$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7622117e-722b-3df0-97c6-a534715be73e.roa File: 7622117e-722b-3df0-97c6-a534715be73e.roa (raw, json) Hash identifier: 1Kq+LhBeKiEz936vXn0Arl9HHUfrNigVlI8UBxMCKCY= Subject key identifier: 08:6D:43:98:51:40:DC:38:17:D6:FC:49:32:0D:CE:48:5F:07:94:F2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B92D9DBA330536EBC1CEAC200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7622117e-722b-3df0-97c6-a534715be73e.roa Signing time: Sun 19 Oct 2025 12:54:41 +0000 ROA not before: Sun 19 Oct 2025 12:54:41 +0000 ROA not after: Sat 17 Jan 2026 13:54:41 +0000 asID: 9304 IP address blocks: 66.92.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:d9:db:a3:30:53:6e:bc:1c:ea:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 19 12:54:41 2025 GMT Not After : Jan 17 13:54:41 2026 GMT Subject: CN=2a0a65c7-cb83-4d3f-b4bc-4cd0956720b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:cd:96:7d:0d:97:5c:bd:c1:85:4c:c5:4e: 0f:bf:df:25:1e:b7:70:58:6f:26:b1:04:01:c3:a2: 29:57:2d:2a:a9:10:67:fd:7e:be:c2:85:9f:37:5a: b2:92:f4:ac:e5:4f:4d:7e:0a:85:02:98:0b:a3:b9: 1a:4c:90:bd:ac:dd:32:97:e5:36:59:44:cc:d7:1a: 12:12:c4:e8:f2:89:26:03:c0:f2:95:98:e0:e6:2c: 0c:2b:c2:db:b9:48:da:27:65:48:a0:1e:20:5c:1a: 24:9d:6f:fe:09:f6:ec:fe:1a:d2:e9:c2:cb:d5:64: b3:cf:e0:1c:84:55:d2:e2:0c:4b:59:3e:4c:03:5b: df:e8:ec:59:5f:6c:98:16:fe:ea:a1:7e:d8:a3:96: 23:5c:bd:38:b1:eb:3d:4c:e5:f9:99:21:59:2d:b3: c7:bf:e5:f5:7a:bb:a6:6f:ac:78:88:57:14:c3:1e: d6:c9:cd:26:7a:1d:22:ad:26:33:71:ed:05:59:43: 20:f9:ed:10:07:38:49:77:1f:61:ac:7c:9a:de:0b: 4e:82:11:5b:24:00:a7:3e:4f:2a:3d:27:e0:94:c1: 59:f0:19:ef:dd:5c:d1:5c:81:d5:ef:42:ce:1e:52: 72:c4:24:69:dc:ff:57:79:c8:5c:ee:b0:8a:c7:e3: bb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6D:43:98:51:40:DC:38:17:D6:FC:49:32:0D:CE:48:5F:07:94:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7622117e-722b-3df0-97c6-a534715be73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1b:33:00:59:3b:0c:76:bc:48:80:cb:31:4f:d3:4d:a4:80: de:17:48:b2:0b:ed:04:8f:04:88:ea:ec:a2:8e:ac:31:38:13: cf:71:f0:b6:cb:b0:46:a7:02:16:86:27:03:10:ce:2a:bc:eb: 06:03:ae:e5:97:12:c0:92:dc:6e:8b:d1:07:02:38:87:86:e1: 0e:d7:d6:b1:79:29:79:c6:bf:f8:b3:6e:75:a5:35:50:85:13: 5c:fa:bd:76:c1:d5:71:3c:b8:49:aa:40:71:d6:cf:ed:02:1b: 92:5e:86:32:87:8b:3c:b4:19:34:23:74:9c:5d:4e:ee:ab:b4: f2:48:34:30:59:f2:83:30:47:17:de:d3:43:78:9b:7d:4e:86: cc:9f:8d:e0:63:e8:b2:4e:44:65:c2:07:b7:ef:4f:e8:32:8d: 18:ab:f8:b0:5c:22:6d:8b:16:e6:7d:ff:d6:4e:1f:1c:04:ad: bb:c3:a9:32:0b:9c:d2:0c:7a:31:f0:a9:d0:e1:44:79:f5:9f: c0:3d:4f:1f:c6:52:90:19:c5:58:d8:29:c1:3d:4b:67:7d:fa: 0a:25:89:d5:99:e7:25:8c:bf:18:85:b9:53:d3:03:54:7b:52: eb:86:b5:67:d1:b6:4a:52:91:01:f3:6d:39:0c:82:86:ec:cb: 9c:71:98:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS2dujMFNuvBzqwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxOTEyNTQ0MVoXDTI2MDExNzEzNTQ0MVowLzEtMCsGA1UEAxMk MmEwYTY1YzctY2I4My00ZDNmLWI0YmMtNGNkMDk1NjcyMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfLNln0Nl1y9wYVMxU4Pv98lHrdwWG8msQQB w6IpVy0qqRBn/X6+woWfN1qykvSs5U9NfgqFApgLo7kaTJC9rN0yl+U2WUTM1xoS EsTo8okmA8DylZjg5iwMK8LbuUjaJ2VIoB4gXBoknW/+Cfbs/hrS6cLL1WSzz+Ac hFXS4gxLWT5MA1vf6OxZX2yYFv7qoX7Yo5YjXL04ses9TOX5mSFZLbPHv+X1erum b6x4iFcUwx7Wyc0meh0irSYzce0FWUMg+e0QBzhJdx9hrHya3gtOghFbJACnPk8q PSfglMFZ8Bnv3VzRXIHV70LOHlJyxCRp3P9Xechc7rCKx+O7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhtQ5hRQNw4F9b8STINzkhfB5TyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzYyMjExN2UtNzIyYi0z ZGYwLTk3YzYtYTUzNDcxNWJlNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4bMwBZOwx2vEiAyzFP002kgN4XSLIL7QSPBIjq7KKOrDE4E89x8LbL sEanAhaGJwMQziq86wYDruWXEsCS3G6L0QcCOIeG4Q7X1rF5KXnGv/izbnWlNVCF E1z6vXbB1XE8uEmqQHHWz+0CG5JehjKHizy0GTQjdJxdTu6rtPJINDBZ8oMwRxfe 00N4m31OhsyfjeBj6LJORGXCB7fvT+gyjRir+LBcIm2LFuZ9/9ZOHxwErbvDqTIL nNIMejHwqdDhRHn1n8A9Tx/GUpAZxVjYKcE9S2d9+golidWZ5yWMvxiFuVPTA1R7 UuuGtWfRtkpSkQHzbTkMgobsy5xxmPI= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:22 2025 by rpki-client