$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa File: 86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa (raw, json) Hash identifier: 8mTQvvseNNdHA1x32uKgpBoGSjSC4RyW680lCwjDmBg= Subject key identifier: CE:64:61:25:95:0B:FE:D1:DA:E1:A6:45:CF:BC:E7:DC:6B:16:6C:D3 Certificate issuer: /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Certificate serial: 010D0C9F4328584BA932629DDD7C186BCFA46D24 Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14203 IP address blocks: 66.129.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:62:9d:dd:7c:18:6b:cf:a4:6d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=6388937f-2e20-44f2-90a5-55146931b552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:1f:8c:92:d4:31:0b:1b:4c:32:22:58:09: 62:62:3b:d6:f8:3b:6e:d0:f8:e8:4b:a9:96:dd:c1: bb:99:a5:53:91:2f:da:04:d8:24:63:9b:61:44:87: 52:ff:11:7f:59:af:5a:76:00:87:7b:a4:a5:dd:ae: 50:d4:80:2b:d6:14:d6:f3:7d:3c:71:4e:fd:29:86: d8:6c:af:e5:2d:c5:64:6e:b4:8e:ab:6c:7f:e6:53: ab:2a:cb:2f:9d:a8:1e:56:c4:54:11:f5:23:64:8a: 18:f0:ad:8f:53:9d:84:c5:1c:22:80:b5:28:50:ae: 4d:c6:93:82:a8:b9:13:a8:19:8c:16:24:6a:11:cb: cd:ae:a5:38:74:51:6c:8e:f7:d8:47:e6:31:f2:49: e8:81:d5:33:34:2d:c4:7d:a0:15:d5:c0:ca:e3:16: 1b:af:e9:b1:b6:a8:f9:d4:dd:c7:38:db:a1:9c:e0: 1f:4b:00:47:6b:08:88:88:e5:7b:8a:90:b7:93:95: 4b:74:34:b3:0d:2a:c1:d0:79:69:88:4a:a1:82:11: c6:f9:05:8a:f7:f1:1e:31:91:da:f5:0b:8f:04:90: ae:0f:10:c8:be:8f:7e:95:56:c5:aa:13:89:ec:33: a6:d1:8a:9c:74:b1:88:30:38:30:11:7a:bb:75:a5: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:64:61:25:95:0B:FE:D1:DA:E1:A6:45:CF:BC:E7:DC:6B:16:6C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/86e1a96d-8613-3e30-ad0f-3c2c41962c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl X509v3 Authority Key Identifier: keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer sbgp-ipAddrBlock: critical IPv4: 66.129.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a1:77:d4:52:18:19:63:a2:ed:de:2b:e3:87:97:d0:b4:1a: 38:b4:cd:84:4a:13:cc:28:ab:94:fb:90:61:93:f1:85:af:c1: fd:69:70:ea:d7:9d:a9:29:3e:cd:c7:02:4c:16:d6:6b:45:26: 14:06:bc:69:54:91:45:22:73:10:c6:f4:cc:57:e2:9c:09:b3: 23:eb:7f:ee:0a:51:c9:ff:30:83:f0:b9:23:8e:c4:74:d7:47: 75:32:61:47:c9:0e:26:9a:a5:0e:b7:c0:ff:8e:91:e1:c6:bc: 9c:92:5e:38:c3:05:19:db:09:cd:54:68:bc:ca:0b:7b:59:60: 41:bf:d1:30:a5:60:ff:2f:3b:aa:5a:dd:38:f9:a0:4d:27:6a: 15:31:36:04:cf:32:cc:a5:9f:7d:06:ed:23:fb:d6:4f:75:c5: b6:1c:c8:62:27:ad:88:03:8e:6c:23:59:2c:d3:9e:e5:28:64: c8:7e:e5:87:42:40:03:ae:09:c3:5a:1e:f2:35:57:b0:64:80: c6:ee:8b:0c:43:fb:c6:b9:42:a9:32:ed:f3:c5:50:ff:d5:0e: ae:de:e0:3d:38:fb:ca:f3:c0:16:79:a8:5d:27:3c:3d:f8:ce: 98:8f:dd:f8:0c:6d:fb:1d:23:f7:e3:ec:4a:64:e9:d7:06:9f: f2:09:8a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmKd3XwYa8+kbSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YzdmNmItODE2OC00NDI5LTk0ZDUtY2ZiMTRlNTdk ZDJlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NjM4ODkzN2YtMmUyMC00NGYyLTkwYTUtNTUxNDY5MzFiNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHofjJLUMQsbTDIiWAliYjvW+Dtu0PjoS6mW 3cG7maVTkS/aBNgkY5thRIdS/xF/Wa9adgCHe6Sl3a5Q1IAr1hTW8308cU79KYbY bK/lLcVkbrSOq2x/5lOrKssvnageVsRUEfUjZIoY8K2PU52ExRwigLUoUK5NxpOC qLkTqBmMFiRqEcvNrqU4dFFsjvfYR+Yx8knogdUzNC3EfaAV1cDK4xYbr+mxtqj5 1N3HONuhnOAfSwBHawiIiOV7ipC3k5VLdDSzDSrB0HlpiEqhghHG+QWK9/EeMZHa 9QuPBJCuDxDIvo9+lVbFqhOJ7DOm0YqcdLGIMDgwEXq7daWnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5kYSWVC/7R2uGmRc+859xrFmzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZj N2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1N2RkMmUvODZlMWE5NmQtODYxMy0z ZTMwLWFkMGYtM2MyYzQxOTYyYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2YzdmNmItODE2OC00NDI5LTk0 ZDUtY2ZiMTRlNTdkZDJlL2RhNmM3ZjZiLTgxNjgtNDQyOS05NGQ1LWNmYjE0ZTU3 ZGQyZS5jcmwwHwYDVR0jBBgwFoAUA3k0rC78UNQi5NbDk13OTGnEefYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIx NGU1N2RkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQoHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJChd9RSGBljou3eK+OHl9C0Gji0zYRKE8woq5T7kGGT8YWvwf1pcOrX nakpPs3HAkwW1mtFJhQGvGlUkUUicxDG9MxX4pwJsyPrf+4KUcn/MIPwuSOOxHTX R3UyYUfJDiaapQ63wP+OkeHGvJySXjjDBRnbCc1UaLzKC3tZYEG/0TClYP8vO6pa 3Tj5oE0nahUxNgTPMsyln30G7SP71k91xbYcyGInrYgDjmwjWSzTnuUoZMh+5YdC QAOuCcNaHvI1V7BkgMbuiwxD+8a5Qqky7fPFUP/VDq7e4D04+8rzwBZ5qF0nPD34 zpiP3fgMbfsdI/fj7Epk6dcGn/IJimU= -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:24 2025 by rpki-client