$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/795e6797-e535-3462-ac31-c67d4ad12f88.roa File: 795e6797-e535-3462-ac31-c67d4ad12f88.roa (raw, json) Hash identifier: 1jIDf/Mxf41qoN/lfsGAvRWshTHbiuIKlJy+U0XyA0E= Subject key identifier: 96:5F:1E:46:51:A4:03:8E:6D:0F:E2:20:25:8F:A6:9E:F1:9A:46:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F62369F7C063A9B457E800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/795e6797-e535-3462-ac31-c67d4ad12f88.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 199527 IP address blocks: 66.227.26.0/23 maxlen: 24 66.227.28.0/23 maxlen: 24 66.227.31.0/24 maxlen: 24 66.227.40.0/22 maxlen: 24 66.227.47.0/24 maxlen: 24 66.227.56.0/23 maxlen: 24 66.227.58.0/24 maxlen: 24 66.227.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:23:69:f7:c0:63:a9:b4:57:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=54f0cfae-cea9-4afd-8e20-759b737bab4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:45:55:03:89:fc:b6:1e:fd:61:06:4f:af:04: f0:e8:2b:ef:75:f8:a8:b4:a7:1e:39:2f:ee:53:ae: 7d:84:53:3a:e5:cf:1a:dd:a2:eb:b0:f2:98:0c:5e: c5:69:87:ec:a6:2c:4d:ec:ac:2b:7a:76:8f:64:ab: c5:a3:27:9c:57:c9:57:b6:c6:8e:14:67:a7:e7:62: 02:dc:bd:16:1b:2e:60:74:64:33:e4:d1:bf:f2:24: 48:45:4a:46:89:8f:60:b2:10:fc:c0:ea:a6:ce:dc: 16:6f:ce:1e:b2:83:94:80:18:8f:20:de:76:71:4d: 07:04:ee:11:7f:32:35:83:f4:33:d1:6c:78:6c:18: 93:af:9e:bf:d0:95:47:6b:e1:7e:00:f2:1b:39:a6: 23:89:60:f1:b2:f5:83:d6:ac:8f:a9:8e:18:f6:c9: 64:f5:27:55:66:b9:dc:bc:14:ba:d4:b8:b9:de:5d: e0:14:d7:78:39:42:0b:18:d0:e6:60:d1:c5:e1:79: 04:17:48:2f:69:c5:95:c5:f8:78:73:8f:d3:96:97: c2:5f:c2:de:9c:9e:50:f0:cd:9b:28:45:1a:27:07: 7d:ba:9e:82:78:5d:e7:a4:6b:05:40:36:f6:8b:dc: d3:39:83:87:63:50:2b:3d:07:e9:1a:79:89:60:5a: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5F:1E:46:51:A4:03:8E:6D:0F:E2:20:25:8F:A6:9E:F1:9A:46:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/795e6797-e535-3462-ac31-c67d4ad12f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.26.0-66.227.29.255 66.227.31.0/24 66.227.40.0/22 66.227.47.0/24 66.227.56.0-66.227.58.255 66.227.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f4:fa:c3:e1:96:88:a8:d7:af:ba:25:a6:5a:51:f8:02:df: 7b:27:dd:51:ef:6f:e9:4a:fe:5d:9b:c7:1a:b6:ca:16:57:bf: e1:da:84:54:b4:3e:e6:01:89:7e:8f:b4:bf:5e:8b:19:2b:e9: 8a:f9:2c:c7:9f:95:7e:96:91:14:b7:2d:74:10:7b:99:dc:8f: dc:83:b9:fd:e5:5a:e7:3b:e0:cc:98:cc:55:2c:79:96:d0:c1: f1:c5:97:6b:13:75:d7:0c:3a:6f:96:0c:0c:3c:09:dc:53:93: 2e:ac:f7:16:6f:23:d6:0b:07:c0:3d:c3:37:99:d5:c3:9f:6c: 3c:41:60:86:20:6f:db:05:dc:2b:62:77:e3:0c:1d:7b:7a:70: 2f:65:67:4e:48:1d:1d:3f:17:e3:05:ad:20:2a:8c:67:b7:74: 78:8d:2d:ee:24:ec:db:f9:71:63:9b:82:53:58:09:be:b5:6a: 4e:02:bd:dc:00:fa:2a:0e:0c:fe:06:29:b2:59:46:52:81:21: fe:c8:d4:15:04:44:a8:7d:98:a5:06:9f:cc:04:88:24:4a:a0: 82:d8:2d:ee:e5:86:73:43:fe:02:2e:9d:68:6e:e0:8a:8a:b1: 1f:73:27:ef:4b:95:5a:fa:7d:32:76:49:0e:a0:15:8b:47:5b: 2f:24:ff:b8 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEqm9iNp98BjqbRX6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NTRmMGNmYWUtY2VhOS00YWZkLThlMjAtNzU5YjczN2JhYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUVVA4n8th79YQZPrwTw6CvvdfiotKceOS/u U659hFM65c8a3aLrsPKYDF7FaYfspixN7KwrenaPZKvFoyecV8lXtsaOFGen52IC 3L0WGy5gdGQz5NG/8iRIRUpGiY9gshD8wOqmztwWb84esoOUgBiPIN52cU0HBO4R fzI1g/Qz0Wx4bBiTr56/0JVHa+F+APIbOaYjiWDxsvWD1qyPqY4Y9slk9SdVZrnc vBS61Li53l3gFNd4OUILGNDmYNHF4XkEF0gvacWVxfh4c4/TlpfCX8LenJ5Q8M2b KEUaJwd9up6CeF3npGsFQDb2i9zTOYOHY1ArPQfpGnmJYFoNewIDAQABo4IDgzCC A38wHQYDVR0OBBYEFJZfHkZRpAOObQ/iICWPpp7xmkZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzk1ZTY3OTctZTUzNS0z NDYyLWFjMzEtYzY3ZDRhZDEyZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAFC4xoD BAFC4xwDBABC4x8DBAJC4ygDBABC4y8wDAMEA0LjOAMEAELjOgMEAkLjPDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCy9PrD4ZaIqNevuiWmWlH4At97J91R72/pSv5dm8catsoWV7/h2oRUtD7m AYl+j7S/XosZK+mK+SzHn5V+lpEUty10EHuZ3I/cg7n95VrnO+DMmMxVLHmW0MHx xZdrE3XXDDpvlgwMPAncU5MurPcWbyPWCwfAPcM3mdXDn2w8QWCGIG/bBdwrYnfj DB17enAvZWdOSB0dPxfjBa0gKoxnt3R4jS3uJOzb+XFjm4JTWAm+tWpOAr3cAPoq Dgz+BimyWUZSgSH+yNQVBESofZilBp/MBIgkSqCC2C3u5YZzQ/4CLp1obuCKirEf cyfvS5Va+n0ydkkOoBWLR1svJP+4 -----END CERTIFICATE-----Generated at Sun Aug 10 18:19:31 2025 by rpki-client