$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5be7638f-46a0-3028-92a6-de76ab750685.roa File: 5be7638f-46a0-3028-92a6-de76ab750685.roa (raw, json) Hash identifier: by7pQlBwNg6JPFeWgwbuDA5umTzyqMmYNM6xNuAtagw= Subject key identifier: E3:33:78:1A:78:45:B5:5D:FC:FD:84:4E:5C:93:4C:0B:89:65:27:D3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B2191CF4B558B88EF0B200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5be7638f-46a0-3028-92a6-de76ab750685.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 66.227.4.0/22 maxlen: 24 66.227.8.0/23 maxlen: 24 66.227.11.0/24 maxlen: 24 66.227.16.0/24 maxlen: 24 66.227.19.0/24 maxlen: 24 66.227.20.0/22 maxlen: 24 66.227.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:19:1c:f4:b5:58:b8:8e:f0:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=1f855a88-1b1c-49dd-bb9a-4a7db4bfaba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:b5:20:a0:ce:3c:10:ce:4c:1b:e7:35:4c: 88:c4:84:0f:ea:59:f9:ff:b7:25:7d:ad:a0:e0:ed: 7c:08:9c:c1:9c:d0:f1:cd:2c:e6:e4:0a:85:29:f2: b9:f7:0c:f8:8b:b1:c0:94:bb:54:96:87:46:99:32: 20:c1:1b:91:c8:67:72:8a:cf:c7:1c:a3:6b:f9:fa: 37:9d:79:14:75:51:ff:52:41:43:1f:60:5f:b5:cc: bd:2b:85:b9:cd:60:e6:92:e4:16:82:c9:e3:87:44: 99:72:35:48:f8:5b:21:a2:3d:4c:0d:8a:fa:63:88: 4e:85:ef:54:bd:02:ed:78:e7:b2:80:a8:a3:56:dc: ab:08:6f:d9:4e:a7:89:e5:34:ac:6f:93:28:cd:ee: 91:5c:8b:ed:91:ea:af:ba:fe:f6:36:28:e6:3a:48: 24:b1:4f:9b:cf:cc:e9:ae:c4:0e:d0:e0:a5:62:86: c9:d4:21:54:cb:16:9d:f6:4a:c7:95:70:4a:8c:c7: 83:bc:9e:a5:96:74:f7:14:7e:82:7b:a5:f8:55:82: cf:15:52:81:5d:b5:9e:ce:87:f5:21:73:d1:b1:08: 3b:dd:2d:8d:04:ec:58:e6:e0:b3:12:6b:62:62:ef: a6:99:cb:a3:c2:62:21:f2:c1:af:32:08:ff:c0:12: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:78:1A:78:45:B5:5D:FC:FD:84:4E:5C:93:4C:0B:89:65:27:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5be7638f-46a0-3028-92a6-de76ab750685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.4.0-66.227.9.255 66.227.11.0/24 66.227.16.0/24 66.227.19.0-66.227.24.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d8:83:03:ac:80:7a:4c:a7:2f:64:b0:f6:64:f8:8b:47:3a: 40:47:da:50:d3:c7:68:05:83:06:ea:9c:8f:4d:81:1a:27:f9: e2:59:d7:b4:d9:75:82:fb:d6:e4:80:58:41:06:89:1e:75:3c: 45:df:56:31:64:5c:d8:97:d3:49:03:5b:22:8d:5b:55:d5:96: df:fb:e0:dd:98:e0:a0:b9:ae:2b:4c:5c:45:94:81:c4:a4:66: d2:12:7f:e1:13:70:a9:f3:c3:dc:bf:9d:dd:d5:7e:68:ca:2a: 5d:e8:19:6f:66:8a:f7:93:8c:41:f4:78:bb:83:9a:f1:a5:70: 67:21:57:38:45:49:cb:64:51:bc:fd:ca:40:9f:c8:2c:db:b6: af:a9:61:87:5b:d0:4f:0f:38:2f:a7:45:bc:5f:7d:7b:66:79: 94:5f:54:f9:39:4a:60:00:46:36:fb:2e:cf:3d:e6:00:cf:83: e4:ea:55:b6:57:6b:25:03:36:71:96:83:f5:3d:8e:cc:f8:9d: 45:8a:4c:2b:8b:81:4f:ca:fa:db:c1:e4:c4:a8:69:2a:82:96: a9:c5:37:ba:b5:77:5c:8a:25:a5:24:29:09:42:e1:4a:ac:51: 2d:d5:5d:8c:b1:ff:56:dd:86:a3:3a:87:3d:e1:7f:11:44:2d: df:8f:de:5b -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEuHshkc9LVYuI7wsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MWY4NTVhODgtMWIxYy00OWRkLWJiOWEtNGE3ZGI0YmZhYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBm1IKDOPBDOTBvnNUyIxIQP6ln5/7clfa2g 4O18CJzBnNDxzSzm5AqFKfK59wz4i7HAlLtUlodGmTIgwRuRyGdyis/HHKNr+fo3 nXkUdVH/UkFDH2Bftcy9K4W5zWDmkuQWgsnjh0SZcjVI+Fshoj1MDYr6Y4hOhe9U vQLteOeygKijVtyrCG/ZTqeJ5TSsb5Moze6RXIvtkeqvuv72NijmOkgksU+bz8zp rsQO0OClYobJ1CFUyxad9krHlXBKjMeDvJ6llnT3FH6Ce6X4VYLPFVKBXbWezof1 IXPRsQg73S2NBOxY5uCzEmtiYu+mmcujwmIh8sGvMgj/wBKxpQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFOMzeBp4RbVd/P2ETlyTTAuJZSfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWJlNzYzOGYtNDZhMC0z MDI4LTkyYTYtZGU3NmFiNzUwNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAJC4wQD BAFC4wgDBABC4wsDBABC4xAwDAMEAELjEwMEAELjGDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB2IMDrIB6 TKcvZLD2ZPiLRzpAR9pQ08doBYMG6pyPTYEaJ/niWde02XWC+9bkgFhBBokedTxF 31YxZFzYl9NJA1sijVtV1Zbf++DdmOCgua4rTFxFlIHEpGbSEn/hE3Cp88Pcv53d 1X5oyipd6BlvZor3k4xB9Hi7g5rxpXBnIVc4RUnLZFG8/cpAn8gs27avqWGHW9BP Dzgvp0W8X317ZnmUX1T5OUpgAEY2+y7PPeYAz4Pk6lW2V2slAzZxloP1PY7M+J1F ikwri4FPyvrbweTEqGkqgpapxTe6tXdciiWlJCkJQuFKrFEt1V2Msf9W3YajOoc9 4X8RRC3fj95b -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:45 2025 by rpki-client