$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aec93d2a-f9ec-3975-baec-ad283cf5db34.roa File: aec93d2a-f9ec-3975-baec-ad283cf5db34.roa (raw, json) Hash identifier: Iv0HXmwbr8xTDrXEpHFevtigxsU48WwXPtMgMy5rXTw= Subject key identifier: E4:28:86:ED:B5:61:E6:23:2B:F3:23:4C:F9:3B:69:43:1E:BD:07:1A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B68FCAD594EC9D61C96527370 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aec93d2a-f9ec-3975-baec-ad283cf5db34.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 137235 IP address blocks: 66.92.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:ad:59:4e:c9:d6:1c:96:52:73:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=0562818d-673d-4381-b869-2a3821213d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:a1:63:95:8d:ef:fc:a5:fb:b0:fb:a9:af: fc:03:99:7b:21:2b:e2:7b:ed:b8:a5:9b:20:17:a3: 8d:1d:68:f8:85:9b:97:27:cc:b9:68:c6:8a:d1:32: eb:93:09:15:53:9f:f3:86:0e:55:fd:7b:be:87:12: 6e:0e:61:a0:b2:2e:eb:d1:06:4b:22:b9:14:01:46: 2a:76:7a:c6:9a:e9:7e:ad:5f:57:68:11:4e:e6:86: 8b:9d:c4:65:b3:a7:cc:ee:7e:f2:3c:a5:02:31:d5: 02:5c:27:87:ce:cf:81:f3:66:92:04:a0:4a:84:d7: 7d:b1:f1:28:63:f4:44:b9:bc:a0:d8:9e:56:6a:9a: 1f:92:6d:84:63:2b:00:87:0a:ac:72:aa:b0:58:c5: 89:c3:51:b0:df:85:02:97:99:52:52:eb:7b:9b:e2: 68:8c:d8:d8:65:e0:43:9c:c0:b9:92:0e:e0:fc:7e: 75:5b:b8:7a:49:17:50:40:ee:ac:50:ab:30:9b:47: a0:73:2e:31:7d:92:64:8c:2b:38:32:ae:7a:7c:ea: 04:46:7d:2e:7f:e0:b6:a9:05:19:ef:76:be:63:7a: 87:b5:e1:e3:4e:aa:09:ec:a2:5c:46:1a:6f:66:af: 4b:69:2d:72:bd:6a:23:21:3a:a4:ec:0c:59:e4:ea: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:28:86:ED:B5:61:E6:23:2B:F3:23:4C:F9:3B:69:43:1E:BD:07:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aec93d2a-f9ec-3975-baec-ad283cf5db34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:38:82:ef:b2:98:52:77:86:e5:f6:1c:62:3f:a8:74:68:4c: 3e:ea:e9:80:c0:b3:cb:51:a4:6d:4d:f6:89:ec:05:a7:d0:e4: 77:80:69:1a:0b:11:db:1b:4b:e7:97:2c:40:c4:c7:a3:37:7d: db:e9:57:ef:e0:0a:09:99:5c:c8:a5:5b:1a:32:3b:6c:52:bf: e1:64:bf:c6:5a:60:1d:37:a9:2f:03:50:aa:34:f3:3c:b3:db: 88:33:20:f5:9c:5a:f9:8b:88:c6:93:e4:36:a3:22:98:65:76: 99:c4:93:60:a0:d6:cf:34:74:cc:ba:35:22:e1:b4:1e:aa:30: ff:13:71:3c:3c:05:07:2b:c0:4a:3e:95:48:3c:2a:60:3a:8e: 84:ea:85:0b:56:ea:fb:f7:72:75:c7:95:3a:5d:3e:ad:23:a7: 55:d1:d1:64:35:20:8e:88:dc:cc:8a:fc:6a:53:c3:e2:22:f5: 24:19:3b:b1:3d:6f:25:35:6c:2e:60:94:0b:e1:28:d5:cd:43: b9:f2:10:f5:3c:da:b1:1f:7f:5c:a4:f0:d4:1a:b5:82:a4:ae: a1:2a:fb:dd:a8:63:43:e4:88:38:87:56:fb:0a:e5:60:14:e5: 6a:79:df:52:84:48:65:bb:97:d5:9b:14:79:9a:aa:63:c4:35: 81:93:8d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/K1ZTsnWHJZSc3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MDU2MjgxOGQtNjczZC00MzgxLWI4NjktMmEzODIxMjEzZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJuhY5WN7/yl+7D7qa/8A5l7ISvie+24pZsg F6ONHWj4hZuXJ8y5aMaK0TLrkwkVU5/zhg5V/Xu+hxJuDmGgsi7r0QZLIrkUAUYq dnrGmul+rV9XaBFO5oaLncRls6fM7n7yPKUCMdUCXCeHzs+B82aSBKBKhNd9sfEo Y/REubyg2J5Wapofkm2EYysAhwqscqqwWMWJw1Gw34UCl5lSUut7m+JojNjYZeBD nMC5kg7g/H51W7h6SRdQQO6sUKswm0egcy4xfZJkjCs4Mq56fOoERn0uf+C2qQUZ 73a+Y3qHteHjTqoJ7KJcRhpvZq9LaS1yvWojITqk7AxZ5OrYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQohu21YeYjK/MjTPk7aUMevQcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWVjOTNkMmEtZjllYy0z OTc1LWJhZWMtYWQyODNjZjVkYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlzHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg4gu+ymFJ3huX2HGI/qHRoTD7q6YDAs8tRpG1N9onsBafQ5HeAaRoL EdsbS+eXLEDEx6M3fdvpV+/gCgmZXMilWxoyO2xSv+Fkv8ZaYB03qS8DUKo08zyz 24gzIPWcWvmLiMaT5DajIphldpnEk2Cg1s80dMy6NSLhtB6qMP8TcTw8BQcrwEo+ lUg8KmA6joTqhQtW6vv3cnXHlTpdPq0jp1XR0WQ1II6I3MyK/GpTw+Ii9SQZO7E9 byU1bC5glAvhKNXNQ7nyEPU82rEff1yk8NQatYKkrqEq+92oY0PkiDiHVvsK5WAU 5Wp531KESGW7l9WbFHmaqmPENYGTjYA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:56:39 2025 by rpki-client