$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa File: 5e890693-6aca-3d03-a030-fd3266100d15.roa (raw, json) Hash identifier: VIf2rj7+XlxSsF1xM+HIfUf3i9dka+cmF6A+5oQ+HrI= Subject key identifier: 59:B4:C7:68:BF:C6:1E:50:7C:99:89:AC:E3:B5:1A:CA:67:C2:FC:07 Certificate issuer: /CN=06bf1e4f-42a6-423f-8cc1-b96d41424679 Certificate serial: 010D0C9F4328584AA42B7A644E05DA6EA265E980 Authority key identifier: D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 19515 IP address blocks: 64.18.160.0/19 maxlen: 19 69.4.208.0/20 maxlen: 20 69.67.0.0/20 maxlen: 20 69.173.128.0/20 maxlen: 20 108.59.64.0/20 maxlen: 20 192.247.12.0/22 maxlen: 22 199.253.10.0/23 maxlen: 23 205.237.20.0/24 maxlen: 24 206.108.60.0/24 maxlen: 24 208.111.64.0/19 maxlen: 19 2605:c500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7a:64:4e:05:da:6e:a2:65:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06bf1e4f-42a6-423f-8cc1-b96d41424679 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=10e7aecb-f176-4be4-a834-50141f1e0a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:02:21:85:70:19:4b:8a:f0:27:3a:d8:8f: 6d:97:3c:78:ae:04:33:dd:ba:7d:2e:a0:80:a3:29: 6b:c1:ee:59:81:28:ed:44:95:2e:45:79:5d:1b:60: d2:09:4d:fa:3c:3b:7a:31:76:a5:ce:89:72:0f:6f: 6e:aa:cc:48:7b:41:40:72:09:69:bc:b0:de:45:78: 15:b1:48:49:39:fd:63:80:2e:3a:31:3f:48:46:d1: f4:aa:4c:60:29:a9:bd:3b:db:04:95:57:1e:80:1a: d2:85:78:ce:d1:9e:e9:b4:ec:d2:de:74:23:0a:00: bc:cc:83:7a:5b:ef:92:45:16:04:3d:7f:a0:7a:d7: 9e:af:e9:81:05:12:c2:b1:ab:93:87:f0:8f:74:aa: b5:42:9b:7e:bb:c0:03:b4:07:a5:2f:bd:27:c3:5b: e0:5a:2b:71:59:02:1e:98:3d:4b:53:57:46:59:36: 14:a2:cb:51:d6:57:b7:40:43:49:b8:4c:e0:69:44: 2c:d4:fe:97:8f:e0:ce:b0:ad:71:8b:c0:af:2c:46: 65:be:a4:fd:f9:89:ea:63:ee:f6:93:2b:b2:da:e9: 72:c1:da:d7:08:c1:5d:7a:28:8d:ab:e8:70:a8:96: 73:64:0f:f2:7a:d6:d1:20:10:77:81:5d:cd:62:76: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B4:C7:68:BF:C6:1E:50:7C:99:89:AC:E3:B5:1A:CA:67:C2:FC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl X509v3 Authority Key Identifier: keyid:D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer sbgp-ipAddrBlock: critical IPv4: 64.18.160.0/19 69.4.208.0/20 69.67.0.0/20 69.173.128.0/20 108.59.64.0/20 192.247.12.0/22 199.253.10.0/23 205.237.20.0/24 206.108.60.0/24 208.111.64.0/19 IPv6: 2605:c500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c6:76:db:fb:76:b2:6d:d9:c0:b1:49:26:95:9a:1b:c6:fe: 73:d3:14:5d:23:77:dd:ca:b1:fb:ea:d9:88:5d:c1:2e:ba:15: f5:e4:b0:ec:c2:09:1d:4d:b6:4a:5c:c2:a7:84:a4:1d:4f:e1: d0:ec:33:f3:23:8c:a1:51:08:6f:a5:d2:b8:57:ed:a4:c9:a2: d1:8f:a6:de:7a:61:0a:98:ed:c6:b3:25:7a:25:f8:18:f7:7b: e2:c2:44:3c:1f:17:3c:dd:1c:bd:51:96:82:bf:c0:3e:24:1d: 99:96:6e:b9:b3:4c:e4:a2:89:33:62:f7:55:9e:5d:de:9d:d4: e0:3e:ef:77:77:24:f9:5f:c7:74:76:a5:59:07:c8:2f:06:d4: 2b:e2:4d:cd:1f:df:9c:3a:21:3a:1d:f0:8c:78:78:de:7c:ac: 82:28:fa:f7:d1:91:09:0f:02:8b:8e:ee:77:1f:fe:bf:96:44: 85:91:d5:df:54:01:fd:b1:9a:a4:8b:40:2b:2d:75:8a:94:9c: 31:23:eb:63:40:14:9c:f6:5c:a3:72:de:44:c9:24:12:13:11: ed:4d:01:b0:fb:cd:41:10:23:e5:92:46:16:94:f2:b8:22:09: 51:34:90:b8:3e:00:dd:3f:1b:b7:0a:f4:da:fc:46:9d:e4:76: bd:99:94:7d -----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIUAQ0Mn0MoWEqkK3pkTgXabqJl6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZiZjFlNGYtNDJhNi00MjNmLThjYzEtYjk2ZDQxNDI0 Njc5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MTBlN2FlY2ItZjE3Ni00YmU0LWE4MzQtNTAxNDFmMWUwYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ICIYVwGUuK8Cc62I9tlzx4rgQz3bp9LqCA oylrwe5ZgSjtRJUuRXldG2DSCU36PDt6MXalzolyD29uqsxIe0FAcglpvLDeRXgV sUhJOf1jgC46MT9IRtH0qkxgKam9O9sElVcegBrShXjO0Z7ptOzS3nQjCgC8zIN6 W++SRRYEPX+geteer+mBBRLCsauTh/CPdKq1Qpt+u8ADtAelL70nw1vgWitxWQIe mD1LU1dGWTYUostR1le3QENJuEzgaUQs1P6Xj+DOsK1xi8CvLEZlvqT9+YnqY+72 kyuy2ulywdrXCMFdeiiNq+hwqJZzZA/yetbRIBB3gV3NYnbZpwIDAQABo4IDmjCC A5YwHQYDVR0OBBYEFFm0x2i/xh5QfJmJrOO1GspnwvwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNmJm MWU0Zi00MmE2LTQyM2YtOGNjMS1iOTZkNDE0MjQ2NzkvNWU4OTA2OTMtNmFjYS0z ZDAzLWEwMzAtZmQzMjY2MTAwZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDZiZjFlNGYtNDJhNi00MjNmLThj YzEtYjk2ZDQxNDI0Njc5LzA2YmYxZTRmLTQyYTYtNDIzZi04Y2MxLWI5NmQ0MTQy NDY3OS5jcmwwHwYDVR0jBBgwFoAU1hmpS4V43aoyTHJlRGEHIHwhrrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNmJmMWU0Zi00MmE2LTQyM2YtOGNjMS1iOTZk NDE0MjQ2NzkuY2VyMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQFQBKgAwQE RQTQAwQERUMAAwQERa2AAwQEbDtAAwQCwPcMAwQBx/0KAwQAze0UAwQAzmw8AwQF 0G9AMA0EAgACMAcDBQAmBcUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFrGdtv7drJt2cCxSSaVmhvG/nPT FF0jd93Ksfvq2YhdwS66FfXksOzCCR1NtkpcwqeEpB1P4dDsM/MjjKFRCG+l0rhX 7aTJotGPpt56YQqY7cazJXol+Bj3e+LCRDwfFzzdHL1RloK/wD4kHZmWbrmzTOSi iTNi91WeXd6d1OA+73d3JPlfx3R2pVkHyC8G1CviTc0f35w6ITod8Ix4eN58rIIo +vfRkQkPAouO7ncf/r+WRIWR1d9UAf2xmqSLQCstdYqUnDEj62NAFJz2XKNy3kTJ JBITEe1NAbD7zUEQI+WSRhaU8rgiCVE0kLg+AN0/G7cK9Nr8Rp3kdr2ZlH0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:24 2025 by rpki-client