$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8e72df1-6e46-30ed-808f-32fbb1fc0b95.roa File: a8e72df1-6e46-30ed-808f-32fbb1fc0b95.roa (raw, json) Hash identifier: sgZ4mw4KHCIktQJNa95P5wbOL+0ld4NHM0fpATBFiq8= Subject key identifier: 15:B4:59:AE:C8:B6:01:76:57:8C:37:DA:5E:78:29:FE:30:10:5B:C8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B32FD39AA93C48CE1099067F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8e72df1-6e46-30ed-808f-32fbb1fc0b95.roa Signing time: Mon 15 Sep 2025 04:48:20 +0000 ROA not before: Mon 15 Sep 2025 04:48:20 +0000 ROA not after: Sun 14 Dec 2025 05:48:20 +0000 asID: 208485 IP address blocks: 66.167.128.0/22 maxlen: 24 66.167.132.0/22 maxlen: 24 66.167.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:fd:39:aa:93:c4:8c:e1:09:90:67:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 04:48:20 2025 GMT Not After : Dec 14 05:48:20 2025 GMT Subject: CN=df2d7780-1989-45f1-8044-95363a5bdef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:f2:68:16:10:c7:30:6c:3b:79:8f:b1:a0: b0:8a:4e:35:55:78:cc:64:af:3d:28:f0:da:c1:b6: a7:a6:d2:9e:1e:97:3a:12:a9:9c:ff:8a:c0:06:99: d7:b6:8a:40:d8:d4:dd:89:cc:c5:ab:68:e1:7b:35: ff:96:f7:b6:16:09:9e:89:15:f7:64:62:e8:f5:e6: 8f:b7:81:eb:b4:d4:8f:14:88:50:8a:8c:e9:fd:2a: fa:44:37:40:c1:09:7b:fa:a1:c8:4a:92:5f:9c:75: 5b:1d:be:9c:bb:d4:9a:cf:58:b3:cd:70:4f:da:2d: aa:bf:0b:a6:c1:a9:1a:8e:cc:61:3b:ae:9e:59:57: 53:e4:66:e9:74:21:7b:ee:51:97:0c:c5:c2:53:43: 8c:a8:ec:4e:1c:7f:fd:5b:21:d9:f6:4f:54:0d:99: 37:82:6c:42:44:a6:07:57:ee:5e:f7:0c:0c:51:a9: e3:99:cc:bf:77:3e:07:c7:a4:84:c6:31:c8:e2:b0: 3a:2d:dd:c1:26:f6:ee:16:6e:5d:db:17:af:6f:ad: 2a:83:8b:1a:18:61:fa:19:6a:97:b7:ba:f8:e9:c2: 40:cd:fb:a6:1e:58:fd:20:6a:ef:ac:0e:60:c9:92: d8:3b:f9:6a:12:be:b0:24:86:ce:d5:af:c2:c2:58: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B4:59:AE:C8:B6:01:76:57:8C:37:DA:5E:78:29:FE:30:10:5B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8e72df1-6e46-30ed-808f-32fbb1fc0b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.167.128.0-66.167.139.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:38:eb:0b:d6:08:cb:dc:69:3c:e7:4b:fd:b5:7b:fb:77:59: 49:6b:2d:19:1a:84:94:ad:e8:87:8b:ed:c0:0a:32:16:e0:d3: 21:af:3a:3c:04:ab:bd:26:81:bf:46:c7:ec:01:54:6d:37:d9: 70:7e:d1:96:fb:46:93:0c:af:39:0e:d8:cf:99:d1:0c:f8:c9: 39:46:dd:70:bf:22:81:35:04:93:a0:83:0c:b3:c8:6a:c9:63: 8d:0d:6f:71:09:f9:98:f9:d5:be:4c:34:82:23:bd:ab:63:f2: d1:c8:20:ce:cc:76:a2:e3:5b:45:99:a6:b9:81:71:88:9f:b8: 95:76:30:38:c1:95:d4:ac:e0:45:ef:53:cb:3c:3d:b9:29:9f: d1:10:a5:ad:58:ff:bb:ed:77:07:90:4f:f1:39:bf:63:d4:b4: 95:40:3b:6e:34:a9:6a:8d:c4:0a:3d:8e:a6:d4:46:9f:16:ee: 9f:3a:d7:c2:69:dd:dd:aa:1c:cf:e6:6f:b4:cd:cf:f0:1f:f9: 09:98:52:73:d0:e5:d8:4e:03:38:09:4d:2c:8a:6f:c0:14:b3: 43:1c:8e:96:dc:f2:e6:a0:3d:0a:bd:53:9c:08:02:b1:d7:f3: 07:28:83:e8:e4:bc:48:39:31:dc:8c:51:b8:79:53:51:75:27: 22:2d:66:ea -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsy/Tmqk8SM4QmQZ/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTA0NDgyMFoXDTI1MTIxNDA1NDgyMFowLzEtMCsGA1UEAxMk ZGYyZDc3ODAtMTk4OS00NWYxLTgwNDQtOTUzNjNhNWJkZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsojyaBYQxzBsO3mPsaCwik41VXjMZK89KPDa wbanptKeHpc6Eqmc/4rABpnXtopA2NTdiczFq2jhezX/lve2FgmeiRX3ZGLo9eaP t4HrtNSPFIhQiozp/Sr6RDdAwQl7+qHISpJfnHVbHb6cu9Saz1izzXBP2i2qvwum wakajsxhO66eWVdT5GbpdCF77lGXDMXCU0OMqOxOHH/9WyHZ9k9UDZk3gmxCRKYH V+5e9wwMUanjmcy/dz4Hx6SExjHI4rA6Ld3BJvbuFm5d2xevb60qg4saGGH6GWqX t7r46cJAzfumHlj9IGrvrA5gyZLYO/lqEr6wJIbO1a/CwlhLqQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBW0Wa7ItgF2V4w32l54Kf4wEFvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYThlNzJkZjEtNmU0Ni0z MGVkLTgwOGYtMzJmYmIxZmMwYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAdCp4AD BAJCp4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAozjrC9YIy9xpPOdL/bV7+3dZSWstGRqElK3oh4vtwAoy FuDTIa86PASrvSaBv0bH7AFUbTfZcH7RlvtGkwyvOQ7Yz5nRDPjJOUbdcL8igTUE k6CDDLPIasljjQ1vcQn5mPnVvkw0giO9q2Py0cggzsx2ouNbRZmmuYFxiJ+4lXYw OMGV1KzgRe9Tyzw9uSmf0RClrVj/u+13B5BP8Tm/Y9S0lUA7bjSpao3ECj2OptRG nxbunzrXwmnd3aocz+ZvtM3P8B/5CZhSc9Dl2E4DOAlNLIpvwBSzQxyOltzy5qA9 Cr1TnAgCsdfzByiD6OS8SDkx3IxRuHlTUXUnIi1m6g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:55 2025 by rpki-client