$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3437fa0-7c1b-3839-abbd-e2090c7a68e1.roa File: e3437fa0-7c1b-3839-abbd-e2090c7a68e1.roa (raw, json) Hash identifier: fNbeKCx+vPzwYmGGO+JUNaBFvjPqNF6W5hKlihJ0164= Subject key identifier: D6:3D:41:26:8C:06:3E:13:99:78:DB:3F:D8:ED:B3:68:90:7D:10:0D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AB36E3394940A8E63EF1D4700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3437fa0-7c1b-3839-abbd-e2090c7a68e1.roa Signing time: Thu 31 Jul 2025 12:12:30 +0000 ROA not before: Thu 31 Jul 2025 12:12:30 +0000 ROA not after: Wed 29 Oct 2025 12:12:30 +0000 asID: 211192 IP address blocks: 66.92.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:6e:33:94:94:0a:8e:63:ef:1d:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 31 12:12:30 2025 GMT Not After : Oct 29 12:12:30 2025 GMT Subject: CN=abeec6db-be2e-4c32-b1ae-84bc1533975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:44:2e:a8:2d:8f:7f:5b:29:77:e4:c1:3e: 01:2d:1e:4e:1e:22:55:07:1b:d6:35:85:f3:3d:50: c4:27:3f:14:40:b3:35:89:53:ba:4b:58:a7:24:f8: 86:ed:c7:6f:24:4e:01:aa:04:d8:7e:34:26:4a:16: 0c:c1:62:29:70:af:31:3c:17:d0:4a:c7:17:0c:5d: 99:39:2a:62:98:41:01:58:59:b8:91:6e:42:b2:63: b3:c6:48:1b:b2:0b:2e:ed:ba:3f:15:ea:68:a0:c2: c7:30:be:3e:3c:ca:d0:35:8b:8e:ce:71:f6:a1:77: 53:f7:f3:84:e7:df:b4:28:c6:cd:43:31:1e:86:3c: 95:20:4d:17:9a:ff:66:b0:1c:46:1c:fc:0c:40:f2: a1:14:77:13:08:e8:17:df:56:f2:08:30:b9:04:c2: b9:97:56:1c:34:77:b8:69:2d:90:2d:ad:91:d7:c2: 14:06:72:3a:03:72:54:34:2b:e7:a8:b1:14:b8:a8: 19:b2:98:04:30:33:16:6d:a0:cc:cc:80:7a:89:f3: bd:d4:d1:b5:c4:1d:cb:94:fe:87:76:d8:5b:47:63: ce:7e:bf:ad:fe:d6:7a:3d:de:7f:12:25:2b:86:2e: fa:31:2f:64:1f:3a:08:1d:91:37:ea:2b:5f:de:0c: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:41:26:8C:06:3E:13:99:78:DB:3F:D8:ED:B3:68:90:7D:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3437fa0-7c1b-3839-abbd-e2090c7a68e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:af:2f:d3:21:76:b8:ae:f1:1f:ee:eb:91:58:66:27:09:90: 81:d7:f6:88:79:be:08:f2:af:d3:e9:a2:45:99:fd:76:5c:1c: df:df:e5:b8:f9:00:3c:a9:db:fb:69:e8:ba:b0:33:d5:72:68: e2:3e:e3:c5:80:9f:a0:6e:cd:fa:2a:86:3d:97:5d:54:e3:45: 1e:28:7f:66:38:30:1f:2f:6b:6a:55:3f:29:7f:aa:73:f3:a9: 2b:d3:e6:05:09:8d:ad:12:ab:d5:d3:12:46:d1:e7:4e:8c:a2: 53:68:f1:ed:e7:4e:b4:a8:7c:b8:49:39:28:e9:a0:60:51:da: 80:83:b5:4f:58:f0:bf:f1:14:94:4e:fc:23:83:f5:8b:a2:a9: d2:4f:ab:8d:27:1e:89:95:0f:74:f0:3d:3d:58:88:d6:22:2f: 4c:54:20:80:13:a2:5b:02:fe:ce:f2:6e:52:d8:aa:13:b1:8c: 38:85:1c:0f:81:02:e7:0a:f2:53:85:20:3d:fc:2d:f2:e7:d6: 39:e2:23:2f:8f:a1:6c:9f:09:3c:6b:97:9c:82:fc:ab:64:a4: 92:22:4c:99:75:a5:b4:84:26:b0:7a:e6:b4:7a:16:df:78:f7: 24:36:8e:67:f3:a3:81:a7:ea:33:0e:9c:36:d3:69:be:92:0c: ec:01:1f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzbjOUlAqOY+8dRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDczMTEyMTIzMFoXDTI1MTAyOTEyMTIzMFowLzEtMCsGA1UEAxMk YWJlZWM2ZGItYmUyZS00YzMyLWIxYWUtODRiYzE1MzM5NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwVELqgtj39bKXfkwT4BLR5OHiJVBxvWNYXz PVDEJz8UQLM1iVO6S1inJPiG7cdvJE4BqgTYfjQmShYMwWIpcK8xPBfQSscXDF2Z OSpimEEBWFm4kW5CsmOzxkgbsgsu7bo/FepooMLHML4+PMrQNYuOznH2oXdT9/OE 59+0KMbNQzEehjyVIE0Xmv9msBxGHPwMQPKhFHcTCOgX31byCDC5BMK5l1YcNHe4 aS2QLa2R18IUBnI6A3JUNCvnqLEUuKgZspgEMDMWbaDMzIB6ifO91NG1xB3LlP6H dthbR2POfr+t/tZ6Pd5/EiUrhi76MS9kHzoIHZE36itf3gz+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY9QSaMBj4TmXjbP9jts2iQfRANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTM0MzdmYTAtN2MxYi0z ODM5LWFiYmQtZTIwOTBjN2E2OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+vL9Mhdriu8R/u65FYZicJkIHX9oh5vgjyr9PpokWZ/XZcHN/f5bj5 ADyp2/tp6LqwM9VyaOI+48WAn6Buzfoqhj2XXVTjRR4of2Y4MB8va2pVPyl/qnPz qSvT5gUJja0Sq9XTEkbR506MolNo8e3nTrSofLhJOSjpoGBR2oCDtU9Y8L/xFJRO /COD9YuiqdJPq40nHomVD3TwPT1YiNYiL0xUIIATolsC/s7yblLYqhOxjDiFHA+B AucK8lOFID38LfLn1jniIy+PoWyfCTxrl5yC/KtkpJIiTJl1pbSEJrB65rR6Ft94 9yQ2jmfzo4Gn6jMOnDbTab6SDOwBH+Q= -----END CERTIFICATE-----Generated at Sat Aug 9 22:50:32 2025 by rpki-client