$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21d0fa74-6a90-3114-a4c9-7b4fb1bf8e2b.roa File: 21d0fa74-6a90-3114-a4c9-7b4fb1bf8e2b.roa (raw, json) Hash identifier: YXwrgsGYysyYad+rAVxTY2tlNT8H8qNh+gx1nMZjYhw= Subject key identifier: 8F:A2:F7:41:8A:5B:B4:B1:2D:6E:00:7D:9C:72:A9:9F:55:BF:D3:54 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8E14A715A20F9D071F2142C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21d0fa74-6a90-3114-a4c9-7b4fb1bf8e2b.roa Signing time: Fri 17 Oct 2025 19:54:06 +0000 ROA not before: Fri 17 Oct 2025 19:54:06 +0000 ROA not after: Thu 15 Jan 2026 20:54:06 +0000 asID: 16276 IP address blocks: 66.92.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:14:a7:15:a2:0f:9d:07:1f:21:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 17 19:54:06 2025 GMT Not After : Jan 15 20:54:06 2026 GMT Subject: CN=29920c20-5ab4-4be6-b5a5-3af60851f1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:51:fa:9b:38:79:5a:17:d5:e1:85:19:62: fa:88:88:f4:2e:9d:40:20:a7:0c:fc:b9:f5:e3:0b: 0c:66:81:ea:dc:dd:90:b0:74:64:98:21:6b:22:44: e5:ec:40:5d:a6:bf:59:39:f3:d0:1a:ca:50:80:0e: d5:e1:ab:ab:2c:53:21:0c:82:7c:a3:22:72:73:a9: 52:b1:41:8c:2e:01:76:e6:4d:a2:db:29:41:42:9b: fa:cb:3a:6b:48:cb:6f:cb:d2:3a:4a:1a:42:bb:69: 56:6e:a4:80:93:5a:fd:8d:e8:c6:18:4e:5b:4c:f7: dc:60:c3:86:2e:3a:25:32:53:2c:82:95:2b:11:a6: c0:69:6c:59:91:d1:ff:4d:c8:19:64:85:2e:da:24: c4:76:e0:43:8a:df:f8:b4:de:8b:e4:f0:ff:53:7e: 73:a4:29:c6:5b:ea:1b:24:1f:2d:dd:5b:50:0e:57: c2:d5:93:7c:4b:cf:67:c3:ab:9c:4c:0f:4d:af:58: 08:83:94:b4:1f:7c:9f:72:7f:70:60:a7:f2:94:f2: f7:84:99:0a:14:42:92:63:52:8c:eb:76:ac:b8:95: f1:31:3b:f5:b9:55:79:bc:5f:07:25:58:e0:8c:3f: 5a:bc:de:24:dc:c3:1d:c4:27:11:e3:2b:8a:3c:da: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:F7:41:8A:5B:B4:B1:2D:6E:00:7D:9C:72:A9:9F:55:BF:D3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21d0fa74-6a90-3114-a4c9-7b4fb1bf8e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e2:e5:72:b1:e7:68:fc:56:b3:49:50:39:5d:96:ed:73:7c: 3e:d5:ff:2b:ea:03:9c:5a:6c:e6:ba:6e:75:67:e8:d3:66:48: 6d:63:6f:03:98:7f:03:7a:8f:25:06:1e:71:ca:f4:76:8c:ba: 5f:6b:b7:62:0d:9b:df:5a:42:7e:ba:b8:15:e6:6a:a6:ba:55: 84:8e:f0:b2:0d:31:a1:1b:f3:23:4a:31:e5:d6:bd:65:88:c9: e3:89:18:79:cb:32:cf:6c:67:ea:7b:03:d9:6c:90:24:7e:a3: 71:7d:82:8b:0a:34:b7:81:5e:f8:c3:3b:bf:ef:5c:44:be:8f: f8:a0:c1:38:b1:76:1a:8e:99:46:49:25:6d:21:d9:89:81:14: e8:f2:16:67:5c:71:d2:b9:ec:36:6f:ce:b0:23:54:e3:2f:e2: be:8a:35:6c:be:06:9f:6c:20:f0:aa:47:b9:fa:6a:3f:70:82: 46:1d:41:b4:34:7c:b1:25:ad:40:59:f9:11:7c:8f:27:76:81: 41:96:4f:66:7f:19:ec:5a:bb:2c:27:11:9e:30:bd:ab:b7:c5: 5c:70:c0:7e:93:79:a3:15:50:dc:e7:ce:5c:05:bc:2d:2b:2a: b2:7c:0a:f0:28:bc:c8:d0:f5:cf:b9:36:f5:31:b7:9d:0e:d6: 59:30:8f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOFKcVog+dBx8hQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNzE5NTQwNloXDTI2MDExNTIwNTQwNlowLzEtMCsGA1UEAxMk Mjk5MjBjMjAtNWFiNC00YmU2LWI1YTUtM2FmNjA4NTFmMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIpR+ps4eVoX1eGFGWL6iIj0Lp1AIKcM/Ln1 4wsMZoHq3N2QsHRkmCFrIkTl7EBdpr9ZOfPQGspQgA7V4aurLFMhDIJ8oyJyc6lS sUGMLgF25k2i2ylBQpv6yzprSMtvy9I6ShpCu2lWbqSAk1r9jejGGE5bTPfcYMOG LjolMlMsgpUrEabAaWxZkdH/TcgZZIUu2iTEduBDit/4tN6L5PD/U35zpCnGW+ob JB8t3VtQDlfC1ZN8S89nw6ucTA9Nr1gIg5S0H3yfcn9wYKfylPL3hJkKFEKSY1KM 63asuJXxMTv1uVV5vF8HJVjgjD9avN4k3MMdxCcR4yuKPNqRMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+i90GKW7SxLW4AfZxyqZ9Vv9NUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFkMGZhNzQtNmE5MC0z MTE0LWE0YzktN2I0ZmIxYmY4ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlzNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACni5XKx52j8VrNJUDldlu1zfD7V/yvqA5xabOa6bnVn6NNmSG1jbwOY fwN6jyUGHnHK9HaMul9rt2INm99aQn66uBXmaqa6VYSO8LINMaEb8yNKMeXWvWWI yeOJGHnLMs9sZ+p7A9lskCR+o3F9gosKNLeBXvjDO7/vXES+j/igwTixdhqOmUZJ JW0h2YmBFOjyFmdccdK57DZvzrAjVOMv4r6KNWy+Bp9sIPCqR7n6aj9wgkYdQbQ0 fLElrUBZ+RF8jyd2gUGWT2Z/GexauywnEZ4wvau3xVxwwH6TeaMVUNznzlwFvC0r KrJ8CvAovMjQ9c+5NvUxt50O1lkwj6s= -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:14 2025 by rpki-client