$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfd94033-dc93-3228-a32e-a3c985a66803.roa File: bfd94033-dc93-3228-a32e-a3c985a66803.roa (raw, json) Hash identifier: rlH1R7H9bNmRefraDw42s+rmtcNwP867I7cDw0eCXw8= Subject key identifier: 01:C9:EC:55:75:7F:DF:7C:5D:9E:41:60:46:B4:0D:0A:17:83:B1:1B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5240AA404456E06322D9D780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfd94033-dc93-3228-a32e-a3c985a66803.roa Signing time: Fri 26 Sep 2025 09:34:17 +0000 ROA not before: Fri 26 Sep 2025 09:34:17 +0000 ROA not after: Thu 25 Dec 2025 10:34:17 +0000 asID: 9304 IP address blocks: 66.93.128.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:40:aa:40:44:56:e0:63:22:d9:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 26 09:34:17 2025 GMT Not After : Dec 25 10:34:17 2025 GMT Subject: CN=8a33702d-878c-4fd4-8e5f-a73c8d1a8c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cd:0e:59:b8:be:f5:61:3d:be:1a:2f:2d:2d: 65:c7:ed:74:af:a0:62:33:83:05:63:d1:55:b0:2c: 85:19:ca:c9:7e:6e:ff:0b:0f:53:dc:fe:60:f2:5b: f4:31:53:5b:42:1f:ae:eb:0b:da:67:31:3e:0a:59: 30:61:e0:51:fd:58:88:4a:75:16:b2:ba:44:90:8a: 18:21:16:17:ff:a0:49:56:bf:3c:6e:a8:68:b2:37: 0d:9c:cd:b7:10:3a:ad:94:0b:1e:87:c0:9f:68:0d: e7:c7:cd:2d:29:f9:dd:d3:8c:44:dd:97:d8:b0:a6: 0d:f8:f0:12:67:f4:ae:f6:63:7e:4b:eb:f1:97:a4: c5:36:01:1f:e0:69:b7:48:49:b9:6b:17:51:fa:49: 13:fb:2a:f1:22:b0:19:65:0b:03:35:10:db:b6:b3: e2:7e:75:3d:cf:45:77:01:53:8e:0e:8f:bc:90:34: 75:95:1c:97:21:e5:4f:37:a0:ca:3f:65:54:9d:8c: 95:0e:20:d9:38:ad:7b:7c:9d:ec:69:39:9d:c6:24: 4f:8d:2a:42:7f:36:97:6f:c3:ea:90:37:79:f8:b7: 54:c1:fa:5f:99:9e:e9:ec:06:8a:c9:a2:bb:9e:06: 4c:cb:93:b4:eb:a9:26:c1:c3:3e:f8:c4:0d:d1:69: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C9:EC:55:75:7F:DF:7C:5D:9E:41:60:46:B4:0D:0A:17:83:B1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfd94033-dc93-3228-a32e-a3c985a66803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b7:3f:7b:a2:b2:fc:39:dc:d9:f2:f0:77:2c:07:1c:42:4c: aa:bc:60:7f:18:6f:65:a2:9b:15:20:9f:d4:c4:f4:f5:50:0b: 47:ce:b5:d7:37:e5:31:59:80:a9:c4:2c:e8:eb:12:6b:7b:23: 30:64:93:aa:ab:2f:2a:5f:8f:51:1b:36:50:5c:e5:b4:ae:58: c8:a5:15:89:0f:09:ab:a3:0a:22:ac:db:06:be:df:7b:33:11: 49:42:8a:6b:bf:2e:a2:be:51:10:bf:2e:a1:b7:e8:c5:0e:ce: c9:af:b1:56:56:ce:15:64:2a:fc:85:c3:ba:9e:f9:3e:44:51: b5:64:9a:14:58:28:69:a1:a9:52:a2:62:ff:80:36:4d:69:c2: f9:8d:13:a8:02:eb:b6:0a:07:10:2d:6b:e4:ff:b1:78:f4:b9: 14:30:bb:10:64:54:d5:32:15:0b:5e:9e:e9:31:44:49:31:23: de:52:a7:71:87:27:66:5a:29:88:77:b2:bd:89:99:3e:6f:9f: b7:86:03:40:a1:5c:d9:68:e8:f8:09:fb:56:72:5d:93:d4:68: 79:08:7e:88:b4:56:d3:1d:a0:86:b2:df:3c:1c:89:3a:b2:a7: 63:64:77:cc:72:74:c1:04:0e:b9:bb:d2:e5:bc:9c:f5:82:6b: 49:87:56:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSQKpARFbgYyLZ14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNjA5MzQxN1oXDTI1MTIyNTEwMzQxN1owLzEtMCsGA1UEAxMk OGEzMzcwMmQtODc4Yy00ZmQ0LThlNWYtYTczYzhkMWE4YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj80OWbi+9WE9vhovLS1lx+10r6BiM4MFY9FV sCyFGcrJfm7/Cw9T3P5g8lv0MVNbQh+u6wvaZzE+ClkwYeBR/ViISnUWsrpEkIoY IRYX/6BJVr88bqhosjcNnM23EDqtlAseh8CfaA3nx80tKfnd04xE3ZfYsKYN+PAS Z/Su9mN+S+vxl6TFNgEf4Gm3SEm5axdR+kkT+yrxIrAZZQsDNRDbtrPifnU9z0V3 AVOODo+8kDR1lRyXIeVPN6DKP2VUnYyVDiDZOK17fJ3saTmdxiRPjSpCfzaXb8Pq kDd5+LdUwfpfmZ7p7AaKyaK7ngZMy5O066kmwcM++MQN0WmQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHJ7FV1f998XZ5BYEa0DQoXg7EbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmZkOTQwMzMtZGM5My0z MjI4LWEzMmUtYTNjOTg1YTY2ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS3P3uisvw53Nny8HcsBxxCTKq8YH8Yb2WimxUgn9TE9PVQC0fOtdc3 5TFZgKnELOjrEmt7IzBkk6qrLypfj1EbNlBc5bSuWMilFYkPCaujCiKs2wa+33sz EUlCimu/LqK+URC/LqG36MUOzsmvsVZWzhVkKvyFw7qe+T5EUbVkmhRYKGmhqVKi Yv+ANk1pwvmNE6gC67YKBxAta+T/sXj0uRQwuxBkVNUyFQtenukxREkxI95Sp3GH J2ZaKYh3sr2JmT5vn7eGA0ChXNlo6PgJ+1ZyXZPUaHkIfoi0VtMdoIay3zwciTqy p2Nkd8xydMEEDrm70uW8nPWCa0mHVs0= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:08 2025 by rpki-client