$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2efa8c8-07bc-379b-8cbf-a4d32cf3ffea.roa File: f2efa8c8-07bc-379b-8cbf-a4d32cf3ffea.roa (raw, json) Hash identifier: Rmi6SuQbGc9TGfg2BM/0zFAuhGooV0j1aLUHm3ixosQ= Subject key identifier: A1:F1:C1:9B:6A:C2:33:AE:6B:70:A7:80:E4:66:5A:FE:CA:20:1C:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5B076547A7E8EE981AFBBE80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2efa8c8-07bc-379b-8cbf-a4d32cf3ffea.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 62610 IP address blocks: 66.253.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:65:47:a7:e8:ee:98:1a:fb:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=ccf0029d-01f7-419f-8944-df81047100c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:c1:d2:81:50:15:39:20:fd:cc:ec:ea:76: bc:5b:0d:e9:cc:a9:2e:47:bf:7d:06:a9:e9:48:74: a7:38:8f:1e:b0:37:e8:05:20:ef:73:ec:55:dc:df: 34:af:7c:97:72:85:4d:bb:99:7d:01:4c:61:3c:85: 1a:69:61:c9:e7:f6:44:07:f2:b9:a7:41:e6:7a:3d: bb:35:e6:97:e9:27:08:0b:3d:00:f2:5a:ad:c5:16: a3:3b:18:d1:6d:6e:17:eb:e3:94:2c:4f:00:ef:5c: ea:b7:c7:cf:95:d7:e7:db:f6:53:a1:38:36:9c:67: e0:05:f5:ea:86:dd:e4:1d:93:e5:3d:21:ab:84:97: 36:44:d9:af:d5:b6:f0:ae:19:10:d7:65:86:9a:db: cc:a3:27:67:6d:c8:0d:9e:c2:14:a5:c1:cf:62:e0: ab:4c:ba:47:84:e8:cc:ab:10:e3:e1:16:f2:3a:18: 4d:5b:d9:62:c6:d6:75:be:5c:07:6f:70:75:80:70: bd:fd:db:86:ac:76:96:35:c4:dd:93:0c:5b:dd:59: 13:88:3e:1d:3a:61:3a:1f:34:34:8d:20:b1:76:0c: 15:9c:9c:89:cc:bf:bf:66:66:12:60:9a:6f:5c:1f: 98:24:ca:cf:52:f2:06:d9:94:92:8e:d2:12:1d:2a: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:C1:9B:6A:C2:33:AE:6B:70:A7:80:E4:66:5A:FE:CA:20:1C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2efa8c8-07bc-379b-8cbf-a4d32cf3ffea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c7:c1:3a:2b:a6:d6:26:11:6e:fa:6e:6c:be:d0:9d:30:c9: 86:4b:b7:cc:a6:cb:f5:94:2c:46:1b:bc:b6:48:09:c8:0e:97: 9b:4e:c5:2b:93:4e:34:4c:a0:d9:e0:45:fc:b5:5f:b3:28:fa: 9e:9e:b8:78:c6:80:f5:2f:74:26:6a:87:df:35:0e:ac:b9:73: a3:5a:0f:e3:98:f5:21:28:ea:d9:75:79:c0:af:53:c1:c4:66: f7:5c:fa:3b:54:aa:9e:f7:62:c8:db:38:b2:c0:54:bc:95:42: 83:89:c4:4a:64:30:7c:72:05:b5:70:ad:f8:56:e7:a9:ed:7e: fc:d7:4f:40:20:48:e9:27:cb:9b:bc:70:a7:ed:18:32:fe:9d: 23:f2:78:f0:23:b8:99:42:5d:32:58:d9:cc:ec:79:9f:61:72: 16:9a:1b:61:33:fb:cb:e6:21:ea:9d:71:40:d8:18:8e:5d:80: 12:de:01:d2:89:a8:3a:84:b8:25:a9:89:88:4c:44:65:2c:2f: 0c:7c:e1:27:f4:79:fb:55:75:b9:34:3f:c9:db:fa:f6:bc:74: 11:80:0a:6e:7c:a2:a2:23:a5:c8:3c:e7:0b:cf:76:65:fe:8a: 56:2a:db:a9:5b:d3:63:0c:4e:a6:f0:16:0c:a3:be:8c:0c:ff: 2e:c8:93:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2VHp+jumBr7voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2NmMDAyOWQtMDFmNy00MTlmLTg5NDQtZGY4MTA0NzEwMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkTB0oFQFTkg/czs6na8Ww3pzKkuR799Bqnp SHSnOI8esDfoBSDvc+xV3N80r3yXcoVNu5l9AUxhPIUaaWHJ5/ZEB/K5p0Hmej27 NeaX6ScICz0A8lqtxRajOxjRbW4X6+OULE8A71zqt8fPldfn2/ZToTg2nGfgBfXq ht3kHZPlPSGrhJc2RNmv1bbwrhkQ12WGmtvMoydnbcgNnsIUpcHPYuCrTLpHhOjM qxDj4RbyOhhNW9lixtZ1vlwHb3B1gHC9/duGrHaWNcTdkwxb3VkTiD4dOmE6HzQ0 jSCxdgwVnJyJzL+/ZmYSYJpvXB+YJMrPUvIG2ZSSjtISHSoMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHxwZtqwjOua3CngORmWv7KIBzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjJlZmE4YzgtMDdiYy0z NzliLThjYmYtYTRkMzJjZjNmZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/HwTorptYmEW76bmy+0J0wyYZLt8ymy/WULEYbvLZICcgOl5tOxSuT TjRMoNngRfy1X7Mo+p6euHjGgPUvdCZqh981Dqy5c6NaD+OY9SEo6tl1ecCvU8HE Zvdc+jtUqp73YsjbOLLAVLyVQoOJxEpkMHxyBbVwrfhW56ntfvzXT0AgSOkny5u8 cKftGDL+nSPyePAjuJlCXTJY2czseZ9hchaaG2Ez+8vmIeqdcUDYGI5dgBLeAdKJ qDqEuCWpiYhMRGUsLwx84Sf0eftVdbk0P8nb+va8dBGACm58oqIjpcg85wvPdmX+ ilYq26lb02MMTqbwFgyjvowM/y7Ikxw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:57 2025 by rpki-client