$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0a1526d3-8eb7-333b-8b2a-d7010ff513f7.roa File: 0a1526d3-8eb7-333b-8b2a-d7010ff513f7.roa (raw, json) Hash identifier: N4b5C1lNv91TvU49hqy6whbS/4q1oWQjyQAFXFsHrqM= Subject key identifier: DD:68:B5:87:20:6A:72:4B:99:C3:F5:7F:55:A8:72:8E:CA:01:D2:CE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA95BAF96431AB3B13F301380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0a1526d3-8eb7-333b-8b2a-d7010ff513f7.roa Signing time: Mon 27 Oct 2025 14:24:03 +0000 ROA not before: Mon 27 Oct 2025 14:24:03 +0000 ROA not after: Sun 25 Jan 2026 15:24:03 +0000 asID: 274564 IP address blocks: 66.253.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:5b:af:96:43:1a:b3:b1:3f:30:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 27 14:24:03 2025 GMT Not After : Jan 25 15:24:03 2026 GMT Subject: CN=3b63583e-107f-4b51-b58b-4a8a14d56dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:c4:b5:af:f4:d7:d5:77:9e:7b:1f:f4:67: 7e:aa:30:63:a0:a1:5f:37:9c:c1:5e:fb:01:8b:bb: 3d:a9:63:9e:5b:6f:6a:a8:87:b3:99:97:bf:c6:e2: 85:22:ea:a7:2a:71:b5:ac:8c:1d:d5:2c:6f:60:01: dc:99:cf:34:d1:19:1d:93:4f:24:97:f7:46:72:63: b8:14:4a:31:35:6a:0c:0f:2a:1f:49:f7:c4:64:3d: 9f:65:fe:8c:a1:8b:33:a2:4a:87:e7:39:1d:f3:79: 54:43:8c:1e:3c:de:01:c5:ae:c8:0e:ff:39:eb:da: 4e:08:7c:0f:d0:8c:2e:eb:a8:0f:e2:4c:15:28:b6: 4a:9a:0a:7e:37:57:99:3d:bd:73:6d:82:ea:3b:bf: 07:42:6f:0a:e2:cd:98:a8:07:81:53:a1:9a:8a:57: 09:01:0d:29:cd:a5:2a:c7:95:f5:83:1e:bc:78:82: 34:57:ba:75:0a:2f:af:ff:4a:87:bd:c3:aa:b0:6a: 77:78:c5:0b:30:1c:d9:6b:2d:40:60:47:23:e5:e7: 42:5d:91:57:14:33:ff:d1:0a:ae:f7:bb:71:bc:e5: 54:5c:c7:3c:5f:5e:3b:e7:d4:00:08:08:3e:b6:22: 4c:69:7d:f3:2d:8b:ca:70:09:9e:a7:04:15:c3:99: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:68:B5:87:20:6A:72:4B:99:C3:F5:7F:55:A8:72:8E:CA:01:D2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0a1526d3-8eb7-333b-8b2a-d7010ff513f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:7c:b0:f1:3b:c9:41:28:cd:88:ca:f1:7e:05:91:26:62:1f: c0:2b:12:56:ba:34:aa:31:36:07:a6:70:b2:6a:ad:4e:ad:5d: cd:c3:7b:93:65:cf:38:e9:63:29:d5:77:13:82:9c:bd:5c:9a: e1:df:62:5e:76:85:ed:24:cd:76:19:94:e2:b9:c8:ae:d4:13: 56:a0:f5:db:83:5d:ec:b1:5b:5f:17:d0:cd:f2:7b:23:57:ba: 60:33:0f:31:7c:94:ba:f4:01:89:ee:51:a5:e7:2a:41:3a:30: 46:ed:eb:81:2d:6d:5d:85:13:5f:70:c3:fd:64:fc:fb:ec:53: a3:26:7f:51:a2:24:26:84:86:91:d7:e6:67:52:25:2c:d7:2b: fa:5a:3a:64:0d:18:03:20:8b:44:87:2e:0f:01:ca:87:f8:51: 14:c3:5d:74:fe:5e:21:8d:e0:e4:c7:26:d2:5c:f8:c3:ea:a1: d8:72:d3:8b:65:c2:90:ee:55:21:42:db:64:96:92:d0:4b:33: dd:a9:83:5d:4f:33:13:10:17:f8:5a:ab:55:44:97:b0:c9:e6: d0:1a:f3:d4:c2:2d:a3:5d:f5:cb:b8:f8:32:fc:d7:cd:17:c9: ae:84:d1:c8:0a:d3:57:63:aa:9b:ea:85:eb:ca:05:00:23:22: b8:83:ef:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupW6+WQxqzsT8wE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNzE0MjQwM1oXDTI2MDEyNTE1MjQwM1owLzEtMCsGA1UEAxMk M2I2MzU4M2UtMTA3Zi00YjUxLWI1OGItNGE4YTE0ZDU2ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArybEta/019V3nnsf9Gd+qjBjoKFfN5zBXvsB i7s9qWOeW29qqIezmZe/xuKFIuqnKnG1rIwd1SxvYAHcmc800Rkdk08kl/dGcmO4 FEoxNWoMDyofSffEZD2fZf6MoYszokqH5zkd83lUQ4wePN4Bxa7IDv8569pOCHwP 0Iwu66gP4kwVKLZKmgp+N1eZPb1zbYLqO78HQm8K4s2YqAeBU6GailcJAQ0pzaUq x5X1gx68eII0V7p1Ci+v/0qHvcOqsGp3eMULMBzZay1AYEcj5edCXZFXFDP/0Qqu 97txvOVUXMc8X14759QACAg+tiJMaX3zLYvKcAmepwQVw5kGeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1otYcganJLmcP1f1Woco7KAdLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGExNTI2ZDMtOGViNy0z MzNiLThiMmEtZDcwMTBmZjUxM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI58sPE7yUEozYjK8X4FkSZiH8ArEla6NKoxNgemcLJqrU6tXc3De5Nl zzjpYynVdxOCnL1cmuHfYl52he0kzXYZlOK5yK7UE1ag9duDXeyxW18X0M3yeyNX umAzDzF8lLr0AYnuUaXnKkE6MEbt64EtbV2FE19ww/1k/PvsU6Mmf1GiJCaEhpHX 5mdSJSzXK/paOmQNGAMgi0SHLg8Byof4URTDXXT+XiGN4OTHJtJc+MPqodhy04tl wpDuVSFC22SWktBLM92pg11PMxMQF/haq1VEl7DJ5tAa89TCLaNd9cu4+DL8180X ya6E0cgK01djqpvqhevKBQAjIriD71g= -----END CERTIFICATE-----Generated at Wed Nov 5 21:54:00 2025 by rpki-client