$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f54f9c56-630c-3ee0-a240-020f85417861.roa File: f54f9c56-630c-3ee0-a240-020f85417861.roa (raw, json) Hash identifier: Pf9r/QSwPIjOMRUdUP0gpLmcnaIMHhx3OOqEXIqfcjc= Subject key identifier: 20:B8:CE:92:98:FE:56:76:EB:7C:B5:01:5F:B4:A2:49:C0:F9:C3:2C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8382179691CAB9A27B2D9680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f54f9c56-630c-3ee0-a240-020f85417861.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 30633 IP address blocks: 66.92.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:17:96:91:ca:b9:a2:7b:2d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=567834e8-a76a-482f-90e5-df8744b0d9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:55:50:f3:c3:05:a9:82:e0:98:5d:32:41:c2: e5:da:e9:8e:98:b8:66:fa:fd:09:b8:aa:4f:21:3d: 87:22:75:4a:d2:d7:38:40:d7:2f:5a:29:0b:9f:99: c4:b2:90:80:a7:f2:9a:04:e6:2d:5e:3a:e4:d2:c7: 87:f0:16:c0:34:fa:ce:80:b5:0d:50:10:01:e8:81: 6e:16:99:57:37:c0:22:4f:2a:42:5f:8c:7d:ed:68: f3:36:d7:ca:0e:72:15:ce:90:86:6e:1d:82:3e:26: eb:b6:5f:49:d2:8e:c5:c4:d5:98:c1:6e:79:c0:54: 79:f1:e1:3d:e6:b8:56:31:4b:cc:eb:a6:ea:31:94: fa:ae:81:9b:0e:46:c8:d0:9a:47:4c:4e:ad:01:5c: 7a:bb:91:e2:b5:99:ff:64:bf:8e:63:8f:eb:e6:62: 6a:f4:cf:79:74:2d:2f:0e:07:17:6a:7f:31:d2:6c: bc:7e:a2:24:51:07:34:ef:f9:90:3b:6d:0d:c5:d7: cd:1c:61:25:99:f3:d8:21:9c:74:32:fc:17:4d:8f: 50:8e:28:2e:81:1e:de:4f:0a:67:c9:64:57:a4:f0: aa:ed:cb:fa:62:20:a9:12:cb:b6:1f:57:d1:b6:60: 4b:74:42:1f:6f:e8:17:63:b6:ce:7d:ef:0f:63:bf: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B8:CE:92:98:FE:56:76:EB:7C:B5:01:5F:B4:A2:49:C0:F9:C3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f54f9c56-630c-3ee0-a240-020f85417861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bd:e3:3e:07:65:6a:8c:99:0c:b2:16:0c:c4:b3:b7:98:8d: 56:99:02:66:b0:17:25:21:5c:55:20:00:87:fc:7e:4b:0d:e3: 71:2d:7a:2a:f2:da:11:55:23:40:18:8a:cf:ab:7e:e3:46:9a: 2c:f8:83:98:e8:67:1e:92:14:b3:02:f7:1e:6c:5d:aa:d4:7e: 99:eb:93:ff:b7:a2:82:70:65:ea:66:94:42:63:e6:b6:69:e9: 29:97:2e:fb:c2:a3:a6:62:3a:ba:46:a3:b6:fb:92:ae:2a:5e: 7a:b3:15:e5:6b:5b:72:bb:5c:cb:5a:da:59:ac:f0:69:ee:40: 41:fb:f6:9b:03:f7:30:4f:30:fd:b9:e5:04:c8:78:d8:75:c2: 7e:b8:78:ed:95:15:a9:f5:3a:07:9b:50:a6:f8:e4:a7:e3:46: 45:e9:94:dc:a8:5c:61:2b:e1:11:57:1d:1a:20:b2:0c:c9:48: 32:05:78:eb:36:06:39:d1:4d:00:cd:4f:96:04:6e:7f:c8:d3: 26:40:e9:84:fe:ff:c6:e5:05:a2:be:94:a0:93:c8:a6:15:33: d6:4e:37:e9:4c:2e:76:0d:68:78:75:32:bc:24:b4:e8:06:48: 5e:3f:0d:d4:d1:18:41:2f:0a:1b:7d:fb:7c:8c:67:3c:33:14: 3a:d3:43:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDgheWkcq5onstloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk NTY3ODM0ZTgtYTc2YS00ODJmLTkwZTUtZGY4NzQ0YjBkOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FVQ88MFqYLgmF0yQcLl2umOmLhm+v0JuKpP IT2HInVK0tc4QNcvWikLn5nEspCAp/KaBOYtXjrk0seH8BbANPrOgLUNUBAB6IFu FplXN8AiTypCX4x97WjzNtfKDnIVzpCGbh2CPibrtl9J0o7FxNWYwW55wFR58eE9 5rhWMUvM66bqMZT6roGbDkbI0JpHTE6tAVx6u5HitZn/ZL+OY4/r5mJq9M95dC0v DgcXan8x0my8fqIkUQc07/mQO20NxdfNHGElmfPYIZx0MvwXTY9QjigugR7eTwpn yWRXpPCq7cv6YiCpEsu2H1fRtmBLdEIfb+gXY7bOfe8PY7+uOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC4zpKY/lZ263y1AV+0oknA+cMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjU0ZjljNTYtNjMwYy0z ZWUwLWEyNDAtMDIwZjg1NDE3ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+94z4HZWqMmQyyFgzEs7eYjVaZAmawFyUhXFUgAIf8fksN43Eteiry 2hFVI0AYis+rfuNGmiz4g5joZx6SFLMC9x5sXarUfpnrk/+3ooJwZepmlEJj5rZp 6SmXLvvCo6ZiOrpGo7b7kq4qXnqzFeVrW3K7XMta2lms8GnuQEH79psD9zBPMP25 5QTIeNh1wn64eO2VFan1OgebUKb45KfjRkXplNyoXGEr4RFXHRogsgzJSDIFeOs2 BjnRTQDNT5YEbn/I0yZA6YT+/8blBaK+lKCTyKYVM9ZON+lMLnYNaHh1MrwktOgG SF4/DdTRGEEvCht9+3yMZzwzFDrTQ2M= -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:11 2025 by rpki-client