$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb5b64c8-f76b-39d5-a6df-1a4c4a1ca618.roa File: bb5b64c8-f76b-39d5-a6df-1a4c4a1ca618.roa (raw, json) Hash identifier: AqLn3xUkjbthU7QjPAf63aotGiKJDKvZFRPEtl2XyBA= Subject key identifier: 4F:6D:39:1B:C2:9F:5C:0E:63:24:A4:ED:92:72:CA:13:A5:6F:E4:F3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AB0C6949F4BB16D2CDF9D9C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb5b64c8-f76b-39d5-a6df-1a4c4a1ca618.roa Signing time: Wed 30 Jul 2025 13:23:09 +0000 ROA not before: Wed 30 Jul 2025 13:23:09 +0000 ROA not after: Tue 28 Oct 2025 13:23:09 +0000 asID: 36916 IP address blocks: 66.253.60.0/22 maxlen: 24 216.132.156.0/22 maxlen: 24 216.132.236.0/22 maxlen: 24 216.132.244.0/22 maxlen: 24 216.132.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b0:c6:94:9f:4b:b1:6d:2c:df:9d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 30 13:23:09 2025 GMT Not After : Oct 28 13:23:09 2025 GMT Subject: CN=a64a2fe2-b07f-4f6b-82f3-c899c5a2844e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:ec:91:11:fe:18:de:4b:12:62:28:82:02: c0:52:26:4f:3e:aa:a5:bb:02:f6:59:3a:37:0b:65: ec:ab:55:74:ac:97:e0:af:72:d0:d8:fa:df:07:d1: e0:ca:3f:7a:d2:9f:b2:0e:b2:6a:89:f1:d6:6d:97: 77:60:3a:af:08:9b:08:90:43:52:dd:a8:84:33:c2: b8:9e:e9:11:ac:52:39:89:44:0d:fa:a6:15:83:93: 13:e2:68:10:7f:6d:26:fc:28:a3:1e:9c:71:60:e9: 7d:06:be:98:88:f4:81:7f:07:65:07:86:de:38:c4: 26:db:31:3c:de:cb:d2:b4:12:34:eb:51:dc:33:29: d7:92:15:d9:24:b5:03:ff:3b:ca:ae:91:0f:66:49: 63:f7:71:83:34:11:3d:44:09:63:c0:ae:ea:68:75: a2:7f:79:fc:99:7a:48:09:6b:de:f0:89:d7:20:71: b4:8a:0c:a4:42:3a:83:22:83:8b:c9:fc:96:19:22: 0d:de:16:08:eb:43:16:30:d1:bf:80:74:20:3f:53: 85:0d:ac:d6:6b:18:ff:47:12:4c:ed:b5:11:d4:0e: 2e:b9:b9:02:0e:59:11:ca:39:c5:62:3f:73:1a:dd: 78:96:df:e1:fd:a1:74:81:74:87:f5:81:4d:d0:b2: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:39:1B:C2:9F:5C:0E:63:24:A4:ED:92:72:CA:13:A5:6F:E4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb5b64c8-f76b-39d5-a6df-1a4c4a1ca618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.60.0/22 216.132.156.0/22 216.132.236.0/22 216.132.244.0/22 216.132.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ae:c1:cf:fd:3c:07:f2:17:81:45:b5:ac:44:3d:20:f6:53: d2:b8:b4:70:03:49:59:e3:94:03:b1:6e:da:59:37:43:d5:56: 30:9a:ec:31:7f:b1:cc:4f:14:e7:2d:71:9b:98:82:d5:4b:d6: 6d:ef:7c:c4:88:18:01:7a:92:47:e5:81:e1:85:4e:b5:a4:a8: a9:f0:d0:74:97:4d:ce:52:d6:ea:85:93:6a:3a:90:33:b2:07: ee:b7:68:b1:12:cd:db:b2:6f:d9:b4:0d:3e:1b:20:14:cf:aa: e1:7f:1e:80:6d:eb:60:d0:20:52:11:1a:f1:8f:10:66:f4:e2: 63:6b:85:a5:63:93:ca:1f:94:93:7a:81:c3:0c:07:e7:d0:b6: 9c:fc:72:c0:74:41:60:1d:76:ce:12:de:12:f2:aa:fd:df:bc: dc:e6:46:df:67:bf:b4:12:58:aa:0c:4c:36:61:ef:58:75:7d: 35:9e:b0:e9:63:f8:3a:81:07:8b:eb:bb:d8:1e:6d:78:e9:85: 7e:2f:5c:ea:f1:51:00:c0:ad:96:c4:7d:20:9f:bf:45:85:1f: ff:1c:09:a0:89:69:c3:55:af:92:84:6c:b4:aa:04:d6:97:1d: 91:cb:d9:82:5a:95:55:3b:1a:5b:ee:0f:e2:f7:71:14:ee:39: 7c:c9:02:60 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEqwxpSfS7FtLN+dnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDczMDEzMjMwOVoXDTI1MTAyODEzMjMwOVowLzEtMCsGA1UEAxMk YTY0YTJmZTItYjA3Zi00ZjZiLTgyZjMtYzg5OWM1YTI4NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG/skRH+GN5LEmIoggLAUiZPPqqluwL2WTo3 C2Xsq1V0rJfgr3LQ2PrfB9Hgyj960p+yDrJqifHWbZd3YDqvCJsIkENS3aiEM8K4 nukRrFI5iUQN+qYVg5MT4mgQf20m/CijHpxxYOl9Br6YiPSBfwdlB4beOMQm2zE8 3svStBI061HcMynXkhXZJLUD/zvKrpEPZklj93GDNBE9RAljwK7qaHWif3n8mXpI CWve8InXIHG0igykQjqDIoOLyfyWGSIN3hYI60MWMNG/gHQgP1OFDazWaxj/RxJM 7bUR1A4uubkCDlkRyjnFYj9zGt14lt/h/aF0gXSH9YFN0LIZqQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFE9tORvCn1wOYySk7ZJyyhOlb+TzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmI1YjY0YzgtZjc2Yi0z OWQ1LWE2ZGYtMWE0YzRhMWNhNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCQv08AwQC 2IScAwQC2ITsAwQC2IT0AwQC2IT8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMSuwc/9PAfyF4FFtaxEPSD2 U9K4tHADSVnjlAOxbtpZN0PVVjCa7DF/scxPFOctcZuYgtVL1m3vfMSIGAF6kkfl geGFTrWkqKnw0HSXTc5S1uqFk2o6kDOyB+63aLESzduyb9m0DT4bIBTPquF/HoBt 62DQIFIRGvGPEGb04mNrhaVjk8oflJN6gcMMB+fQtpz8csB0QWAdds4S3hLyqv3f vNzmRt9nv7QSWKoMTDZh71h1fTWesOlj+DqBB4vru9gebXjphX4vXOrxUQDArZbE fSCfv0WFH/8cCaCJacNVr5KEbLSqBNaXHZHL2YJalVU7GlvuD+L3cRTuOXzJAmA= -----END CERTIFICATE-----Generated at Sat Aug 9 22:43:03 2025 by rpki-client