$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa File: f86b6f27-de96-3aed-b000-0f261ccc01d7.roa (raw, json) Hash identifier: l1vW82L0BII2qxs902705p8E9rO6j3Mw8fQ9m9U4r4w= Subject key identifier: A4:03:97:9C:7F:1C:DB:AA:A4:B4:0B:3A:75:FA:DB:13:B1:5A:E8:79 Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584AC8767AE31F7008E0FDA4DC40 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13415 IP address blocks: 65.181.48.0/20 maxlen: 20 66.7.112.0/20 maxlen: 20 66.7.116.0/24 maxlen: 24 66.60.96.0/19 maxlen: 19 66.85.16.0/22 maxlen: 22 66.219.192.0/18 maxlen: 18 66.219.200.0/23 maxlen: 23 66.219.224.0/23 maxlen: 23 66.219.248.0/23 maxlen: 23 67.206.160.0/20 maxlen: 21 67.214.224.0/19 maxlen: 19 68.66.160.0/20 maxlen: 20 69.27.0.0/19 maxlen: 19 69.169.128.0/18 maxlen: 18 76.8.192.0/19 maxlen: 19 97.75.160.0/19 maxlen: 19 104.153.124.0/22 maxlen: 22 104.244.84.0/22 maxlen: 22 162.219.20.0/22 maxlen: 22 162.223.32.0/21 maxlen: 21 162.247.176.0/22 maxlen: 22 172.83.4.0/22 maxlen: 22 192.34.248.0/21 maxlen: 21 192.92.200.0/21 maxlen: 21 199.30.68.0/22 maxlen: 22 199.96.116.0/22 maxlen: 22 199.115.244.0/22 maxlen: 22 199.127.120.0/21 maxlen: 21 204.15.84.0/22 maxlen: 22 205.204.32.0/20 maxlen: 20 208.72.160.0/21 maxlen: 21 216.10.236.0/22 maxlen: 22 2600:7400::/28 maxlen: 28 2600:7401::/32 maxlen: 32 2600:740b:2::/48 maxlen: 48 2607:f898::/32 maxlen: 32 2607:f898:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:7a:e3:1f:70:08:e0:fd:a4:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=3a1b043f-3095-4dbc-bf4c-a93ef4af4ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:68:83:12:a5:8c:6f:37:de:40:e1:83:c4: d4:b7:a4:4c:3b:55:80:f5:e3:a3:c5:85:57:67:66: 52:df:92:07:a6:5d:b3:55:a0:2a:5d:83:b1:41:2d: 4e:2b:29:05:06:ca:28:75:1e:bb:d2:75:8d:85:df: d8:7b:ad:69:90:68:df:0d:b3:32:eb:89:94:08:64: 34:ee:15:70:10:a1:9b:a5:ce:d5:93:7f:46:55:30: 63:e3:62:c9:27:a5:e0:86:07:7f:bb:00:19:36:04: 78:e0:9d:f7:78:0c:f8:60:34:b9:c8:2b:3e:7c:17: 81:f2:d2:7e:62:64:d4:09:56:1e:72:b7:24:f6:e6: ad:4b:c4:04:71:37:60:e3:9c:36:26:93:f7:a8:87: f8:5f:b3:14:01:a2:fd:8d:9b:93:21:47:c4:4c:b6: 61:78:31:2a:64:39:f6:cd:34:3c:68:c1:9b:b1:d6: e5:66:8c:6e:e5:2b:e2:03:75:56:94:44:9c:5f:03: 4b:1a:9d:61:a9:a8:78:36:57:c3:7f:ad:ea:21:4e: 69:82:55:2c:4a:c1:7a:75:9a:b3:51:c8:f3:33:72: 50:98:4a:20:0f:d8:dd:88:c6:56:84:9c:87:34:9d: 4f:82:8e:65:e8:c6:18:de:73:ee:3f:0f:1d:0c:80: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:97:9C:7F:1C:DB:AA:A4:B4:0B:3A:75:FA:DB:13:B1:5A:E8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.48.0/20 66.7.112.0/20 66.60.96.0/19 66.85.16.0/22 66.219.192.0/18 67.206.160.0/20 67.214.224.0/19 68.66.160.0/20 69.27.0.0/19 69.169.128.0/18 76.8.192.0/19 97.75.160.0/19 104.153.124.0/22 104.244.84.0/22 162.219.20.0/22 162.223.32.0/21 162.247.176.0/22 172.83.4.0/22 192.34.248.0/21 192.92.200.0/21 199.30.68.0/22 199.96.116.0/22 199.115.244.0/22 199.127.120.0/21 204.15.84.0/22 205.204.32.0/20 208.72.160.0/21 216.10.236.0/22 IPv6: 2600:7400::/28 2607:f898::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e2:63:50:a6:1f:8d:e7:71:84:8d:0e:84:46:76:27:44:31: b3:f3:13:33:c4:82:6e:fe:71:0f:e6:c1:84:b6:0b:cb:76:5c: e4:58:3e:f1:f1:9f:93:05:e6:38:03:9c:56:8b:2d:ec:56:5c: 1f:33:96:b8:b5:d2:94:df:40:16:5e:e7:35:af:23:c1:a2:92: cc:44:f4:32:9d:b8:54:a6:60:18:64:bf:e0:d8:f7:a2:de:92: db:75:19:d8:2b:0f:1e:50:3a:30:29:a6:e7:b2:21:2e:46:e3: 2f:53:fe:3f:e4:8e:60:e7:2d:d6:1b:8c:3a:6a:be:b7:ec:92: 12:b2:b7:58:49:96:b3:a2:4e:24:5d:9b:4e:40:28:bc:1a:49: 1c:e4:a5:1f:05:c0:44:9a:19:17:f3:57:8b:de:0b:d3:9f:54: d0:1e:e5:50:93:9b:d4:f9:5d:69:70:4a:18:cc:9b:c7:b8:68: 77:e0:62:4a:81:f7:37:b8:ca:dd:0b:e9:29:11:16:dd:e0:38: c3:1e:c8:66:b6:4a:19:fa:d7:aa:72:b3:9b:e1:09:ed:ef:b8: 4f:ca:bb:18:97:d7:d5:eb:13:fa:12:07:47:f2:c2:ef:34:d3: 55:ce:e1:f0:2d:bd:cc:3d:98:d3:3a:31:6f:2e:17:06:2d:a7: cb:b0:e6:28 -----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIUAQ0Mn0MoWErIdnrjH3AI4P2k3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2ExYjA0M2YtMzA5NS00ZGJjLWJmNGMtYTkzZWY0YWY0YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIVogxKljG833kDhg8TUt6RMO1WA9eOjxYVX Z2ZS35IHpl2zVaAqXYOxQS1OKykFBsoodR670nWNhd/Ye61pkGjfDbMy64mUCGQ0 7hVwEKGbpc7Vk39GVTBj42LJJ6Xghgd/uwAZNgR44J33eAz4YDS5yCs+fBeB8tJ+ YmTUCVYecrck9uatS8QEcTdg45w2JpP3qIf4X7MUAaL9jZuTIUfETLZheDEqZDn2 zTQ8aMGbsdblZoxu5SviA3VWlEScXwNLGp1hqah4NlfDf63qIU5pglUsSsF6dZqz UcjzM3JQmEogD9jdiMZWhJyHNJ1Pgo5l6MYY3nPuPw8dDIDa8QIDAQABo4IEEjCC BA4wHQYDVR0OBBYEFKQDl5x/HNuqpLQLOnX62xOxWuh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvZjg2YjZmMjctZGU5Ni0z YWVkLWIwMDAtMGYyNjFjY2MwMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMIHbBggrBgEFBQcBBwEB/wSByzCByDCBrwQCAAEwgagDBARB tTADBARCB3ADBAVCPGADBAJCVRADBAZC28ADBARDzqADBAVD1uADBAREQqADBAVF GwADBAZFqYADBAVMCMADBAVhS6ADBAJomXwDBAJo9FQDBAKi2xQDBAOi3yADBAKi 97ADBAKsUwQDBAPAIvgDBAPAXMgDBALHHkQDBALHYHQDBALHc/QDBAPHf3gDBALM D1QDBATNzCADBAPQSKADBALYCuwwFAQCAAIwDgMFBCYAdAADBQAmB/iYMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAGLiY1CmH43ncYSNDoRGdidEMbPzEzPEgm7+cQ/mwYS2C8t2XORYPvHxn5MF 5jgDnFaLLexWXB8zlri10pTfQBZe5zWvI8GiksxE9DKduFSmYBhkv+DY96Lektt1 GdgrDx5QOjAppueyIS5G4y9T/j/kjmDnLdYbjDpqvrfskhKyt1hJlrOiTiRdm05A KLwaSRzkpR8FwESaGRfzV4veC9OfVNAe5VCTm9T5XWlwShjMm8e4aHfgYkqB9ze4 yt0L6SkRFt3gOMMeyGa2Shn616pys5vhCe3vuE/KuxiX19XrE/oSB0fywu8001XO 4fAtvcw9mNM6MW8uFwYtp8uw5ig= -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:03 2025 by rpki-client