$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/02720c05-a8a6-3c91-a56e-7b4c2cce9f7a.roa File: 02720c05-a8a6-3c91-a56e-7b4c2cce9f7a.roa (raw, json) Hash identifier: K+BTyIaJ/EF4FL9QgyvVwtU4IZwllWj1V3LFoaZIfd0= Subject key identifier: D4:88:B3:53:69:A1:C7:14:B6:91:61:C8:77:58:9D:DE:6E:28:0B:82 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBF1712D30F944D398D59CC00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/02720c05-a8a6-3c91-a56e-7b4c2cce9f7a.roa Signing time: Tue 04 Nov 2025 09:13:35 +0000 ROA not before: Tue 04 Nov 2025 09:13:35 +0000 ROA not after: Mon 02 Feb 2026 09:13:35 +0000 asID: 834 IP address blocks: 66.92.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:17:12:d3:0f:94:4d:39:8d:59:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 09:13:35 2025 GMT Not After : Feb 2 09:13:35 2026 GMT Subject: CN=56e13461-4ada-43b1-a271-2be0f8935a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:78:17:88:94:1b:28:ea:b5:a3:6d:ff:b6: 73:23:d6:b2:f2:b7:c5:12:84:24:5c:87:b4:c0:a3: 39:fb:93:51:ff:d7:4f:ef:17:c5:df:d6:de:53:95: c4:52:f1:0e:a6:f9:e2:4d:0d:84:4a:08:8a:e2:0f: ce:48:b0:37:fb:51:f2:38:73:2c:c1:2d:8d:ce:8f: 85:08:85:a6:67:dc:e3:d8:4a:bf:8d:16:78:91:30: fd:1e:3e:77:fc:52:50:7c:7a:55:ae:de:01:05:21: 71:4d:68:39:69:c1:5f:ba:62:66:c7:19:52:0e:1c: 68:4e:2a:60:c4:24:5f:85:ea:69:7f:4e:a0:d6:f8: 39:92:4a:db:c9:d5:9d:70:b2:00:0f:9e:0a:a9:ed: 7d:6c:5d:df:e8:61:2f:7a:71:20:39:fd:b0:84:53: 9f:55:60:5a:76:d2:f6:d3:79:ab:d5:3c:03:e7:0e: db:17:70:a2:ba:6d:b3:97:81:55:9a:c8:6a:84:d5: 17:17:56:b9:ee:30:98:89:2a:24:30:6d:87:03:44: 57:d8:90:4c:df:4b:fe:1b:ec:4e:7f:1d:63:75:00: 36:1e:01:03:c7:8d:f0:7f:56:19:43:33:7b:62:e8: cf:98:30:31:58:b5:f1:f9:bb:a1:80:08:f2:6c:6c: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:B3:53:69:A1:C7:14:B6:91:61:C8:77:58:9D:DE:6E:28:0B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/02720c05-a8a6-3c91-a56e-7b4c2cce9f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:57:a7:8c:87:f6:a3:72:c6:67:48:fb:19:f2:a7:84:48: a8:2f:1d:eb:1b:26:4a:83:5c:a3:36:ea:ae:91:ee:d8:69:2f: e0:c0:70:f6:f4:7b:09:9e:04:24:d6:d2:14:7a:54:a4:a4:82: d8:6f:22:1e:49:42:3d:3a:24:b0:63:41:da:ef:d5:db:54:19: 24:ca:15:e7:4a:52:8d:43:44:0c:5e:4e:08:f7:4e:61:4b:c2: d0:df:13:fe:ee:f2:0d:a6:0a:84:3b:1a:02:5c:ac:db:51:39: cf:27:e8:2c:91:c9:92:6d:67:1a:8c:8f:68:25:bf:e0:08:fe: a9:84:38:06:5f:d3:55:bb:db:81:40:b0:0a:9a:29:94:d9:41: 9c:8f:31:2c:34:e0:32:cd:8e:e1:d2:af:9e:bc:f0:20:57:5a: 9f:f6:f9:1a:7b:7c:fc:5d:66:fa:e9:5a:69:16:15:31:0f:2e: 1b:6b:b5:4b:06:8f:d4:84:5f:7f:75:1d:29:9e:d6:dc:bb:5d: 07:df:56:14:d0:37:b7:e9:a4:a5:74:8c:83:6b:b6:41:a1:ee: e6:75:f6:0a:13:82:d8:4c:f7:2a:60:7a:9d:c5:94:fa:fc:97: 7d:de:ad:6f:30:43:76:92:d5:64:79:fd:ea:5f:fe:71:29:26: bf:6c:85:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/FxLTD5RNOY1ZzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDA5MTMzNVoXDTI2MDIwMjA5MTMzNVowLzEtMCsGA1UEAxMk NTZlMTM0NjEtNGFkYS00M2IxLWEyNzEtMmJlMGY4OTM1YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxt4F4iUGyjqtaNt/7ZzI9ay8rfFEoQkXIe0 wKM5+5NR/9dP7xfF39beU5XEUvEOpvniTQ2ESgiK4g/OSLA3+1HyOHMswS2Nzo+F CIWmZ9zj2Eq/jRZ4kTD9Hj53/FJQfHpVrt4BBSFxTWg5acFfumJmxxlSDhxoTipg xCRfheppf06g1vg5kkrbydWdcLIAD54Kqe19bF3f6GEvenEgOf2whFOfVWBadtL2 03mr1TwD5w7bF3Cium2zl4FVmshqhNUXF1a57jCYiSokMG2HA0RX2JBM30v+G+xO fx1jdQA2HgEDx43wf1YZQzN7YujPmDAxWLXx+buhgAjybGzyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSIs1NpoccUtpFhyHdYnd5uKAuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDI3MjBjMDUtYThhNi0z YzkxLWE1NmUtN2I0YzJjY2U5ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQly0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcWV6eMh/ajcsZnSPsZ8qeESKgvHesbJkqDXKM26q6R7thpL+DAcPb0 ewmeBCTW0hR6VKSkgthvIh5JQj06JLBjQdrv1dtUGSTKFedKUo1DRAxeTgj3TmFL wtDfE/7u8g2mCoQ7GgJcrNtROc8n6CyRyZJtZxqMj2glv+AI/qmEOAZf01W724FA sAqaKZTZQZyPMSw04DLNjuHSr5688CBXWp/2+Rp7fPxdZvrpWmkWFTEPLhtrtUsG j9SEX391HSme1ty7XQffVhTQN7fppKV0jINrtkGh7uZ19goTgthM9ypgep3FlPr8 l33erW8wQ3aS1WR5/epf/nEpJr9shSo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:23 2025 by rpki-client