$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa File: b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa (raw, json) Hash identifier: pxx/31PTTNY7/7zlYzn+1oJFQG7gGobfYAnm3Y/cEj4= Subject key identifier: 6D:50:EA:C7:6F:CA:27:30:67:DB:EC:5A:9F:0B:0C:45:54:A3:3C:DC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F62057EDCAE88908B16800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 5065 IP address blocks: 216.132.198.0/24 maxlen: 24 216.132.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:20:57:ed:ca:e8:89:08:b1:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=46e6fd39-2bae-4718-bdfa-37f0a8f40dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:f4:f3:c8:e1:3f:3a:79:15:47:da:94:2a: 30:a9:43:6e:9b:2e:86:5d:3c:21:13:5e:86:65:e1: 7c:bb:a8:4a:58:b4:36:d9:60:c2:74:bf:13:b9:08: dd:7d:65:4c:40:b7:14:57:d1:6c:2c:ad:d3:47:d5: 25:77:00:58:71:8b:e6:85:c9:0d:01:d0:d2:98:90: 1a:d9:5a:65:0d:c6:15:b5:86:b3:ae:9c:98:b6:70: 23:97:a7:27:c6:dc:6c:62:3b:6a:92:ac:c3:fa:e8: 5a:ea:52:7a:48:bc:80:0e:bb:c4:1f:7d:d7:87:95: 0a:2f:05:cc:29:e0:f7:52:93:96:d0:ab:8d:e6:1e: 97:b3:ba:d5:a4:9c:72:2f:d5:61:48:9f:b3:1a:8c: 23:a2:ed:a5:8d:9e:24:cd:94:6a:4d:4f:cd:15:a5: 4a:29:3b:e7:2d:d2:6b:84:95:b9:73:bd:60:3e:52: 1a:04:a7:5f:f6:1f:0a:71:88:fc:9a:51:16:9c:54: f2:94:76:a4:27:d6:d7:3e:c8:83:5e:51:b9:ac:12: 1f:75:29:e7:f5:8e:1d:d0:9f:14:f0:9a:08:93:71: b3:b8:71:98:0e:f7:ac:27:8b:52:56:40:79:38:ee: 34:5e:96:be:af:5c:6e:c7:88:e9:d5:fb:7f:27:f4: bb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:50:EA:C7:6F:CA:27:30:67:DB:EC:5A:9F:0B:0C:45:54:A3:3C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.198.0/24 216.132.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1e:2b:60:01:99:6a:26:0a:84:cc:32:c5:86:d6:fc:41:74: 12:8a:9d:0b:0c:37:03:4f:d3:9a:da:58:dd:7a:ca:ff:ce:db: 0d:4d:11:6d:1e:c3:da:8e:30:03:f1:42:db:33:9d:8a:1b:f8: 1b:c8:b3:2e:83:41:2e:f7:74:04:f6:b1:fa:f0:fc:89:50:11: f1:79:ca:3b:8f:e0:19:2c:e7:93:f3:4d:98:6c:9f:51:13:3a: 92:00:5d:1b:6d:e1:e0:dd:5a:7f:77:49:7b:cb:6f:2d:90:2d: 39:92:f8:9a:62:8f:8e:5c:3d:2a:9c:a6:ee:97:88:a7:bf:ec: 44:f8:e0:6a:45:29:02:05:39:52:0c:e6:ac:84:a1:20:c7:1a: 46:42:8a:97:6e:9f:76:cf:68:59:5c:39:65:27:e6:a2:e2:dd: 9c:9a:a2:e0:7d:78:d2:06:47:86:41:49:0e:d9:11:49:bc:fb: 58:73:2e:40:3f:21:8c:30:ff:2c:25:d2:db:95:82:bc:1d:79: c2:44:bc:87:a2:80:e9:eb:fb:05:8a:c9:0f:9a:bb:3d:27:9a: cc:92:c2:9e:41:34:d8:09:49:b7:cd:2d:5e:fa:c7:f1:bb:01: 8e:45:27:8a:1f:8c:b8:60:3c:31:f5:18:52:d6:87:e6:90:75: 03:70:c4:1f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqm9iBX7croiQixaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NDZlNmZkMzktMmJhZS00NzE4LWJkZmEtMzdmMGE4ZjQwZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvP088jhPzp5FUfalCowqUNumy6GXTwhE16G ZeF8u6hKWLQ22WDCdL8TuQjdfWVMQLcUV9FsLK3TR9UldwBYcYvmhckNAdDSmJAa 2VplDcYVtYazrpyYtnAjl6cnxtxsYjtqkqzD+uha6lJ6SLyADrvEH33Xh5UKLwXM KeD3UpOW0KuN5h6Xs7rVpJxyL9VhSJ+zGowjou2ljZ4kzZRqTU/NFaVKKTvnLdJr hJW5c71gPlIaBKdf9h8KcYj8mlEWnFTylHakJ9bXPsiDXlG5rBIfdSnn9Y4d0J8U 8JoIk3GzuHGYDvesJ4tSVkB5OO40Xpa+r1xux4jp1ft/J/S7oQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG1Q6sdvyicwZ9vsWp8LDEVUozzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY2ZmZlMmYtZTY1My0z N2JmLTk0OTMtMTkxOGNjMjNlM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ITGAwQA 2ITkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEkeK2ABmWomCoTMMsWG1vxBdBKKnQsMNwNP05raWN16yv/O 2w1NEW0ew9qOMAPxQtsznYob+BvIsy6DQS73dAT2sfrw/IlQEfF5yjuP4Bks55Pz TZhsn1ETOpIAXRtt4eDdWn93SXvLby2QLTmS+Jpij45cPSqcpu6XiKe/7ET44GpF KQIFOVIM5qyEoSDHGkZCipdun3bPaFlcOWUn5qLi3ZyaouB9eNIGR4ZBSQ7ZEUm8 +1hzLkA/IYww/ywl0tuVgrwdecJEvIeigOnr+wWKyQ+auz0nmsySwp5BNNgJSbfN LV76x/G7AY5FJ4ofjLhgPDH1GFLWh+aQdQNwxB8= -----END CERTIFICATE-----Generated at Sat Aug 9 23:09:04 2025 by rpki-client