$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0d4d8e70-eff0-36f2-af74-047a857ea583.roa File: 0d4d8e70-eff0-36f2-af74-047a857ea583.roa (raw, json) Hash identifier: 5BWhazuQUBup7MGwIlNiqhvaSwXCo9QqENp91a3XzsM= Subject key identifier: 71:59:CF:06:21:99:4C:1F:99:56:3F:D3:E2:73:02:C8:49:2D:47:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9E2C275085109B3FE0E16100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0d4d8e70-eff0-36f2-af74-047a857ea583.roa Signing time: Thu 23 Oct 2025 14:14:23 +0000 ROA not before: Thu 23 Oct 2025 14:14:23 +0000 ROA not after: Wed 21 Jan 2026 15:14:23 +0000 asID: 266539 IP address blocks: 66.253.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:2c:27:50:85:10:9b:3f:e0:e1:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 14:14:23 2025 GMT Not After : Jan 21 15:14:23 2026 GMT Subject: CN=dd5d3a1d-5160-494a-ac07-3c7eee1e61f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:69:e6:e0:54:2a:d3:07:ae:1c:bd:9b:de: 23:af:2b:5a:0f:22:75:fd:f9:c1:25:56:13:e3:3f: f1:c3:b9:66:f7:77:d0:7e:ea:f7:88:22:9d:a2:c6: 6c:c8:37:3e:a3:94:24:a5:aa:be:b0:c0:b3:00:49: 16:7f:1d:fa:c4:62:54:ae:57:b6:aa:d1:20:74:d1: dc:32:b4:3d:c3:ad:c2:87:d0:71:92:50:88:44:bd: 27:50:d6:e0:a5:a8:72:64:08:e5:5b:41:69:54:67: 62:1b:23:db:87:ec:55:ca:8c:df:18:94:de:29:ce: ea:09:d3:6d:13:9b:02:35:ca:83:88:51:6b:a8:5e: 43:63:c4:a9:97:f0:d6:d7:62:de:e1:fa:c5:51:75: fa:1c:e7:4f:48:cf:2e:81:36:b8:23:de:ef:41:bd: b4:db:d3:4f:38:78:df:9f:f7:c9:2e:4c:6e:9b:d3: d9:9c:ad:20:49:53:0d:e4:2d:bc:bd:35:51:03:e6: b4:de:28:12:c8:ae:55:55:61:0c:6d:e4:03:b8:e1: eb:a9:57:89:c2:37:dc:69:67:44:84:24:0c:dd:89: b9:86:e3:8b:76:f2:e7:c9:83:65:66:5b:1b:c9:6b: 3a:41:53:33:ee:74:c1:8d:ba:0d:14:cb:a7:0f:ad: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:59:CF:06:21:99:4C:1F:99:56:3F:D3:E2:73:02:C8:49:2D:47:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0d4d8e70-eff0-36f2-af74-047a857ea583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:73:37:9a:3f:22:91:48:79:2e:29:28:d2:94:a2:5a:57:49: d6:60:f6:42:9c:a7:cc:e0:69:c2:8f:29:bf:c0:be:a6:b9:e0: 13:a1:38:36:09:ff:e4:42:7c:51:73:a6:43:ea:27:ea:21:57: 1d:23:36:71:1e:7c:30:23:3a:cf:3f:ca:82:b1:79:07:1e:62: c6:42:54:a7:98:12:3e:7a:3a:f5:9c:31:3a:cc:19:09:85:87: 60:d3:ed:4c:45:94:56:92:26:0c:a9:90:e7:50:ea:cd:9f:3b: 3f:aa:fa:c2:0c:71:50:e3:6b:58:9a:21:0e:51:20:02:61:d4: 5a:0d:15:16:c5:a2:b6:48:84:2f:0f:74:96:d8:5f:88:ca:f1: 0e:e3:ac:80:35:55:49:fe:d0:2c:be:62:dd:dc:36:c1:bc:c1: 8a:b4:d5:08:87:0a:3e:fd:41:24:db:a2:85:01:2b:e3:26:0e: 49:93:66:d1:7c:92:61:3b:9f:ea:4e:fd:2a:26:d3:a0:0e:be: fe:02:ab:08:5f:2f:48:64:63:91:94:8f:fe:df:82:64:dc:da: 37:dc:b3:92:a6:81:bd:da:96:02:ca:a6:cf:80:de:e9:5f:03: 51:79:66:da:8b:6e:9d:93:04:d7:b9:e7:c3:a1:79:0b:d5:71: 92:04:e1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueLCdQhRCbP+DhYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzE0MTQyM1oXDTI2MDEyMTE1MTQyM1owLzEtMCsGA1UEAxMk ZGQ1ZDNhMWQtNTE2MC00OTRhLWFjMDctM2M3ZWVlMWU2MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw5p5uBUKtMHrhy9m94jrytaDyJ1/fnBJVYT 4z/xw7lm93fQfur3iCKdosZsyDc+o5Qkpaq+sMCzAEkWfx36xGJUrle2qtEgdNHc MrQ9w63Ch9BxklCIRL0nUNbgpahyZAjlW0FpVGdiGyPbh+xVyozfGJTeKc7qCdNt E5sCNcqDiFFrqF5DY8Spl/DW12Le4frFUXX6HOdPSM8ugTa4I97vQb2029NPOHjf n/fJLkxum9PZnK0gSVMN5C28vTVRA+a03igSyK5VVWEMbeQDuOHrqVeJwjfcaWdE hCQM3Ym5huOLdvLnyYNlZlsbyWs6QVMz7nTBjboNFMunD60gbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFZzwYhmUwfmVY/0+JzAshJLUfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGQ0ZDhlNzAtZWZmMC0z NmYyLWFmNzQtMDQ3YTg1N2VhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtzN5o/IpFIeS4pKNKUolpXSdZg9kKcp8zgacKPKb/Avqa54BOhODYJ /+RCfFFzpkPqJ+ohVx0jNnEefDAjOs8/yoKxeQceYsZCVKeYEj56OvWcMTrMGQmF h2DT7UxFlFaSJgypkOdQ6s2fOz+q+sIMcVDja1iaIQ5RIAJh1FoNFRbForZIhC8P dJbYX4jK8Q7jrIA1VUn+0Cy+Yt3cNsG8wYq01QiHCj79QSTbooUBK+MmDkmTZtF8 kmE7n+pO/Som06AOvv4CqwhfL0hkY5GUj/7fgmTc2jfcs5Kmgb3algLKps+A3ulf A1F5ZtqLbp2TBNe558OheQvVcZIE4T0= -----END CERTIFICATE-----Generated at Sat Oct 25 20:35:46 2025 by rpki-client