$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa File: b401b75d-1b75-30fd-9468-b62b2e1167c2.roa (raw, json) Hash identifier: 9AQG4wjY4pjN3A0A5i/SFn9Pb+/+B5bVtCD/9ZNxWLo= Subject key identifier: 43:67:F4:B5:93:A0:17:E3:3D:E7:D2:5A:36:22:AE:77:6B:4D:95:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B0607221BEA3F174D022E1A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa Signing time: Sat 30 Aug 2025 02:16:55 +0000 ROA not before: Sat 30 Aug 2025 02:16:55 +0000 ROA not after: Fri 28 Nov 2025 03:16:55 +0000 asID: 206300 IP address blocks: 66.92.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:06:07:22:1b:ea:3f:17:4d:02:2e:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 30 02:16:55 2025 GMT Not After : Nov 28 03:16:55 2025 GMT Subject: CN=ff8c7452-4f6c-45ca-a8dc-e94b97d1af36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:a3:e6:c5:f0:43:06:44:ae:19:d6:b9:ea: ea:f9:6e:e1:d3:b6:9d:a4:c4:8a:61:c9:76:c9:58: 99:c2:4c:c9:5c:9d:f1:d3:29:aa:c3:27:1d:a0:47: 0b:dc:b7:3c:48:4b:d1:e3:0a:2a:f9:08:f1:24:8c: db:b8:28:e5:87:dc:c3:27:72:6c:2c:d3:d1:6a:cb: fc:2a:f8:e5:16:25:16:4b:ad:7c:54:fa:2c:8f:3b: 4f:62:01:b3:57:28:37:a8:11:c7:68:35:71:e2:f2: bd:3b:28:bf:29:cb:90:84:55:5e:f5:f2:86:41:aa: 25:35:9f:fc:29:43:9c:5e:a0:d0:c4:09:9c:74:ee: 33:f0:4a:33:6a:0f:e9:5b:9b:1a:02:df:60:5e:29: 77:33:e6:4d:6f:c1:0a:8e:99:4f:09:f5:2c:7a:20: 7d:d3:fa:3e:1c:c4:fb:a3:3e:db:16:32:90:33:8c: a0:f8:83:94:63:f2:e2:30:4e:a1:95:a4:7c:f6:92: 72:23:1f:4e:18:19:02:8a:51:8a:cb:e7:1d:13:bd: d5:db:c5:ad:b8:4e:a3:db:b7:25:83:19:67:bf:13: 81:99:eb:95:10:29:c8:1a:e7:26:ba:0e:32:40:a9: f8:91:2e:3d:d1:8e:f3:aa:1d:ca:e2:a2:56:8a:63: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:F4:B5:93:A0:17:E3:3D:E7:D2:5A:36:22:AE:77:6B:4D:95:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5d:50:8e:08:af:43:d5:a0:bd:3e:2c:65:bc:0a:63:6c:d7: e6:c9:fe:a7:3a:11:ef:61:b1:a0:15:51:bd:9c:64:2f:e0:d8: 47:99:82:7d:ee:18:a7:ef:32:32:e2:b3:44:e0:50:af:92:36: 7b:b6:82:cc:ca:c1:d4:42:0a:60:7f:b5:f0:ff:33:f1:24:3c: 9c:8b:3b:fa:d4:37:b9:49:78:f9:2d:6f:d2:a8:11:ed:37:f3: 6a:02:00:e5:57:db:85:d1:3b:6b:7d:e0:6a:7e:e6:0b:e9:80: 05:0b:8a:83:62:d1:fa:50:dc:7b:bf:5b:0a:d3:e6:b4:b1:6e: fe:3d:f6:a3:e9:7b:c1:05:0d:be:25:d2:a6:3b:af:cd:a6:31: d3:6d:70:6c:89:11:60:93:2d:42:e6:7f:80:d5:f1:a8:66:7f: 11:f7:40:04:8a:96:53:cb:cf:7b:5a:ab:6f:db:8c:4b:27:93: 73:67:f9:e0:20:96:bf:59:4b:c4:5c:f7:ce:f6:31:f9:74:5a: 15:37:53:88:32:85:53:b2:0f:bc:f1:8c:1e:c1:b3:16:6d:dc: 12:a3:dc:2b:cb:46:cc:9b:40:86:a3:4d:8f:68:d0:ca:f7:b0: 3d:d6:4f:5f:4e:ed:16:db:a0:01:5e:c8:eb:55:5b:81:7e:72: 56:38:18:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsGByIb6j8XTQIuGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgzMDAyMTY1NVoXDTI1MTEyODAzMTY1NVowLzEtMCsGA1UEAxMk ZmY4Yzc0NTItNGY2Yy00NWNhLWE4ZGMtZTk0Yjk3ZDFhZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnuj5sXwQwZErhnWuerq+W7h07adpMSKYcl2 yViZwkzJXJ3x0ymqwycdoEcL3Lc8SEvR4woq+QjxJIzbuCjlh9zDJ3JsLNPRasv8 KvjlFiUWS618VPosjztPYgGzVyg3qBHHaDVx4vK9Oyi/KcuQhFVe9fKGQaolNZ/8 KUOcXqDQxAmcdO4z8Eozag/pW5saAt9gXil3M+ZNb8EKjplPCfUseiB90/o+HMT7 oz7bFjKQM4yg+IOUY/LiME6hlaR89pJyIx9OGBkCilGKy+cdE73V28WtuE6j27cl gxlnvxOBmeuVECnIGucmug4yQKn4kS490Y7zqh3K4qJWimPWLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENn9LWToBfjPefSWjYirndrTZUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjQwMWI3NWQtMWI3NS0z MGZkLTk0NjgtYjYyYjJlMTE2N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1dUI4Ir0PVoL0+LGW8CmNs1+bJ/qc6Ee9hsaAVUb2cZC/g2EeZgn3u GKfvMjLis0TgUK+SNnu2gszKwdRCCmB/tfD/M/EkPJyLO/rUN7lJePktb9KoEe03 82oCAOVX24XRO2t94Gp+5gvpgAULioNi0fpQ3Hu/WwrT5rSxbv499qPpe8EFDb4l 0qY7r82mMdNtcGyJEWCTLULmf4DV8ahmfxH3QASKllPLz3taq2/bjEsnk3Nn+eAg lr9ZS8Rc9872Mfl0WhU3U4gyhVOyD7zxjB7BsxZt3BKj3CvLRsybQIajTY9o0Mr3 sD3WT19O7RbboAFeyOtVW4F+clY4GFQ= -----END CERTIFICATE-----Generated at Thu Oct 9 06:22:35 2025 by rpki-client