$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d61368fd-cafe-3948-9eb8-5083cda6c30d.roa File: d61368fd-cafe-3948-9eb8-5083cda6c30d.roa (raw, json) Hash identifier: f3YtTpdP0TiukVXmTS4Ax6DlWRTT0jZfTSJk8QFJbEI= Subject key identifier: 68:79:0D:0B:51:0B:85:C5:98:59:70:2B:06:90:25:DB:25:65:BD:EB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F130F85607C2F550C59C5C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d61368fd-cafe-3948-9eb8-5083cda6c30d.roa Signing time: Fri 19 Sep 2025 12:42:02 +0000 ROA not before: Fri 19 Sep 2025 12:42:02 +0000 ROA not after: Thu 18 Dec 2025 13:42:02 +0000 asID: 212238 IP address blocks: 66.93.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:13:0f:85:60:7c:2f:55:0c:59:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 12:42:02 2025 GMT Not After : Dec 18 13:42:02 2025 GMT Subject: CN=4c573fde-3a31-4e2b-b363-8debac25b52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:58:f7:3f:96:2b:0b:4a:c9:1b:f6:82:66: 38:23:08:9e:27:d3:33:a1:e7:d7:64:9a:ba:6e:18: 46:4c:6a:9a:0c:6b:34:03:4c:10:0b:9b:6a:53:d7: eb:4b:97:25:36:6e:3d:48:e0:40:e3:ef:f4:b2:7b: a7:ab:00:b2:c3:ee:ab:5a:97:42:da:77:db:0f:c0: df:d3:41:d0:5f:43:73:13:27:02:70:36:25:53:1a: e5:b8:3a:15:32:7d:4b:9e:a5:c2:09:72:37:d9:a5: 90:9c:7f:c2:5c:87:bb:7b:1f:0c:2c:50:8a:84:a7: 58:d3:f8:a7:56:87:98:fa:55:96:1b:05:6c:14:5b: a9:7d:d2:a9:ba:aa:97:07:e1:91:f5:e4:ba:86:d9: 71:1a:cf:04:75:91:c6:b6:42:c7:69:e9:64:f6:13: 96:66:59:f4:35:16:cb:55:e0:c6:13:dd:e8:d4:07: 3b:3c:94:66:00:f9:d6:70:da:37:92:42:b0:f2:05: 18:51:89:2a:68:2e:13:54:15:a3:44:86:05:b9:78: 8c:d5:f0:01:ae:6e:16:7a:87:f7:47:c2:df:d9:5a: b7:f8:d4:a2:ed:f4:1e:26:97:86:3c:f0:3c:93:56: 01:75:f9:b7:40:ad:ec:f7:b5:1c:89:5c:2a:b8:dd: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:0D:0B:51:0B:85:C5:98:59:70:2B:06:90:25:DB:25:65:BD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d61368fd-cafe-3948-9eb8-5083cda6c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f3:f9:5f:c1:bd:93:b1:0b:29:51:e4:74:d6:23:db:26:aa: 57:5e:71:b3:da:b5:97:29:76:54:af:35:68:1d:d9:b7:6e:77: 24:6e:77:2c:c5:93:e4:8f:9f:ad:18:a4:ae:98:a0:a3:07:7e: ee:2c:3f:a3:1d:0b:5b:e3:da:bd:b1:49:03:09:7f:ff:de:42: 3c:d2:98:bc:90:78:9d:7f:b5:28:c8:da:58:c6:ee:72:ea:5f: 54:06:60:e8:1b:80:6d:c1:5f:13:64:f1:9c:ca:df:2a:e9:a9: 97:34:79:3e:74:45:72:e1:09:53:9a:4c:b4:c2:3e:48:e6:5b: 38:d0:6c:02:49:1e:59:a8:bd:03:43:ce:4e:f1:14:71:67:ea: 78:49:63:74:19:9b:24:c4:84:69:5f:95:f3:5a:37:53:f7:ba: c4:77:15:1d:d9:75:a5:73:05:5c:58:22:cc:7c:bc:55:23:eb: be:c3:7d:b3:16:12:20:a7:87:9d:21:e7:3c:bf:1b:ed:51:77: 82:e1:3d:69:68:90:16:65:bf:56:de:14:66:fc:a8:92:b0:d7: 53:74:f2:34:ae:d2:9f:bd:7f:48:49:64:c8:0e:ad:eb:f1:88: 92:f2:5d:3c:48:c6:5f:e1:73:e3:ee:c2:db:09:fd:9f:48:02: 65:79:89:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/Ew+FYHwvVQxZxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTEyNDIwMloXDTI1MTIxODEzNDIwMlowLzEtMCsGA1UEAxMk NGM1NzNmZGUtM2EzMS00ZTJiLWIzNjMtOGRlYmFjMjViNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA175Y9z+WKwtKyRv2gmY4IwieJ9MzoefXZJq6 bhhGTGqaDGs0A0wQC5tqU9frS5clNm49SOBA4+/0snunqwCyw+6rWpdC2nfbD8Df 00HQX0NzEycCcDYlUxrluDoVMn1LnqXCCXI32aWQnH/CXIe7ex8MLFCKhKdY0/in VoeY+lWWGwVsFFupfdKpuqqXB+GR9eS6htlxGs8EdZHGtkLHaelk9hOWZln0NRbL VeDGE93o1Ac7PJRmAPnWcNo3kkKw8gUYUYkqaC4TVBWjRIYFuXiM1fABrm4Weof3 R8Lf2Vq3+NSi7fQeJpeGPPA8k1YBdfm3QK3s97UciVwquN0lhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh5DQtRC4XFmFlwKwaQJdslZb3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDYxMzY4ZmQtY2FmZS0z OTQ4LTllYjgtNTA4M2NkYTZjMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl0HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjz+V/BvZOxCylR5HTWI9smqldecbPatZcpdlSvNWgd2bdudyRudyzF k+SPn60YpK6YoKMHfu4sP6MdC1vj2r2xSQMJf//eQjzSmLyQeJ1/tSjI2ljG7nLq X1QGYOgbgG3BXxNk8ZzK3yrpqZc0eT50RXLhCVOaTLTCPkjmWzjQbAJJHlmovQND zk7xFHFn6nhJY3QZmyTEhGlflfNaN1P3usR3FR3ZdaVzBVxYIsx8vFUj677DfbMW EiCnh50h5zy/G+1Rd4LhPWlokBZlv1beFGb8qJKw11N08jSu0p+9f0hJZMgOrevx iJLyXTxIxl/hc+PuwtsJ/Z9IAmV5iYw= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:14 2025 by rpki-client