$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aaae783-b020-347d-82d3-5e23f6f02b56.roa File: 5aaae783-b020-347d-82d3-5e23f6f02b56.roa (raw, json) Hash identifier: tJAf06zo0m7pazwJOeGpbJPrRHkYs452aUWyD3RPWK8= Subject key identifier: BA:19:76:72:11:5F:2E:C2:C8:2B:13:FB:C1:0E:8A:24:28:AA:BB:95 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B19770DCE5CD41F80EA269A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aaae783-b020-347d-82d3-5e23f6f02b56.roa Signing time: Sat 06 Sep 2025 01:22:47 +0000 ROA not before: Sat 06 Sep 2025 01:22:47 +0000 ROA not after: Fri 05 Dec 2025 02:22:47 +0000 asID: 10111 IP address blocks: 66.92.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:77:0d:ce:5c:d4:1f:80:ea:26:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 6 01:22:47 2025 GMT Not After : Dec 5 02:22:47 2025 GMT Subject: CN=1553710e-4c16-4959-9382-611f6fc30d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:cd:d6:56:d0:3d:17:da:74:e9:c9:bd:58: 9e:06:25:ca:b5:fc:9d:b8:92:43:ff:a2:1e:71:a9: 60:a7:fd:70:dc:7d:0e:24:e8:7f:db:a6:18:e6:c9: 17:2d:0d:2c:3c:c4:00:0f:7a:ea:d0:a7:5d:9a:3e: b8:22:d5:1d:35:39:2f:0b:4b:b4:26:aa:fe:32:d7: a0:14:d4:df:bb:e4:16:d9:12:ab:8f:30:f9:6e:0c: f1:52:0d:19:a3:7d:ba:5c:e3:77:55:8a:4f:11:27: 5d:80:86:77:b0:cd:0c:56:a3:68:9d:a9:01:0d:34: 08:83:62:6a:c4:0e:b4:13:39:86:64:19:5f:51:1f: ee:7e:4b:56:66:4c:b6:dd:a0:8a:18:9c:08:32:34: d3:dc:93:62:36:67:09:79:7a:fb:1f:8a:7a:9b:6a: f1:3a:2b:a0:f3:82:13:bb:af:09:04:4a:e8:fc:c2: 86:1a:d9:ea:cc:51:91:eb:e7:cd:4d:f8:d5:81:c5: b4:4e:ca:75:8c:11:7b:48:ff:a1:8d:73:05:04:2b: 7e:5b:12:cd:ff:70:99:01:2a:9c:15:4d:6f:82:25: a6:52:1f:68:15:e0:1e:e1:77:c8:e7:34:3e:d5:fc: c7:ee:b9:12:41:2b:f7:42:6f:39:2d:d6:90:71:1a: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:19:76:72:11:5F:2E:C2:C8:2B:13:FB:C1:0E:8A:24:28:AA:BB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5aaae783-b020-347d-82d3-5e23f6f02b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bb:6d:8f:98:b6:fd:e5:62:a9:7a:59:36:28:6d:2e:2b:b3: b0:59:2f:3e:ae:d3:6b:93:a4:9d:aa:70:fc:85:7d:0e:1a:ed: 8c:0d:86:da:3b:73:59:eb:16:db:dd:68:4e:0f:4c:8d:1f:20: 0d:d7:ec:a9:08:43:1a:a6:ed:66:23:62:31:d4:aa:f5:f1:e6: 6b:fe:56:f2:91:d2:44:78:3c:8d:cd:dc:95:a7:86:fe:c7:b8: fa:3a:7b:ed:32:e6:a0:b0:86:20:d7:e9:0a:37:5e:5f:99:e8: ed:66:9d:c5:2b:86:7a:9e:c4:16:52:3c:60:77:76:e1:92:e9: 5a:09:e2:db:4f:29:4a:24:02:6d:d9:79:ae:55:08:dd:38:21: 01:73:36:32:8c:59:16:62:f6:4a:b0:04:a1:79:78:1a:4b:cc: 44:8d:35:dd:32:92:a5:60:7d:bd:ad:e2:82:12:7b:01:13:31: 74:0c:a0:b0:91:ec:2b:47:eb:22:5e:5a:19:c0:70:99:57:dd: 13:47:be:33:e2:34:e3:ff:b7:25:af:34:3e:64:4e:46:a0:be: 9e:a9:77:cf:c5:b0:3c:50:e0:4d:df:20:0d:b6:81:f0:ba:0c: db:5e:2c:e8:eb:70:36:45:17:63:a7:cd:a9:c3:f6:5b:6a:ac: ca:8e:de:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZdw3OXNQfgOommgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwNjAxMjI0N1oXDTI1MTIwNTAyMjI0N1owLzEtMCsGA1UEAxMk MTU1MzcxMGUtNGMxNi00OTU5LTkzODItNjExZjZmYzMwZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2HN1lbQPRfadOnJvVieBiXKtfyduJJD/6Ie calgp/1w3H0OJOh/26YY5skXLQ0sPMQAD3rq0Kddmj64ItUdNTkvC0u0Jqr+Mteg FNTfu+QW2RKrjzD5bgzxUg0Zo326XON3VYpPESddgIZ3sM0MVqNonakBDTQIg2Jq xA60EzmGZBlfUR/ufktWZky23aCKGJwIMjTT3JNiNmcJeXr7H4p6m2rxOiug84IT u68JBEro/MKGGtnqzFGR6+fNTfjVgcW0Tsp1jBF7SP+hjXMFBCt+WxLN/3CZASqc FU1vgiWmUh9oFeAe4XfI5zQ+1fzH7rkSQSv3Qm85LdaQcRolawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoZdnIRXy7CyCsT+8EOiiQoqruVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWFhYWU3ODMtYjAyMC0z NDdkLTgyZDMtNWUyM2Y2ZjAyYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu7bY+Ytv3lYql6WTYobS4rs7BZLz6u02uTpJ2qcPyFfQ4a7YwNhto7 c1nrFtvdaE4PTI0fIA3X7KkIQxqm7WYjYjHUqvXx5mv+VvKR0kR4PI3N3JWnhv7H uPo6e+0y5qCwhiDX6Qo3Xl+Z6O1mncUrhnqexBZSPGB3duGS6VoJ4ttPKUokAm3Z ea5VCN04IQFzNjKMWRZi9kqwBKF5eBpLzESNNd0ykqVgfb2t4oISewETMXQMoLCR 7CtH6yJeWhnAcJlX3RNHvjPiNOP/tyWvND5kTkagvp6pd8/FsDxQ4E3fIA22gfC6 DNteLOjrcDZFF2OnzanD9ltqrMqO3tM= -----END CERTIFICATE-----Generated at Sat Sep 6 13:13:34 2025 by rpki-client