$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21b37b9b-0744-36ec-871b-aaadaabd4c4e.roa File: 21b37b9b-0744-36ec-871b-aaadaabd4c4e.roa (raw, json) Hash identifier: EberIM3hMitWduYf3xpKihns8i19UwN8KChVc/86qTM= Subject key identifier: 15:19:34:E4:FD:FB:07:E1:76:B0:2F:1D:8A:96:21:0C:F2:29:EC:CB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8D51B23366ABE38C5EEA9980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21b37b9b-0744-36ec-871b-aaadaabd4c4e.roa Signing time: Fri 17 Oct 2025 13:21:17 +0000 ROA not before: Fri 17 Oct 2025 13:21:17 +0000 ROA not after: Thu 15 Jan 2026 14:21:17 +0000 asID: 208185 IP address blocks: 66.167.128.0/22 maxlen: 22 66.167.132.0/22 maxlen: 22 66.167.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:51:b2:33:66:ab:e3:8c:5e:ea:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 17 13:21:17 2025 GMT Not After : Jan 15 14:21:17 2026 GMT Subject: CN=3870218d-9234-4e08-a1c4-36b2dd427600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:a7:95:8c:dd:e8:68:04:fb:42:91:d5:60: d0:5a:6f:f5:bd:fc:17:72:4e:ef:74:d4:99:1e:ac: 36:35:91:78:41:22:3b:ac:c7:a0:f7:d0:c2:55:10: 62:47:04:03:f4:c3:96:c1:2c:51:20:40:6c:76:32: f2:8d:93:71:2c:61:31:1f:37:cb:37:b4:ca:aa:54: 44:d9:a1:e3:a1:b0:e8:90:37:79:62:fc:72:5c:da: 33:12:7b:6b:58:ea:33:92:ae:c8:65:ff:cc:0e:e1: be:8f:5d:bb:fd:fa:42:b4:7d:25:d3:8c:a5:4d:c5: 95:01:e2:14:ea:d3:80:a1:d9:74:62:f1:d6:9f:e5: 96:1d:2c:57:df:ea:fe:be:85:49:ed:7f:20:42:ab: 7a:d1:2d:c5:13:19:7c:6d:5e:fa:6a:46:23:60:8c: d8:d1:10:4a:e5:d6:33:d2:76:59:5c:2b:e5:18:dc: 22:0e:de:b5:f8:c4:65:4b:32:42:19:56:81:d7:d6: 63:c2:ba:d1:f3:61:bb:ee:66:be:c2:cb:28:c9:b3: d9:5f:33:ae:a4:03:79:9d:4b:c6:b1:89:d4:1e:e3: ef:a3:53:a5:cc:c1:75:1b:de:73:f2:6c:d9:15:60: 6d:31:9e:35:67:e2:ee:c2:a6:55:19:35:0e:14:fa: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:19:34:E4:FD:FB:07:E1:76:B0:2F:1D:8A:96:21:0C:F2:29:EC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21b37b9b-0744-36ec-871b-aaadaabd4c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.167.128.0-66.167.139.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0c:c5:9e:98:17:76:33:47:d3:34:00:54:3a:ab:4a:56:6c: f7:39:71:53:34:8e:a7:17:42:79:e4:dc:3d:79:c1:4b:a7:7e: 9b:5d:a4:da:a0:f0:40:16:a8:d0:4b:f3:56:e9:31:ae:11:90: a7:87:34:b1:83:77:34:24:15:33:28:56:c2:d3:60:e5:66:32: e7:09:9b:90:81:6b:ba:d5:0d:30:ca:12:21:18:68:a5:54:79: 0a:66:c9:07:6f:5c:bb:f1:eb:41:e4:dc:88:71:73:9c:42:22: 3f:ad:2f:a6:70:6d:4e:00:f0:e7:98:22:f1:f4:5b:2b:d0:a8: 85:7d:96:44:4f:24:f8:15:b8:bc:e4:d5:70:1a:5d:86:32:e9: c9:1a:52:c2:b2:57:7d:90:53:70:5b:bc:ab:d2:e5:cd:25:bf: d6:a2:6b:f8:a7:f3:8b:05:42:db:17:a7:ea:2e:ca:cb:55:81: ed:d1:3b:0c:fc:d1:7f:fc:22:18:0f:09:36:73:7d:2b:e0:25: 70:81:f6:8f:f5:97:0e:ce:d3:e1:c6:c7:12:af:21:73:ab:f1: 31:cf:fa:e1:1f:49:3c:8a:44:e1:64:d1:a1:74:34:71:6d:9f: 71:70:0a:fc:b8:b6:af:a9:65:b6:bd:7c:f4:db:fe:70:1f:5c: 7e:f8:6a:fc -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuNUbIzZqvjjF7qmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNzEzMjExN1oXDTI2MDExNTE0MjExN1owLzEtMCsGA1UEAxMk Mzg3MDIxOGQtOTIzNC00ZTA4LWExYzQtMzZiMmRkNDI3NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2WnlYzd6GgE+0KR1WDQWm/1vfwXck7vdNSZ Hqw2NZF4QSI7rMeg99DCVRBiRwQD9MOWwSxRIEBsdjLyjZNxLGExHzfLN7TKqlRE 2aHjobDokDd5YvxyXNozEntrWOozkq7IZf/MDuG+j127/fpCtH0l04ylTcWVAeIU 6tOAodl0YvHWn+WWHSxX3+r+voVJ7X8gQqt60S3FExl8bV76akYjYIzY0RBK5dYz 0nZZXCvlGNwiDt61+MRlSzJCGVaB19ZjwrrR82G77ma+wssoybPZXzOupAN5nUvG sYnUHuPvo1OlzMF1G95z8mzZFWBtMZ41Z+LuwqZVGTUOFPrGXwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBUZNOT9+wfhdrAvHYqWIQzyKezLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFiMzdiOWItMDc0NC0z NmVjLTg3MWItYWFhZGFhYmQ0YzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAdCp4AD BAJCp4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPgzFnpgXdjNH0zQAVDqrSlZs9zlxUzSOpxdCeeTcPXnB S6d+m12k2qDwQBao0EvzVukxrhGQp4c0sYN3NCQVMyhWwtNg5WYy5wmbkIFrutUN MMoSIRhopVR5CmbJB29cu/HrQeTciHFznEIiP60vpnBtTgDw55gi8fRbK9CohX2W RE8k+BW4vOTVcBpdhjLpyRpSwrJXfZBTcFu8q9LlzSW/1qJr+KfziwVC2xen6i7K y1WB7dE7DPzRf/wiGA8JNnN9K+AlcIH2j/WXDs7T4cbHEq8hc6vxMc/64R9JPIpE 4WTRoXQ0cW2fcXAK/Li2r6lltr189Nv+cB9cfvhq/A== -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:25 2025 by rpki-client