$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/495399ad-024a-3f40-ae90-902800031a6d.roa File: 495399ad-024a-3f40-ae90-902800031a6d.roa (raw, json) Hash identifier: mB405jL6cqSMJsFl9dtPyYPvctE7a4oEQL5kvZOtJsc= Subject key identifier: A1:29:34:17:6D:3D:A9:92:77:D1:59:0E:6A:0C:FA:56:C9:49:DC:59 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA95DF1051BDD6F00D55C0600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/495399ad-024a-3f40-ae90-902800031a6d.roa Signing time: Mon 27 Oct 2025 14:28:35 +0000 ROA not before: Mon 27 Oct 2025 14:28:35 +0000 ROA not after: Sun 25 Jan 2026 15:28:35 +0000 asID: 152672 IP address blocks: 69.33.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:5d:f1:05:1b:dd:6f:00:d5:5c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 27 14:28:35 2025 GMT Not After : Jan 25 15:28:35 2026 GMT Subject: CN=e2f801de-ff3c-4ae3-9656-c91c07c14e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:4c:92:bf:04:9e:f2:8b:b2:97:25:02:55: c2:02:94:fb:d3:df:4f:7a:20:89:62:a4:b1:ca:95: db:59:f9:34:61:6c:48:5f:18:bc:9d:2c:27:56:cd: 7a:2d:49:ba:b6:8a:00:96:cd:2c:05:6c:1a:3a:82: a2:74:82:6a:50:9b:5c:14:26:b4:e4:e7:b5:05:83: f2:ca:0a:53:0e:cd:b4:dc:37:cf:91:5d:53:7c:65: 6d:82:a0:d8:69:e7:06:8c:28:eb:84:21:5d:fe:30: 8c:73:1a:1d:6d:ba:9a:fe:1d:77:6a:47:bf:0c:20: 47:34:d6:cd:ca:db:87:79:40:6e:9f:79:d0:3c:13: 26:38:12:ff:0b:d4:91:4b:5a:29:33:7f:89:1a:03: 0e:b6:72:d5:68:ff:cc:e5:2d:e5:59:6e:16:9e:10: 98:0e:65:b7:be:2b:30:34:af:0a:36:aa:a5:ec:01: 6e:fc:50:fb:0d:b4:b6:4c:9a:ea:d6:6f:2d:28:52: 92:11:04:1d:18:bb:c5:14:3e:07:60:03:91:c8:69: 8f:f6:2f:66:0e:c3:00:f2:fc:da:a6:5f:e0:f1:63: 01:08:aa:cb:8c:a5:b5:f2:dc:3a:ca:52:e5:e9:d9: 33:f2:dc:40:93:ee:ad:3a:0e:a1:e3:ba:27:73:bf: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:34:17:6D:3D:A9:92:77:D1:59:0E:6A:0C:FA:56:C9:49:DC:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/495399ad-024a-3f40-ae90-902800031a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:37:ea:95:13:7f:67:00:00:33:47:bc:dc:f4:4d:24:5b:3e: 33:c8:5e:cb:cd:59:76:3f:22:57:cd:46:d9:b2:8f:42:96:ad: 9a:43:95:b5:3b:c8:38:8f:3f:22:b7:ba:e3:4b:9d:bb:58:23: e1:94:2a:37:f4:5e:07:6a:19:27:7e:11:a4:92:8f:aa:9e:e7: ac:7a:25:f1:6e:08:8e:1f:47:e2:61:f0:08:16:a6:13:92:89: f5:63:42:72:50:9a:ae:63:05:37:1c:ad:40:ab:aa:a8:9d:9a: ea:48:36:59:04:cf:68:27:e5:94:47:79:f9:ad:e0:8e:d9:6b: 34:90:4e:c5:34:d0:f9:f0:58:c9:9f:27:de:d9:8f:fe:5f:18: 6b:eb:38:9e:f4:c3:46:8c:e9:7f:03:a3:5c:50:68:6a:c4:e4: 23:30:f1:05:13:0c:e9:20:3c:a0:c1:52:5c:ca:eb:00:97:c6: b4:29:0a:7b:a7:90:98:b0:8e:d4:a6:1e:57:e2:43:fe:f4:c6: 48:ec:ba:c4:21:b6:26:df:fa:3c:a7:00:2a:a9:b7:4b:43:79: 20:23:e0:62:2a:12:c9:a4:7d:cb:a5:93:8a:78:d9:e5:83:9f: 64:5b:2f:8e:9d:98:43:e5:ca:37:5c:3d:2f:84:d2:c7:38:fc: d3:8f:c3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupXfEFG91vANVcBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNzE0MjgzNVoXDTI2MDEyNTE1MjgzNVowLzEtMCsGA1UEAxMk ZTJmODAxZGUtZmYzYy00YWUzLTk2NTYtYzkxYzA3YzE0ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2NMkr8EnvKLspclAlXCApT7099PeiCJYqSx ypXbWfk0YWxIXxi8nSwnVs16LUm6tooAls0sBWwaOoKidIJqUJtcFCa05Oe1BYPy ygpTDs203DfPkV1TfGVtgqDYaecGjCjrhCFd/jCMcxodbbqa/h13ake/DCBHNNbN ytuHeUBun3nQPBMmOBL/C9SRS1opM3+JGgMOtnLVaP/M5S3lWW4WnhCYDmW3visw NK8KNqql7AFu/FD7DbS2TJrq1m8tKFKSEQQdGLvFFD4HYAORyGmP9i9mDsMA8vza pl/g8WMBCKrLjKW18tw6ylLl6dkz8txAk+6tOg6h47onc7/blQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEpNBdtPamSd9FZDmoM+lbJSdxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDk1Mzk5YWQtMDI0YS0z ZjQwLWFlOTAtOTAyODAwMDMxYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALw36pUTf2cAADNHvNz0TSRbPjPIXsvNWXY/IlfNRtmyj0KWrZpDlbU7 yDiPPyK3uuNLnbtYI+GUKjf0XgdqGSd+EaSSj6qe56x6JfFuCI4fR+Jh8AgWphOS ifVjQnJQmq5jBTccrUCrqqidmupINlkEz2gn5ZRHefmt4I7ZazSQTsU00PnwWMmf J97Zj/5fGGvrOJ70w0aM6X8Do1xQaGrE5CMw8QUTDOkgPKDBUlzK6wCXxrQpCnun kJiwjtSmHlfiQ/70xkjsusQhtibf+jynACqpt0tDeSAj4GIqEsmkfculk4p42eWD n2RbL46dmEPlyjdcPS+E0sc4/NOPw44= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:46 2025 by rpki-client