$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfb43af4-afd8-354e-bfa2-7a6f1e32e2ea.roa File: dfb43af4-afd8-354e-bfa2-7a6f1e32e2ea.roa (raw, json) Hash identifier: 3Z38elR/4RgaX/tTxMJ7Nd5Hxxn1a4H5IxDR1OCwLlw= Subject key identifier: BF:C3:7E:0E:84:61:6E:85:87:AA:21:A4:A4:54:BC:0D:93:C9:CA:B7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFEE7325F00F8A1F12C0BB700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfb43af4-afd8-354e-bfa2-7a6f1e32e2ea.roa Signing time: Wed 27 Aug 2025 13:01:55 +0000 ROA not before: Wed 27 Aug 2025 13:01:55 +0000 ROA not after: Tue 25 Nov 2025 14:01:55 +0000 asID: 211192 IP address blocks: 66.92.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e7:32:5f:00:f8:a1:f1:2c:0b:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 27 13:01:55 2025 GMT Not After : Nov 25 14:01:55 2025 GMT Subject: CN=282f87bf-5d8b-4000-9388-cc9a525037f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:81:ac:71:f6:48:80:88:1a:bf:25:23:97: fa:8d:64:5c:96:f2:de:0e:57:6c:bb:22:5f:c8:d2: 26:67:5d:bd:56:30:3a:96:78:ee:9f:35:a8:a5:ea: af:5e:7f:f1:40:b2:f4:26:1d:a2:34:02:a2:84:01: 63:ab:fc:3c:cf:b7:be:92:42:ce:f7:3b:a6:19:f0: 00:97:93:19:7e:1a:1d:74:4d:ca:45:5d:4f:84:e0: 1b:fe:f4:09:cf:af:9c:88:37:ed:d9:fa:11:32:f0: 0c:9c:ee:f3:61:8f:6f:ec:72:df:c2:b8:51:9b:04: cc:56:e0:a9:9d:ef:45:ec:90:2d:0c:61:3e:1c:bd: 8a:01:ab:bc:28:8b:fd:51:5b:b3:24:68:5b:35:3c: 2a:a5:75:1d:8a:56:07:a2:de:cc:0c:79:5c:f8:52: 6c:ff:e4:a6:88:7b:ec:90:91:fa:e9:72:e9:6d:23: 0c:b0:42:f0:09:ed:cc:70:d3:a0:e1:be:9e:b7:a3: 91:74:7a:82:c3:56:63:4c:b8:66:78:60:8d:e8:53: aa:34:9e:2b:df:1b:22:75:9b:ba:31:08:81:8f:35: 63:9f:22:65:3a:d3:c3:d2:0a:70:ad:19:4d:49:86: dd:57:55:04:0d:00:ae:74:06:c8:d7:36:e5:3d:90: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C3:7E:0E:84:61:6E:85:87:AA:21:A4:A4:54:BC:0D:93:C9:CA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfb43af4-afd8-354e-bfa2-7a6f1e32e2ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:58:d9:d1:22:e5:20:f3:75:44:6d:88:b0:8a:33:62:dc:1a: 49:20:0f:29:19:7e:15:4c:65:52:1b:5d:30:54:40:89:d3:36: 3f:9f:f5:bb:81:88:1c:10:ba:71:79:e1:88:d7:c6:75:6a:87: c1:5c:6e:11:c4:2a:9c:e9:fc:cf:5d:a7:11:f9:23:4f:fd:71: 2b:35:d1:a0:57:2e:6c:8f:95:cc:86:ea:82:a5:62:d7:e0:87: 6a:52:2f:d4:e1:79:dc:af:0a:17:80:73:4e:15:6c:8d:ee:24: ab:e0:f7:4f:61:88:b9:c0:5f:1e:f1:32:bc:d5:aa:17:4b:fe: 15:e8:e4:84:13:98:02:cf:88:4c:bf:78:e8:f2:bb:dd:18:59: 23:de:b1:44:94:93:95:7f:a3:c3:15:ce:72:fe:2a:6e:09:da: 43:15:88:46:be:18:cc:d9:d4:44:5a:25:9b:c1:a7:9b:1f:79: 9c:c7:41:4b:02:53:ca:97:79:a7:e5:84:5f:99:14:b4:3c:3d: d2:d6:50:68:52:39:9c:d2:e8:f6:47:12:46:11:0c:9b:55:6a: d1:ba:f4:25:be:a0:04:06:31:97:e0:de:bb:61:5b:60:fa:0d: 02:30:51:d4:58:4b:57:f0:95:73:f1:31:89:9f:b2:1a:d0:42: 44:a3:1f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5zJfAPih8SwLtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNzEzMDE1NVoXDTI1MTEyNTE0MDE1NVowLzEtMCsGA1UEAxMk MjgyZjg3YmYtNWQ4Yi00MDAwLTkzODgtY2M5YTUyNTAzN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAGBrHH2SICIGr8lI5f6jWRclvLeDldsuyJf yNImZ129VjA6lnjunzWopeqvXn/xQLL0Jh2iNAKihAFjq/w8z7e+kkLO9zumGfAA l5MZfhoddE3KRV1PhOAb/vQJz6+ciDft2foRMvAMnO7zYY9v7HLfwrhRmwTMVuCp ne9F7JAtDGE+HL2KAau8KIv9UVuzJGhbNTwqpXUdilYHot7MDHlc+FJs/+SmiHvs kJH66XLpbSMMsELwCe3McNOg4b6et6ORdHqCw1ZjTLhmeGCN6FOqNJ4r3xsidZu6 MQiBjzVjnyJlOtPD0gpwrRlNSYbdV1UEDQCudAbI1zblPZDiaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/Dfg6EYW6Fh6ohpKRUvA2Tycq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGZiNDNhZjQtYWZkOC0z NTRlLWJmYTItN2E2ZjFlMzJlMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlY2dEi5SDzdURtiLCKM2LcGkkgDykZfhVMZVIbXTBUQInTNj+f9buB iBwQunF54YjXxnVqh8FcbhHEKpzp/M9dpxH5I0/9cSs10aBXLmyPlcyG6oKlYtfg h2pSL9ThedyvCheAc04VbI3uJKvg909hiLnAXx7xMrzVqhdL/hXo5IQTmALPiEy/ eOjyu90YWSPesUSUk5V/o8MVznL+Km4J2kMViEa+GMzZ1ERaJZvBp5sfeZzHQUsC U8qXeaflhF+ZFLQ8PdLWUGhSOZzS6PZHEkYRDJtVatG69CW+oAQGMZfg3rthW2D6 DQIwUdRYS1fwlXPxMYmfshrQQkSjH+Q= -----END CERTIFICATE-----Generated at Sun Sep 14 09:50:20 2025 by rpki-client