$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f862b17e-ee45-375e-bee8-9b7f02159065.roa File: f862b17e-ee45-375e-bee8-9b7f02159065.roa (raw, json) Hash identifier: nS1WNhbEzjsfeIXR0qM9xAQV4jjPff/HDvHkYlOfgB8= Subject key identifier: 57:B5:79:F5:2A:23:AD:9D:56:04:CB:5B:AB:39:82:69:71:F0:88:FF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B53F4E89CB880616B1C075AC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f862b17e-ee45-375e-bee8-9b7f02159065.roa Signing time: Sat 27 Sep 2025 00:13:15 +0000 ROA not before: Sat 27 Sep 2025 00:13:15 +0000 ROA not after: Fri 26 Dec 2025 01:13:15 +0000 asID: 5650 IP address blocks: 66.93.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:f4:e8:9c:b8:80:61:6b:1c:07:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 27 00:13:15 2025 GMT Not After : Dec 26 01:13:15 2025 GMT Subject: CN=cbca1d2f-232e-4ed0-b709-33e5ce13ee5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:1b:99:67:95:7d:4a:ce:a2:f1:8d:dc:db: f1:74:27:a5:1d:f2:30:1e:2b:e7:15:1d:b3:44:40: 72:a7:6f:1f:3d:c2:33:97:61:4c:0b:fd:79:a5:91: d9:3e:af:c1:a3:bc:2c:ce:1a:aa:67:b9:6e:51:aa: 69:1e:d2:4e:f6:fe:16:e1:90:03:79:5b:b6:6a:2f: c4:1b:61:bd:89:02:08:ed:f9:d4:8e:ef:14:af:b0: bd:d3:08:79:f5:a0:1d:ec:2f:57:99:eb:43:d1:fb: 3d:0b:0b:b8:49:e1:16:f3:8a:7d:71:83:88:35:5c: b8:cb:e0:78:d9:6e:98:24:ec:e3:57:77:96:da:5a: 7d:7a:87:8b:20:9b:fd:d9:e3:44:23:c6:58:48:0e: 36:75:35:8d:45:4d:9e:c6:8f:af:58:2f:2d:57:74: a5:b1:5f:50:63:26:88:6b:55:0a:d6:21:fa:be:fa: bb:99:f9:7f:57:4b:39:28:33:ae:c3:c6:2d:ca:5a: 2f:d5:76:99:a3:d1:c6:5b:71:c7:99:22:5e:0e:e3: db:8a:42:69:af:c3:37:05:26:5b:19:6c:34:91:ce: 06:9d:04:63:69:6e:d1:6a:5f:47:b0:4d:44:f3:1c: 96:e7:bf:a3:5d:c3:18:fc:a3:39:0f:e8:41:a2:5d: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:79:F5:2A:23:AD:9D:56:04:CB:5B:AB:39:82:69:71:F0:88:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f862b17e-ee45-375e-bee8-9b7f02159065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b6:2b:69:c2:5b:f4:e3:93:15:61:f1:c0:b5:50:42:6e:48: e6:1b:95:41:12:04:ab:b9:82:4d:19:bd:0c:83:98:5a:c9:a9: 07:e1:1d:1c:31:3e:bf:b4:58:2f:8d:7a:46:9b:e7:4e:b4:4b: 45:07:33:ee:9a:27:95:af:3c:8d:62:00:a0:8a:68:6d:23:a1: 55:31:d7:7a:45:62:10:78:b4:1d:f4:3f:d0:44:0c:0c:57:ae: 74:47:18:bf:aa:d6:b0:27:d9:d6:ca:ef:0e:c1:52:e7:73:e5: 1a:49:01:2f:aa:a6:06:25:9c:4e:4b:e7:a1:0d:4d:34:ba:77: 0b:77:5c:21:19:6b:e3:c2:37:96:42:de:ad:00:86:0d:1c:b0: f2:0d:b0:c2:24:db:e2:8a:a5:cc:5f:df:1e:ce:ab:c9:f1:26: 5c:fd:f8:75:dc:a5:14:d3:20:e3:dd:3c:ec:95:3e:dd:35:ca: 53:c8:8a:0b:88:07:79:c1:a2:33:91:25:ae:72:fa:fd:4f:8c: dc:d1:67:4d:e8:3b:d5:61:b9:de:08:11:36:ad:7b:db:0d:10: ac:6e:ed:12:38:2b:e6:a5:12:6d:34:df:fa:86:ca:d0:60:33: 53:be:bb:d2:f3:f5:f1:79:2e:d9:5b:fe:99:b4:f6:69:7c:4a: e9:5c:44:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtT9OicuIBhaxwHWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNzAwMTMxNVoXDTI1MTIyNjAxMTMxNVowLzEtMCsGA1UEAxMk Y2JjYTFkMmYtMjMyZS00ZWQwLWI3MDktMzNlNWNlMTNlZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvMbmWeVfUrOovGN3NvxdCelHfIwHivnFR2z REByp28fPcIzl2FMC/15pZHZPq/Bo7wszhqqZ7luUappHtJO9v4W4ZADeVu2ai/E G2G9iQII7fnUju8Ur7C90wh59aAd7C9XmetD0fs9Cwu4SeEW84p9cYOINVy4y+B4 2W6YJOzjV3eW2lp9eoeLIJv92eNEI8ZYSA42dTWNRU2exo+vWC8tV3SlsV9QYyaI a1UK1iH6vvq7mfl/V0s5KDOuw8Ytylov1XaZo9HGW3HHmSJeDuPbikJpr8M3BSZb GWw0kc4GnQRjaW7Ral9HsE1E8xyW57+jXcMY/KM5D+hBol2huQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe1efUqI62dVgTLW6s5gmlx8Ij/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjg2MmIxN2UtZWU0NS0z NzVlLWJlZTgtOWI3ZjAyMTU5MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK2K2nCW/TjkxVh8cC1UEJuSOYblUESBKu5gk0ZvQyDmFrJqQfhHRwx Pr+0WC+Nekab5060S0UHM+6aJ5WvPI1iAKCKaG0joVUx13pFYhB4tB30P9BEDAxX rnRHGL+q1rAn2dbK7w7BUudz5RpJAS+qpgYlnE5L56ENTTS6dwt3XCEZa+PCN5ZC 3q0Ahg0csPINsMIk2+KKpcxf3x7Oq8nxJlz9+HXcpRTTIOPdPOyVPt01ylPIiguI B3nBojORJa5y+v1PjNzRZ03oO9Vhud4IETate9sNEKxu7RI4K+alEm003/qGytBg M1O+u9Lz9fF5Ltlb/pm09ml8SulcRIs= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:35 2025 by rpki-client