$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbcfbb38-11f1-33bf-9e6b-8dd3f722e83f.roa File: dbcfbb38-11f1-33bf-9e6b-8dd3f722e83f.roa (raw, json) Hash identifier: FI+giEnttFf0xw8yGLajjCmHtRg/BH+Z3UC74+kXU9s= Subject key identifier: 0E:DD:F3:43:86:37:E8:88:AF:A8:8C:E5:7F:7F:7F:A5:90:C5:A0:42 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8A7CD5CF4AD12887440C8BB0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbcfbb38-11f1-33bf-9e6b-8dd3f722e83f.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 20228 IP address blocks: 66.92.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d5:cf:4a:d1:28:87:44:0c:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=401cde99-03da-49f0-8148-1ce611337fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:f2:d7:20:46:39:2d:1d:d7:c2:9c:0a:6c: cf:ad:e4:6f:96:36:1a:5c:29:0e:7d:4c:34:6e:b1: 58:fb:94:3c:9a:49:21:01:47:86:fd:f2:bf:ce:a8: 56:2e:bb:c4:28:67:da:86:01:71:b5:27:65:dd:e9: bc:dd:da:84:d0:fe:ba:a3:e3:e8:ed:16:43:4c:df: 0c:64:ee:5e:b4:80:32:8a:ef:a8:8b:9d:20:e1:92: 63:65:69:22:13:50:df:12:09:39:75:57:e2:3f:95: 33:ba:96:f3:6a:d6:4d:85:c7:2b:eb:b8:b3:3e:92: 16:42:30:b1:fe:01:6a:7d:ae:44:6d:17:59:d9:fb: df:b1:83:8e:ee:3d:16:cd:31:c1:db:2a:97:1a:ce: f3:e4:b5:e7:bf:7d:87:07:02:0c:a3:75:ab:53:c2: 19:31:ff:74:94:b3:4f:43:a0:72:17:ee:03:57:26: c4:e3:99:a3:80:8e:7d:b4:65:c6:c5:9a:84:12:7c: c4:e4:7b:ef:92:77:52:e9:ec:83:7f:4f:8c:ab:4a: 7f:d4:dd:da:7a:29:cc:63:35:89:d6:74:ae:61:df: a4:92:e1:8b:0d:50:cd:30:0c:06:66:1a:d2:41:09: 5b:f4:82:53:ba:89:fc:9a:7c:88:08:2f:9f:04:f3: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DD:F3:43:86:37:E8:88:AF:A8:8C:E5:7F:7F:7F:A5:90:C5:A0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbcfbb38-11f1-33bf-9e6b-8dd3f722e83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4f:7f:dd:4d:b3:dc:46:61:de:5d:d6:08:96:67:b0:fc:49: 76:ab:d5:f2:d1:cc:4c:4c:65:13:ef:64:67:0b:59:17:f3:ff: cc:58:2e:bd:eb:52:7c:48:fd:c0:43:d7:7e:14:97:b4:dd:5d: 9b:7b:c1:57:3d:8d:fe:49:17:71:b5:9f:bb:d4:38:65:eb:de: 34:90:a6:59:cc:82:02:4a:53:aa:20:81:4a:41:a0:1d:01:7e: 58:89:aa:1c:92:56:e7:32:78:ae:3d:7b:8e:ca:2f:18:38:87: 7d:5e:fb:63:d7:bd:ec:4c:9c:d7:49:3b:bf:bc:a3:71:4b:dd: ad:2e:ec:1f:12:2b:53:70:c0:d3:1f:99:0b:28:a9:bc:b7:3a: e6:08:db:d7:f4:de:d3:17:b1:82:d7:4d:05:ca:83:af:f8:0b: c6:a8:41:fd:e1:90:e5:34:42:cf:53:a5:65:e5:bc:fe:16:13: a2:c9:be:c6:e2:bc:c3:56:c2:13:26:7e:6a:05:96:76:a3:44: 3e:75:dc:4c:08:80:d7:f8:5d:80:94:b3:52:db:7f:1f:6b:5f: 65:fe:7a:34:ae:45:87:d5:f7:90:64:33:74:92:00:58:d8:d1: 2e:37:c3:90:f0:3a:ba:d9:bd:e4:f9:3d:d0:93:ed:36:fa:a1: 58:d1:95:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNXPStEoh0QMi7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk NDAxY2RlOTktMDNkYS00OWYwLTgxNDgtMWNlNjExMzM3ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLLy1yBGOS0d18KcCmzPreRvljYaXCkOfUw0 brFY+5Q8mkkhAUeG/fK/zqhWLrvEKGfahgFxtSdl3em83dqE0P66o+Po7RZDTN8M ZO5etIAyiu+oi50g4ZJjZWkiE1DfEgk5dVfiP5UzupbzatZNhccr67izPpIWQjCx /gFqfa5EbRdZ2fvfsYOO7j0WzTHB2yqXGs7z5LXnv32HBwIMo3WrU8IZMf90lLNP Q6ByF+4DVybE45mjgI59tGXGxZqEEnzE5HvvkndS6eyDf0+Mq0p/1N3aeinMYzWJ 1nSuYd+kkuGLDVDNMAwGZhrSQQlb9IJTuon8mnyICC+fBPPufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7d80OGN+iIr6iM5X9/f6WQxaBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGJjZmJiMzgtMTFmMS0z M2JmLTllNmItOGRkM2Y3MjJlODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZPf91Ns9xGYd5d1giWZ7D8SXar1fLRzExMZRPvZGcLWRfz/8xYLr3r UnxI/cBD134Ul7TdXZt7wVc9jf5JF3G1n7vUOGXr3jSQplnMggJKU6oggUpBoB0B fliJqhySVucyeK49e47KLxg4h31e+2PXvexMnNdJO7+8o3FL3a0u7B8SK1NwwNMf mQsoqby3OuYI29f03tMXsYLXTQXKg6/4C8aoQf3hkOU0Qs9TpWXlvP4WE6LJvsbi vMNWwhMmfmoFlnajRD513EwIgNf4XYCUs1Lbfx9rX2X+ejSuRYfV95BkM3SSAFjY 0S43w5DwOrrZveT5PdCT7Tb6oVjRlXs= -----END CERTIFICATE-----Generated at Sun Oct 19 22:40:13 2025 by rpki-client