$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1334e63-0604-3bad-83b9-82722409f4d8.roa File: e1334e63-0604-3bad-83b9-82722409f4d8.roa (raw, json) Hash identifier: QxuFu6lhRp9VtiFayDmO4f81hZEKGmrQkaSX49n1JJg= Subject key identifier: 10:60:28:0E:BE:FA:E1:B3:1B:85:9A:F8:48:A0:D5:7A:15:4E:8A:09 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B41E728E4AB4932561C8B7600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1334e63-0604-3bad-83b9-82722409f4d8.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 6079 IP address blocks: 66.227.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:28:e4:ab:49:32:56:1c:8b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=afc0b439-f0f4-4329-b261-e3afd140dde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:54:55:07:37:40:67:a9:7b:4c:1e:57:1c:18: c9:97:eb:c3:d6:49:36:c1:d6:a7:19:7b:d9:8c:fc: 31:32:62:e1:d1:08:f4:1a:94:40:b0:3a:80:98:44: 63:70:7d:24:4b:aa:13:05:dc:c1:23:f5:36:f6:93: 29:11:e3:e8:3c:a7:fe:97:9a:5f:b9:52:0e:97:0a: ef:e2:b6:ac:2a:00:ba:c4:43:ea:b9:c2:46:20:6d: 8e:0f:d1:0c:19:9b:9e:79:8a:79:e3:25:85:07:f3: 20:e2:95:41:ee:2f:21:6e:fe:93:25:e5:8b:31:50: 7e:fd:8a:96:43:35:15:e8:a0:2d:c9:b2:52:ce:9d: de:aa:e3:5f:04:ed:f2:02:2a:a3:39:87:65:11:ed: 30:c4:bc:aa:17:75:f1:2e:7c:56:19:20:ed:72:5e: c6:6c:3e:7d:7c:3b:03:fe:31:f9:d8:47:51:05:54: ec:1f:ee:8d:ad:07:8c:5c:3a:6a:83:ab:5a:dd:4d: 8e:1e:9c:37:40:eb:a8:df:2a:dd:15:0f:a2:9e:bf: 17:3c:72:4b:be:38:28:8d:0d:3b:4e:42:a2:37:5c: 12:7a:5e:a8:c6:2d:69:98:76:6f:01:f8:62:43:e4: 13:bb:3c:bd:3a:7c:40:2a:96:99:f3:0e:bd:89:82: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:28:0E:BE:FA:E1:B3:1B:85:9A:F8:48:A0:D5:7A:15:4E:8A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1334e63-0604-3bad-83b9-82722409f4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:52:28:ec:5b:22:c3:c6:5a:42:06:01:c2:c4:c4:5d:a2:4a: fc:89:0c:e9:0f:3c:8f:c4:70:7e:1b:e8:c6:0a:52:aa:86:68: dc:0c:94:8d:9b:94:6a:49:71:07:eb:f6:92:79:1f:e3:08:1d: e6:45:e1:88:9a:f9:c9:1a:b9:68:3c:07:b3:6e:e2:9c:99:28: 01:00:46:93:78:19:29:9a:c7:08:06:00:c5:7b:d5:1e:17:31: 55:77:db:e5:4d:d5:8b:4c:e3:2d:9b:5f:e3:3f:b8:cf:48:40: b6:54:7d:28:f7:b6:c8:fa:00:de:ea:a5:fd:0c:08:12:af:e3: a1:6a:6b:e5:b5:bb:4d:cc:73:9a:58:62:93:d9:90:ad:66:53: 68:5f:94:50:f4:7d:cd:70:7f:1b:03:b8:53:29:85:a6:8d:a2: 54:90:2a:e1:39:4b:10:dd:4c:d4:50:1d:7a:3a:50:15:a3:8f: dc:60:ed:2e:d9:a5:4f:cd:c0:2b:db:2e:b1:0f:20:31:e1:80: 4b:c4:3d:60:f3:d5:2d:dd:c3:3f:c3:17:a3:c1:04:c8:9a:e8: 2b:e1:e0:3e:b2:50:5e:a7:c1:d4:90:4b:39:79:fc:91:87:4f: 41:91:a0:7d:da:b5:e8:d8:e7:d6:75:e3:71:2e:67:04:98:0f: 57:a0:91:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yjkq0kyVhyLdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YWZjMGI0MzktZjBmNC00MzI5LWIyNjEtZTNhZmQxNDBkZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFRVBzdAZ6l7TB5XHBjJl+vD1kk2wdanGXvZ jPwxMmLh0Qj0GpRAsDqAmERjcH0kS6oTBdzBI/U29pMpEePoPKf+l5pfuVIOlwrv 4rasKgC6xEPqucJGIG2OD9EMGZueeYp54yWFB/Mg4pVB7i8hbv6TJeWLMVB+/YqW QzUV6KAtybJSzp3equNfBO3yAiqjOYdlEe0wxLyqF3XxLnxWGSDtcl7GbD59fDsD /jH52EdRBVTsH+6NrQeMXDpqg6ta3U2OHpw3QOuo3yrdFQ+inr8XPHJLvjgojQ07 TkKiN1wSel6oxi1pmHZvAfhiQ+QTuzy9OnxAKpaZ8w69iYLgQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBgKA6++uGzG4Wa+Eig1XoVTooJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTEzMzRlNjMtMDYwNC0z YmFkLTgzYjktODI3MjI0MDlmNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5SKOxbIsPGWkIGAcLExF2iSvyJDOkPPI/EcH4b6MYKUqqGaNwMlI2b lGpJcQfr9pJ5H+MIHeZF4Yia+ckauWg8B7Nu4pyZKAEARpN4GSmaxwgGAMV71R4X MVV32+VN1YtM4y2bX+M/uM9IQLZUfSj3tsj6AN7qpf0MCBKv46Fqa+W1u03Mc5pY YpPZkK1mU2hflFD0fc1wfxsDuFMphaaNolSQKuE5SxDdTNRQHXo6UBWjj9xg7S7Z pU/NwCvbLrEPIDHhgEvEPWDz1S3dwz/DF6PBBMia6Cvh4D6yUF6nwdSQSzl5/JGH T0GRoH3atejY59Z143EuZwSYD1egkTg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:56:40 2025 by rpki-client