$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa File: 09ef4b44-ba95-30f1-91ff-60c41204628c.roa (raw, json) Hash identifier: pFIINCEADZfeBjbusD3faWDLyCTvkgveKZohny2CwT4= Subject key identifier: 97:0A:AF:86:26:96:BC:FB:88:22:08:0A:38:32:39:62:B4:85:71:38 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584AA85BA7556414F1B40E64AF80 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 13917 IP address blocks: 66.206.160.0/20 maxlen: 20 66.206.175.0/24 maxlen: 24 2606:f000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a7:55:64:14:f1:b4:0e:64:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=226788a8-3807-4cad-89ba-38ae9a8501a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:7a:4b:19:6e:54:32:63:4a:39:a6:ed:39: 0e:36:76:e0:d5:07:1a:bd:1e:a2:21:16:3a:a2:91: 2d:18:39:f3:ee:01:9e:b5:fb:2f:bb:13:e3:82:14: 6b:fc:57:30:fe:c7:b0:49:b6:58:de:72:63:dd:44: 90:d3:5c:32:51:01:de:c8:c2:e0:88:9f:17:b8:b6: 4d:2a:a6:c2:9e:ec:7c:b1:4c:36:5b:84:4d:06:99: 44:27:6d:54:5d:73:d0:e8:4e:24:17:10:e5:65:d2: d4:75:73:a4:a9:25:ca:c8:9a:2f:02:d5:d5:a2:5d: 8f:ad:9e:a0:b3:f9:11:f3:f6:c1:2c:e1:73:fd:d3: b4:ef:59:a2:5a:64:be:86:54:b9:5a:e0:4b:fb:89: 56:2c:e7:d4:9b:df:4f:38:73:99:ee:ea:3b:d2:14: 65:eb:7c:22:c2:d4:a1:06:6c:23:e3:f4:5a:15:21: 6e:ec:66:39:69:36:9e:60:3f:23:2b:ca:87:76:fc: 32:0d:12:b2:2c:37:a9:13:dd:d1:be:0b:b3:5e:77: 9b:e0:fb:e7:c1:89:33:ce:63:7a:fe:1f:18:68:92: e0:a0:82:f9:37:d0:27:d3:f1:ac:67:55:01:23:9c: 7f:15:d8:72:1f:40:ec:32:86:f0:b9:43:dc:b8:7b: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0A:AF:86:26:96:BC:FB:88:22:08:0A:38:32:39:62:B4:85:71:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.160.0/20 IPv6: 2606:f000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1a:b5:db:1f:27:eb:5a:09:e9:d6:c8:0c:af:34:f5:46:a0: da:7a:cd:73:d2:69:dc:4d:87:97:a7:31:74:2a:8e:62:c2:5e: f6:a4:98:23:53:cc:39:2f:b0:c9:86:5f:0f:be:3f:81:0c:ea: 7d:e2:6d:74:75:1d:af:bb:e7:79:82:e2:46:a1:53:85:93:bb: 67:91:01:12:58:37:95:a1:09:d9:f9:64:5a:e6:d3:c0:7b:3c: d3:23:e1:17:d1:ad:53:c1:34:32:e5:11:62:85:0b:4c:eb:79: 05:86:14:91:0a:50:2b:7f:eb:21:62:13:0c:e7:2a:01:5a:76: b7:d1:a2:0e:63:ed:ce:90:c0:0e:2b:78:7f:05:d4:d3:2c:b2: 23:8b:df:e4:2e:99:fb:f2:bc:3f:d8:2a:ca:a8:8f:5c:04:42: d8:d5:02:77:0c:8a:51:a0:70:04:e3:f4:54:df:78:8e:bb:57: f7:f1:c6:c1:f2:d1:39:f2:14:56:d0:5e:df:c4:7c:98:e7:01: 52:12:2a:7e:8e:5b:67:b5:ae:95:21:d3:d8:28:8e:95:ce:7b: 75:10:07:d7:36:02:fb:d4:e9:5b:35:15:1e:0b:db:cc:c2:3c: ec:a9:27:e6:ea:42:de:48:f5:df:98:ef:33:77:c6:7e:6c:77: 03:cf:20:2d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqoW6dVZBTxtA5kr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MjI2Nzg4YTgtMzgwNy00Y2FkLTg5YmEtMzhhZTlhODUwMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJ6SxluVDJjSjmm7TkONnbg1QcavR6iIRY6 opEtGDnz7gGetfsvuxPjghRr/Fcw/sewSbZY3nJj3USQ01wyUQHeyMLgiJ8XuLZN KqbCnux8sUw2W4RNBplEJ21UXXPQ6E4kFxDlZdLUdXOkqSXKyJovAtXVol2PrZ6g s/kR8/bBLOFz/dO071miWmS+hlS5WuBL+4lWLOfUm99POHOZ7uo70hRl63wiwtSh Bmwj4/RaFSFu7GY5aTaeYD8jK8qHdvwyDRKyLDepE93RvguzXneb4PvnwYkzzmN6 /h8YaJLgoIL5N9An0/GsZ1UBI5x/FdhyH0DsMobwuUPcuHteFQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJcKr4Ymlrz7iCIICjgyOWK0hXE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvMDllZjRiNDQtYmE5NS0z MGYxLTkxZmYtNjBjNDEyMDQ2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQs6gMA0E AgACMAcDBQAmBvAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC8atdsfJ+taCenWyAyvNPVGoNp6zXPSadxN h5enMXQqjmLCXvakmCNTzDkvsMmGXw++P4EM6n3ibXR1Ha+753mC4kahU4WTu2eR ARJYN5WhCdn5ZFrm08B7PNMj4RfRrVPBNDLlEWKFC0zreQWGFJEKUCt/6yFiEwzn KgFadrfRog5j7c6QwA4reH8F1NMssiOL3+QumfvyvD/YKsqoj1wEQtjVAncMilGg cATj9FTfeI67V/fxxsHy0TnyFFbQXt/EfJjnAVISKn6OW2e1rpUh09gojpXOe3UQ B9c2AvvU6Vs1FR4L28zCPOypJ+bqQt5I9d+Y7zN3xn5sdwPPIC0= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:13 2025 by rpki-client