$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d17a362-22e4-3f57-aaa7-1972d3524194.roa File: 8d17a362-22e4-3f57-aaa7-1972d3524194.roa (raw, json) Hash identifier: /siHQ3M4ZwDX20y5YR+ieTjW/lb8gQHSVRH8Z+m1+ww= Subject key identifier: 73:69:4A:2B:F0:F4:EC:46:A9:10:02:E4:5B:83:88:3E:FE:8A:B9:B7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B79ABA45B475740EAE9DB7780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d17a362-22e4-3f57-aaa7-1972d3524194.roa Signing time: Fri 10 Oct 2025 12:26:21 +0000 ROA not before: Fri 10 Oct 2025 12:26:21 +0000 ROA not after: Thu 08 Jan 2026 13:26:21 +0000 asID: 397630 IP address blocks: 66.93.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ab:a4:5b:47:57:40:ea:e9:db:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 12:26:21 2025 GMT Not After : Jan 8 13:26:21 2026 GMT Subject: CN=91a05c66-6874-4ff2-9ad7-963203891cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:97:96:a6:be:14:1d:13:cb:fe:72:cf:d1: df:74:88:e9:69:fa:c2:75:7c:15:6a:7e:66:ea:28: d5:f7:7d:75:cd:87:8d:76:ed:d4:a2:12:e8:68:da: 90:2b:51:17:d1:48:e4:19:79:45:31:88:84:c6:e4: a3:07:52:95:06:80:bd:4e:e9:91:d8:bb:23:7a:1b: a5:5e:26:1b:77:23:ad:21:e9:1f:cb:93:69:6d:21: 37:28:ca:41:95:11:80:dc:4a:42:0b:03:da:7b:c2: 33:cb:7d:be:bb:e7:4b:fe:d7:fc:1e:a5:a7:fc:0e: 1a:ec:ef:38:d2:74:74:9d:bf:83:47:2f:a8:7a:b0: cb:d2:e6:b6:44:a3:a6:89:cd:73:01:65:53:9b:ac: 36:82:aa:c7:e9:d9:0f:e8:51:e9:19:9d:d8:b0:ec: 29:70:25:c9:0c:99:2f:90:9c:61:5b:6a:de:79:ed: b6:72:29:1e:d7:1b:17:5f:a5:ed:34:51:57:9c:1b: 29:e4:4f:dd:e1:85:e9:27:38:51:3c:f7:11:8f:3f: 02:a7:b7:89:b9:d3:92:b7:28:75:14:00:0c:70:d6: b9:5c:fa:ed:b3:8e:26:4a:bd:ee:35:b9:a1:42:a6: f4:d7:06:71:b1:8c:75:0e:8b:92:4b:40:a8:c8:db: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:4A:2B:F0:F4:EC:46:A9:10:02:E4:5B:83:88:3E:FE:8A:B9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8d17a362-22e4-3f57-aaa7-1972d3524194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b2:54:64:35:e3:47:ce:a5:65:8b:c5:14:f3:ec:7f:4b:03: a1:3d:3b:9c:a8:76:34:72:9b:bf:39:61:b4:0e:f0:fe:a4:8b: c8:6b:1a:fe:9b:87:03:33:9c:29:d8:7e:5d:08:0d:ec:d1:b7: b7:fc:ce:ec:50:66:f5:cb:82:02:21:ab:d4:df:61:a1:ed:95: 36:c6:f0:11:48:3b:ae:55:fa:26:a9:aa:06:52:d0:73:f0:66: 34:e5:06:c7:de:50:c3:02:ff:55:d0:09:89:ee:f0:25:77:c6: b8:40:f3:1d:82:98:5f:5b:e0:0f:83:27:fb:4b:33:c0:b7:f2: 12:26:2c:02:08:db:c4:eb:d5:82:fd:57:c9:df:35:07:b8:62: 3b:84:42:0e:80:af:34:62:ad:2e:7d:b4:65:71:99:37:57:7c: a4:ca:db:ae:42:25:8e:50:12:07:92:e4:09:43:dd:a4:e5:62: 73:2a:b7:49:a2:83:d7:2b:79:76:34:69:f2:9a:f8:ab:05:73: f0:a1:1e:21:0f:14:94:ae:66:55:af:21:de:61:6f:1a:61:55: 30:02:46:2f:7a:b3:22:7c:88:44:9a:b6:77:59:30:0b:8e:e9: b3:b7:50:fe:ee:b3:a8:2a:fc:82:57:d3:f3:f4:2f:05:a2:12: db:a8:2b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5q6RbR1dA6unbd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDEyMjYyMVoXDTI2MDEwODEzMjYyMVowLzEtMCsGA1UEAxMk OTFhMDVjNjYtNjg3NC00ZmYyLTlhZDctOTYzMjAzODkxY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjKXlqa+FB0Ty/5yz9HfdIjpafrCdXwVan5m 6ijV9311zYeNdu3UohLoaNqQK1EX0UjkGXlFMYiExuSjB1KVBoC9TumR2Lsjehul XiYbdyOtIekfy5NpbSE3KMpBlRGA3EpCCwPae8Izy32+u+dL/tf8HqWn/A4a7O84 0nR0nb+DRy+oerDL0ua2RKOmic1zAWVTm6w2gqrH6dkP6FHpGZ3YsOwpcCXJDJkv kJxhW2reee22cike1xsXX6XtNFFXnBsp5E/d4YXpJzhRPPcRjz8Cp7eJudOStyh1 FAAMcNa5XPrts44mSr3uNbmhQqb01wZxsYx1DouSS0CoyNue4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNpSivw9OxGqRAC5FuDiD7+irm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGQxN2EzNjItMjJlNC0z ZjU3LWFhYTctMTk3MmQzNTI0MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWyVGQ140fOpWWLxRTz7H9LA6E9O5yodjRym785YbQO8P6ki8hrGv6b hwMznCnYfl0IDezRt7f8zuxQZvXLggIhq9TfYaHtlTbG8BFIO65V+iapqgZS0HPw ZjTlBsfeUMMC/1XQCYnu8CV3xrhA8x2CmF9b4A+DJ/tLM8C38hImLAII28Tr1YL9 V8nfNQe4YjuEQg6ArzRirS59tGVxmTdXfKTK265CJY5QEgeS5AlD3aTlYnMqt0mi g9creXY0afKa+KsFc/ChHiEPFJSuZlWvId5hbxphVTACRi96syJ8iESatndZMAuO 6bO3UP7us6gq/IJX0/P0LwWiEtuoK1o= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:15 2025 by rpki-client