$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/dac5f638-d78e-3482-8408-67cc6072b909.roa File: dac5f638-d78e-3482-8408-67cc6072b909.roa (raw, json) Hash identifier: FM5p6A/e1AZsQZ9UOqEXaWzEAC44luC+Y52klysZuYs= Subject key identifier: 1E:59:E1:A6:CF:01:E9:C3:19:13:8E:BB:15:49:52:D7:13:A5:27:99 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584B715D10BE104CD0E2406C9E80 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/dac5f638-d78e-3482-8408-67cc6072b909.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 12208 IP address blocks: 66.248.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:10:be:10:4c:d0:e2:40:6c:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5e4fb7a2-dcbc-46a1-9c07-624c8584b1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:b9:f4:50:69:c4:f4:ce:76:a8:a7:ae:47: 02:5b:d1:7f:b4:d1:66:26:86:e6:7f:f3:4a:08:18: 50:ce:a5:fc:63:52:d7:c0:66:03:4b:01:11:c7:08: 74:77:e9:a8:ec:fb:1e:6e:e6:55:49:ac:81:e0:50: e1:1f:e0:dd:dc:bf:b2:bd:00:4a:f5:2b:53:90:a2: 62:ae:58:5d:d3:79:da:15:ca:a8:7c:ca:56:91:73: 63:fe:a7:90:9b:7d:ed:c1:59:5e:6b:63:7b:b7:ed: 6d:0c:c0:b5:7f:78:33:ee:aa:82:fd:24:88:e3:69: 2f:10:d5:01:df:3f:35:f7:84:56:b1:ed:57:ae:ff: af:4e:f6:e6:85:1c:43:76:aa:9c:96:ec:f9:b3:d6: 49:43:3f:54:17:79:cd:79:2a:8d:9e:e1:da:9a:3a: bb:1d:06:53:96:bd:8f:69:e3:00:e7:17:a3:b8:e1: e5:2b:ae:cb:21:6c:e2:28:25:34:f4:c3:5b:38:ba: 54:e2:25:74:80:eb:93:df:38:0e:47:f0:91:1d:a0: 08:f1:87:36:60:7d:24:0e:6f:6a:7e:d5:3d:26:e4: f9:d8:8c:35:8c:4e:9c:61:d4:3f:7d:86:49:cc:a7: a7:ea:e1:07:22:59:2a:32:04:e1:ee:17:88:97:8c: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:59:E1:A6:CF:01:E9:C3:19:13:8E:BB:15:49:52:D7:13:A5:27:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/dac5f638-d78e-3482-8408-67cc6072b909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 66.248.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1e:7d:f7:1f:71:b7:a4:54:02:7d:a1:f1:7b:3d:f4:e4:44: a9:2c:04:17:b5:9e:7b:0d:c3:3c:c8:69:2f:0e:17:d1:91:71: b0:d8:e0:0c:aa:57:56:36:c5:07:99:3c:34:96:42:c5:e5:d3: 50:9e:6d:ab:9b:01:14:3d:2b:b9:b3:2f:63:32:60:81:8e:37: 91:73:d1:fc:1f:86:80:27:8f:d5:3b:bb:e9:61:d6:0c:d5:76: f3:5b:b8:c7:68:9a:29:a4:91:0e:78:76:99:5b:2c:33:a1:ba: 93:15:31:ef:2f:8c:be:fe:5c:57:ef:f4:e7:0d:5d:ba:6b:26: e3:1b:30:ab:bf:05:0e:4c:80:f5:0c:f8:e2:0b:9c:5b:f0:4b: 32:08:0b:6a:6b:ae:09:24:0b:ed:7a:8a:98:43:5d:b6:c3:c2: 83:ba:89:a4:fb:84:25:57:c0:05:78:66:54:87:ed:76:1c:57: f6:13:03:85:0b:12:53:dc:d5:3a:0c:e9:44:59:00:e0:0e:a1: c9:41:fc:f0:03:1e:29:90:1d:81:9a:53:9f:b7:c3:46:b8:f3: be:61:22:cd:e1:da:b0:74:da:91:ba:dc:09:04:19:dd:a2:2c: b3:67:f1:fc:aa:c1:b0:a0:d0:34:13:8a:c7:9a:ec:1f:d5:6f: 69:8f:b1:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXRC+EEzQ4kBsnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWU0ZmI3YTItZGNiYy00NmExLTljMDctNjI0Yzg1ODRiMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXW59FBpxPTOdqinrkcCW9F/tNFmJobmf/NK CBhQzqX8Y1LXwGYDSwERxwh0d+mo7PsebuZVSayB4FDhH+Dd3L+yvQBK9StTkKJi rlhd03naFcqofMpWkXNj/qeQm33twVlea2N7t+1tDMC1f3gz7qqC/SSI42kvENUB 3z8194RWse1Xrv+vTvbmhRxDdqqcluz5s9ZJQz9UF3nNeSqNnuHamjq7HQZTlr2P aeMA5xejuOHlK67LIWziKCU09MNbOLpU4iV0gOuT3zgOR/CRHaAI8Yc2YH0kDm9q ftU9JuT52Iw1jE6cYdQ/fYZJzKen6uEHIlkqMgTh7heIl4zrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5Z4abPAenDGROOuxVJUtcTpSeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvZGFjNWY2MzgtZDc4ZS0z NDgyLTg0MDgtNjdjYzYwNzJiOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHweffcfcbekVAJ9ofF7PfTkRKksBBe1nnsNwzzIaS8OF9GRcbDY4Ayq V1Y2xQeZPDSWQsXl01CebaubARQ9K7mzL2MyYIGON5Fz0fwfhoAnj9U7u+lh1gzV dvNbuMdomimkkQ54dplbLDOhupMVMe8vjL7+XFfv9OcNXbprJuMbMKu/BQ5MgPUM +OILnFvwSzIIC2prrgkkC+16iphDXbbDwoO6iaT7hCVXwAV4ZlSH7XYcV/YTA4UL ElPc1ToM6URZAOAOoclB/PADHimQHYGaU5+3w0a4875hIs3h2rB02pG63AkEGd2i LLNn8fyqwbCg0DQTisea7B/Vb2mPsa4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:10 2025 by rpki-client