$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaeb17b2-6589-3739-81a2-06e75319f6df.roa File: aaeb17b2-6589-3739-81a2-06e75319f6df.roa (raw, json) Hash identifier: stqnBhLAJToHmy7Qdnx6txCUcWnaQaytHzGKFKuH8RY= Subject key identifier: 56:54:BE:47:29:8D:3C:B3:C9:05:FF:AD:AD:C3:E9:33:F9:4B:27:7F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B0072F3F33F20CA8AD923D700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaeb17b2-6589-3739-81a2-06e75319f6df.roa Signing time: Thu 28 Aug 2025 02:19:19 +0000 ROA not before: Thu 28 Aug 2025 02:19:19 +0000 ROA not after: Wed 26 Nov 2025 03:19:19 +0000 asID: 16589 IP address blocks: 66.253.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:72:f3:f3:3f:20:ca:8a:d9:23:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 28 02:19:19 2025 GMT Not After : Nov 26 03:19:19 2025 GMT Subject: CN=a0e50ce6-61b6-4129-8315-43566828fd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:38:90:f9:d0:cf:fc:6d:6f:b6:f6:c4:60: 4b:9d:0f:88:d2:4a:65:05:98:1c:5a:53:be:3b:1e: f9:9a:e5:83:52:5a:f8:05:f7:ee:5f:e5:79:01:53: 8a:e1:a0:bd:91:7c:7d:28:fd:ee:ee:14:f4:fe:27: 44:f5:c0:06:5d:0a:53:8c:df:e3:4d:7c:87:7f:70: 5c:6d:ae:8f:6b:c1:7b:80:06:43:12:be:52:09:6f: 52:db:b3:5d:e1:bf:ea:c8:d9:3e:40:b3:42:c0:a7: 90:4a:ff:2d:bf:aa:64:6b:42:5e:0c:77:8c:46:0d: 43:a2:6d:40:1f:63:d7:17:aa:10:4f:2b:02:26:d8: b1:65:1a:19:16:ba:49:df:4e:57:d3:08:a6:d9:58: 61:f5:7a:29:84:cf:84:1f:1d:87:75:d4:3e:7a:f6: 67:26:e1:c4:48:a1:c4:ac:1d:ad:5c:47:83:8f:e9: 0c:d7:16:59:dc:9d:c6:ff:04:6a:ed:01:89:64:38: c5:4b:4c:0c:5a:2a:d4:35:2c:b1:5b:1e:b9:84:e0: b9:b8:52:6f:17:c7:dc:2c:3b:a4:5b:3f:19:c9:f7: f6:15:d8:72:08:e9:2d:03:54:3d:e9:06:ac:b3:63: 4f:66:ad:58:9d:4d:ec:b0:0b:ca:fd:5a:2a:27:33: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:54:BE:47:29:8D:3C:B3:C9:05:FF:AD:AD:C3:E9:33:F9:4B:27:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaeb17b2-6589-3739-81a2-06e75319f6df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2b:ed:10:84:4d:f8:6f:56:7f:63:ee:ce:f4:57:29:d9:23: 87:c2:28:ac:d2:9b:da:1e:f1:30:b2:0d:ea:35:f1:0b:b8:31: 33:83:9a:5e:41:81:0f:6d:89:fc:b9:86:99:2a:d1:7c:6c:70: c0:61:52:aa:1e:cc:b6:ab:b9:fd:c0:89:e5:ea:17:1c:6b:b1: 27:7b:c4:d9:a2:9f:00:3f:de:41:15:72:c3:20:c9:97:fa:99: 04:02:e2:47:9e:c0:85:a2:43:1e:57:50:3e:86:56:dc:c7:52: 89:d9:79:0c:94:50:73:5f:56:dd:85:a8:b6:2f:d9:55:57:21: aa:32:bb:8a:36:3f:96:77:9a:07:aa:3d:de:7b:0e:61:b8:76: 28:3c:41:b6:51:35:43:3a:f2:86:d9:78:ba:00:ab:06:f1:0b: 4e:31:c6:f3:4a:9a:a5:25:08:a5:8f:eb:66:84:c3:6c:69:ad: 8c:f0:76:fe:e0:8a:bd:16:2d:c3:b0:6a:89:6a:a0:43:b7:f3: 67:7e:ca:27:04:64:39:a8:f4:20:5b:3f:3d:51:c2:1e:d6:d9: 7f:a1:8e:41:d9:6a:27:b6:d9:e0:7f:e5:52:15:39:e7:4c:7e: 46:82:09:97:e8:24:d5:a4:20:00:7c:48:a9:89:b9:ff:d9:4e: b6:08:2a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAcvPzPyDKitkj1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyODAyMTkxOVoXDTI1MTEyNjAzMTkxOVowLzEtMCsGA1UEAxMk YTBlNTBjZTYtNjFiNi00MTI5LTgzMTUtNDM1NjY4MjhmZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2M4kPnQz/xtb7b2xGBLnQ+I0kplBZgcWlO+ Ox75muWDUlr4BffuX+V5AVOK4aC9kXx9KP3u7hT0/idE9cAGXQpTjN/jTXyHf3Bc ba6Pa8F7gAZDEr5SCW9S27Nd4b/qyNk+QLNCwKeQSv8tv6pka0JeDHeMRg1Dom1A H2PXF6oQTysCJtixZRoZFrpJ305X0wim2Vhh9XophM+EHx2HddQ+evZnJuHESKHE rB2tXEeDj+kM1xZZ3J3G/wRq7QGJZDjFS0wMWirUNSyxWx65hOC5uFJvF8fcLDuk Wz8Zyff2FdhyCOktA1Q96Qass2NPZq1YnU3ssAvK/VoqJzMJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZUvkcpjTyzyQX/ra3D6TP5Syd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFlYjE3YjItNjU4OS0z NzM5LTgxYTItMDZlNzUzMTlmNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwr7RCETfhvVn9j7s70VynZI4fCKKzSm9oe8TCyDeo18Qu4MTODml5B gQ9tify5hpkq0XxscMBhUqoezLaruf3AieXqFxxrsSd7xNminwA/3kEVcsMgyZf6 mQQC4keewIWiQx5XUD6GVtzHUonZeQyUUHNfVt2FqLYv2VVXIaoyu4o2P5Z3mgeq Pd57DmG4dig8QbZRNUM68obZeLoAqwbxC04xxvNKmqUlCKWP62aEw2xprYzwdv7g ir0WLcOwaolqoEO382d+yicEZDmo9CBbPz1Rwh7W2X+hjkHZaie22eB/5VIVOedM fkaCCZfoJNWkIAB8SKmJuf/ZTrYIKpI= -----END CERTIFICATE-----Generated at Fri Oct 24 17:53:17 2025 by rpki-client