$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e708f8-d375-30ea-adc5-12541550d6ec.roa File: a3e708f8-d375-30ea-adc5-12541550d6ec.roa (raw, json) Hash identifier: KU/7jABLDg485uCFYBsozpsmPLymlgmyoP0kBo1UMcQ= Subject key identifier: 74:CF:49:0A:90:C3:50:FF:A3:11:77:F9:4C:F0:84:91:6B:EB:41:E0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFEE725AD1DAFB4ABD8C8D900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e708f8-d375-30ea-adc5-12541550d6ec.roa Signing time: Wed 27 Aug 2025 13:01:49 +0000 ROA not before: Wed 27 Aug 2025 13:01:49 +0000 ROA not after: Tue 25 Nov 2025 14:01:49 +0000 asID: 211192 IP address blocks: 66.92.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e7:25:ad:1d:af:b4:ab:d8:c8:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 27 13:01:49 2025 GMT Not After : Nov 25 14:01:49 2025 GMT Subject: CN=fa8bb00e-25e1-42fc-8ec9-f8b7c3e73ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:92:98:a9:36:85:8f:56:5e:fc:ab:12:ef: 8f:47:78:01:d8:38:0f:96:4a:be:4a:49:41:50:70: 6f:3f:5f:a7:f1:2a:22:a6:95:7a:e8:a3:b8:d8:f0: a9:17:32:3a:08:80:5c:d4:26:55:76:f9:b9:30:3f: c3:07:35:f8:a5:6f:af:e9:bb:fd:3d:2a:ef:73:f8: 0f:69:7f:64:fe:0c:fa:19:59:53:6c:32:63:59:14: 4a:46:ba:bc:c5:a3:30:eb:f9:15:a2:d5:6d:30:25: 32:72:30:7b:f3:c2:fc:37:8f:b8:2e:e9:a4:38:39: f6:55:48:56:16:85:ba:f1:32:1e:e4:a5:d3:f0:f2: f1:70:20:df:9b:42:84:08:c7:46:9e:81:2b:7d:aa: 1f:37:57:04:3f:2e:a8:b0:bf:80:2a:a5:77:a6:26: 59:0a:08:97:d3:90:41:ed:6c:c0:f7:90:f2:e7:6c: fe:ec:c4:7c:43:09:4b:36:0c:c4:cc:78:f3:34:0a: d0:50:3b:a2:55:6f:12:ef:79:b7:75:c8:03:11:fe: 4f:cd:29:be:b8:65:4d:a0:c1:19:46:94:2c:bc:1a: 77:e0:5f:4a:b4:d0:2a:0a:0a:c4:88:a1:2b:17:c1: 36:61:c7:2c:bf:ec:92:c0:0e:cd:da:15:4a:17:ab: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CF:49:0A:90:C3:50:FF:A3:11:77:F9:4C:F0:84:91:6B:EB:41:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e708f8-d375-30ea-adc5-12541550d6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3d:b2:c8:97:27:96:af:00:21:f0:56:62:29:f3:e6:3a:70: 83:2e:d8:0e:8a:3d:06:08:1f:0b:f0:e7:61:1d:ad:ed:5a:ae: 8c:c6:54:28:94:6f:da:0e:90:47:75:a5:df:92:09:a1:9b:b4: a5:3c:d1:c3:87:1e:9e:18:29:37:fc:bb:11:c1:a8:2b:de:53: 60:b1:ef:26:b1:fb:af:87:cb:94:73:e6:25:b4:4b:a3:60:f2: a0:b7:1d:e0:3c:a4:41:10:6b:7f:12:1c:ca:68:3f:d5:d7:73: 8f:a8:e2:8f:b3:d7:ff:a2:d4:bd:d9:d0:c6:3e:0f:b8:bf:38: e2:bd:6b:ac:37:55:ab:e5:3a:54:e9:2c:8d:9e:b4:9b:67:56: d9:11:b9:89:9b:d8:8a:63:0e:f8:cb:d1:b3:71:58:59:e9:8d: 92:cd:ef:72:6f:69:b9:d8:64:76:37:f1:8e:32:67:e5:4e:10: 07:09:2f:d6:e5:b9:89:17:78:4d:c0:a9:91:5e:90:42:87:54: 6d:6e:db:0c:78:07:b4:38:55:07:d7:91:5c:9e:d8:c6:da:af: 39:e7:4a:59:23:6d:2a:d8:a9:8d:ee:a5:9f:bb:35:15:e3:d6: 67:7c:b6:fe:44:c3:77:bd:92:75:ca:0f:36:a9:e3:a0:13:52: ff:95:0e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5yWtHa+0q9jI2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNzEzMDE0OVoXDTI1MTEyNTE0MDE0OVowLzEtMCsGA1UEAxMk ZmE4YmIwMGUtMjVlMS00MmZjLThlYzktZjhiN2MzZTczYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPuSmKk2hY9WXvyrEu+PR3gB2DgPlkq+SklB UHBvP1+n8SoippV66KO42PCpFzI6CIBc1CZVdvm5MD/DBzX4pW+v6bv9PSrvc/gP aX9k/gz6GVlTbDJjWRRKRrq8xaMw6/kVotVtMCUycjB788L8N4+4LumkODn2VUhW FoW68TIe5KXT8PLxcCDfm0KECMdGnoErfaofN1cEPy6osL+AKqV3piZZCgiX05BB 7WzA95Dy52z+7MR8QwlLNgzEzHjzNArQUDuiVW8S73m3dcgDEf5PzSm+uGVNoMEZ RpQsvBp34F9KtNAqCgrEiKErF8E2Yccsv+ySwA7N2hVKF6useQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTPSQqQw1D/oxF3+UzwhJFr60HgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTNlNzA4ZjgtZDM3NS0z MGVhLWFkYzUtMTI1NDE1NTBkNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC89ssiXJ5avACHwVmIp8+Y6cIMu2A6KPQYIHwvw52Edre1arozGVCiU b9oOkEd1pd+SCaGbtKU80cOHHp4YKTf8uxHBqCveU2Cx7yax+6+Hy5Rz5iW0S6Ng 8qC3HeA8pEEQa38SHMpoP9XXc4+o4o+z1/+i1L3Z0MY+D7i/OOK9a6w3VavlOlTp LI2etJtnVtkRuYmb2IpjDvjL0bNxWFnpjZLN73JvabnYZHY38Y4yZ+VOEAcJL9bl uYkXeE3AqZFekEKHVG1u2wx4B7Q4VQfXkVye2MbarznnSlkjbSrYqY3upZ+7NRXj 1md8tv5Ew3e9knXKDzap46ATUv+VDlY= -----END CERTIFICATE-----Generated at Sun Sep 14 09:44:28 2025 by rpki-client