$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae7c3e29-e867-3e4d-af79-355494c1f89c.roa File: ae7c3e29-e867-3e4d-af79-355494c1f89c.roa (raw, json) Hash identifier: CNpwdZKfIhCw8FElHdVYV8BgHAsL2ZE4cSAWg5RJfEc= Subject key identifier: C8:1E:C7:8A:F0:C1:AC:54:0E:09:04:47:F8:3F:90:06:BC:35:42:5C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBE088F4ED96F0FFA3CA27400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae7c3e29-e867-3e4d-af79-355494c1f89c.roa Signing time: Tue 04 Nov 2025 00:08:32 +0000 ROA not before: Tue 04 Nov 2025 00:08:32 +0000 ROA not after: Mon 02 Feb 2026 00:08:32 +0000 asID: 834 IP address blocks: 66.92.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:08:8f:4e:d9:6f:0f:fa:3c:a2:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 00:08:32 2025 GMT Not After : Feb 2 00:08:32 2026 GMT Subject: CN=e140e263-371b-444b-bdb9-497ff9ceed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:c5:67:59:a5:56:1e:4a:20:75:f2:a5:49: 35:68:49:d8:7f:12:41:07:b6:55:43:44:c1:5d:cf: f5:ad:2b:54:20:8f:33:03:31:9c:0e:1c:5d:23:e7: 38:84:c9:f0:2d:d9:25:a8:16:6f:37:85:ef:60:fd: cb:b1:4e:95:a9:91:a7:9c:04:b6:f8:de:13:63:de: e8:5d:8d:9d:56:68:04:70:b8:ec:12:b5:76:36:5b: 45:60:33:e8:53:ad:00:12:9d:32:48:0c:9a:8a:e4: 91:1c:76:d3:7e:57:77:87:ff:b9:4d:49:9b:81:b3: d0:2c:8a:c4:7e:58:ae:ab:68:20:01:a3:a8:34:11: 38:23:02:3c:e7:a0:e1:91:a7:4a:b5:50:b7:df:0e: d7:26:2a:96:aa:99:20:a1:53:69:5f:45:aa:0d:f4: 83:2a:e3:8b:0f:8d:db:e6:43:4b:92:04:72:17:9c: f9:65:41:5d:39:da:55:ee:b5:c8:8e:df:49:46:79: 9f:16:dd:b2:40:ba:13:38:8a:e2:df:05:38:ab:b8: ef:cf:93:9e:b3:fe:20:6a:c2:41:b2:0d:38:f4:c0: 48:42:39:b8:aa:de:c9:69:ca:47:e0:85:da:0e:b7: 72:e4:40:f4:c5:01:a2:bd:35:db:68:67:8e:dc:45: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1E:C7:8A:F0:C1:AC:54:0E:09:04:47:F8:3F:90:06:BC:35:42:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae7c3e29-e867-3e4d-af79-355494c1f89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:2b:c4:e3:bc:9e:52:08:a7:90:30:ae:3c:a5:32:65:f9:f6: f3:3a:17:17:4f:a3:70:70:0b:ba:57:af:4a:19:6a:cd:86:b2: 22:f6:d1:a9:3b:0b:4a:ac:60:62:0e:f1:97:db:4b:4d:3f:b2: 3b:69:00:fb:c5:1c:a8:67:bd:ed:50:85:09:96:95:e9:c9:88: a1:3e:75:f0:8d:4a:0f:da:b6:fc:f5:85:f0:a4:ee:64:05:22: f5:54:e2:6c:16:5f:b0:6a:fb:ff:ac:d1:76:2e:22:87:80:2f: 77:9a:43:b0:7d:9b:d2:a2:57:4f:2b:f6:cc:42:72:39:bf:c0: 9c:93:b1:8a:86:a9:9d:17:e7:25:34:e1:ea:ee:58:d5:31:ab: 86:e5:fe:51:4e:0c:08:b9:b2:bd:b9:46:1d:ae:b6:01:2a:90: c7:90:59:19:bb:67:18:de:a5:b5:71:05:bf:59:cb:2f:cb:be: 77:c1:be:0a:1a:82:8d:ae:0b:aa:58:77:c6:46:8a:25:f7:ff: 1d:55:64:b8:80:52:2a:d8:23:90:29:31:68:59:5b:55:55:cb: d6:88:00:47:32:01:bf:c0:4d:5a:08:b0:7c:52:55:26:1f:b6: bf:f3:64:95:01:47:36:b1:77:39:25:f3:09:fc:42:46:06:0f: c9:b3:c6:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+CI9O2W8P+jyidAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDAwMDgzMloXDTI2MDIwMjAwMDgzMlowLzEtMCsGA1UEAxMk ZTE0MGUyNjMtMzcxYi00NDRiLWJkYjktNDk3ZmY5Y2VlZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApebFZ1mlVh5KIHXypUk1aEnYfxJBB7ZVQ0TB Xc/1rStUII8zAzGcDhxdI+c4hMnwLdklqBZvN4XvYP3LsU6VqZGnnAS2+N4TY97o XY2dVmgEcLjsErV2NltFYDPoU60AEp0ySAyaiuSRHHbTfld3h/+5TUmbgbPQLIrE fliuq2ggAaOoNBE4IwI856DhkadKtVC33w7XJiqWqpkgoVNpX0WqDfSDKuOLD43b 5kNLkgRyF5z5ZUFdOdpV7rXIjt9JRnmfFt2yQLoTOIri3wU4q7jvz5Oes/4gasJB sg049MBIQjm4qt7JacpH4IXaDrdy5ED0xQGivTXbaGeO3EXANQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgex4rwwaxUDgkER/g/kAa8NUJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWU3YzNlMjktZTg2Ny0z ZTRkLWFmNzktMzU1NDk0YzFmODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlwtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwrxOO8nlIIp5AwrjylMmX59vM6FxdPo3BwC7pXr0oZas2GsiL20ak7 C0qsYGIO8ZfbS00/sjtpAPvFHKhnve1QhQmWlenJiKE+dfCNSg/atvz1hfCk7mQF IvVU4mwWX7Bq+/+s0XYuIoeAL3eaQ7B9m9KiV08r9sxCcjm/wJyTsYqGqZ0X5yU0 4eruWNUxq4bl/lFODAi5sr25Rh2utgEqkMeQWRm7ZxjepbVxBb9Zyy/LvnfBvgoa go2uC6pYd8ZGiiX3/x1VZLiAUirYI5ApMWhZW1VVy9aIAEcyAb/ATVoIsHxSVSYf tr/zZJUBRzaxdzkl8wn8QkYGD8mzxj8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:11 2025 by rpki-client