$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa File: 432aa5cf-74c1-3d95-9174-41f56abbc60b.roa (raw, json) Hash identifier: sKpbtr5GMq5ttneZFf6fy7hDGonz9xED1M+ylAGgKMk= Subject key identifier: B5:B0:8A:4C:A1:D1:6F:42:A7:51:FB:98:1D:5D:72:E9:85:BD:37:6B Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584A9FFBA73BC4360E4F77163400 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33139 IP address blocks: 66.49.199.0/24 maxlen: 24 66.49.200.0/24 maxlen: 24 66.49.201.0/24 maxlen: 24 66.49.202.0/24 maxlen: 24 66.49.203.0/24 maxlen: 24 66.49.204.0/24 maxlen: 24 66.49.206.0/24 maxlen: 24 66.49.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a7:3b:c4:36:0e:4f:77:16:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=336c5cdb-486c-4ee4-92d2-d6c05e140bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:8c:be:3e:b6:5f:95:9e:e2:ce:6c:a9:32: 5c:62:a9:4b:9d:5f:b2:45:d9:9f:32:a0:24:e2:86: 53:ab:5d:52:aa:f0:6f:22:6f:8e:a0:1b:d5:49:b2: 5d:5d:d5:6d:1e:11:b3:50:d2:87:b9:a6:41:64:62: 55:45:23:84:62:a0:49:15:20:89:8e:32:e1:d8:dc: a8:75:a3:51:1f:c7:21:3d:55:9d:18:40:51:16:64: 09:7f:e8:7e:ad:92:a4:1e:21:80:57:0a:1b:cd:0b: 09:85:24:7a:fd:1f:78:af:0f:d0:f9:f3:ba:c8:13: bc:90:15:74:4c:16:dc:89:b1:e8:44:e0:c0:07:78: e1:b9:8b:89:9f:23:a6:c7:0c:a0:c8:3b:ec:90:f9: 91:68:e8:4c:68:e6:5d:f3:b3:67:57:b2:f7:fb:bd: 9c:38:18:df:55:48:07:09:62:6e:0b:01:c2:2d:3e: 2c:c3:14:ee:e3:09:a4:34:20:84:44:ce:7b:bf:ee: 3b:8e:10:e5:f2:6e:29:50:1c:dc:44:da:d1:e7:e4: 98:ed:4b:ed:b7:76:96:60:a2:52:69:48:63:57:d9: 69:fe:11:eb:22:95:17:33:9d:17:e8:d4:f3:ca:9f: a5:86:13:45:fb:40:55:10:2f:d4:ec:7c:88:04:5a: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:8A:4C:A1:D1:6F:42:A7:51:FB:98:1D:5D:72:E9:85:BD:37:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.199.0-66.49.204.255 66.49.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c3:6d:37:21:39:48:c9:89:8f:98:0a:8a:00:03:4b:56:97: 60:b7:b7:de:4c:74:f8:06:d4:16:ae:02:86:49:d0:c2:47:b5: 63:be:6c:8d:98:59:ab:47:c7:dd:d2:e4:73:12:07:03:12:72: 9b:18:d2:5b:56:c4:3b:26:71:e9:8a:e1:4b:fc:b7:c4:79:60: 99:b0:da:03:f2:8f:18:ed:19:79:fe:e8:38:0b:35:85:76:47: 22:cc:49:ba:ec:0c:46:73:5c:f2:a6:b2:01:a9:70:77:e8:28: 8a:97:d7:0f:36:d4:97:da:1f:63:f7:01:0d:2e:bb:1c:98:fa: 6b:e4:61:32:a8:50:2b:3e:df:81:45:46:96:d8:39:1e:69:2f: 27:94:bf:e1:2b:96:a8:d4:4d:a8:c3:1a:9d:a8:73:3f:a3:ab: 20:a8:07:0e:b6:b4:1b:33:f3:c9:be:4f:05:ee:4f:86:bc:93: f5:b5:14:93:32:41:15:da:73:ee:50:a5:89:5b:e5:9b:d3:23: d7:e5:b5:a5:11:ad:23:0f:9a:23:61:da:22:33:b8:8f:94:4f: f3:46:80:72:a2:17:6f:d0:ae:27:12:43:60:c6:f4:b7:5a:21: 33:5e:f9:4f:ac:77:b2:f4:a3:4b:71:7f:2a:c6:fa:01:31:d6: f4:76:b3:d3 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEqf+6c7xDYOT3cWNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MzM2YzVjZGItNDg2Yy00ZWU0LTkyZDItZDZjMDVlMTQwYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFWMvj62X5We4s5sqTJcYqlLnV+yRdmfMqAk 4oZTq11SqvBvIm+OoBvVSbJdXdVtHhGzUNKHuaZBZGJVRSOEYqBJFSCJjjLh2Nyo daNRH8chPVWdGEBRFmQJf+h+rZKkHiGAVwobzQsJhSR6/R94rw/Q+fO6yBO8kBV0 TBbcibHoRODAB3jhuYuJnyOmxwygyDvskPmRaOhMaOZd87NnV7L3+72cOBjfVUgH CWJuCwHCLT4swxTu4wmkNCCERM57v+47jhDl8m4pUBzcRNrR5+SY7Uvtt3aWYKJS aUhjV9lp/hHrIpUXM50X6NTzyp+lhhNF+0BVEC/U7HyIBFrCIQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFLWwikyh0W9Cp1H7mB1dcumFvTdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNDMyYWE1Y2YtNzRjMS0z ZDk1LTkxNzQtNDFmNTZhYmJjNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABCMccD BABCMcwDBAFCMc4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAA8NtNyE5SMmJj5gKigADS1aXYLe33kx0+AbU Fq4ChknQwke1Y75sjZhZq0fH3dLkcxIHAxJymxjSW1bEOyZx6YrhS/y3xHlgmbDa A/KPGO0Zef7oOAs1hXZHIsxJuuwMRnNc8qayAalwd+goipfXDzbUl9ofY/cBDS67 HJj6a+RhMqhQKz7fgUVGltg5HmkvJ5S/4SuWqNRNqMManahzP6OrIKgHDra0GzPz yb5PBe5PhryT9bUUkzJBFdpz7lCliVvlm9Mj1+W1pRGtIw+aI2HaIjO4j5RP80aA cqIXb9CuJxJDYMb0t1ohM175T6x3svSjS3F/Ksb6ATHW9Haz0w== -----END CERTIFICATE-----Generated at Thu Aug 7 20:15:07 2025 by rpki-client