$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa File: 6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa (raw, json) Hash identifier: YSpyQx7wxDPkcleAP2uWlajEmXb/3oj6NwVMEU+sbzY= Subject key identifier: 8B:FC:EC:60:48:91:0B:F7:AD:A4:67:D1:73:8D:FC:DB:0A:17:74:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5B076511F8A1B8D43FCEF060 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 62610 IP address blocks: 66.253.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:65:11:f8:a1:b8:d4:3f:ce:f0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=73d1a444-713c-4f25-8241-554bc41fbb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:28:b8:ca:19:c1:f1:5d:b5:bf:42:61:6e: 57:9b:5f:89:09:69:1a:e3:aa:47:8e:e8:60:3f:b1: 53:5b:30:17:1c:ec:5b:6e:db:a0:75:ad:b3:0b:bd: 55:27:53:f0:4f:39:b7:c5:9b:a4:e6:c4:a7:02:fc: 84:e6:51:68:7e:ae:20:17:af:11:7c:5f:50:7c:e3: b4:51:3e:9a:76:a5:19:34:ab:25:c7:4e:3b:57:1a: d4:7b:73:d6:87:26:d1:54:e4:e6:c9:0b:1e:8f:30: af:9b:04:15:b0:e3:62:9f:15:2b:56:c3:8c:d2:13: 42:46:6b:ef:99:ed:e8:1b:dc:36:7b:ce:f0:61:31: bb:33:c7:8f:42:9c:0e:12:92:5c:86:59:24:9d:1b: 45:6f:df:16:a9:31:ad:09:bb:51:7b:fb:e2:df:5e: 27:9c:6f:6f:a0:03:5c:8c:06:25:88:9c:b8:1b:fb: bb:4d:7c:33:8a:65:da:29:fa:1c:93:53:d8:5a:0b: c1:ac:10:2c:1f:52:52:24:03:44:52:ee:23:36:74: a3:59:c8:2d:b0:77:c2:22:70:74:9d:9a:b9:87:b7: 0f:bf:45:cd:93:ce:85:6e:01:ba:5f:24:4e:70:29: 79:af:20:bd:c8:7b:23:5f:e3:83:4b:f3:89:34:0b: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:EC:60:48:91:0B:F7:AD:A4:67:D1:73:8D:FC:DB:0A:17:74:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6903cef0-a7a6-31b2-bbf1-5fedeed2769a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:35:18:08:ba:4b:6f:bb:26:9b:8c:51:b6:5d:60:c8:2c:fa: 58:99:2a:88:2c:90:26:8f:62:d0:d0:81:76:38:51:34:95:ac: 91:0b:b6:f3:1d:91:2b:7d:d9:fc:43:3f:66:1c:43:2e:2f:21: 98:46:d1:78:b4:98:ca:26:d0:05:fb:e9:11:14:95:e3:7a:df: 64:2c:ba:5c:ab:d9:b7:04:3f:cc:1b:47:9d:e0:7c:5a:8f:c3: 53:d6:4e:a2:bb:f3:23:61:ca:f0:f2:73:ea:d0:e4:1a:86:48: 43:86:14:80:b6:37:f0:a6:15:1e:25:e1:ab:c5:76:ef:a9:66: 10:34:7e:04:c7:ef:11:f3:1f:a9:5e:5a:d4:5f:53:be:5a:59: 92:fc:7b:b7:e9:6e:5d:0d:30:bb:8d:50:f0:c5:48:37:69:25: 93:39:1d:f6:83:7d:6d:fc:3a:2e:41:98:62:82:22:71:45:34: 0a:8b:32:09:55:9c:17:8e:6d:43:87:8c:2a:bd:66:21:6f:51: e3:63:92:5b:f0:17:b2:f3:0d:d3:f9:ef:2c:07:09:ac:a0:10: a9:72:58:80:13:b3:d8:ca:f2:59:df:b7:22:be:25:7d:8b:19: f7:82:2c:0c:30:a2:66:53:1d:4f:a8:92:73:7a:49:21:51:92: e5:c1:47:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2UR+KG41D/O8GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzNkMWE0NDQtNzEzYy00ZjI1LTgyNDEtNTU0YmM0MWZiYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKsouMoZwfFdtb9CYW5Xm1+JCWka46pHjuhg P7FTWzAXHOxbbtugda2zC71VJ1PwTzm3xZuk5sSnAvyE5lFofq4gF68RfF9QfOO0 UT6adqUZNKslx047VxrUe3PWhybRVOTmyQsejzCvmwQVsONinxUrVsOM0hNCRmvv me3oG9w2e87wYTG7M8ePQpwOEpJchlkknRtFb98WqTGtCbtRe/vi314nnG9voANc jAYliJy4G/u7TXwzimXaKfock1PYWgvBrBAsH1JSJANEUu4jNnSjWcgtsHfCInB0 nZq5h7cPv0XNk86FbgG6XyROcCl5ryC9yHsjX+ODS/OJNAvnUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv87GBIkQv3raRn0XON/NsKF3RlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjkwM2NlZjAtYTdhNi0z MWIyLWJiZjEtNWZlZGVlZDI3NjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc1GAi6S2+7JpuMUbZdYMgs+liZKogskCaPYtDQgXY4UTSVrJELtvMd kSt92fxDP2YcQy4vIZhG0Xi0mMom0AX76REUleN632Qsulyr2bcEP8wbR53gfFqP w1PWTqK78yNhyvDyc+rQ5BqGSEOGFIC2N/CmFR4l4avFdu+pZhA0fgTH7xHzH6le WtRfU75aWZL8e7fpbl0NMLuNUPDFSDdpJZM5HfaDfW38Oi5BmGKCInFFNAqLMglV nBeObUOHjCq9ZiFvUeNjklvwF7LzDdP57ywHCaygEKlyWIATs9jK8lnftyK+JX2L GfeCLAwwomZTHU+oknN6SSFRkuXBRzo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:55 2025 by rpki-client