$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5161e4ff-5d0e-3a14-a717-3284817700d9.roa File: 5161e4ff-5d0e-3a14-a717-3284817700d9.roa (raw, json) Hash identifier: 1rp6/ODUphnt0nA3c996OIiFA33cy+ZvDwnjw8JjZhs= Subject key identifier: E8:B3:09:3A:59:D1:17:19:89:F2:6E:E9:C8:FC:FB:8E:95:AA:BD:25 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5D78A4BBD64E933913FA7E40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5161e4ff-5d0e-3a14-a717-3284817700d9.roa Signing time: Tue 30 Sep 2025 10:00:57 +0000 ROA not before: Tue 30 Sep 2025 10:00:57 +0000 ROA not after: Mon 29 Dec 2025 11:00:57 +0000 asID: 205886 IP address blocks: 66.253.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:78:a4:bb:d6:4e:93:39:13:fa:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 10:00:57 2025 GMT Not After : Dec 29 11:00:57 2025 GMT Subject: CN=7993bdde-9b10-4ca0-acc5-f9233738ada3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:74:c7:34:8e:e7:eb:a8:38:ba:28:35:bd: b9:50:85:cb:30:8c:74:56:61:ec:5c:a8:dc:07:94: 7b:33:4c:d7:cc:30:59:c7:42:b1:a1:1d:3b:b3:fa: e7:42:0d:c1:ce:49:a1:18:30:54:99:fd:4b:a4:00: b2:fb:31:53:5b:a5:f9:4f:53:7e:56:21:2b:9a:bf: f4:b6:0b:52:23:b5:2e:63:1a:ee:81:0f:47:7c:18: 17:07:cd:5e:8a:d7:09:75:72:0a:30:dc:45:93:2a: 6c:d4:76:a6:11:2c:7a:3b:3e:2e:c7:d3:58:c7:29: d0:ad:00:9b:32:05:ff:01:d1:67:81:6f:aa:ce:df: 73:3b:a9:27:fe:7c:5f:15:6a:2c:5e:6e:66:6f:dc: db:1b:53:73:0b:d2:e8:67:2d:3e:bc:83:d7:02:7d: 30:b9:8c:09:3c:ac:b1:ba:8c:44:31:c6:df:ce:f9: 37:fa:f9:cf:46:19:fd:16:2a:5c:29:de:ee:33:ef: 10:89:cf:d7:ed:b0:e5:e2:3a:4a:4c:c7:7f:a4:52: fa:72:df:ea:c3:ba:59:c1:98:25:3d:4d:93:16:0e: 5a:b2:41:ac:62:0d:db:68:47:57:30:6f:5d:c3:32: 1f:dc:b3:93:01:0f:39:62:e7:9a:84:73:47:79:b7: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B3:09:3A:59:D1:17:19:89:F2:6E:E9:C8:FC:FB:8E:95:AA:BD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5161e4ff-5d0e-3a14-a717-3284817700d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3e:4f:6a:f1:60:9d:80:ec:9b:b5:37:16:9b:bf:c2:72:1c: 22:b1:5e:b3:fb:b3:75:a8:95:b5:32:54:79:82:c1:d0:8b:1d: ac:82:7e:9b:c8:ce:0d:8d:dd:ad:49:bb:80:90:9c:24:f7:64: 63:74:c4:90:1b:9e:a3:32:0a:ea:9d:0b:29:a9:09:dd:b5:05: 47:33:2b:64:cd:65:1e:ed:c7:4c:64:fd:57:d7:6b:73:04:90: a9:ec:ca:4b:57:c7:25:e5:02:2f:a4:ef:1a:a6:99:78:ce:ae: ea:6c:e5:08:3c:21:2e:5e:99:d9:63:b3:28:2d:f3:f2:f3:10: 30:50:4e:9e:bc:63:2f:7c:b1:f6:8e:1d:8c:8d:d9:75:0a:f6: 93:82:23:ac:29:30:f8:73:fe:ed:75:e7:6e:02:48:0e:64:09: f8:50:ac:36:65:32:8f:1a:9c:6b:b4:24:07:9f:d4:ce:94:14: bd:96:7e:c5:c3:92:6c:b1:d6:d0:78:f7:19:3c:90:44:11:58: df:32:ec:7d:f3:7a:1e:0d:a2:d6:e8:d3:5b:67:0d:f4:50:fa: 2e:10:73:c3:0e:2c:ef:8f:4e:c1:a0:5e:cf:d9:71:2e:b3:89: cc:32:f7:f8:a5:5f:95:44:c0:f2:56:d6:07:7f:9b:73:a6:a9: 2b:2e:48:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtdeKS71k6TORP6fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkzMDEwMDA1N1oXDTI1MTIyOTExMDA1N1owLzEtMCsGA1UEAxMk Nzk5M2JkZGUtOWIxMC00Y2EwLWFjYzUtZjkyMzM3MzhhZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqp0xzSO5+uoOLooNb25UIXLMIx0VmHsXKjc B5R7M0zXzDBZx0KxoR07s/rnQg3BzkmhGDBUmf1LpACy+zFTW6X5T1N+ViErmr/0 tgtSI7UuYxrugQ9HfBgXB81eitcJdXIKMNxFkyps1HamESx6Oz4ux9NYxynQrQCb MgX/AdFngW+qzt9zO6kn/nxfFWosXm5mb9zbG1NzC9LoZy0+vIPXAn0wuYwJPKyx uoxEMcbfzvk3+vnPRhn9FipcKd7uM+8Qic/X7bDl4jpKTMd/pFL6ct/qw7pZwZgl PU2TFg5askGsYg3baEdXMG9dwzIf3LOTAQ85YueahHNHebcFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOizCTpZ0RcZifJu6cj8+46Vqr0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTE2MWU0ZmYtNWQwZS0z YTE0LWE3MTctMzI4NDgxNzcwMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0+T2rxYJ2A7Ju1Nxabv8JyHCKxXrP7s3WolbUyVHmCwdCLHayCfpvI zg2N3a1Ju4CQnCT3ZGN0xJAbnqMyCuqdCympCd21BUczK2TNZR7tx0xk/VfXa3ME kKnsyktXxyXlAi+k7xqmmXjOrups5Qg8IS5emdljsygt8/LzEDBQTp68Yy98sfaO HYyN2XUK9pOCI6wpMPhz/u11524CSA5kCfhQrDZlMo8anGu0JAef1M6UFL2WfsXD kmyx1tB49xk8kEQRWN8y7H3zeh4Notbo01tnDfRQ+i4Qc8MOLO+PTsGgXs/ZcS6z icwy9/ilX5VEwPJW1gd/m3OmqSsuSPA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:37 2025 by rpki-client