$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ba13d51-ee1d-3cac-a16b-e59c7c523031.roa File: 2ba13d51-ee1d-3cac-a16b-e59c7c523031.roa (raw, json) Hash identifier: 6tvLdkHN1IobEK1V3ooG0Z+SLV0tDDCjApevdrm6oPE= Subject key identifier: 09:9C:2B:34:76:67:64:8D:D0:76:6A:67:88:F3:02:44:1D:73:66:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235CC5D739490E987703E180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ba13d51-ee1d-3cac-a16b-e59c7c523031.roa Signing time: Tue 09 Sep 2025 14:27:55 +0000 ROA not before: Tue 09 Sep 2025 14:27:55 +0000 ROA not after: Mon 08 Dec 2025 15:27:55 +0000 asID: 9304 IP address blocks: 66.253.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5c:c5:d7:39:49:0e:98:77:03:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:27:55 2025 GMT Not After : Dec 8 15:27:55 2025 GMT Subject: CN=953ba180-1d59-496a-8b24-423f76ac5451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:ea:30:07:2e:18:b4:e5:53:f7:6b:8b:5a: 0e:11:6e:cb:a2:4f:87:c7:97:bf:22:ad:87:a1:af: 7f:33:85:b3:af:ca:78:b8:f7:3c:ce:b6:f3:7c:47: ec:94:4c:47:67:ce:3c:20:e0:9d:46:af:a6:1a:21: d7:bf:c8:62:87:1c:e5:17:b5:f5:86:60:2e:fc:4f: fc:84:28:b0:85:6d:d4:ba:5a:85:a3:78:ae:3e:38: 7a:b1:e1:c0:38:7e:9f:b2:95:09:28:40:43:3d:ce: 1e:31:a0:79:74:0d:25:3d:a0:e1:75:2c:b9:f4:56: 1c:b0:31:b7:56:20:a1:6f:c8:b3:f0:82:1b:ec:86: 20:ae:b1:46:17:c8:65:4f:d2:26:18:c3:a4:9c:90: 7b:dc:b7:a8:a3:20:fb:d6:32:d3:e2:6a:b3:a3:82: 44:e3:55:c6:cd:cf:6e:e4:24:bb:ed:e8:ef:ab:08: 5b:0c:af:0f:f9:d3:65:b8:e4:2a:02:05:1e:c3:ff: 10:a0:74:ed:31:b2:2d:8b:b9:17:97:db:0a:68:9a: ad:0f:53:4a:88:19:4e:16:98:99:55:12:7b:83:0e: f1:52:7f:a4:ac:37:1d:02:4d:ed:74:f3:9c:8c:6f: 83:37:c3:9c:d1:83:23:a6:c0:d5:5f:62:04:b6:7f: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9C:2B:34:76:67:64:8D:D0:76:6A:67:88:F3:02:44:1D:73:66:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ba13d51-ee1d-3cac-a16b-e59c7c523031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:62:63:fd:cd:f0:23:e8:c9:ab:83:2f:b1:e4:ee:98:73:8a: 23:58:97:fe:aa:4c:b6:68:a4:ab:13:3c:7d:ee:9e:64:b5:e9: e1:13:af:05:02:91:53:64:ec:2d:b0:7d:ba:63:c0:dc:d8:ac: d9:b1:7c:22:a3:d6:47:7e:da:9a:8c:f8:9b:33:c2:17:62:c0: c1:1b:a8:26:c2:f6:ac:1f:a6:51:a2:96:fe:54:44:37:9e:a9: 52:42:c4:b8:f1:48:cb:c5:14:fc:87:6e:2a:28:76:5b:02:e9: d1:83:2d:e0:d4:4c:38:96:3a:87:6a:5f:66:49:f3:6e:1f:4c: 45:bc:14:c6:3f:7d:8a:18:4e:82:59:a2:41:b7:68:63:02:23: 63:8e:d7:ef:60:73:43:f0:fe:36:74:9b:a5:43:97:19:4a:ae: 3f:63:13:35:ce:f7:46:ab:c9:f0:bc:cd:1d:28:29:9b:02:c7: 9d:fa:a6:48:ad:66:81:4e:28:1e:ff:08:bd:56:ba:c3:81:9e: b7:2f:c1:00:dc:69:65:ae:f5:89:23:ff:86:b5:f3:b6:46:1d: 81:3a:4e:f0:a3:de:9d:3f:0b:72:11:76:d0:9e:40:cd:20:2c: 40:4b:f6:7c:3e:6a:1c:f7:a2:72:ac:a1:64:41:35:3a:7a:99: 02:51:68:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjXMXXOUkOmHcD4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0Mjc1NVoXDTI1MTIwODE1Mjc1NVowLzEtMCsGA1UEAxMk OTUzYmExODAtMWQ1OS00OTZhLThiMjQtNDIzZjc2YWM1NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eXqMAcuGLTlU/dri1oOEW7Lok+Hx5e/Iq2H oa9/M4Wzr8p4uPc8zrbzfEfslExHZ848IOCdRq+mGiHXv8hihxzlF7X1hmAu/E/8 hCiwhW3UulqFo3iuPjh6seHAOH6fspUJKEBDPc4eMaB5dA0lPaDhdSy59FYcsDG3 ViChb8iz8IIb7IYgrrFGF8hlT9ImGMOknJB73LeooyD71jLT4mqzo4JE41XGzc9u 5CS77ejvqwhbDK8P+dNluOQqAgUew/8QoHTtMbIti7kXl9sKaJqtD1NKiBlOFpiZ VRJ7gw7xUn+krDcdAk3tdPOcjG+DN8Oc0YMjpsDVX2IEtn9K+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmcKzR2Z2SN0HZqZ4jzAkQdc2YLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmJhMTNkNTEtZWUxZC0z Y2FjLWExNmItZTU5YzdjNTIzMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJiY/3N8CPoyauDL7Hk7phziiNYl/6qTLZopKsTPH3unmS16eETrwUC kVNk7C2wfbpjwNzYrNmxfCKj1kd+2pqM+JszwhdiwMEbqCbC9qwfplGilv5URDee qVJCxLjxSMvFFPyHbioodlsC6dGDLeDUTDiWOodqX2ZJ824fTEW8FMY/fYoYToJZ okG3aGMCI2OO1+9gc0Pw/jZ0m6VDlxlKrj9jEzXO90aryfC8zR0oKZsCx536pkit ZoFOKB7/CL1WusOBnrcvwQDcaWWu9Ykj/4a187ZGHYE6TvCj3p0/C3IRdtCeQM0g LEBL9nw+ahz3onKsoWRBNTp6mQJRaDs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:04 2025 by rpki-client