$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddbac768-ed89-3ebf-baba-1b84cedbb07f.roa File: ddbac768-ed89-3ebf-baba-1b84cedbb07f.roa (raw, json) Hash identifier: Wb8mLr2egNei8l3jZ5WSBHRRGYu8N2USEeym7C52DeY= Subject key identifier: 04:F2:A4:69:9D:FE:53:59:B9:F3:76:59:14:A4:9E:A1:9A:4F:99:79 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B56B95238EC474A089CE0C900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddbac768-ed89-3ebf-baba-1b84cedbb07f.roa Signing time: Sun 28 Sep 2025 00:00:37 +0000 ROA not before: Sun 28 Sep 2025 00:00:37 +0000 ROA not after: Sat 27 Dec 2025 01:00:37 +0000 asID: 834 IP address blocks: 66.92.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:b9:52:38:ec:47:4a:08:9c:e0:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 28 00:00:37 2025 GMT Not After : Dec 27 01:00:37 2025 GMT Subject: CN=ad874976-55eb-4abf-8aec-851cfb0c738a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:a4:03:d0:a3:6e:5e:f6:20:c2:a3:f5:d9: 7b:86:59:57:87:39:fc:de:b7:1e:21:fd:79:cb:ea: 5f:f4:85:1f:f7:36:e4:b5:a1:93:f0:24:de:02:1e: 52:8d:d6:51:96:06:6c:58:25:d4:8d:46:75:67:39: a4:92:25:33:b9:f4:62:18:d9:ec:e3:56:5f:b5:75: 1c:c0:f8:e0:91:a9:1b:20:18:64:bc:62:dc:fc:8d: 25:b2:df:34:b6:78:96:f9:d4:72:0b:24:2d:0b:ee: 72:6d:25:22:e0:53:ce:6d:bc:87:7b:c0:ce:f9:e6: 5c:f3:92:f2:f2:78:e1:93:7a:75:f0:e4:b1:1e:11: af:63:e9:28:4c:9e:7f:47:b9:72:06:31:ba:7d:53: 2d:f1:5a:ab:19:bd:f0:41:6e:0a:8e:7e:97:5f:09: 90:50:e6:58:eb:19:7f:2f:ec:e9:61:a6:56:bf:a8: 09:37:e1:42:82:3f:cb:4e:aa:35:dc:7f:43:76:48: e3:14:ad:c2:ab:f6:e1:19:9c:0b:bf:51:2c:fa:7f: 88:ed:cf:37:e0:ee:cd:07:e2:48:3c:86:2c:76:93: 53:59:54:a1:6c:76:a0:86:48:a7:d3:63:e5:0f:ed: 8b:28:a9:05:27:0f:b0:ee:db:82:93:cc:29:b8:19: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F2:A4:69:9D:FE:53:59:B9:F3:76:59:14:A4:9E:A1:9A:4F:99:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddbac768-ed89-3ebf-baba-1b84cedbb07f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3f:ed:30:51:2e:69:20:bd:dd:3e:3d:27:4d:49:86:53:f7: 05:7c:a1:59:49:e3:4d:d1:8b:c4:f8:de:9f:e9:18:52:8a:d0: 4a:03:42:ba:e8:8c:0b:96:4b:29:8c:f1:25:62:06:c3:45:28: b8:b7:36:f5:fb:42:96:e4:11:a5:84:03:22:57:46:75:b1:17: 2f:34:a2:82:f2:6d:8c:32:e4:d0:49:ef:7c:59:69:67:a1:b6: a1:8e:71:c9:a3:7e:83:8b:81:e7:65:9e:35:20:1c:3b:b5:57: 31:ef:e3:4f:b2:04:aa:6d:f5:a9:54:20:fb:82:7d:af:3d:5e: 24:77:6b:46:2c:89:ad:ce:2b:b5:62:a6:27:1f:40:83:88:81: 1f:3e:c6:19:f3:ad:a2:19:b3:4e:33:e1:3e:a9:b9:4f:3d:d4: c0:8f:de:6e:c6:fc:9a:6f:9a:ca:ac:91:00:c4:0e:fa:12:4d: bd:bd:e9:7d:40:ee:e8:30:0d:0e:89:ac:33:65:ad:fc:cd:9d: 46:bb:e0:b5:aa:4c:c2:0a:f9:7a:6e:18:dc:1d:86:47:86:3e: c2:a3:85:74:77:f2:5a:a1:a5:53:65:c8:ba:d0:02:ac:54:d8: 9e:2f:a7:34:e2:d3:12:3f:3c:df:3e:d2:5e:42:6f:3b:f7:35: f6:cb:a0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWuVI47EdKCJzgyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyODAwMDAzN1oXDTI1MTIyNzAxMDAzN1owLzEtMCsGA1UEAxMk YWQ4NzQ5NzYtNTVlYi00YWJmLThhZWMtODUxY2ZiMGM3MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobOkA9Cjbl72IMKj9dl7hllXhzn83rceIf15 y+pf9IUf9zbktaGT8CTeAh5SjdZRlgZsWCXUjUZ1ZzmkkiUzufRiGNns41ZftXUc wPjgkakbIBhkvGLc/I0lst80tniW+dRyCyQtC+5ybSUi4FPObbyHe8DO+eZc85Ly 8njhk3p18OSxHhGvY+koTJ5/R7lyBjG6fVMt8VqrGb3wQW4Kjn6XXwmQUOZY6xl/ L+zpYaZWv6gJN+FCgj/LTqo13H9DdkjjFK3Cq/bhGZwLv1Es+n+I7c834O7NB+JI PIYsdpNTWVShbHaghkin02PlD+2LKKkFJw+w7tuCk8wpuBk8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATypGmd/lNZufN2WRSknqGaT5l5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGRiYWM3NjgtZWQ4OS0z ZWJmLWJhYmEtMWI4NGNlZGJiMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM/7TBRLmkgvd0+PSdNSYZT9wV8oVlJ403Ri8T43p/pGFKK0EoDQrro jAuWSymM8SViBsNFKLi3NvX7QpbkEaWEAyJXRnWxFy80ooLybYwy5NBJ73xZaWeh tqGOccmjfoOLgedlnjUgHDu1VzHv40+yBKpt9alUIPuCfa89XiR3a0Ysia3OK7Vi picfQIOIgR8+xhnzraIZs04z4T6puU891MCP3m7G/JpvmsqskQDEDvoSTb296X1A 7ugwDQ6JrDNlrfzNnUa74LWqTMIK+XpuGNwdhkeGPsKjhXR38lqhpVNlyLrQAqxU 2J4vpzTi0xI/PN8+0l5Cbzv3NfbLoBc= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:10 2025 by rpki-client