$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa File: 498ae72d-730e-3075-b632-778512aa8180.roa (raw, json) Hash identifier: N0zSpKragXD/VzCm/EkWC3pwqgYMUB1hjK9BBW4pbyo= Subject key identifier: E4:45:C7:5F:82:68:D5:06:EF:CC:76:CB:F8:19:37:09:39:D6:21:94 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B2B919BE79AD358EA86F2A8C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 5065 IP address blocks: 66.253.8.0/24 maxlen: 24 69.17.3.0/24 maxlen: 24 69.17.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:9b:e7:9a:d3:58:ea:86:f2:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=e47a8bc7-2826-44cf-8634-91fc651096f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:4c:e3:ac:b2:3b:e8:6a:67:d6:55:b1:ec: e5:d7:3d:00:e5:5d:be:fb:0e:b7:f6:2d:b0:9b:e4: 3e:23:e0:10:00:56:0d:79:1c:7c:ef:84:f6:18:5d: c3:10:34:e7:30:71:9e:b8:1c:ad:68:27:90:60:f3: 51:cc:5c:fc:dc:4c:1e:61:41:13:ce:96:73:e1:10: de:a2:49:7c:1b:9f:9a:7f:34:c3:fd:c5:78:ca:8a: ca:ed:01:fc:ca:b1:7b:ba:04:a3:f7:bf:8e:94:c3: a0:90:15:52:9c:69:2e:2c:6c:a0:86:f2:29:3c:ad: a8:67:d7:d7:53:7e:8f:84:94:43:83:4f:a6:9a:4d: 59:76:5a:fc:23:b2:7f:f3:51:39:58:66:5f:b3:62: 16:dc:05:9d:eb:16:9a:26:3a:39:af:04:16:e7:f8: 7a:5d:c5:8d:99:15:2f:fb:6f:8d:9c:b1:a6:d8:44: d9:7c:0b:3f:38:e6:79:34:8a:9c:e7:e5:68:63:52: 7f:8d:ce:85:81:8d:32:38:1d:fd:30:7e:96:53:68: 82:c4:71:2c:57:3f:51:9a:a9:d4:e0:7b:08:30:6b: 43:95:f2:32:36:20:af:bf:36:2e:d3:dc:e1:5b:38: ac:ee:64:25:c2:cb:14:97:94:37:71:1e:5c:bc:df: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:45:C7:5F:82:68:D5:06:EF:CC:76:CB:F8:19:37:09:39:D6:21:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.8.0/24 69.17.3.0-69.17.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:14:8c:fa:1a:51:d7:03:52:9f:d4:1a:20:49:d9:13:38:a8: c1:5b:11:90:99:ac:d3:3f:2d:3f:f2:16:70:42:68:f4:c6:8d: ab:84:d4:a8:1a:8e:a5:4e:58:b1:7b:46:76:db:da:55:a4:30: 46:79:13:eb:b9:07:bc:9b:03:b4:34:80:ef:5b:11:69:c5:2d: e5:4b:99:d8:ef:c4:df:42:d1:c2:1e:8f:06:ac:23:19:fa:96: 72:d9:70:1d:d0:6d:33:46:b2:02:1d:10:46:86:09:2b:11:de: 3d:f1:fe:f3:66:c8:b1:b0:c9:d7:1a:2c:7f:31:bf:9d:6c:97: 41:72:35:e9:bb:ce:c7:58:18:8b:05:c7:2b:d1:3d:1a:90:e9: 99:e2:7b:2d:ef:95:f4:e6:eb:df:e2:eb:41:f9:27:a3:2a:31: e0:48:f2:45:2e:fd:20:fd:db:0a:d1:31:60:9c:1f:ee:7d:82: d1:a5:24:4e:c2:92:8c:ca:b7:21:4f:50:dc:48:dc:13:4d:3e: 60:44:f6:2c:6e:ff:fb:a4:55:c3:e4:97:6c:19:73:33:e3:38: a3:30:fd:f7:af:8e:09:6a:b0:55:f0:07:9f:7c:d8:f9:6b:b8: 15:36:2c:5d:bc:52:1d:c1:8f:51:de:6e:e3:e8:ed:31:18:f8: 62:55:30:df -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsrkZvnmtNY6obyqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTQ3YThiYzctMjgyNi00NGNmLTg2MzQtOTFmYzY1MTA5NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKBM46yyO+hqZ9ZVsezl1z0A5V2++w639i2w m+Q+I+AQAFYNeRx874T2GF3DEDTnMHGeuBytaCeQYPNRzFz83EweYUETzpZz4RDe okl8G5+afzTD/cV4yorK7QH8yrF7ugSj97+OlMOgkBVSnGkuLGyghvIpPK2oZ9fX U36PhJRDg0+mmk1Zdlr8I7J/81E5WGZfs2IW3AWd6xaaJjo5rwQW5/h6XcWNmRUv +2+NnLGm2ETZfAs/OOZ5NIqc5+VoY1J/jc6FgY0yOB39MH6WU2iCxHEsVz9RmqnU 4HsIMGtDlfIyNiCvvzYu09zhWzis7mQlwssUl5Q3cR5cvN+i0wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFORFx1+CaNUG78x2y/gZNwk51iGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDk4YWU3MmQtNzMwZS0z MDc1LWI2MzItNzc4NTEyYWE4MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAQv0IMAwD BABFEQMDBABFEQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEArBSM+hpR1wNSn9QaIEnZEziowVsRkJms0z8t P/IWcEJo9MaNq4TUqBqOpU5YsXtGdtvaVaQwRnkT67kHvJsDtDSA71sRacUt5UuZ 2O/E30LRwh6PBqwjGfqWctlwHdBtM0ayAh0QRoYJKxHePfH+82bIsbDJ1xosfzG/ nWyXQXI16bvOx1gYiwXHK9E9GpDpmeJ7Le+V9Obr3+LrQfknoyox4EjyRS79IP3b CtExYJwf7n2C0aUkTsKSjMq3IU9Q3EjcE00+YET2LG7/+6RVw+SXbBlzM+M4ozD9 96+OCWqwVfAHn3zY+Wu4FTYsXbxSHcGPUd5u4+jtMRj4YlUw3w== -----END CERTIFICATE-----Generated at Sat Oct 11 08:56:39 2025 by rpki-client