$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa File: fb4848c2-e114-39bd-8562-08478f1b002d.roa (raw, json) Hash identifier: Lr73ghLXssP5ZyWTRCu+jj8PkwEldfTsdeHGQlBrhc0= Subject key identifier: 4B:98:B3:56:CA:AC:24:FE:FA:4F:4D:FF:EF:51:50:20:D6:C3:74:42 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F6231790F23CF63A5AC440 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 199527 IP address blocks: 66.17.144.0/21 maxlen: 24 66.17.160.0/21 maxlen: 24 66.17.168.0/22 maxlen: 24 66.17.176.0/22 maxlen: 24 66.17.180.0/22 maxlen: 24 66.17.192.0/21 maxlen: 24 66.17.200.0/21 maxlen: 24 66.17.208.0/22 maxlen: 24 66.17.216.0/22 maxlen: 24 66.17.224.0/20 maxlen: 24 66.17.240.0/21 maxlen: 24 66.17.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:23:17:90:f2:3c:f6:3a:5a:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=5b747b0c-ccca-4c29-88c7-dbe45fdc99d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:1c:cb:04:11:10:7b:27:2f:4e:89:ee:b7: e3:89:ff:0b:40:70:1b:e0:7c:85:69:35:35:fa:6f: 2b:b8:e7:74:bd:17:0e:55:f2:d7:46:81:0f:5f:65: 9b:ae:e8:7a:5c:a0:3d:5e:73:28:d6:b2:03:3f:e9: 86:be:d5:ac:26:5c:84:f1:7f:d3:a9:c5:56:26:21: c1:45:a0:5e:e4:76:02:45:60:e8:17:74:cf:ac:b7: ef:c6:80:9b:58:90:54:29:8b:68:fc:5f:26:f9:99: 56:ed:53:d2:89:a7:9a:2f:c6:53:fd:86:28:49:72: ab:37:68:29:f9:2d:46:6b:2b:57:73:3d:32:54:9f: 23:85:0b:77:83:01:d6:b8:3a:84:3f:be:82:d7:a6: 15:af:59:f6:99:f0:0f:25:16:00:d9:cb:98:24:bc: 08:e3:4c:2e:ec:01:7b:7a:7d:45:a9:47:9a:9f:eb: 04:f3:fd:39:49:06:e8:d0:93:03:92:4d:b5:1d:20: a8:2b:ea:16:87:63:01:72:99:2f:ff:2d:41:a5:c2: 54:29:f2:62:ea:9b:cc:1f:1c:11:6b:88:fc:7c:70: 26:5a:0e:93:a4:83:d9:a5:d3:dc:4d:b6:c2:ac:8a: fd:23:60:50:6b:cd:fe:55:22:59:bf:b7:26:b8:75: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:98:B3:56:CA:AC:24:FE:FA:4F:4D:FF:EF:51:50:20:D6:C3:74:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.17.144.0/21 66.17.160.0-66.17.171.255 66.17.176.0/21 66.17.192.0-66.17.211.255 66.17.216.0/22 66.17.224.0-66.17.251.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d9:4b:af:c2:32:13:cd:9c:42:b7:b7:c3:06:4f:3a:dd:e1: 07:2d:ce:4a:b8:13:d2:62:e3:45:75:77:a7:0b:69:e0:4a:89: 37:4e:72:ba:be:c4:2d:fc:5f:7f:a2:36:e0:c4:38:7d:12:c3: 39:d0:65:53:48:b0:db:aa:64:10:6b:0d:c7:d6:1d:b9:bd:22: fc:f4:0c:df:63:e1:63:84:58:2f:d3:e4:80:ef:29:d3:b7:30: a3:17:09:a8:ff:ce:50:99:0b:17:6b:24:02:2e:4f:6d:79:22: 40:c8:1d:3e:71:9c:b8:05:2e:a8:5b:12:bc:30:68:cb:2c:1a: d0:49:01:14:ea:bf:a0:64:20:71:c1:06:36:95:1b:08:78:e9: 5f:fc:0c:dd:29:81:60:e9:bf:c5:ad:7b:e2:41:b3:ec:85:c4: 7d:43:c2:c4:57:fd:c5:ba:98:05:ec:4c:0c:72:a7:b9:2f:24: 29:fa:cb:8b:46:b2:89:39:d7:08:aa:12:51:b0:42:0b:e4:d6: 41:f6:28:25:f8:31:24:c7:74:22:78:9a:14:18:16:07:6e:d0: 20:00:e9:ac:86:ed:6e:1e:15:d9:21:26:ff:16:23:1d:28:e3: a9:35:ec:89:94:37:4f:df:06:00:2a:9f:9b:34:ba:48:36:4f: 3b:8a:75:89 -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWEqm9iMXkPI89jpaxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NWI3NDdiMGMtY2NjYS00YzI5LTg4YzctZGJlNDVmZGM5OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlwcywQREHsnL06J7rfjif8LQHAb4HyFaTU1 +m8ruOd0vRcOVfLXRoEPX2Wbruh6XKA9XnMo1rIDP+mGvtWsJlyE8X/TqcVWJiHB RaBe5HYCRWDoF3TPrLfvxoCbWJBUKYto/F8m+ZlW7VPSiaeaL8ZT/YYoSXKrN2gp +S1GaytXcz0yVJ8jhQt3gwHWuDqEP76C16YVr1n2mfAPJRYA2cuYJLwI40wu7AF7 en1FqUean+sE8/05SQbo0JMDkk21HSCoK+oWh2MBcpkv/y1BpcJUKfJi6pvMHxwR a4j8fHAmWg6TpIPZpdPcTbbCrIr9I2BQa83+VSJZv7cmuHWepQIDAQABo4IDizCC A4cwHQYDVR0OBBYEFEuYs1bKrCT++k9N/+9RUCDWw3RCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmI0ODQ4YzItZTExNC0z OWJkLTg1NjItMDg0NzhmMWIwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDQhGQMAwD BAVCEaADBAJCEagDBANCEbAwDAMEBkIRwAMEAkIR0AMEAkIR2DAMAwQFQhHgAwQC QhH4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB7ZS6/CMhPNnEK3t8MGTzrd4Qctzkq4E9Ji40V1d6cLaeBK iTdOcrq+xC38X3+iNuDEOH0SwznQZVNIsNuqZBBrDcfWHbm9Ivz0DN9j4WOEWC/T 5IDvKdO3MKMXCaj/zlCZCxdrJAIuT215IkDIHT5xnLgFLqhbErwwaMssGtBJARTq v6BkIHHBBjaVGwh46V/8DN0pgWDpv8Wte+JBs+yFxH1DwsRX/cW6mAXsTAxyp7kv JCn6y4tGsok51wiqElGwQgvk1kH2KCX4MSTHdCJ4mhQYFgdu0CAA6ayG7W4eFdkh Jv8WIx0o46k17ImUN0/fBgAqn5s0ukg2TzuKdYk= -----END CERTIFICATE-----Generated at Sun Aug 10 04:29:49 2025 by rpki-client