$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fc7b799e-32bc-34a6-9212-e1296107b896.roa File: fc7b799e-32bc-34a6-9212-e1296107b896.roa (raw, json) Hash identifier: Bo4YIDvMquopdwFoq18C8El1gk4aTzdqWOGeuCklQzo= Subject key identifier: DB:DB:0B:DE:D8:15:F7:3F:14:51:66:13:E0:7C:43:10:41:70:E5:4F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFEE73D8E6478A6EC3F3BC580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fc7b799e-32bc-34a6-9212-e1296107b896.roa Signing time: Wed 27 Aug 2025 13:02:00 +0000 ROA not before: Wed 27 Aug 2025 13:02:00 +0000 ROA not after: Tue 25 Nov 2025 14:02:00 +0000 asID: 211192 IP address blocks: 66.92.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e7:3d:8e:64:78:a6:ec:3f:3b:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 27 13:02:00 2025 GMT Not After : Nov 25 14:02:00 2025 GMT Subject: CN=a1d5ab63-bb45-4d04-8e5e-b500c4db7c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:a1:78:82:22:39:87:4d:f5:43:57:6f:83: 09:13:32:5e:0b:c1:68:0b:3d:ac:80:44:de:f2:8b: 63:02:cf:8a:6c:da:96:c2:16:93:36:4c:57:ff:0b: 5d:ce:65:9f:ad:aa:bf:87:7f:47:6c:b8:4a:69:9b: 62:82:9a:99:ce:3e:3a:ac:f4:2b:10:70:7e:8a:e8: 91:b3:da:17:89:e9:aa:ca:8b:c4:e4:36:d4:df:ac: 5d:0b:d8:8f:49:da:c3:19:97:36:54:3b:31:2f:c7: 19:a6:99:47:ce:ae:38:75:d7:ed:00:d9:29:10:0a: 02:85:b9:06:88:7f:4f:1e:a4:42:ac:13:b9:73:11: 1e:1e:7c:b4:71:f8:e0:b2:29:53:7f:a0:26:d1:23: 46:c7:db:14:aa:98:fc:55:56:55:86:aa:39:e3:e2: 3a:99:59:66:c8:63:ce:d4:9b:12:3b:77:0f:d5:1d: 6f:a9:1d:0e:fe:3d:1d:6b:0a:f1:48:f3:6c:18:1a: d7:b6:db:d7:b8:6a:d9:f2:bf:68:3a:b5:cc:8e:c0: 17:ca:77:1f:27:78:8b:f5:a6:36:b4:41:9c:28:a6: 87:71:e4:cb:c6:42:2d:5a:e7:45:b8:5b:9e:a8:ba: c0:ab:53:f5:9b:4d:1a:0c:92:fe:f4:7b:c5:aa:d8: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DB:0B:DE:D8:15:F7:3F:14:51:66:13:E0:7C:43:10:41:70:E5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fc7b799e-32bc-34a6-9212-e1296107b896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:b8:bd:64:2f:5f:0b:0a:1e:ec:59:53:3c:40:df:4d:85:ad: e6:13:a6:42:55:38:2c:3c:fa:d6:ed:21:06:73:59:54:3f:36: dd:38:3f:60:dc:75:02:81:24:7a:94:4a:27:41:6d:38:00:43: d0:c5:a7:48:bb:ef:07:eb:ae:22:2e:92:83:73:1b:03:bb:40: 62:a6:37:3f:1c:02:b5:0d:0e:1f:1d:a5:79:4b:86:a9:4a:6f: 13:b6:8f:73:fb:67:59:b6:60:70:07:af:aa:e7:90:7e:58:89: ab:c6:2f:61:bd:f0:55:87:c0:cb:c9:20:7a:ee:78:c4:bd:be: 35:a9:5c:17:ec:1f:f0:86:63:09:eb:56:c5:c3:25:22:30:14: 8d:2c:9e:18:b8:39:f0:89:f5:20:2e:8f:cf:81:c3:ab:df:0c: 2c:90:96:69:94:e5:d3:0a:a9:27:cb:23:5f:e6:1b:d6:a0:d0: 4b:e4:37:b1:ea:8c:73:d3:a1:3a:78:99:00:2c:7e:d4:dc:41: 88:92:e3:7d:d7:ac:75:69:4b:3b:0a:5e:2c:31:f0:c7:5a:53: e9:63:3f:11:cd:3f:78:f4:64:31:2c:ea:76:31:c6:ca:b2:75: c9:2e:96:81:ea:cb:b7:41:60:70:ea:be:40:80:2b:e0:56:0e: b8:71:0e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5z2OZHim7D87xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNzEzMDIwMFoXDTI1MTEyNTE0MDIwMFowLzEtMCsGA1UEAxMk YTFkNWFiNjMtYmI0NS00ZDA0LThlNWUtYjUwMGM0ZGI3YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmmheIIiOYdN9UNXb4MJEzJeC8FoCz2sgETe 8otjAs+KbNqWwhaTNkxX/wtdzmWfraq/h39HbLhKaZtigpqZzj46rPQrEHB+iuiR s9oXiemqyovE5DbU36xdC9iPSdrDGZc2VDsxL8cZpplHzq44ddftANkpEAoChbkG iH9PHqRCrBO5cxEeHny0cfjgsilTf6Am0SNGx9sUqpj8VVZVhqo54+I6mVlmyGPO 1JsSO3cP1R1vqR0O/j0dawrxSPNsGBrXttvXuGrZ8r9oOrXMjsAXyncfJ3iL9aY2 tEGcKKaHceTLxkItWudFuFueqLrAq1P1m00aDJL+9HvFqtjjLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvbC97YFfc/FFFmE+B8QxBBcOVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmM3Yjc5OWUtMzJiYy0z NGE2LTkyMTItZTEyOTYxMDdiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO4vWQvXwsKHuxZUzxA302FreYTpkJVOCw8+tbtIQZzWVQ/Nt04P2Dc dQKBJHqUSidBbTgAQ9DFp0i77wfrriIukoNzGwO7QGKmNz8cArUNDh8dpXlLhqlK bxO2j3P7Z1m2YHAHr6rnkH5YiavGL2G98FWHwMvJIHrueMS9vjWpXBfsH/CGYwnr VsXDJSIwFI0snhi4OfCJ9SAuj8+Bw6vfDCyQlmmU5dMKqSfLI1/mG9ag0EvkN7Hq jHPToTp4mQAsftTcQYiS433XrHVpSzsKXiwx8MdaU+ljPxHNP3j0ZDEs6nYxxsqy dckuloHqy7dBYHDqvkCAK+BWDrhxDpI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:56 2025 by rpki-client