$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88eb5e79-267a-3a64-b1b1-aa7966c64ada.roa File: 88eb5e79-267a-3a64-b1b1-aa7966c64ada.roa (raw, json) Hash identifier: ibZFp3k6vW1K58E5xYpIlfSG22y+39DSSCQd7p6ijOo= Subject key identifier: 00:37:47:CE:55:9A:CC:BC:36:CD:93:7B:2D:46:44:26:04:42:B2:9F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB13A3E894EA0AC9BEFAB5980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88eb5e79-267a-3a64-b1b1-aa7966c64ada.roa Signing time: Thu 30 Oct 2025 10:03:08 +0000 ROA not before: Thu 30 Oct 2025 10:03:08 +0000 ROA not after: Wed 28 Jan 2026 11:03:08 +0000 asID: 399989 IP address blocks: 69.33.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:3a:3e:89:4e:a0:ac:9b:ef:ab:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 30 10:03:08 2025 GMT Not After : Jan 28 11:03:08 2026 GMT Subject: CN=7beaa0a8-2d58-48fb-8784-9755e96f816f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:5f:dc:08:e0:13:ca:82:e6:d6:dc:66:1d: 6d:a2:9d:c4:25:66:d9:fa:4e:d9:b1:3a:98:13:6b: fa:72:2e:18:e3:0a:73:81:00:e5:ef:5c:4e:21:7b: 45:90:4d:61:11:e7:82:68:b8:51:e9:b4:ed:94:d3: ce:77:85:00:c7:eb:54:a6:e9:9d:1a:e5:6e:4d:4c: 1f:c3:78:dd:52:04:0c:4e:c4:b2:96:e0:23:01:5b: e2:65:fc:3a:eb:ad:2a:d2:1e:45:d0:18:90:72:58: 66:46:c8:b5:9e:22:ab:a3:f0:f3:29:2e:4b:08:d9: 10:c5:f2:ba:1d:49:ba:e0:5a:fe:30:13:71:4f:ba: ea:7b:ce:4b:92:dc:46:76:33:76:08:9a:c3:68:9e: 44:1f:06:f1:e5:af:9f:5a:4c:ff:7d:75:00:44:95: 1d:43:bb:16:0b:42:7f:77:4d:c0:0d:aa:66:81:2c: 3a:ee:34:6a:ea:7d:b2:a1:19:8c:b1:82:fc:f0:11: 92:dd:7b:f3:c1:28:66:d6:e7:3c:24:ca:ea:b2:98: de:66:12:7d:82:fa:73:4f:04:f5:2e:92:94:ee:e0: c1:f8:68:a5:4b:1f:da:ed:60:98:43:50:b7:90:76: 3c:55:eb:24:d2:c9:27:93:70:09:82:0e:d6:7b:fa: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:47:CE:55:9A:CC:BC:36:CD:93:7B:2D:46:44:26:04:42:B2:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88eb5e79-267a-3a64-b1b1-aa7966c64ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:9d:ed:69:51:c3:e6:cd:50:3b:00:1b:aa:9e:0a:d3:d0:f7: 39:53:b8:52:14:23:1a:d5:87:c4:65:a9:06:f0:4b:52:53:ee: ee:d9:d7:75:0c:4e:a5:88:1c:57:bb:60:57:27:e7:25:8b:14: 2e:cb:29:68:d3:b8:cd:63:72:60:5f:48:65:64:2b:0c:0d:12: f0:29:81:f9:00:4b:7d:7a:f7:4f:1b:73:63:1a:4c:57:0f:2c: b8:45:ec:9e:61:37:5f:11:58:92:4c:4f:ac:bd:ab:16:ff:61: 23:6b:6f:f6:e4:62:9d:21:1e:a4:fc:db:59:29:47:09:f5:4a: 28:d0:09:11:63:03:b8:83:bf:51:da:4e:98:e9:93:5c:96:09: 94:b5:58:9d:6d:92:9f:96:b0:37:88:07:1a:be:25:61:72:e6: ee:94:f8:85:87:8f:4d:dd:01:f1:1c:cc:4d:8a:66:45:92:0c: aa:1b:bb:b2:58:47:6b:e4:8f:a9:cd:3d:19:d9:5a:ec:87:6b: 3d:ab:bb:17:e8:aa:5a:81:67:c1:82:c5:b9:e1:b2:e6:eb:36: dd:ff:e5:f3:d9:86:8c:7c:4f:af:c7:ed:b0:31:73:9d:8f:d2: 89:ce:bb:d7:8a:ee:96:24:ad:a5:9c:ca:af:f2:ad:6b:07:26: 1f:0c:18:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxOj6JTqCsm++rWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAzMDEwMDMwOFoXDTI2MDEyODExMDMwOFowLzEtMCsGA1UEAxMk N2JlYWEwYTgtMmQ1OC00OGZiLTg3ODQtOTc1NWU5NmY4MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuNf3AjgE8qC5tbcZh1top3EJWbZ+k7ZsTqY E2v6ci4Y4wpzgQDl71xOIXtFkE1hEeeCaLhR6bTtlNPOd4UAx+tUpumdGuVuTUwf w3jdUgQMTsSyluAjAVviZfw6660q0h5F0BiQclhmRsi1niKro/DzKS5LCNkQxfK6 HUm64Fr+MBNxT7rqe85LktxGdjN2CJrDaJ5EHwbx5a+fWkz/fXUARJUdQ7sWC0J/ d03ADapmgSw67jRq6n2yoRmMsYL88BGS3XvzwShm1uc8JMrqspjeZhJ9gvpzTwT1 LpKU7uDB+GilSx/a7WCYQ1C3kHY8Vesk0sknk3AJgg7We/oozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA3R85Vmsy8Ns2Tey1GRCYEQrKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODhlYjVlNzktMjY3YS0z YTY0LWIxYjEtYWE3OTY2YzY0YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyd7WlRw+bNUDsAG6qeCtPQ9zlTuFIUIxrVh8RlqQbwS1JT7u7Z13UM TqWIHFe7YFcn5yWLFC7LKWjTuM1jcmBfSGVkKwwNEvApgfkAS316908bc2MaTFcP LLhF7J5hN18RWJJMT6y9qxb/YSNrb/bkYp0hHqT821kpRwn1SijQCRFjA7iDv1Ha Tpjpk1yWCZS1WJ1tkp+WsDeIBxq+JWFy5u6U+IWHj03dAfEczE2KZkWSDKobu7JY R2vkj6nNPRnZWuyHaz2ruxfoqlqBZ8GCxbnhsubrNt3/5fPZhox8T6/H7bAxc52P 0onOu9eK7pYkraWcyq/yrWsHJh8MGGA= -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:20 2025 by rpki-client