$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa File: 178e3f6b-18ff-371a-826d-1da0e83a30a3.roa (raw, json) Hash identifier: DcHnKELMxX9T9IFAdglQaFhv8vE3l3yeoLsqnYwocU4= Subject key identifier: B1:1E:4E:08:63:CB:F6:4E:AC:1A:71:FA:0A:EF:D3:47:54:95:FE:25 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B7F526218D9F6D9D758362980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 151373 IP address blocks: 66.253.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:62:18:d9:f6:d9:d7:58:36:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6a253aa5-ef3b-4d01-a4d5-1a719ee47590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:42:2b:d3:53:b1:80:24:b5:c4:1b:fa:98: 47:0e:a9:4a:e2:c8:0a:95:6d:6b:e4:35:22:6f:37: 19:f4:7d:3b:2c:ac:55:3f:26:ad:43:c4:8c:25:48: d9:fe:ee:8d:a1:07:6d:a7:c2:5d:cb:27:d3:c0:70: 63:ce:36:24:e1:d9:96:31:3d:61:88:6b:51:26:e4: 6d:fb:94:57:6f:1c:67:3e:3c:f4:3c:ae:5e:5a:78: a2:73:86:e6:f7:ae:d3:e8:7c:9f:9a:f4:e6:50:9a: 4f:52:2e:5e:f1:ed:eb:9a:18:4a:6d:2d:61:9d:5b: a1:89:44:ed:73:76:42:b3:07:10:a8:d2:95:19:89: 4a:51:2e:f0:40:83:b9:c5:a5:17:5c:7d:df:53:40: d5:eb:a3:32:57:3c:53:38:9a:1b:7b:01:3f:91:d9: 47:db:4b:05:70:ef:dc:0f:f6:f9:2b:7f:ea:56:89: 24:fb:d8:5e:16:74:ed:f9:01:36:09:78:39:80:a6: 8b:57:3d:d2:15:53:99:02:ff:32:1d:ce:8d:a1:6e: ee:fd:64:29:5b:90:9c:4c:61:a2:06:d0:e2:89:a4: b8:47:50:ea:e3:ac:c1:57:f9:d4:b0:ec:3b:e1:7c: be:1a:b5:97:18:5f:41:b2:ef:31:b2:c3:96:3e:d6: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:4E:08:63:CB:F6:4E:AC:1A:71:FA:0A:EF:D3:47:54:95:FE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:91:46:61:83:e9:3b:86:4f:71:75:49:51:29:32:12:af:f0: 87:c3:2b:ac:e1:28:b9:50:cd:d4:db:93:40:28:95:61:aa:0b: d1:18:d9:ae:8d:f7:b7:d3:26:6d:45:4f:fa:31:c2:f3:a4:5e: 9f:06:7c:88:a3:94:6e:5f:17:cd:a8:4b:aa:ee:eb:8b:14:97: 97:f2:9e:a3:c5:1a:06:13:fc:53:34:93:71:c9:e1:fc:34:64: 17:94:d9:32:86:5c:23:d1:2e:3a:fb:8d:21:d6:84:ff:5d:64: 4a:ad:f9:90:09:9a:9e:b0:40:88:6b:ff:be:98:d3:f0:86:de: fc:8b:6e:9d:15:84:d2:2f:91:c8:69:8b:8a:cf:a3:0d:02:db: e5:8c:da:c6:5b:1a:40:f8:7f:a6:53:37:d9:1e:43:0b:9d:09: 30:81:f4:84:ba:18:b8:d8:31:fe:9d:13:8b:5f:5a:4b:13:27: 00:67:8a:0c:38:d3:d8:41:d6:88:48:d1:88:2b:f2:dc:7b:9f: 6f:7f:51:05:f8:ee:1a:23:72:0f:ab:c1:78:90:05:78:ee:e6: 11:57:26:e6:c9:54:80:4b:15:70:3d:8e:7a:b2:2c:e3:46:09: ae:cf:09:47:5c:35:47:bf:8e:34:72:f3:df:4f:08:38:3d:9b: 21:b0:fa:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmIY2fbZ11g2KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmEyNTNhYTUtZWYzYi00ZDAxLWE0ZDUtMWE3MTllZTQ3NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ9CK9NTsYAktcQb+phHDqlK4sgKlW1r5DUi bzcZ9H07LKxVPyatQ8SMJUjZ/u6NoQdtp8JdyyfTwHBjzjYk4dmWMT1hiGtRJuRt +5RXbxxnPjz0PK5eWniic4bm967T6HyfmvTmUJpPUi5e8e3rmhhKbS1hnVuhiUTt c3ZCswcQqNKVGYlKUS7wQIO5xaUXXH3fU0DV66MyVzxTOJobewE/kdlH20sFcO/c D/b5K3/qVokk+9heFnTt+QE2CXg5gKaLVz3SFVOZAv8yHc6NoW7u/WQpW5CcTGGi BtDiiaS4R1Dq46zBV/nUsOw74Xy+GrWXGF9Bsu8xssOWPtbHOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEeTghjy/ZOrBpx+grv00dUlf4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTc4ZTNmNmItMThmZi0z NzFhLTgyNmQtMWRhMGU4M2EzMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmRRmGD6TuGT3F1SVEpMhKv8IfDK6zhKLlQzdTbk0AolWGqC9EY2a6N 97fTJm1FT/oxwvOkXp8GfIijlG5fF82oS6ru64sUl5fynqPFGgYT/FM0k3HJ4fw0 ZBeU2TKGXCPRLjr7jSHWhP9dZEqt+ZAJmp6wQIhr/76Y0/CG3vyLbp0VhNIvkchp i4rPow0C2+WM2sZbGkD4f6ZTN9keQwudCTCB9IS6GLjYMf6dE4tfWksTJwBnigw4 09hB1ohI0Ygr8tx7n29/UQX47hojcg+rwXiQBXju5hFXJubJVIBLFXA9jnqyLONG Ca7PCUdcNUe/jjRy899PCDg9myGw+g0= -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:19 2025 by rpki-client