$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa File: fb4848c2-e114-39bd-8562-08478f1b002d.roa (raw, json) Hash identifier: ssVZjvmGxsO3g9gDNK2hfaA3nSB1ICZ7oHcVcef/IRM= Subject key identifier: 4A:46:F2:DE:18:24:11:76:2C:58:BB:F0:D9:0C:1A:DD:D2:D7:A1:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBEEDE5BF42188D615649FF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 66.17.144.0/21 maxlen: 24 66.17.160.0/21 maxlen: 24 66.17.180.0/22 maxlen: 24 66.17.192.0/21 maxlen: 24 66.17.200.0/21 maxlen: 24 66.17.208.0/22 maxlen: 24 66.17.224.0/20 maxlen: 24 66.17.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:ed:e5:bf:42:18:8d:61:56:49:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=3c1d55b2-b9e7-4746-8c72-5a9d969363c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:aa:c9:79:2a:c3:3e:99:f6:0a:f0:8d:02: c3:f8:65:5a:08:08:d8:8e:41:87:b3:13:b2:87:82: b3:c2:4d:b3:0f:75:ff:44:ba:e4:03:07:c6:61:77: 44:1b:3e:f6:4e:94:07:94:c0:ca:18:eb:6e:47:bb: 45:5a:3f:00:25:43:14:d4:ab:e1:0f:e7:5b:80:81: ba:1c:81:41:e8:a3:4b:d2:ca:08:ac:3c:bc:4f:5d: d0:7c:09:6c:43:f1:89:55:21:2f:7d:e9:5e:e9:a5: 22:bb:89:01:82:8d:7b:df:04:c6:65:57:20:c8:3a: e6:b4:41:25:7f:83:93:dd:27:93:c9:4b:93:f9:2e: 66:dd:9e:df:35:7a:7b:4c:6e:4a:3e:57:f2:6c:34: 62:02:62:45:74:cc:41:f4:80:d5:aa:c3:6c:e0:78: de:1e:9a:e6:78:f4:d2:c0:42:28:5e:e0:ae:34:2c: 1a:f4:88:81:3a:33:f5:de:85:ed:84:e8:37:7d:77: b6:76:1b:67:34:b4:0e:ca:06:70:8d:92:53:56:da: fe:e6:64:b0:76:05:4b:09:71:8a:71:c2:01:b8:a6: c2:7b:c2:63:49:4a:48:e9:fc:ef:90:22:e2:28:ee: 28:d3:48:a4:31:88:f4:d8:08:91:af:67:8f:73:d7: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:46:F2:DE:18:24:11:76:2C:58:BB:F0:D9:0C:1A:DD:D2:D7:A1:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb4848c2-e114-39bd-8562-08478f1b002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.17.144.0/21 66.17.160.0/21 66.17.180.0/22 66.17.192.0-66.17.211.255 66.17.224.0-66.17.247.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1d:31:4c:25:7e:f7:e6:d8:11:2e:4f:1a:a1:64:87:b3:a3: 2f:1b:59:ef:37:97:75:0f:c6:8c:20:71:d7:b9:89:07:d0:94: bc:d3:83:ea:93:aa:b1:81:d4:ea:74:e1:ff:91:54:87:d7:f0: 94:a7:a5:10:2a:be:75:6c:3f:b6:e4:25:0a:6c:b6:93:11:e5: 23:fa:b2:99:2e:8d:c2:df:12:73:52:13:1c:d3:8e:34:50:89: e5:fc:99:24:42:dd:4a:05:73:5d:48:ec:9b:3c:43:96:08:11: 65:12:68:5b:29:db:89:a2:d2:05:f8:f2:d3:43:f9:96:5c:ee: 7c:cc:d7:f2:56:7d:50:da:9c:f3:a0:36:ff:6c:a1:56:ba:ed: 7c:06:3f:8f:85:45:fa:d9:1f:66:68:66:1c:4a:86:6a:fc:1a: fe:c9:69:cf:22:5f:d1:98:ac:e6:28:9e:9d:27:62:ef:b0:e3: d7:ff:2c:f8:00:b6:33:a5:0d:1d:18:5d:41:59:fb:82:b0:28: ae:3d:7f:83:57:19:62:29:ff:d8:46:4f:39:79:6e:f4:bd:09: bd:46:8d:4b:0c:69:00:ff:1b:19:75:e0:e3:7e:80:4d:ff:ff: 33:94:03:39:d5:86:45:8f:94:77:13:cf:79:35:30:92:41:f0: 57:50:d9:11 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEu+7eW/QhiNYVZJ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk M2MxZDU1YjItYjllNy00NzQ2LThjNzItNWE5ZDk2OTM2M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEaqyXkqwz6Z9grwjQLD+GVaCAjYjkGHsxOy h4Kzwk2zD3X/RLrkAwfGYXdEGz72TpQHlMDKGOtuR7tFWj8AJUMU1KvhD+dbgIG6 HIFB6KNL0soIrDy8T13QfAlsQ/GJVSEvfele6aUiu4kBgo173wTGZVcgyDrmtEEl f4OT3SeTyUuT+S5m3Z7fNXp7TG5KPlfybDRiAmJFdMxB9IDVqsNs4HjeHprmePTS wEIoXuCuNCwa9IiBOjP13oXthOg3fXe2dhtnNLQOygZwjZJTVtr+5mSwdgVLCXGK ccIBuKbCe8JjSUpI6fzvkCLiKO4o00ikMYj02AiRr2ePc9dg/wIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFEpG8t4YJBF2LFi78NkMGt3S16GkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmI0ODQ4YzItZTExNC0z OWJkLTg1NjItMDg0NzhmMWIwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQDQhGQAwQD QhGgAwQCQhG0MAwDBAZCEcADBAJCEdAwDAMEBUIR4AMEA0IR8DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBM HTFMJX735tgRLk8aoWSHs6MvG1nvN5d1D8aMIHHXuYkH0JS804Pqk6qxgdTqdOH/ kVSH1/CUp6UQKr51bD+25CUKbLaTEeUj+rKZLo3C3xJzUhMc0440UInl/JkkQt1K BXNdSOybPEOWCBFlEmhbKduJotIF+PLTQ/mWXO58zNfyVn1Q2pzzoDb/bKFWuu18 Bj+PhUX62R9maGYcSoZq/Br+yWnPIl/RmKzmKJ6dJ2LvsOPX/yz4ALYzpQ0dGF1B WfuCsCiuPX+DVxliKf/YRk85eW70vQm9Ro1LDGkA/xsZdeDjfoBN//8zlAM51YZF j5R3E895NTCSQfBXUNkR -----END CERTIFICATE-----Generated at Wed Nov 5 21:14:52 2025 by rpki-client