$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/702c173e-87d0-3dcd-9854-c8702cd1c708.roa File: 702c173e-87d0-3dcd-9854-c8702cd1c708.roa (raw, json) Hash identifier: Q7jyYOlBwLU0L97k3mnLwWV8aTW1HJlCMWktG/Am6Ss= Subject key identifier: 24:A8:B4:4F:97:FD:AC:C9:8A:12:2D:37:94:95:58:47:72:21:93:C5 Certificate issuer: /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Certificate serial: 010D0C9F4328584B52A751B9C1E7BC7081ECA380 Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/702c173e-87d0-3dcd-9854-c8702cd1c708.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 66.129.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:51:b9:c1:e7:bc:70:81:ec:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b3078b0c-fcde-4cc3-94a1-f989f92b13dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:19:f3:eb:23:1f:9a:88:5d:db:8f:86:0b: 8e:76:b9:39:53:f2:3c:52:b2:cb:b0:72:04:ad:b8: d8:e8:a1:3b:55:4c:13:5f:ea:10:fb:1d:3c:c1:c3: 57:1d:aa:5c:c6:10:78:9c:c8:73:8a:84:44:69:9c: d9:49:52:74:94:fa:00:39:c6:fa:91:06:6d:d8:30: ed:74:7f:27:37:33:e5:45:68:28:18:de:32:6d:5b: c6:f3:40:19:a1:c1:6c:a8:81:fb:2a:e1:0f:68:43: 66:84:c4:ae:81:05:32:85:f4:ae:9e:10:c8:3f:2c: 4e:12:90:4e:c8:1d:31:88:c6:d1:f7:2b:c5:ed:c4: 6d:7f:0e:3d:d2:60:c5:2f:36:e6:81:4e:63:87:22: cb:31:a9:a6:fa:e9:54:a4:c4:2e:0e:0d:cc:18:60: 5b:d0:a5:d6:80:11:ed:8e:19:ed:df:7d:13:43:60: 16:58:60:ea:d8:fe:46:1e:21:99:ee:b7:a6:74:a9: 23:4e:64:0a:56:50:ce:40:74:c2:4b:3f:9e:cb:4f: 7a:05:a9:f4:ce:b2:d4:00:e5:53:1f:92:6e:b4:69: fe:56:2f:38:44:25:a2:d0:0b:bf:b7:bf:71:a7:75: f4:33:82:cd:07:15:e0:2a:7d:83:d0:fa:9f:92:8d: 00:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A8:B4:4F:97:FD:AC:C9:8A:12:2D:37:94:95:58:47:72:21:93:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/702c173e-87d0-3dcd-9854-c8702cd1c708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl X509v3 Authority Key Identifier: keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer sbgp-ipAddrBlock: critical IPv4: 66.129.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:41:b9:27:fc:fd:3c:7a:75:67:aa:17:22:a4:21:51:51:48: 87:8d:55:02:d1:72:e4:62:0c:ee:cf:00:bb:0d:61:a2:30:9c: f8:94:77:47:18:33:5e:b3:e7:29:f8:d4:06:8b:cb:e9:c4:c7: 67:9a:16:07:9a:64:a9:0c:1c:f2:4c:a2:72:85:1f:08:8a:f8: 3a:05:c6:63:de:0e:ea:6c:75:c9:6a:7f:09:79:52:2f:40:38: 52:e4:f1:d5:6e:55:96:3d:f0:5c:da:82:1d:9b:e0:09:99:95: a3:1f:44:58:02:89:a7:68:b4:ea:12:bd:86:15:09:8f:06:cc: d9:46:e2:3e:48:d2:1e:0d:9f:3d:e5:9c:1b:c7:a5:c7:a6:77: 88:45:66:07:fa:8b:d5:97:c8:30:86:0a:ea:65:fc:45:99:77: 5f:c3:f0:83:11:24:9c:ac:fe:a4:13:cd:80:ec:bc:20:e8:2b: a6:ee:7b:1c:ec:a4:6a:67:f4:0f:33:6f:e3:eb:44:86:67:5f: 65:d2:b5:6c:1f:30:14:6f:db:6a:93:2b:c7:01:31:1d:05:fa: 14:fd:f4:82:09:22:94:0e:7d:f2:21:96:54:4d:0a:63:c9:03: fe:9c:4f:23:a7:22:03:18:b5:8a:75:ea:5a:c8:40:c9:51:82: d9:92:95:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1G5wee8cIHso4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YzdmNmItODE2OC00NDI5LTk0ZDUtY2ZiMTRlNTdk ZDJlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjMwNzhiMGMtZmNkZS00Y2MzLTk0YTEtZjk4OWY5MmIxM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwUZ8+sjH5qIXduPhguOdrk5U/I8UrLLsHIE rbjY6KE7VUwTX+oQ+x08wcNXHapcxhB4nMhzioREaZzZSVJ0lPoAOcb6kQZt2DDt dH8nNzPlRWgoGN4ybVvG80AZocFsqIH7KuEPaENmhMSugQUyhfSunhDIPyxOEpBO yB0xiMbR9yvF7cRtfw490mDFLzbmgU5jhyLLMamm+ulUpMQuDg3MGGBb0KXWgBHt jhnt330TQ2AWWGDq2P5GHiGZ7remdKkjTmQKVlDOQHTCSz+ey096Ban0zrLUAOVT H5JutGn+Vi84RCWi0Au/t79xp3X0M4LNBxXgKn2D0Pqfko0ATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSotE+X/azJihItN5SVWEdyIZPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZj N2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1N2RkMmUvNzAyYzE3M2UtODdkMC0z ZGNkLTk4NTQtYzg3MDJjZDFjNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2YzdmNmItODE2OC00NDI5LTk0 ZDUtY2ZiMTRlNTdkZDJlL2RhNmM3ZjZiLTgxNjgtNDQyOS05NGQ1LWNmYjE0ZTU3 ZGQyZS5jcmwwHwYDVR0jBBgwFoAUA3k0rC78UNQi5NbDk13OTGnEefYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIx NGU1N2RkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpBuSf8/Tx6dWeqFyKkIVFRSIeNVQLRcuRiDO7PALsNYaIwnPiUd0cY M16z5yn41AaLy+nEx2eaFgeaZKkMHPJMonKFHwiK+DoFxmPeDupsdclqfwl5Ui9A OFLk8dVuVZY98Fzagh2b4AmZlaMfRFgCiadotOoSvYYVCY8GzNlG4j5I0h4Nnz3l nBvHpcemd4hFZgf6i9WXyDCGCupl/EWZd1/D8IMRJJys/qQTzYDsvCDoK6buexzs pGpn9A8zb+PrRIZnX2XStWwfMBRv22qTK8cBMR0F+hT99IIJIpQOffIhllRNCmPJ A/6cTyOnIgMYtYp16lrIQMlRgtmSlQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:15 2025 by rpki-client