$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d2f4eba-a149-36c0-948e-1c762e96c2c6.roa File: 4d2f4eba-a149-36c0-948e-1c762e96c2c6.roa (raw, json) Hash identifier: XXtpcf87IvBaY5cemEe/Hbj/lk6JmU5DOISOgHurIXQ= Subject key identifier: 80:8F:01:AE:6A:A6:9C:0F:D2:E1:9E:50:AA:E8:F8:2E:5D:33:F4:8E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B94D59EEE7400411F82189500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d2f4eba-a149-36c0-948e-1c762e96c2c6.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 39600 IP address blocks: 66.92.76.0/22 maxlen: 24 66.253.56.0/22 maxlen: 24 216.132.240.0/22 maxlen: 24 216.132.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:d5:9e:ee:74:00:41:1f:82:18:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=fd43a26a-8f01-4906-989e-20968007565f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:6f:75:64:26:ef:00:55:f1:64:59:a6:23: 72:66:47:ba:38:c0:34:5a:07:a5:09:d4:ad:ad:0f: c7:a8:74:90:9a:6b:48:3e:23:ef:7e:a5:c9:f0:23: 75:9d:b4:9e:e1:0f:58:11:cf:b8:26:fa:67:19:2f: 2c:c1:d5:34:91:70:08:0e:7c:8e:94:d7:72:04:7d: fd:57:5b:b7:cf:cb:69:5e:4a:3f:c6:df:ef:bf:40: f9:86:56:7d:75:62:55:e3:34:31:8e:c8:09:02:62: ee:c4:f4:77:13:4d:47:d6:45:74:b5:7c:14:68:b8: 84:81:30:bf:a6:8a:d3:12:3e:bb:f3:ee:a8:23:9f: 83:48:f8:c7:4a:cd:8a:eb:c4:8a:3d:78:96:c9:fd: 77:dd:19:a7:89:cb:be:00:0d:8d:59:ee:ec:91:95: 50:41:0c:d2:c9:66:27:5b:26:91:48:7c:58:d5:39: 6e:4e:82:09:e9:a7:53:f1:05:b4:33:25:25:19:28: cf:3b:1b:b0:aa:76:b8:6b:b0:12:90:6d:3b:c6:63: 0c:83:aa:4b:b8:4e:2d:46:6c:4d:e7:11:51:d1:64: 84:a0:98:6d:ad:d1:99:8a:98:14:a2:57:7f:3a:f1: d6:e0:9e:a7:43:7e:a1:19:82:93:59:4b:f8:2b:2b: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8F:01:AE:6A:A6:9C:0F:D2:E1:9E:50:AA:E8:F8:2E:5D:33:F4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d2f4eba-a149-36c0-948e-1c762e96c2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.76.0/22 66.253.56.0/22 216.132.240.0/22 216.132.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3a:28:76:ac:04:05:cf:ea:18:0c:d9:d1:07:e3:fa:3b:9a: ab:42:bd:a6:61:0b:a8:21:cf:64:ea:28:d8:e7:68:c3:83:80: 13:2a:34:a9:3d:32:6c:5a:29:45:82:ff:d5:ef:d1:55:5e:bf: 93:f8:1b:64:c0:58:5d:d4:02:23:50:f7:27:fa:9d:3e:ab:45: 4a:4f:9b:17:82:f3:16:08:3e:6f:b5:c1:82:94:7d:78:7d:3a: 19:5d:b8:7d:33:a7:ec:0c:a3:3a:16:1d:e1:b2:ec:ec:18:0c: 7c:8b:62:f3:7b:42:c7:07:4a:b8:c3:57:a8:1e:e4:c6:08:4f: 43:0e:2d:8f:fe:5a:4a:18:cf:79:3e:88:c9:58:be:9b:b5:de: 55:89:1e:22:d5:44:a0:62:2d:0d:29:ef:51:3d:80:e9:5b:db: 74:03:dd:8d:2e:62:62:5b:50:11:51:70:1a:99:aa:f3:03:b9: 43:f4:ba:0d:77:6c:f4:08:6d:82:ea:4d:b9:69:1b:db:4b:96: ec:2d:89:91:20:5d:43:de:bb:c1:ae:ba:ef:03:21:03:20:48: 39:4c:ac:2b:29:67:36:bb:e3:c1:8f:25:2a:e3:66:34:b2:0c: 3c:36:0b:64:f8:dc:4f:21:2c:f7:0f:96:24:be:6c:47:08:b3: 0c:b0:ae:00 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEuU1Z7udABBH4IYlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk ZmQ0M2EyNmEtOGYwMS00OTA2LTk4OWUtMjA5NjgwMDc1NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfBvdWQm7wBV8WRZpiNyZke6OMA0WgelCdSt rQ/HqHSQmmtIPiPvfqXJ8CN1nbSe4Q9YEc+4JvpnGS8swdU0kXAIDnyOlNdyBH39 V1u3z8tpXko/xt/vv0D5hlZ9dWJV4zQxjsgJAmLuxPR3E01H1kV0tXwUaLiEgTC/ porTEj678+6oI5+DSPjHSs2K68SKPXiWyf133Rmnicu+AA2NWe7skZVQQQzSyWYn WyaRSHxY1TluToIJ6adT8QW0MyUlGSjPOxuwqna4a7ASkG07xmMMg6pLuE4tRmxN 5xFR0WSEoJhtrdGZipgUold/OvHW4J6nQ36hGYKTWUv4Kyul7QIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFICPAa5qppwP0uGeUKro+C5dM/SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGQyZjRlYmEtYTE0OS0z NmMwLTk0OGUtMWM3NjJlOTZjMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQlxMAwQC Qv04AwQC2ITwAwQC2IT4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABU6KHasBAXP6hgM2dEH4/o7mqtCvaZh C6ghz2TqKNjnaMODgBMqNKk9MmxaKUWC/9Xv0VVev5P4G2TAWF3UAiNQ9yf6nT6r RUpPmxeC8xYIPm+1wYKUfXh9OhlduH0zp+wMozoWHeGy7OwYDHyLYvN7QscHSrjD V6ge5MYIT0MOLY/+WkoYz3k+iMlYvpu13lWJHiLVRKBiLQ0p71E9gOlb23QD3Y0u YmJbUBFRcBqZqvMDuUP0ug13bPQIbYLqTblpG9tLluwtiZEgXUPeu8Guuu8DIQMg SDlMrCspZza748GPJSrjZjSyDDw2C2T43E8hLPcPliS+bEcIswywrgA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:51:12 2025 by rpki-client