$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/866c65ab-ea72-3100-81da-e068708b53df.roa File: 866c65ab-ea72-3100-81da-e068708b53df.roa (raw, json) Hash identifier: jIOTyod27vb4OMSU6A2qx2OL4vXcTHBPk7ZmYY6B28w= Subject key identifier: 27:48:18:7C:C0:05:D2:F2:B0:FF:04:98:DF:4D:D9:A2:32:1D:49:3A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBE5863EC83E1D175178ACD00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/866c65ab-ea72-3100-81da-e068708b53df.roa Signing time: Tue 04 Nov 2025 02:49:23 +0000 ROA not before: Tue 04 Nov 2025 02:49:23 +0000 ROA not after: Mon 02 Feb 2026 02:49:23 +0000 asID: 834 IP address blocks: 66.92.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:58:63:ec:83:e1:d1:75:17:8a:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 02:49:23 2025 GMT Not After : Feb 2 02:49:23 2026 GMT Subject: CN=425e7b7f-6cee-41d5-9bcc-2c0ed656723f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:0e:54:12:0d:97:99:46:d2:76:cd:ce:8b: 9f:0e:83:e9:00:01:f3:1f:8f:a7:88:a1:8d:f8:c0: 33:c3:78:a4:91:6a:ff:ac:00:0e:cf:95:9e:ee:1d: 7f:6b:73:fb:91:e9:8d:39:65:27:a6:c6:11:cc:15: 77:6d:20:e2:5f:39:52:d1:1f:a1:91:25:1f:7a:86: 48:44:4e:46:d7:90:f4:c4:98:33:c5:72:b0:8a:51: ec:61:0c:02:e5:d9:aa:e6:3b:7f:b9:cb:0c:5d:d6: 0b:0a:96:20:82:81:23:fd:7d:a5:09:2b:1a:40:cb: be:fa:bd:c2:2c:6c:08:4c:2d:3e:43:5a:d5:5f:d5: c0:bc:a9:ef:6c:a0:cf:20:9e:25:88:93:2f:89:3a: 6f:b3:56:15:e7:85:d6:c4:b3:2d:ec:88:e0:86:89: e5:16:f0:b7:76:9d:89:c7:82:5d:85:ae:89:5b:e8: 67:d8:53:19:6d:e4:ad:73:f4:8b:49:18:03:41:72: e3:bb:60:d5:df:1f:04:09:07:9c:b4:b4:c3:4d:99: a4:cd:12:90:51:29:b1:86:9d:02:b3:8a:25:01:3f: 0d:d5:ab:4a:72:61:21:c1:dd:fc:b9:ee:1f:c3:06: 37:02:ee:c5:61:4d:52:af:13:b1:18:4a:6e:7c:47: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:18:7C:C0:05:D2:F2:B0:FF:04:98:DF:4D:D9:A2:32:1D:49:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/866c65ab-ea72-3100-81da-e068708b53df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6d:41:62:c0:95:af:ac:97:fb:c1:18:1a:39:f7:f1:60:bb: 4f:99:61:34:8d:29:18:b8:1c:36:0c:9b:41:a2:64:ef:07:bc: 6b:01:88:70:60:b6:75:d8:07:22:64:ce:87:ea:a4:7a:32:32: 91:58:14:2e:cb:0d:d9:16:12:b5:c4:25:7c:f2:b5:2e:e7:62: 94:27:f4:0e:1a:46:2e:24:5c:15:04:44:26:74:63:9e:ea:49: cf:19:81:19:46:58:f8:98:c0:6f:9b:87:0e:47:b4:d4:27:86: 34:7a:b8:e8:7a:19:66:f0:08:f8:fd:7e:4a:59:4c:bd:01:8a: 34:e6:bc:6e:24:06:a2:b4:54:f0:08:9c:f3:e5:78:b5:bd:67: cf:4d:cf:28:e3:c0:08:57:52:0b:7a:eb:0b:bd:40:39:a8:45: e4:88:bf:68:50:7f:1e:6e:26:fd:5c:45:9a:c2:8f:f7:28:1b: 3f:3c:b7:61:6a:00:3d:b9:cf:18:a9:51:52:bf:9f:f8:4b:47: b6:f9:ee:20:7d:73:aa:2b:56:e6:5b:48:36:30:92:bb:c7:ed: 03:77:93:61:62:60:d8:50:60:51:2a:15:9b:5d:77:f5:50:a1: a1:84:2c:6c:36:d9:e3:84:cd:1a:8e:e8:95:67:5f:ea:f4:56: b5:e7:ef:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+WGPsg+HRdReKzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDAyNDkyM1oXDTI2MDIwMjAyNDkyM1owLzEtMCsGA1UEAxMk NDI1ZTdiN2YtNmNlZS00MWQ1LTliY2MtMmMwZWQ2NTY3MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXEOVBINl5lG0nbNzoufDoPpAAHzH4+niKGN +MAzw3ikkWr/rAAOz5We7h1/a3P7kemNOWUnpsYRzBV3bSDiXzlS0R+hkSUfeoZI RE5G15D0xJgzxXKwilHsYQwC5dmq5jt/ucsMXdYLCpYggoEj/X2lCSsaQMu++r3C LGwITC0+Q1rVX9XAvKnvbKDPIJ4liJMviTpvs1YV54XWxLMt7IjghonlFvC3dp2J x4Jdha6JW+hn2FMZbeStc/SLSRgDQXLju2DV3x8ECQectLTDTZmkzRKQUSmxhp0C s4olAT8N1atKcmEhwd38ue4fwwY3Au7FYU1SrxOxGEpufEetYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdIGHzABdLysP8EmN9N2aIyHUk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODY2YzY1YWItZWE3Mi0z MTAwLTgxZGEtZTA2ODcwOGI1M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxtQWLAla+sl/vBGBo59/Fgu0+ZYTSNKRi4HDYMm0GiZO8HvGsBiHBg tnXYByJkzofqpHoyMpFYFC7LDdkWErXEJXzytS7nYpQn9A4aRi4kXBUERCZ0Y57q Sc8ZgRlGWPiYwG+bhw5HtNQnhjR6uOh6GWbwCPj9fkpZTL0BijTmvG4kBqK0VPAI nPPleLW9Z89NzyjjwAhXUgt66wu9QDmoReSIv2hQfx5uJv1cRZrCj/coGz88t2Fq AD25zxipUVK/n/hLR7b57iB9c6orVuZbSDYwkrvH7QN3k2FiYNhQYFEqFZtdd/VQ oaGELGw22eOEzRqO6JVnX+r0VrXn7/4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:31 2025 by rpki-client