$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/673beb3b-5715-321d-8aa3-41e095831a72.roa File: 673beb3b-5715-321d-8aa3-41e095831a72.roa (raw, json) Hash identifier: Km/V9YeZq7NB7GuWx1E4TaMSlFr2SIXSsCg4DYyDcYw= Subject key identifier: 63:49:62:6A:62:08:C9:D1:BA:01:B6:ED:FA:6E:D0:F4:02:25:84:B9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8FA2E8302D8186C14FFD7260 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/673beb3b-5715-321d-8aa3-41e095831a72.roa Signing time: Sat 18 Oct 2025 09:16:32 +0000 ROA not before: Sat 18 Oct 2025 09:16:32 +0000 ROA not after: Fri 16 Jan 2026 10:16:32 +0000 asID: 205886 IP address blocks: 66.253.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:a2:e8:30:2d:81:86:c1:4f:fd:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 18 09:16:32 2025 GMT Not After : Jan 16 10:16:32 2026 GMT Subject: CN=77df9075-6225-4610-aa32-010710ef4fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:24:b2:ac:65:88:45:ef:bc:f3:3f:50:59: b6:7d:97:2c:a3:26:b4:11:72:95:32:07:8a:6e:8c: 0e:c2:56:58:bd:79:c5:69:c6:1a:f9:8a:e0:a2:98: b3:40:c8:8e:f3:97:c4:4b:76:6b:81:46:f7:35:e5: e3:07:62:df:f6:50:32:e2:67:69:5c:21:42:84:ee: 44:b6:dc:26:d9:0a:dd:3e:5f:f7:70:eb:d2:c5:34: 65:a5:dd:dd:4a:9e:d7:62:4f:20:f0:2b:2c:2e:66: d3:e5:92:fc:c8:65:e1:e2:12:65:fc:32:0b:0e:a3: 86:35:c8:0b:be:4b:6a:27:d0:30:36:2b:c8:97:bc: 11:1f:e7:80:3b:30:8d:84:06:84:4d:cd:ea:47:8f: 09:ca:f2:01:da:43:15:7d:2c:c6:e3:99:64:ea:be: 85:fe:a9:bb:34:96:84:b2:b4:8b:e1:d4:90:cc:fc: 1c:e8:43:a0:26:93:99:c3:b9:ac:3f:aa:75:5c:71: 1a:a4:09:68:8c:ef:7b:37:a1:16:ed:8f:bc:53:c8: d8:8d:f5:84:c7:cc:48:e4:76:c4:1c:21:82:7b:7f: f4:0f:5f:f1:f7:34:66:e1:e8:f1:89:38:76:ea:84: 8c:a2:60:e8:2f:e7:89:43:cb:94:07:fd:a3:93:0e: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:49:62:6A:62:08:C9:D1:BA:01:B6:ED:FA:6E:D0:F4:02:25:84:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/673beb3b-5715-321d-8aa3-41e095831a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:e2:d8:96:4a:ff:23:d9:b4:34:b8:11:f4:d9:13:4f:20:47: 41:b0:61:af:93:c9:ac:06:28:97:84:f0:75:2e:f9:b4:e0:1d: 19:4a:0b:d6:c9:79:2e:fa:4b:23:dd:2d:81:b8:dc:17:0d:a1: a1:c1:71:ab:80:0e:69:84:26:a7:80:61:d7:e4:9b:a6:33:bb: 82:d5:e7:38:be:9c:a8:a0:23:4e:03:78:44:3b:b7:77:50:10: b7:88:33:b3:8e:56:1d:9e:25:a8:de:f3:bf:53:0e:2b:91:e4: 1f:22:8c:e2:1e:f8:ae:d3:6b:3a:5f:79:1d:22:6d:b5:96:e6: 58:d6:b5:93:95:ec:b2:3e:f0:d0:cf:4c:a9:fd:45:9c:3c:f1: a6:50:30:bb:8c:48:83:1a:0b:d3:10:1c:c0:f3:b6:3c:f8:79: 32:49:e5:8b:3d:0f:81:da:0c:74:19:48:ee:7f:67:b7:b4:02: 45:01:19:58:03:7e:e4:2d:15:79:73:a6:b1:8d:eb:83:43:8f: 6a:c5:be:c9:4e:0e:3c:cc:81:23:4e:8e:f5:ea:32:97:00:b6: dc:f0:83:12:ec:76:a9:d9:27:13:25:d9:1a:d4:f0:a7:60:df: 79:2e:09:10:09:e8:b0:28:a5:c0:9a:67:37:a6:6b:7e:ef:dd: 35:d7:dc:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPougwLYGGwU/9cmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxODA5MTYzMloXDTI2MDExNjEwMTYzMlowLzEtMCsGA1UEAxMk NzdkZjkwNzUtNjIyNS00NjEwLWFhMzItMDEwNzEwZWY0ZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3YksqxliEXvvPM/UFm2fZcsoya0EXKVMgeK bowOwlZYvXnFacYa+YrgopizQMiO85fES3ZrgUb3NeXjB2Lf9lAy4mdpXCFChO5E ttwm2QrdPl/3cOvSxTRlpd3dSp7XYk8g8CssLmbT5ZL8yGXh4hJl/DILDqOGNcgL vktqJ9AwNivIl7wRH+eAOzCNhAaETc3qR48JyvIB2kMVfSzG45lk6r6F/qm7NJaE srSL4dSQzPwc6EOgJpOZw7msP6p1XHEapAlojO97N6EW7Y+8U8jYjfWEx8xI5HbE HCGCe3/0D1/x9zRm4ejxiTh26oSMomDoL+eJQ8uUB/2jkw7fdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNJYmpiCMnRugG27fpu0PQCJYS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjczYmViM2ItNTcxNS0z MjFkLThhYTMtNDFlMDk1ODMxYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3i2JZK/yPZtDS4EfTZE08gR0GwYa+TyawGKJeE8HUu+bTgHRlKC9bJ eS76SyPdLYG43BcNoaHBcauADmmEJqeAYdfkm6Yzu4LV5zi+nKigI04DeEQ7t3dQ ELeIM7OOVh2eJaje879TDiuR5B8ijOIe+K7TazpfeR0ibbWW5ljWtZOV7LI+8NDP TKn9RZw88aZQMLuMSIMaC9MQHMDztjz4eTJJ5Ys9D4HaDHQZSO5/Z7e0AkUBGVgD fuQtFXlzprGN64NDj2rFvslODjzMgSNOjvXqMpcAttzwgxLsdqnZJxMl2RrU8Kdg 33kuCRAJ6LAopcCaZzema37v3TXX3No= -----END CERTIFICATE-----Generated at Sat Nov 1 08:31:06 2025 by rpki-client