$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa File: a3e28558-5307-3ceb-a172-8724d830db67.roa (raw, json) Hash identifier: glohEXWIiq+JJl8Obgy+O6shoEjkqH2zKnL+CXpbnjU= Subject key identifier: C1:28:14:71:D8:7C:81:4A:BA:55:7B:F1:DC:75:10:58:53:3F:DC:7D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B62C300642780067B7C69E3A8 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa Signing time: Thu 02 Oct 2025 07:29:49 +0000 ROA not before: Thu 02 Oct 2025 07:29:49 +0000 ROA not after: Wed 31 Dec 2025 08:29:49 +0000 asID: 9009 IP address blocks: 66.95.198.0/23 maxlen: 24 68.165.98.0/23 maxlen: 24 68.166.178.0/23 maxlen: 24 68.167.74.0/23 maxlen: 24 68.167.78.0/23 maxlen: 24 68.167.130.0/23 maxlen: 24 68.167.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:c3:00:64:27:80:06:7b:7c:69:e3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 2 07:29:49 2025 GMT Not After : Dec 31 08:29:49 2025 GMT Subject: CN=29d82127-cda1-4751-b363-993bc96ae5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:1c:33:48:e8:21:ee:f1:4d:ce:d5:e2:f8: fb:df:e6:26:04:1f:30:c7:e5:81:c4:36:a3:2c:18: 55:29:ab:9d:28:7a:f1:1e:6c:a4:ab:d7:92:42:5a: 5f:06:a3:33:38:36:cf:e3:1a:6d:c5:28:3c:b1:32: 0c:90:36:82:d4:73:0e:9d:8a:28:4c:f2:6d:4e:ab: e9:89:66:3f:b6:76:eb:1a:67:c5:e7:f7:e5:6d:1f: d0:16:fa:21:91:c0:eb:4a:a8:23:d2:93:cb:6d:bf: 3b:8d:d4:3c:46:aa:67:cb:a3:03:f9:42:ed:d2:de: 05:64:7f:5a:fb:ac:ee:e5:02:d7:8e:fa:11:d4:41: be:29:0c:7d:16:1f:b4:ca:ff:73:5c:ff:89:9c:79: 1b:a6:4b:33:c6:99:8a:6f:b0:42:69:13:d8:a5:f9: a1:e1:2c:fc:0a:05:4e:79:d3:d0:79:65:5d:3b:e2: 36:ed:1d:0d:7b:de:ff:88:22:b8:71:d3:67:69:de: 68:01:d2:e5:b7:91:eb:54:af:62:f5:34:c6:8e:e0: f1:d7:13:c2:15:0c:de:93:8a:9a:6b:52:f8:ce:b8: c0:51:b9:f0:83:48:58:7b:0b:1e:a8:b5:ce:6e:0b: 74:6e:8b:94:d4:f9:bb:2c:e7:e3:cf:7c:cd:db:2c: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:14:71:D8:7C:81:4A:BA:55:7B:F1:DC:75:10:58:53:3F:DC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.95.198.0/23 68.165.98.0/23 68.166.178.0/23 68.167.74.0/23 68.167.78.0/23 68.167.130.0/23 68.167.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:47:3a:43:de:56:a0:15:90:f3:49:ca:0b:32:8d:8e:83:26: 4a:da:a0:b7:60:78:98:12:cc:cd:36:53:14:03:65:fd:8c:5f: 6b:fb:0d:f8:d8:f4:a4:7f:22:45:c1:f8:6a:f7:52:14:4f:13: e7:06:c1:7c:15:97:4d:8c:ab:60:07:d4:db:98:97:c9:e7:75: 80:28:3d:7d:23:c3:bf:d7:4c:38:d4:bc:56:7c:21:31:c4:1a: 92:24:31:81:62:25:c8:fe:45:80:b9:0e:9f:9e:ba:ba:80:b5: 76:01:7f:1e:c5:26:47:ee:57:e4:5a:29:6a:da:76:46:31:73: e4:ae:b7:bb:9c:6e:55:ae:bf:d1:18:78:fe:16:a4:b0:bc:73: 7e:31:8a:27:fd:74:37:26:8b:e7:e0:80:b2:90:6c:e7:88:b9: 61:59:06:8d:ec:bc:b3:44:e5:02:f7:ef:f9:4a:3b:25:c2:23: 1f:07:95:cc:19:b7:ed:a1:9d:91:d5:f4:98:9c:2d:d6:6c:cb: b4:4a:91:fe:23:7d:2f:d3:aa:41:fe:15:25:38:e7:66:fb:a8: b6:4c:6a:aa:2e:6e:fa:eb:e0:b7:e7:b1:52:d2:f2:bd:df:c0: e0:9c:84:96:cd:3d:81:de:83:0f:fc:7f:d7:12:7d:de:08:56: d6:e0:d3:39 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEtiwwBkJ4AGe3xp46gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwMjA3Mjk0OVoXDTI1MTIzMTA4Mjk0OVowLzEtMCsGA1UEAxMk MjlkODIxMjctY2RhMS00NzUxLWIzNjMtOTkzYmM5NmFlNWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WQcM0joIe7xTc7V4vj73+YmBB8wx+WBxDaj LBhVKaudKHrxHmykq9eSQlpfBqMzODbP4xptxSg8sTIMkDaC1HMOnYooTPJtTqvp iWY/tnbrGmfF5/flbR/QFvohkcDrSqgj0pPLbb87jdQ8Rqpny6MD+ULt0t4FZH9a +6zu5QLXjvoR1EG+KQx9Fh+0yv9zXP+JnHkbpkszxpmKb7BCaRPYpfmh4Sz8CgVO edPQeWVdO+I27R0Ne97/iCK4cdNnad5oAdLlt5HrVK9i9TTGjuDx1xPCFQzek4qa a1L4zrjAUbnwg0hYewseqLXObgt0bouU1Pm7LOfjz3zN2ywXuQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFMEoFHHYfIFKulV78dx1EFhTP9x9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTNlMjg1NTgtNTMwNy0z Y2ViLWExNzItODcyNGQ4MzBkYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBQl/GAwQB RKViAwQBRKayAwQBRKdKAwQBRKdOAwQBRKeCAwQBRKeOMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFZHOkPe VqAVkPNJygsyjY6DJkraoLdgeJgSzM02UxQDZf2MX2v7DfjY9KR/IkXB+Gr3UhRP E+cGwXwVl02Mq2AH1NuYl8nndYAoPX0jw7/XTDjUvFZ8ITHEGpIkMYFiJcj+RYC5 Dp+eurqAtXYBfx7FJkfuV+RaKWradkYxc+Sut7ucblWuv9EYeP4WpLC8c34xiif9 dDcmi+fggLKQbOeIuWFZBo3svLNE5QL37/lKOyXCIx8HlcwZt+2hnZHV9JicLdZs y7RKkf4jfS/TqkH+FSU452b7qLZMaqoubvrr4LfnsVLS8r3fwOCchJbNPYHegw/8 f9cSfd4IVtbg0zk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:36 2025 by rpki-client