$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa File: 7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa (raw, json) Hash identifier: +KlFl0a1Hx2lkLutJQ3pzIHCGmoQSj7/ORrDuK8gbEE= Subject key identifier: 48:26:7C:AA:B8:36:08:6D:37:71:F5:A6:5E:6E:FC:3F:33:B1:73:04 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F622F79BB50B27F2D9AF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 199527 IP address blocks: 66.17.130.0/23 maxlen: 24 66.17.132.0/22 maxlen: 24 66.17.140.0/24 maxlen: 24 66.17.143.0/24 maxlen: 24 66.17.213.0/24 maxlen: 24 66.17.214.0/23 maxlen: 24 66.17.220.0/24 maxlen: 24 66.17.222.0/23 maxlen: 24 66.17.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:22:f7:9b:b5:0b:27:f2:d9:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=04813991-afb6-4102-a91d-de6611a2f23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:a7:fd:ca:6e:01:93:0a:27:97:0f:40:f8: 53:0f:5c:ec:e2:9d:ba:23:3a:91:b0:14:ea:a3:48: 11:2c:88:88:7a:55:8d:b7:2b:95:7d:b9:d1:97:dc: 9e:28:e0:c2:78:f3:e3:97:1d:d0:a5:c0:bb:a5:c6: 77:fe:a2:88:17:68:d7:2b:2a:66:98:e1:7d:2c:b5: 48:b6:72:92:1d:06:e7:6d:94:18:a9:e0:4f:8c:06: a7:d2:3f:73:e3:f9:8e:d7:f4:c5:4b:ce:c7:6d:db: 87:70:67:df:77:4e:d0:f5:39:6c:8c:51:a0:62:72: ef:08:70:e0:33:cd:33:a4:9b:e7:a2:a1:17:98:41: 91:02:e6:5f:e8:f8:9e:e7:63:f1:7a:a9:2b:4a:65: dd:b0:a4:f0:75:8c:1c:a6:74:25:21:f5:27:78:ed: dd:bf:96:f5:fa:2f:d9:f5:27:56:e8:a7:a4:01:a0: b3:9f:3b:3c:d9:da:d8:f3:03:a1:37:f9:17:2c:9a: e0:20:40:f8:38:94:9d:b0:b3:f5:36:60:f9:2d:93: e9:04:ba:99:a5:2c:77:06:b7:0e:ba:00:6b:9f:28: 07:0d:b2:67:82:e3:8c:28:c4:80:5e:ae:c1:9e:d8: 06:35:0a:de:7a:d4:04:e9:28:bf:3b:ba:a6:f7:fc: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:7C:AA:B8:36:08:6D:37:71:F5:A6:5E:6E:FC:3F:33:B1:73:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.17.130.0-66.17.135.255 66.17.140.0/24 66.17.143.0/24 66.17.213.0-66.17.215.255 66.17.220.0/24 66.17.222.0/23 66.17.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f7:2c:94:ec:08:e6:52:fd:78:f3:c6:ca:49:da:32:a7:60: 6b:c1:fc:2a:b7:46:48:02:06:7b:4d:d5:a4:a2:df:7e:71:f3: 9e:54:8b:54:ac:85:d2:5b:56:c4:89:b9:e2:1e:a9:e8:8d:18: 2d:55:ca:af:07:b2:49:45:fa:f0:24:b3:be:b0:ab:fd:6e:24: a7:55:09:d5:cf:a8:08:30:1d:86:38:81:71:de:a9:89:18:c7: 17:3d:38:e5:1c:fa:98:e3:fc:e4:ac:70:b7:b3:3f:57:f5:e7: b5:8b:50:c4:09:db:f4:ab:99:b8:1c:8d:98:21:82:c6:0e:6d: 40:f1:d3:bb:58:f1:fa:19:9d:96:e2:bb:4b:3b:2a:0d:58:a0: ac:b0:10:51:c5:de:99:e6:79:24:6a:3f:85:02:e3:1f:b5:b7: 42:54:7d:84:84:fd:0d:ec:26:d8:e2:53:71:29:ce:1c:12:32: b7:1a:84:a0:43:cc:f4:b2:df:f5:1e:00:7b:33:52:c6:6b:ee: 27:72:27:f0:eb:6b:7c:00:8a:f0:b4:a7:f8:9c:3b:da:cd:8a: 27:a8:cc:37:df:4c:a8:d8:a1:51:13:09:03:19:90:a6:78:fe: 5c:7e:e5:b2:bb:89:77:35:4f:53:a5:9c:45:f5:6e:1b:de:27: bf:6a:28:46 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEqm9iL3m7ULJ/LZr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MDQ4MTM5OTEtYWZiNi00MTAyLWE5MWQtZGU2NjExYTJmMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyn/cpuAZMKJ5cPQPhTD1zs4p26IzqRsBTq o0gRLIiIelWNtyuVfbnRl9yeKODCePPjlx3QpcC7pcZ3/qKIF2jXKypmmOF9LLVI tnKSHQbnbZQYqeBPjAan0j9z4/mO1/TFS87HbduHcGffd07Q9TlsjFGgYnLvCHDg M80zpJvnoqEXmEGRAuZf6Pie52PxeqkrSmXdsKTwdYwcpnQlIfUneO3dv5b1+i/Z 9SdW6KekAaCznzs82drY8wOhN/kXLJrgIED4OJSdsLP1NmD5LZPpBLqZpSx3BrcO ugBrnygHDbJnguOMKMSAXq7BntgGNQreetQE6Si/O7qm9/wMZwIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFEgmfKq4NghtN3H1pl5u/D8zsXMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2FhZGJiZWEtMGY1NC0z MGQ3LTg2YTktYTI5OTk1M2NkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAFCEYID BANCEYADBABCEYwDBABCEY8wDAMEAEIR1QMEA0IR0AMEAEIR3AMEAUIR3gMEAUIR /DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBe9yyU7AjmUv1488bKSdoyp2Brwfwqt0ZIAgZ7TdWkot9+cfOe VItUrIXSW1bEibniHqnojRgtVcqvB7JJRfrwJLO+sKv9biSnVQnVz6gIMB2GOIFx 3qmJGMcXPTjlHPqY4/zkrHC3sz9X9ee1i1DECdv0q5m4HI2YIYLGDm1A8dO7WPH6 GZ2W4rtLOyoNWKCssBBRxd6Z5nkkaj+FAuMftbdCVH2EhP0N7CbY4lNxKc4cEjK3 GoSgQ8z0st/1HgB7M1LGa+4ncifw62t8AIrwtKf4nDvazYonqMw330yo2KFREwkD GZCmeP5cfuWyu4l3NU9TpZxF9W4b3ie/aihG -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:29 2025 by rpki-client