03:30:98:39:21: 1a:35:cb:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5kzZ8U2+DNvp7dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzcwOFoXDTI2MDEwODEyMzcwOFowLzEtMCsGA1UEAxMk NThmNjRkZjktZTM5MC00YjZhLWIzNjgtMzgzZmMwZTAxMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh912ymvjp7CjRSO24zBMGqHGt9ROSi5T6o4l /qAJ8Q9NsZPM/QELGAn1Kxq99LwIzV+FkV2ttYAw9G/L3MavXZpNjA773Bw5XgCd nOciQf+jWzWyNFYPM0LX+RjvlCJKj9XDOpJKJPzo4dkZfkQC7hWHYJf8yP2mu2ua duWY9cKEK3qHTOglF6N7RsBEB7ZYAkxgzM+kWbol3EEHp0VuT17GOAuVL6k+e9xb G/BtAFPF1fCEPxkKVCXtnPDsSwqVaFagAVbmcKiiAnyfQJ7JVoGFPqJD6HmTV1Rj 1CfYb103IF8qqeoAjjHAhRl5IHuhM4TRbmi9eI1Zw3b/p1rS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHUfAOzYGK/rhIY2RWt5Vifh32UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGNlMjA0MGItZWM3Yi0z OGVmLTgyYjQtMzdlZTY2ZDhlZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADman2Sjq2zt8izdK8Ldg82XP0GxrO06WyGz6Bt7C879uc6CZrEcyEBh CmwcelLO97rs+6PLHFwqzGT3xD++ThviAvmc6BeKE6/8GD4Z88bRQo0lQc10O7hf U7GQXfLU0JVRYlJVajxqPE6g3pbxISE98SvxNVthoIoQ+aIerFfmCo799b6x5v6P +oyTP8enY8dWTWLJxhf4ZC96ckHJ1i7SEauhbVbMQiCzG4uLhfl70mxGrkOM4wsg RXMiKLwecYhQI3okfcIrHkc05X9D5aF5/oKFsk104jgnLKJ9wQs3czeMSSFpid4z DZ/n/QGK0UWeAmNGRO8DMJg5IRo1yys= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:45 2025 by rpki-client