$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a38f24-e672-38fd-8238-d7188fd0516a.roa File: 38a38f24-e672-38fd-8238-d7188fd0516a.roa (raw, json) Hash identifier: OF+k0RKlRs17ZdhMnzEsM6y3Y5AV14+JAxVT90ZxrgM= Subject key identifier: 2F:08:AA:0D:73:1A:69:7A:A8:40:AF:4D:B3:8A:AE:DA:97:86:75:EC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B42F6700B6C0D370097790F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a38f24-e672-38fd-8238-d7188fd0516a.roa Signing time: Sat 20 Sep 2025 22:07:36 +0000 ROA not before: Sat 20 Sep 2025 22:07:36 +0000 ROA not after: Fri 19 Dec 2025 23:07:36 +0000 asID: 270187 IP address blocks: 66.253.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:42:f6:70:0b:6c:0d:37:00:97:79:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 22:07:36 2025 GMT Not After : Dec 19 23:07:36 2025 GMT Subject: CN=d77aad0a-1852-4de5-9e23-a8399a56fb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:11:01:78:b5:92:30:26:c1:bb:30:56:60:e8: ac:5e:43:a5:91:9c:50:bd:d2:1c:74:7b:d4:7e:63: 50:ab:c6:bd:bb:5d:94:7f:96:5f:87:70:2f:63:88: 53:98:7d:ad:40:a3:d8:11:a1:b5:72:29:d8:e3:72: 12:39:8e:07:65:fc:e2:45:26:16:81:e9:34:44:75: 2f:04:8a:29:79:a4:50:96:43:ce:a6:92:0d:f2:1f: eb:d7:02:7b:8a:aa:ce:7c:64:e0:dd:bb:48:39:64: d2:fc:25:52:1f:68:76:7e:02:37:d7:38:59:67:29: 4c:93:29:cf:7f:ca:70:83:7f:d5:cc:33:5c:5c:3d: 56:40:6e:2d:3a:60:e7:25:83:8e:73:43:4c:34:dd: a8:97:11:c4:5d:da:1d:87:2d:b9:f1:8f:37:28:ff: 98:91:5a:a4:3d:af:58:7f:25:50:25:1f:53:02:9c: da:c4:39:b9:b8:ec:53:6b:ee:e5:3a:fa:d1:d7:75: 98:e4:57:9d:80:bd:37:32:05:e2:01:7e:1b:a2:a0: 0a:d5:da:41:a9:9d:04:56:2f:b2:e8:bf:96:cd:7a: 84:ad:67:56:6e:1a:b4:00:c8:44:71:1b:04:38:35: d2:b3:5c:0a:c4:e8:3d:d0:19:af:14:25:04:13:43: 2b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:08:AA:0D:73:1A:69:7A:A8:40:AF:4D:B3:8A:AE:DA:97:86:75:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a38f24-e672-38fd-8238-d7188fd0516a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:84:ec:69:e1:d0:72:dd:fc:7f:10:42:5b:c8:e8:11:cf:f4: 3e:ac:a4:36:0e:52:96:2c:fa:3f:e7:5e:12:7e:b1:d3:a5:ff: 1a:a8:d2:0d:02:c3:ed:46:31:d5:06:f1:ce:3a:2f:2c:47:95: 32:4b:5c:55:31:e0:0a:84:13:1a:83:d9:4a:f6:9d:67:21:c1: e5:b5:d2:48:2d:51:8c:ae:42:0d:83:b6:41:d2:a1:e6:fa:ff: 67:ba:12:9a:2d:9f:2a:18:ba:ac:c5:1c:00:06:5d:2a:db:71: 86:d1:40:27:06:de:bd:0a:ee:41:c2:d7:3e:f7:85:a0:de:93: ea:91:4b:3e:64:be:22:a4:ca:8b:99:51:be:0f:ee:4f:77:1a: 95:ee:17:86:fb:98:fc:13:c2:8f:bf:c6:05:cc:88:8c:35:ca: f1:8b:6d:44:fe:fd:f0:d8:52:ee:63:7b:b1:f7:e9:72:f2:7d: d0:93:d5:75:08:91:1d:25:4e:39:8b:98:07:92:24:25:6d:14: f6:57:5f:f6:b5:13:c8:25:0b:19:2c:6d:8d:a0:ba:42:1a:2f: 98:96:31:51:eb:3d:a5:4c:d4:15:80:a5:5a:5f:e5:54:b5:f6: 93:a9:a2:b5:98:58:6c:9b:fa:7f:f8:db:b1:34:8b:14:73:40: d1:88:67:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtC9nALbA03AJd5DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMDIyMDczNloXDTI1MTIxOTIzMDczNlowLzEtMCsGA1UEAxMk ZDc3YWFkMGEtMTg1Mi00ZGU1LTllMjMtYTgzOTlhNTZmYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiREBeLWSMCbBuzBWYOisXkOlkZxQvdIcdHvU fmNQq8a9u12Uf5Zfh3AvY4hTmH2tQKPYEaG1cinY43ISOY4HZfziRSYWgek0RHUv BIopeaRQlkPOppIN8h/r1wJ7iqrOfGTg3btIOWTS/CVSH2h2fgI31zhZZylMkynP f8pwg3/VzDNcXD1WQG4tOmDnJYOOc0NMNN2olxHEXdodhy258Y83KP+YkVqkPa9Y fyVQJR9TApzaxDm5uOxTa+7lOvrR13WY5FedgL03MgXiAX4boqAK1dpBqZ0EVi+y 6L+WzXqErWdWbhq0AMhEcRsEODXSs1wKxOg90BmvFCUEE0MraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Iqg1zGml6qECvTbOKrtqXhnXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzhhMzhmMjQtZTY3Mi0z OGZkLTgyMzgtZDcxODhmZDA1MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQv1KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGE7Gnh0HLd/H8QQlvI6BHP9D6spDYOUpYs+j/nXhJ+sdOl/xqo0g0C w+1GMdUG8c46LyxHlTJLXFUx4AqEExqD2Ur2nWchweW10kgtUYyuQg2DtkHSoeb6 /2e6EpotnyoYuqzFHAAGXSrbcYbRQCcG3r0K7kHC1z73haDek+qRSz5kviKkyouZ Ub4P7k93GpXuF4b7mPwTwo+/xgXMiIw1yvGLbUT+/fDYUu5je7H36XLyfdCT1XUI kR0lTjmLmAeSJCVtFPZXX/a1E8glCxksbY2gukIaL5iWMVHrPaVM1BWApVpf5VS1 9pOporWYWGyb+n/427E0ixRzQNGIZ60= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:52 2025 by rpki-client