$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e76978c-4e26-3769-9a26-890f2f631d53.roa File: 2e76978c-4e26-3769-9a26-890f2f631d53.roa (raw, json) Hash identifier: GzHOTpEDuvFTIDx8VqwypPq9ZWX+9SzVxeyWstlecns= Subject key identifier: 67:C0:CA:3E:0F:B4:2E:27:2A:00:EF:EB:F4:91:25:19:4E:9B:43:99 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F621F4FC7F810DA7453080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e76978c-4e26-3769-9a26-890f2f631d53.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 46401 IP address blocks: 66.54.132.0/22 maxlen: 24 67.200.52.0/24 maxlen: 24 67.200.53.0/24 maxlen: 24 67.200.56.0/23 maxlen: 24 67.200.116.0/23 maxlen: 24 74.199.198.0/23 maxlen: 24 208.97.205.0/24 maxlen: 24 209.213.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:21:f4:fc:7f:81:0d:a7:45:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=d28eeaf3-d673-4e69-afbb-c6bbccb68fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:9d:ff:f3:dd:0b:c9:d2:a1:a3:40:4b:07: 04:03:d2:b8:a6:77:bf:3d:3c:d1:29:35:3e:5d:71: ec:91:b3:91:fd:4e:37:9e:d4:02:ef:9d:22:fd:0d: c8:c0:9c:e8:bf:5e:ae:6f:01:13:00:d7:ee:ee:e4: ed:60:ff:dc:fc:f3:a2:aa:8c:36:10:6c:db:b6:29: 6f:5a:1a:35:10:29:f3:d8:c1:73:b7:69:eb:88:06: 83:c7:95:2f:78:1a:5d:48:88:c2:48:aa:a3:dd:e0: 87:c1:87:3a:e6:08:91:7d:88:ac:c4:da:12:6a:3d: 78:91:5e:d3:23:58:7d:66:ac:20:c3:4f:7a:bb:2c: 75:6a:db:20:ad:66:e5:ee:ad:4a:a6:d7:a3:96:7b: 21:55:29:74:b4:18:4c:3d:93:3a:e2:f3:3d:d4:49: 13:76:25:ed:40:37:4b:0f:c6:4f:9f:f5:5c:48:8d: 67:ff:78:56:83:f3:d2:72:51:9f:46:a1:7a:b5:fe: ff:ea:b8:3d:c5:41:b7:a2:fb:19:29:40:c8:f2:6d: 4d:e8:f4:8d:e0:6c:21:5a:5b:fe:ea:ca:20:b9:f8: df:f1:6f:0d:d2:53:06:84:03:0f:1a:40:4b:20:16: 5e:04:27:c9:4e:d9:e6:bb:ae:62:87:ad:cf:7d:00: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C0:CA:3E:0F:B4:2E:27:2A:00:EF:EB:F4:91:25:19:4E:9B:43:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e76978c-4e26-3769-9a26-890f2f631d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.54.132.0/22 67.200.52.0/23 67.200.56.0/23 67.200.116.0/23 74.199.198.0/23 208.97.205.0/24 209.213.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:da:f3:6f:b6:70:f4:0f:39:68:4d:0a:e7:b3:2f:5d:88:f3: 6b:26:c4:04:0d:53:6c:5e:19:c6:8c:4d:93:28:eb:b3:0e:fa: 0f:7b:35:05:c4:c2:e3:58:c7:98:99:10:1c:40:92:cb:44:e9: 57:c7:e1:22:4c:84:22:e1:94:37:44:84:45:88:00:38:90:cf: c9:97:9c:36:ef:cb:dd:64:a6:08:11:6a:27:a0:58:f0:1c:eb: 79:b7:03:19:9a:4f:42:6d:ef:44:dd:2b:36:91:7e:a3:16:dd: 60:ab:7b:bf:67:37:03:5c:f9:c2:b3:f0:17:b7:bb:26:51:25: 39:5c:09:72:07:f9:78:e4:a6:92:92:e7:65:58:30:74:57:9e: 5b:30:e1:61:d0:06:e0:13:04:c4:27:e2:85:e1:e0:80:4a:6f: ef:57:1a:07:df:03:0e:bb:8f:9e:d1:2c:75:7d:1b:1f:65:b8: 95:fd:f9:e8:01:f4:ae:af:e5:19:a0:d1:60:ce:fd:f8:4a:3a: 98:a1:90:b7:34:6b:32:b7:2b:ef:b1:02:6c:e0:21:9b:2e:7b: b8:71:3a:51:2f:da:ee:e0:1d:3f:e5:94:fa:16:de:16:3b:80: ff:19:11:35:3b:c2:4d:53:e3:b2:16:f6:4c:b6:6c:5c:e4:91: 45:9e:fb:d8 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEqm9iH0/H+BDadFMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZDI4ZWVhZjMtZDY3My00ZTY5LWFmYmItYzZiYmNjYjY4ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rWd//PdC8nSoaNASwcEA9K4pne/PTzRKTU+ XXHskbOR/U43ntQC750i/Q3IwJzov16ubwETANfu7uTtYP/c/POiqow2EGzbtilv Who1ECnz2MFzt2nriAaDx5UveBpdSIjCSKqj3eCHwYc65giRfYisxNoSaj14kV7T I1h9Zqwgw096uyx1atsgrWbl7q1KptejlnshVSl0tBhMPZM64vM91EkTdiXtQDdL D8ZPn/VcSI1n/3hWg/PSclGfRqF6tf7/6rg9xUG3ovsZKUDI8m1N6PSN4GwhWlv+ 6sogufjf8W8N0lMGhAMPGkBLIBZeBCfJTtnmu65ih63PfQAomwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFGfAyj4PtC4nKgDv6/SRJRlOm0OZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmU3Njk3OGMtNGUyNi0z NzY5LTlhMjYtODkwZjJmNjMxZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCQjaEAwQB Q8g0AwQBQ8g4AwQBQ8h0AwQBSsfGAwQA0GHNAwQA0dXXMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF7a82+2 cPQPOWhNCuezL12I82smxAQNU2xeGcaMTZMo67MO+g97NQXEwuNYx5iZEBxAkstE 6VfH4SJMhCLhlDdEhEWIADiQz8mXnDbvy91kpggRaiegWPAc63m3AxmaT0Jt70Td KzaRfqMW3WCre79nNwNc+cKz8Be3uyZRJTlcCXIH+XjkppKS52VYMHRXnlsw4WHQ BuATBMQn4oXh4IBKb+9XGgffAw67j57RLHV9Gx9luJX9+egB9K6v5Rmg0WDO/fhK OpihkLc0azK3K++xAmzgIZsue7hxOlEv2u7gHT/llPoW3hY7gP8ZETU7wk1T47IW 9ky2bFzkkUWe+9g= -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:40 2025 by rpki-client