$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4b01b14b-5745-3d11-8ac6-3f9dbc930196.roa File: 4b01b14b-5745-3d11-8ac6-3f9dbc930196.roa (raw, json) Hash identifier: 7Cpa2NbjpNT8+2kbQWawAxtY9TbQpfvHWU23h3o7jGo= Subject key identifier: 05:4B:97:3F:DF:42:E6:AB:97:C8:CA:15:5C:5A:55:D0:0C:93:65:DC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA0D271A59623E2D14F59BA00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4b01b14b-5745-3d11-8ac6-3f9dbc930196.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8220 IP address blocks: 66.92.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:71:a5:96:23:e2:d1:4f:59:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c62a83f3-bcd3-444e-a865-fdf825cb9e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:c6:80:6e:2a:dc:41:01:92:66:b0:8e:a6: 06:cb:91:ac:94:79:9b:55:87:1d:42:c1:56:04:af: ca:ae:60:8c:b1:70:3b:86:49:38:ad:51:b8:20:58: b3:e4:98:1c:a7:db:d9:88:56:d1:3c:37:e9:d9:af: db:70:d9:88:99:9a:cb:c7:a5:80:3f:c3:be:4c:84: fc:8a:82:43:d9:09:b0:57:1c:7a:14:58:1d:c0:13: b9:63:e1:21:bc:da:ae:1b:06:73:72:32:1e:f5:0b: af:6b:e6:30:c3:a2:f1:a5:79:f5:e4:fc:2a:57:dd: d0:8c:2c:5f:b3:37:54:bd:ff:b8:f5:74:33:fe:0d: 23:03:5c:0f:50:c1:f3:d0:32:5a:78:8d:12:e9:62: 84:91:02:ad:17:ad:07:58:8d:e0:17:db:a6:92:0c: 89:84:4c:9a:a3:fc:a0:e5:f5:21:e0:4b:6c:42:6d: b7:51:b8:83:aa:13:1b:26:99:e1:5c:89:63:60:ee: 54:02:21:69:da:92:12:99:6f:f6:bd:e2:fc:31:52: cb:86:d2:6b:d6:53:68:a6:e3:fe:8c:f0:0e:22:fa: b7:cd:5c:66:04:e4:5d:64:ca:3f:7b:9b:07:d1:fc: ef:3a:04:9d:13:33:18:44:d8:cb:0f:fb:69:65:9b: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4B:97:3F:DF:42:E6:AB:97:C8:CA:15:5C:5A:55:D0:0C:93:65:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4b01b14b-5745-3d11-8ac6-3f9dbc930196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ea:ef:7d:f5:37:77:85:a3:7c:a6:7c:a5:bb:51:68:b9:66: d7:5f:4b:f5:41:f6:00:d8:cf:fa:6f:58:cb:7a:20:87:78:40: 72:e9:78:9c:01:32:0a:bc:13:24:cf:b1:ff:32:68:65:2f:5c: 99:48:e6:b4:33:2d:f3:0e:4a:17:36:7d:28:62:f1:57:5f:aa: 71:2c:65:3b:d9:3c:de:2a:5e:40:06:51:e0:c7:ea:67:8c:f8: 17:9c:15:ee:3b:b9:76:1f:79:b9:f2:97:95:44:66:65:c9:69: 1e:92:72:99:16:c5:25:13:bd:78:c8:69:ea:27:79:7d:80:cf: 6f:6c:3d:a1:aa:ad:ba:6c:54:41:ad:a0:ab:94:b2:57:5f:5e: 78:75:4b:c4:55:e0:9c:cb:79:bf:b8:2f:eb:8c:5a:65:06:e8: 23:ab:9e:e5:78:e7:e1:a1:bf:f2:23:b8:92:75:3a:67:f9:c9: cb:7b:a9:18:a2:17:41:27:fd:cf:a2:bb:1d:e5:88:e1:9e:34: 83:e9:7d:ff:08:60:76:85:dd:3f:07:b4:61:45:76:f1:4e:fc: 35:8c:80:15:c9:98:f9:bf:4a:0b:56:ec:22:fd:b3:84:4e:56: 14:9e:7e:d9:11:14:0a:2c:44:29:f3:2b:6a:4d:89:9e:18:bf: 27:36:0c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nGlliPi0U9ZugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzYyYTgzZjMtYmNkMy00NDRlLWE4NjUtZmRmODI1Y2I5ZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/3GgG4q3EEBkmawjqYGy5GslHmbVYcdQsFW BK/KrmCMsXA7hkk4rVG4IFiz5Jgcp9vZiFbRPDfp2a/bcNmImZrLx6WAP8O+TIT8 ioJD2QmwVxx6FFgdwBO5Y+EhvNquGwZzcjIe9Quva+Yww6LxpXn15PwqV93QjCxf szdUvf+49XQz/g0jA1wPUMHz0DJaeI0S6WKEkQKtF60HWI3gF9umkgyJhEyao/yg 5fUh4EtsQm23UbiDqhMbJpnhXIljYO5UAiFp2pISmW/2veL8MVLLhtJr1lNopuP+ jPAOIvq3zVxmBORdZMo/e5sH0fzvOgSdEzMYRNjLD/tpZZvPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVLlz/fQuarl8jKFVxaVdAMk2XcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGIwMWIxNGItNTc0NS0z ZDExLThhYzYtM2Y5ZGJjOTMwMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfq7331N3eFo3ymfKW7UWi5ZtdfS/VB9gDYz/pvWMt6IId4QHLpeJwB Mgq8EyTPsf8yaGUvXJlI5rQzLfMOShc2fShi8VdfqnEsZTvZPN4qXkAGUeDH6meM +BecFe47uXYfebnyl5VEZmXJaR6ScpkWxSUTvXjIaeoneX2Az29sPaGqrbpsVEGt oKuUsldfXnh1S8RV4JzLeb+4L+uMWmUG6COrnuV45+Ghv/IjuJJ1Omf5yct7qRii F0En/c+iux3liOGeNIPpff8IYHaF3T8HtGFFdvFO/DWMgBXJmPm/SgtW7CL9s4RO VhSeftkRFAosRCnzK2pNiZ4Yvyc2DIo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:38 2025 by rpki-client