$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cde7843-f350-34b8-9e68-36364ce42b33.roa File: 2cde7843-f350-34b8-9e68-36364ce42b33.roa (raw, json) Hash identifier: qIIX1tnX99B4qkTwpOmmjoK6H2YxKXO400afuilAHgs= Subject key identifier: AE:8A:5F:CE:82:74:2E:F4:56:3C:8F:88:78:ED:68:02:04:FE:69:C9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBE087500521E1BDDD28D2600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cde7843-f350-34b8-9e68-36364ce42b33.roa Signing time: Tue 04 Nov 2025 00:08:20 +0000 ROA not before: Tue 04 Nov 2025 00:08:20 +0000 ROA not after: Mon 02 Feb 2026 00:08:20 +0000 asID: 834 IP address blocks: 66.92.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:08:75:00:52:1e:1b:dd:d2:8d:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 00:08:20 2025 GMT Not After : Feb 2 00:08:20 2026 GMT Subject: CN=c48af233-ce76-4ca9-aaa7-bec109b93801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:8a:24:5f:f4:7d:4f:9a:49:82:99:bf:35: f3:b4:b6:89:da:81:f8:2d:28:69:28:8a:1b:94:66: da:17:67:7f:38:b1:c7:ae:ec:23:ea:53:48:29:3b: 56:0a:fb:e0:a2:7e:e1:0a:bf:16:ec:17:31:68:0e: 18:42:77:5c:b0:78:2a:16:f6:7c:77:19:36:31:d4: cd:5a:35:4a:17:e3:b0:0d:eb:4c:1c:d2:c8:7b:45: e7:c4:80:f4:e6:5f:70:8c:1c:18:12:88:89:90:53: 37:c8:1f:3e:13:a0:3d:f4:31:2a:7e:98:95:8a:b7: 23:5d:b9:15:37:a6:0f:83:cb:85:d8:88:0e:95:3e: d1:59:ce:97:ed:7b:2e:1e:44:fd:91:05:ed:e7:ab: 44:71:bd:e7:eb:f6:d2:e3:af:74:c7:7d:14:ad:df: cc:ad:ec:ab:98:dd:48:33:13:47:2a:ce:47:de:4d: 06:5a:37:e0:04:03:f9:84:36:c7:7e:bf:e0:23:ab: 7e:ef:55:8c:9a:82:8b:77:c6:a4:c5:f6:76:68:80: a9:ed:30:c4:fe:84:41:2e:11:cc:6f:13:14:69:9b: 21:65:85:b0:a9:02:18:8f:2c:87:16:6a:ce:28:ee: bf:57:19:c0:f1:3d:8a:01:e0:4c:f4:2d:e2:9a:e9: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8A:5F:CE:82:74:2E:F4:56:3C:8F:88:78:ED:68:02:04:FE:69:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cde7843-f350-34b8-9e68-36364ce42b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0a:59:50:9f:dd:23:7c:74:41:36:0e:9d:59:3d:5b:d0:c3: 3f:25:49:26:bf:86:25:4d:80:1e:35:7b:60:ed:cc:29:6d:ae: ef:67:de:7f:c6:cd:9a:0a:a2:db:52:66:d1:31:c6:f5:27:61: 3e:3f:b4:80:e7:a6:fb:c2:b0:e5:25:32:6f:32:83:3b:7e:49: 55:f2:45:d9:72:e8:81:ab:36:af:26:7a:e6:9e:f8:df:25:7c: 41:ad:dd:bf:53:19:0f:d7:af:65:56:1b:81:a1:26:f3:b4:ec: bb:65:18:a7:fe:ff:81:7f:a7:45:40:77:8d:fa:62:23:00:34: 6f:02:b5:63:d9:1a:9d:09:af:97:a8:6e:c2:cd:37:13:35:1d: ee:4f:20:23:be:bf:fa:3e:f8:6d:ad:65:12:40:ef:70:8b:31: e6:51:05:e4:e5:2c:10:0c:a5:cb:89:05:43:bf:1d:49:65:1e: f2:88:7f:d1:2e:a9:78:2a:f1:f9:f8:4a:92:4b:a5:09:49:55: 08:fc:48:03:c6:01:cd:66:63:b9:d4:62:c4:a5:d0:70:03:b8: 15:b8:35:25:73:ef:f2:76:e7:19:42:96:58:cf:71:b8:b3:24: 22:d4:d0:d4:11:b2:54:2d:81:b9:8e:65:d8:87:6b:51:ac:d6: c5:78:1a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+CHUAUh4b3dKNJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDAwMDgyMFoXDTI2MDIwMjAwMDgyMFowLzEtMCsGA1UEAxMk YzQ4YWYyMzMtY2U3Ni00Y2E5LWFhYTctYmVjMTA5YjkzODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIOKJF/0fU+aSYKZvzXztLaJ2oH4LShpKIob lGbaF2d/OLHHruwj6lNIKTtWCvvgon7hCr8W7BcxaA4YQndcsHgqFvZ8dxk2MdTN WjVKF+OwDetMHNLIe0XnxID05l9wjBwYEoiJkFM3yB8+E6A99DEqfpiVircjXbkV N6YPg8uF2IgOlT7RWc6X7XsuHkT9kQXt56tEcb3n6/bS4690x30Urd/MreyrmN1I MxNHKs5H3k0GWjfgBAP5hDbHfr/gI6t+71WMmoKLd8akxfZ2aICp7TDE/oRBLhHM bxMUaZshZYWwqQIYjyyHFmrOKO6/VxnA8T2KAeBM9C3imukZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6KX86CdC70VjyPiHjtaAIE/mnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmNkZTc4NDMtZjM1MC0z NGI4LTllNjgtMzYzNjRjZTQyYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0KWVCf3SN8dEE2Dp1ZPVvQwz8lSSa/hiVNgB41e2DtzCltru9n3n/G zZoKottSZtExxvUnYT4/tIDnpvvCsOUlMm8ygzt+SVXyRdly6IGrNq8meuae+N8l fEGt3b9TGQ/Xr2VWG4GhJvO07LtlGKf+/4F/p0VAd436YiMANG8CtWPZGp0Jr5eo bsLNNxM1He5PICO+v/o++G2tZRJA73CLMeZRBeTlLBAMpcuJBUO/HUllHvKIf9Eu qXgq8fn4SpJLpQlJVQj8SAPGAc1mY7nUYsSl0HADuBW4NSVz7/J25xlClljPcbiz JCLU0NQRslQtgbmOZdiHa1Gs1sV4Ggo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:07 2025 by rpki-client