$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ca73febc-8801-3bbd-bd9a-07b7654f71a8.roa File: ca73febc-8801-3bbd-bd9a-07b7654f71a8.roa (raw, json) Hash identifier: duSVaGqLjGye996ruCXGf+NW8R1sSB2StqCp9zWhcV0= Subject key identifier: 8F:7C:EB:C0:7A:F1:2E:89:93:53:4D:82:4F:8A:B6:BB:2E:37:56:DE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFEE72A6EA7BCF0129428D840 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ca73febc-8801-3bbd-bd9a-07b7654f71a8.roa Signing time: Wed 27 Aug 2025 13:01:51 +0000 ROA not before: Wed 27 Aug 2025 13:01:51 +0000 ROA not after: Tue 25 Nov 2025 14:01:51 +0000 asID: 211192 IP address blocks: 66.92.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e7:2a:6e:a7:bc:f0:12:94:28:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 27 13:01:51 2025 GMT Not After : Nov 25 14:01:51 2025 GMT Subject: CN=a848827a-32ed-4ba1-b1f1-8eba3593447a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:63:19:36:ae:84:b9:14:29:96:f0:90:81: 9e:3f:95:88:d8:ff:59:9d:42:7b:2c:bb:4c:ca:ae: 62:cc:e4:2f:c0:79:ae:b3:20:af:26:29:82:6a:f9: 29:b6:41:ed:da:4f:96:ec:fc:3e:b5:2f:24:06:cd: 1f:65:4c:c9:37:3d:26:48:b2:05:bb:ea:c8:9b:83: a0:47:4d:7a:83:50:05:ee:61:e7:ee:3c:2d:fe:40: 68:6b:74:a3:5e:bc:4d:57:9a:d0:e8:fb:12:33:fd: 7f:41:05:cc:85:fe:b7:05:77:6b:c7:2c:2d:28:f0: 02:e8:99:1d:b8:ea:ff:b6:5c:8a:f4:01:db:43:75: c7:9a:a4:2d:26:25:0e:55:39:6b:f1:2f:f5:32:0c: 70:bb:9c:25:c5:78:cb:7c:db:ff:59:bf:88:7d:a7: 12:6d:f0:00:99:c3:e2:63:87:7e:a7:f3:d0:21:2b: 9f:c8:9e:34:67:c3:85:97:ec:5a:d0:88:a9:a3:9d: 3c:d2:a9:1e:47:62:97:a9:f2:ce:9a:f7:56:3e:09: 3f:2b:40:29:ce:81:a8:1e:81:9e:ec:0b:b5:0f:90: 79:b1:6a:e0:51:4e:4e:2c:fe:d0:4e:eb:5a:1f:77: cf:d0:c8:6b:e9:35:7e:5c:cf:a9:29:72:8b:14:33: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7C:EB:C0:7A:F1:2E:89:93:53:4D:82:4F:8A:B6:BB:2E:37:56:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ca73febc-8801-3bbd-bd9a-07b7654f71a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:38:fa:75:e5:61:c0:94:10:c1:ef:9f:7b:4d:7f:0e:1e:bf: a5:27:13:e3:84:30:34:c4:27:bd:23:db:35:36:28:ba:0c:24: 2b:2a:33:dd:3b:d9:41:f9:b3:98:3e:ae:2a:93:f2:3b:25:db: 29:28:35:1b:37:36:4d:92:25:45:15:ab:9c:2e:43:09:63:17: b3:f7:65:65:2c:df:f8:70:3c:a6:26:83:3b:17:4e:42:16:91: e5:df:cf:ae:4a:22:e0:7c:4d:7c:2b:73:b7:f2:10:a2:a4:a3: a0:ec:26:22:4e:95:d8:32:37:79:8c:9a:8f:8a:c6:f4:41:8e: 9d:1a:36:40:03:ad:f8:05:8b:69:0e:70:70:7c:c6:13:a4:f6: c5:16:f6:6a:ca:97:98:b0:da:59:3f:a5:f9:a0:0b:f2:0f:c0: 8c:d8:85:fe:aa:c3:1d:00:b0:ed:41:b0:f5:92:6a:4c:bf:00: 54:db:11:27:f6:7f:44:b2:81:3d:49:7d:23:d9:85:ea:98:42: 93:0b:5e:f6:66:7f:08:9e:c8:34:6d:8a:e1:6f:84:dc:1c:81: 1d:18:dc:14:1a:93:46:6f:06:36:11:3b:f0:e4:10:dc:41:f6: 1a:ae:05:d6:e3:0c:e3:d0:f7:f8:10:e6:22:57:f5:d3:69:b8: 8c:b3:a1:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5ypup7zwEpQo2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNzEzMDE1MVoXDTI1MTEyNTE0MDE1MVowLzEtMCsGA1UEAxMk YTg0ODgyN2EtMzJlZC00YmExLWIxZjEtOGViYTM1OTM0NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw1jGTauhLkUKZbwkIGeP5WI2P9ZnUJ7LLtM yq5izOQvwHmusyCvJimCavkptkHt2k+W7Pw+tS8kBs0fZUzJNz0mSLIFu+rIm4Og R016g1AF7mHn7jwt/kBoa3SjXrxNV5rQ6PsSM/1/QQXMhf63BXdrxywtKPAC6Jkd uOr/tlyK9AHbQ3XHmqQtJiUOVTlr8S/1Mgxwu5wlxXjLfNv/Wb+IfacSbfAAmcPi Y4d+p/PQISufyJ40Z8OFl+xa0Iipo5080qkeR2KXqfLOmvdWPgk/K0ApzoGoHoGe 7Au1D5B5sWrgUU5OLP7QTutaH3fP0Mhr6TV+XM+pKXKLFDNeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9868B68S6Jk1NNgk+KtrsuN1beMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2E3M2ZlYmMtODgwMS0z YmJkLWJkOWEtMDdiNzY1NGY3MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL84+nXlYcCUEMHvn3tNfw4ev6UnE+OEMDTEJ70j2zU2KLoMJCsqM907 2UH5s5g+riqT8jsl2ykoNRs3Nk2SJUUVq5wuQwljF7P3ZWUs3/hwPKYmgzsXTkIW keXfz65KIuB8TXwrc7fyEKKko6DsJiJOldgyN3mMmo+KxvRBjp0aNkADrfgFi2kO cHB8xhOk9sUW9mrKl5iw2lk/pfmgC/IPwIzYhf6qwx0AsO1BsPWSaky/AFTbESf2 f0SygT1JfSPZheqYQpMLXvZmfwieyDRtiuFvhNwcgR0Y3BQak0ZvBjYRO/DkENxB 9hquBdbjDOPQ9/gQ5iJX9dNpuIyzoYU= -----END CERTIFICATE-----Generated at Sun Sep 14 09:44:08 2025 by rpki-client