$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527cab5a-3c9b-30ae-8308-1cbe2f706ac2.roa File: 527cab5a-3c9b-30ae-8308-1cbe2f706ac2.roa (raw, json) Hash identifier: Mkp7nKRtvL1xFBkFgu5vGtcD9SAg5QM3s/TW9DpHQKo= Subject key identifier: 38:F9:A4:54:D4:8C:2C:2E:9D:A9:60:75:F0:FB:5C:0F:E7:44:BC:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B794E0EA2174BD96709953480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527cab5a-3c9b-30ae-8308-1cbe2f706ac2.roa Signing time: Fri 10 Oct 2025 09:17:47 +0000 ROA not before: Fri 10 Oct 2025 09:17:47 +0000 ROA not after: Thu 08 Jan 2026 10:17:47 +0000 asID: 62610 IP address blocks: 66.92.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:4e:0e:a2:17:4b:d9:67:09:95:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 09:17:47 2025 GMT Not After : Jan 8 10:17:47 2026 GMT Subject: CN=315e14b5-4481-4de8-800b-5f1c2e38e980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:e3:82:64:4c:8d:b7:ae:02:76:35:2e:a1: 2e:a1:b6:c4:78:c4:55:b8:ed:9d:fe:5a:e1:5e:a4: ff:cc:4d:18:b0:c8:31:02:c8:64:2d:ff:a9:e9:07: cf:c3:63:bd:e9:6d:f2:66:79:18:e2:7e:76:ae:93: 9c:92:77:30:8c:e6:88:7e:ac:48:c9:ac:34:ec:52: 28:c6:be:c1:a0:45:38:5a:dd:13:98:a2:f3:ab:d2: 99:05:dd:05:59:ff:b0:15:4e:df:dd:24:80:0f:d0: e0:72:34:3a:a8:f7:ef:df:3a:e9:91:4d:a7:c5:78: c8:49:9e:88:89:70:9f:1d:38:60:da:c8:c7:88:da: 82:62:6f:7a:69:c2:69:1f:fa:5c:a5:7d:e0:49:66: 82:4f:41:ba:ae:84:50:b2:30:ba:b7:75:80:80:27: b1:97:21:ee:f8:d3:eb:3c:ae:7b:40:70:28:54:6e: 12:20:d4:be:f6:e6:4f:fb:5e:bc:02:d6:fd:76:a2: 19:a7:4f:0e:17:bd:f3:14:84:94:5a:6f:08:cd:c9: cd:e7:bf:d7:89:9b:12:54:bc:61:f0:1a:2c:f1:10: cb:14:2a:57:f7:74:c8:29:d2:48:f1:91:17:c5:09: d9:36:ee:47:af:f0:d9:e3:81:f6:98:07:4f:b7:31: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F9:A4:54:D4:8C:2C:2E:9D:A9:60:75:F0:FB:5C:0F:E7:44:BC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527cab5a-3c9b-30ae-8308-1cbe2f706ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:62:80:95:47:63:78:b5:d8:e5:98:aa:68:d7:df:7e:bf:38: fd:00:03:d5:4a:43:1c:88:b8:1a:af:6e:fa:48:96:d9:18:dd: 5a:7a:60:be:18:2f:ac:a0:2a:b1:17:33:73:de:f5:8e:13:27: 4d:c3:da:94:cc:9b:3e:14:be:40:30:7b:1e:a0:ce:54:ac:06: c8:cd:20:da:d6:01:e8:11:b3:8d:46:1b:27:bc:74:ae:de:b4: 67:29:e5:01:09:04:b1:14:7f:72:10:e9:c0:dd:65:a3:d6:c5: e3:48:4a:b4:82:d2:2b:e5:87:76:9a:43:94:07:d4:e6:f7:6a: 1a:cd:14:2b:2f:3b:53:79:b8:7f:eb:53:76:f1:24:74:a5:18: 68:8f:8e:82:a4:66:7b:41:bc:e7:d6:30:7e:3f:1f:29:a9:b1: 8a:2e:4a:7a:ce:24:38:1f:1e:11:7a:4c:a1:b1:b8:f2:98:1e: 3b:2f:a0:c9:c5:da:0f:20:fb:0c:2b:18:ab:3c:3d:16:40:1d: c3:f7:bb:17:3a:27:cf:42:d7:fd:4f:19:fc:fd:e9:04:70:e6: 37:12:56:11:fb:c5:ba:0c:d9:1f:d2:42:70:9b:c6:93:d2:b7: 52:9d:2f:cc:e0:34:43:c5:fc:53:2d:03:da:d8:ae:27:35:86: 54:ec:10:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5Tg6iF0vZZwmVNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDA5MTc0N1oXDTI2MDEwODEwMTc0N1owLzEtMCsGA1UEAxMk MzE1ZTE0YjUtNDQ4MS00ZGU4LTgwMGItNWYxYzJlMzhlOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02zjgmRMjbeuAnY1LqEuobbEeMRVuO2d/lrh XqT/zE0YsMgxAshkLf+p6QfPw2O96W3yZnkY4n52rpOckncwjOaIfqxIyaw07FIo xr7BoEU4Wt0TmKLzq9KZBd0FWf+wFU7f3SSAD9DgcjQ6qPfv3zrpkU2nxXjISZ6I iXCfHThg2sjHiNqCYm96acJpH/pcpX3gSWaCT0G6roRQsjC6t3WAgCexlyHu+NPr PK57QHAoVG4SINS+9uZP+168Atb9dqIZp08OF73zFISUWm8IzcnN57/XiZsSVLxh 8Bos8RDLFCpX93TIKdJI8ZEXxQnZNu5Hr/DZ44H2mAdPtzFqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj5pFTUjCwunalgdfD7XA/nRLxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTI3Y2FiNWEtM2M5Yi0z MGFlLTgzMDgtMWNiZTJmNzA2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlwfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABigJVHY3i12OWYqmjX336/OP0AA9VKQxyIuBqvbvpIltkY3Vp6YL4Y L6ygKrEXM3Pe9Y4TJ03D2pTMmz4UvkAwex6gzlSsBsjNINrWAegRs41GGye8dK7e tGcp5QEJBLEUf3IQ6cDdZaPWxeNISrSC0ivlh3aaQ5QH1Ob3ahrNFCsvO1N5uH/r U3bxJHSlGGiPjoKkZntBvOfWMH4/HympsYouSnrOJDgfHhF6TKGxuPKYHjsvoMnF 2g8g+wwrGKs8PRZAHcP3uxc6J89C1/1PGfz96QRw5jcSVhH7xboM2R/SQnCbxpPS t1KdL8zgNEPF/FMtA9rYric1hlTsEMU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:52 2025 by rpki-client