$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa File: d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa (raw, json) Hash identifier: d+T8mqUFM//vMWmoqORE6Qo+ahqJxhl+sajArmRQZXY= Subject key identifier: D4:85:D8:80:9B:CA:3D:C2:28:D0:F6:4F:DD:89:83:29:ED:88:66:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B33F1B75F584300A068F7B140 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 9304 IP address blocks: 66.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b7:5f:58:43:00:a0:68:f7:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=5c15f90f-7c6b-4fd6-8c15-32480644f060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:62:05:aa:ea:35:73:83:98:d7:c1:ed:a4: bc:32:74:79:ef:ec:3e:98:df:9c:68:2d:fe:49:50: 8c:63:2b:70:85:82:ca:82:13:9f:95:62:3c:47:5c: ca:47:87:c7:25:d1:4d:80:3b:36:2f:c0:26:3a:01: c2:23:74:6c:ac:47:a5:10:af:4c:f5:cb:b9:61:af: 56:6a:f3:f4:22:bd:53:12:4b:89:da:be:77:62:fa: f5:48:d6:26:f4:56:7f:d7:6d:a1:d1:b0:9f:4a:1c: 0e:4d:c6:d9:0b:82:d7:89:b6:4a:ec:1e:a4:58:68: b6:a1:83:85:bb:d3:57:43:8a:7a:cc:63:af:a9:f8: 66:99:9a:08:26:02:e0:f0:67:e9:55:71:3c:5b:df: c1:ec:30:2f:d2:32:7f:bf:34:c1:87:82:a8:ed:e7: 23:28:e7:d3:cf:ae:af:0a:4c:08:29:d8:ba:d7:b6: dd:58:19:a9:97:78:db:5f:9b:2c:8f:7d:ee:62:e1: 42:e1:d5:29:0c:b2:5d:2e:d4:59:09:18:9f:8c:14: e0:99:02:15:37:3f:af:83:40:34:eb:99:a7:3e:73: 3c:7f:65:f5:3a:6a:5d:75:f2:e4:c4:1e:c7:a2:3b: b8:3a:13:5a:f6:08:d4:86:32:d3:de:0c:86:17:14: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:D8:80:9B:CA:3D:C2:28:D0:F6:4F:DD:89:83:29:ED:88:66:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0a:26:58:2d:49:6d:d6:0c:44:fa:ba:e6:b5:39:d5:c9:09: 17:93:f8:39:e2:4b:da:a4:cc:8c:79:6a:d9:1a:68:fc:5b:1a: f3:2a:30:69:6d:2f:57:09:3c:71:d0:c5:6c:17:a1:54:ad:2f: 30:26:e7:96:bc:5f:b5:25:14:51:f0:d5:17:c1:f1:1e:94:7b: 2c:39:06:3b:10:94:56:77:27:d3:60:dc:cb:f0:5e:ce:71:a8: 4b:72:fb:cd:54:ad:83:f9:ae:e7:fb:7b:e8:7d:07:39:09:51: ba:4a:d8:79:54:4d:8e:50:55:3d:6c:f5:0c:69:ba:0a:25:7b: a8:1a:90:a0:8a:94:0e:84:8e:20:64:d8:eb:a8:0b:e4:02:11: 86:47:34:f3:67:d3:e3:3f:a5:b5:b2:7e:84:cf:8c:b3:4d:77: 2c:a7:a7:03:44:99:84:dc:a4:7d:5f:3f:e6:b9:08:a5:97:37: dc:07:5b:5d:a7:77:0a:cc:eb:27:3c:0b:ab:88:e2:f5:00:ed: f5:40:b6:8b:0f:ed:13:7a:ef:cd:2c:dd:7c:f9:c7:38:3d:3f: 37:c9:d1:d9:3c:71:35:24:7e:51:69:0e:84:22:6d:bd:e4:56: 76:05:f1:02:1d:d2:14:9a:75:ba:a1:ed:e7:29:9f:43:5f:6c: 9c:a4:60:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bdfWEMAoGj3sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NWMxNWY5MGYtN2M2Yi00ZmQ2LThjMTUtMzI0ODA2NDRmMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO5iBarqNXODmNfB7aS8MnR57+w+mN+caC3+ SVCMYytwhYLKghOflWI8R1zKR4fHJdFNgDs2L8AmOgHCI3RsrEelEK9M9cu5Ya9W avP0Ir1TEkuJ2r53Yvr1SNYm9FZ/122h0bCfShwOTcbZC4LXibZK7B6kWGi2oYOF u9NXQ4p6zGOvqfhmmZoIJgLg8GfpVXE8W9/B7DAv0jJ/vzTBh4Ko7ecjKOfTz66v CkwIKdi617bdWBmpl3jbX5ssj33uYuFC4dUpDLJdLtRZCRifjBTgmQIVNz+vg0A0 65mnPnM8f2X1OmpddfLkxB7Hoju4OhNa9gjUhjLT3gyGFxSINwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSF2ICbyj3CKND2T92JgyntiGbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDY0ZTA0MjQtMTQyNy0z MjAzLThiOWQtMGFjN2JhNmIxYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsKJlgtSW3WDET6uua1OdXJCReT+DniS9qkzIx5atkaaPxbGvMqMGlt L1cJPHHQxWwXoVStLzAm55a8X7UlFFHw1RfB8R6Ueyw5BjsQlFZ3J9Ng3MvwXs5x qEty+81UrYP5ruf7e+h9BzkJUbpK2HlUTY5QVT1s9Qxpugole6gakKCKlA6EjiBk 2OuoC+QCEYZHNPNn0+M/pbWyfoTPjLNNdyynpwNEmYTcpH1fP+a5CKWXN9wHW12n dwrM6yc8C6uI4vUA7fVAtosP7RN6780s3Xz5xzg9PzfJ0dk8cTUkflFpDoQibb3k VnYF8QId0hSadbqh7ecpn0NfbJykYL4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:29 2025 by rpki-client