$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/6c9c75cc-beee-3434-a022-df621ea9a8c5.roa File: 6c9c75cc-beee-3434-a022-df621ea9a8c5.roa (raw, json) Hash identifier: W7iNXwORJdUPPdbk0Ovyw0LpBXVOS4Xb/XOqZPQobJg= Subject key identifier: EA:79:F6:2F:AD:F1:31:46:59:EA:E7:BF:0E:08:01:FF:94:54:21:5F Certificate issuer: /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Certificate serial: 010D0C9F4328584BA39D112D01CDF260708555C0 Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/6c9c75cc-beee-3434-a022-df621ea9a8c5.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 66.129.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:11:2d:01:cd:f2:60:70:85:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b7221972-982f-4309-8fbe-7c28ff7a882d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:32:78:5d:ab:10:b5:8b:25:9e:51:90:30: 3f:2e:c8:66:df:a4:9b:01:c0:2a:f6:a3:f3:40:73: 5b:34:a5:56:47:96:1f:a5:be:1b:ac:85:2a:a4:82: a3:98:56:84:48:52:5d:f6:50:3c:7f:a8:0c:e3:6c: ad:47:c3:6c:26:b7:8b:f9:da:b4:7b:8d:b3:cb:0c: d8:ce:aa:86:51:a3:88:ca:10:2f:ec:ec:05:c3:d3: d2:44:02:ac:5d:23:cc:c2:72:b6:b9:f5:ad:99:da: 9e:cb:c0:4e:b2:98:a0:66:f3:e9:12:5b:5a:7e:4e: 5d:ed:90:d3:7c:00:b4:82:ed:bd:a0:ab:93:14:bd: 76:49:b2:61:34:4b:94:8e:c8:73:9c:58:27:1b:85: 70:ed:f0:96:5d:15:2e:dd:74:a8:b3:79:0d:a2:7b: 93:fa:a2:7c:f4:ac:0b:9d:88:c8:aa:e2:3e:c6:9c: 79:c8:c1:13:34:1c:5e:5b:6c:0f:5d:5b:0b:96:d0: 28:d2:fb:cb:15:72:c5:ff:ad:ef:da:72:1c:de:d6: 2d:aa:85:e5:30:70:7a:e4:c3:dd:c0:01:03:5c:21: c9:26:7a:75:c4:2f:19:d6:b8:8b:c2:b2:8c:bc:5f: 8a:8f:22:e3:82:d4:49:f4:52:9f:f4:75:2d:05:64: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:79:F6:2F:AD:F1:31:46:59:EA:E7:BF:0E:08:01:FF:94:54:21:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/6c9c75cc-beee-3434-a022-df621ea9a8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl X509v3 Authority Key Identifier: keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer sbgp-ipAddrBlock: critical IPv4: 66.129.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b0:b5:78:c0:c5:9d:cc:f6:38:5f:82:48:5d:10:08:4d:f9: d8:66:d5:8c:49:85:fb:ca:30:71:4b:49:73:bb:ff:6f:6c:97: ec:aa:49:5e:8e:cd:50:be:a4:ee:41:37:2f:d6:03:22:c5:1f: f9:f2:40:81:02:c3:09:df:48:86:b7:86:17:fb:5e:32:8d:05: b4:bf:f7:d6:9d:f0:2d:e9:66:88:5a:8e:a0:5c:7b:2b:63:af: a6:50:14:63:39:d9:03:54:c9:b0:0e:a6:d5:99:eb:16:3e:1d: a7:0f:df:d3:2a:4e:87:59:13:b1:e7:56:8f:a5:45:22:70:40: 80:f9:3d:f0:b2:1a:c6:35:82:66:2f:00:7f:86:07:6e:4d:ba: cb:70:07:9e:d5:54:d4:08:df:f3:8f:df:9e:fe:47:2b:95:e5: 82:86:17:d7:27:ef:12:ae:a7:df:d0:40:d0:b5:a3:c6:f2:8a: 1c:2c:91:eb:ee:a8:26:3e:15:f5:8e:0e:d7:4e:cb:ba:7d:19: 17:52:65:16:00:29:6f:57:44:b7:6d:86:48:91:a4:cb:d0:4b: 08:58:8b:0f:34:63:01:b0:b6:f1:ea:26:fd:7a:e4:22:ca:09: a4:4f:9d:f5:ac:1d:94:5a:b0:17:b4:d2:94:6c:14:f0:c6:94: 06:c7:2e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnREtAc3yYHCFVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YzdmNmItODE2OC00NDI5LTk0ZDUtY2ZiMTRlNTdk ZDJlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjcyMjE5NzItOTgyZi00MzA5LThmYmUtN2MyOGZmN2E4ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlQyeF2rELWLJZ5RkDA/Lshm36SbAcAq9qPz QHNbNKVWR5Yfpb4brIUqpIKjmFaESFJd9lA8f6gM42ytR8NsJreL+dq0e42zywzY zqqGUaOIyhAv7OwFw9PSRAKsXSPMwnK2ufWtmdqey8BOspigZvPpEltafk5d7ZDT fAC0gu29oKuTFL12SbJhNEuUjshznFgnG4Vw7fCWXRUu3XSos3kNonuT+qJ89KwL nYjIquI+xpx5yMETNBxeW2wPXVsLltAo0vvLFXLF/63v2nIc3tYtqoXlMHB65MPd wAEDXCHJJnp1xC8Z1riLwrKMvF+KjyLjgtRJ9FKf9HUtBWSshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp59i+t8TFGWernvw4IAf+UVCFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZj N2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1N2RkMmUvNmM5Yzc1Y2MtYmVlZS0z NDM0LWEwMjItZGY2MjFlYTlhOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2YzdmNmItODE2OC00NDI5LTk0 ZDUtY2ZiMTRlNTdkZDJlL2RhNmM3ZjZiLTgxNjgtNDQyOS05NGQ1LWNmYjE0ZTU3 ZGQyZS5jcmwwHwYDVR0jBBgwFoAUA3k0rC78UNQi5NbDk13OTGnEefYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIx NGU1N2RkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSwtXjAxZ3M9jhfgkhdEAhN+dhm1YxJhfvKMHFLSXO7/29sl+yqSV6O zVC+pO5BNy/WAyLFH/nyQIECwwnfSIa3hhf7XjKNBbS/99ad8C3pZohajqBceytj r6ZQFGM52QNUybAOptWZ6xY+HacP39MqTodZE7HnVo+lRSJwQID5PfCyGsY1gmYv AH+GB25NustwB57VVNQI3/OP357+RyuV5YKGF9cn7xKup9/QQNC1o8byihwskevu qCY+FfWODtdOy7p9GRdSZRYAKW9XRLdthkiRpMvQSwhYiw80YwGwtvHqJv165CLK CaRPnfWsHZRasBe00pRsFPDGlAbHLpY= -----END CERTIFICATE-----Generated at Sat Nov 15 14:49:34 2025 by rpki-client