$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa File: bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa (raw, json) Hash identifier: k7ufDYloJWZaczTF3idtn9cUKa+CLxfUIOeVbo2kYUw= Subject key identifier: D8:DB:35:07:D8:85:14:E4:DA:E1:3E:8A:CC:92:49:97:F5:10:C9:5A Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A7BB0B632CC2185772972F500 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 1239 IP address blocks: 66.90.81.0/24 maxlen: 24 198.16.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b6:32:cc:21:85:77:29:72:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=bed7cb84-782a-4e74-ac4e-3d8fc95b8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:e6:e5:8f:9c:7e:96:1b:c1:91:c0:37:35: 23:52:ac:21:ff:ac:08:58:43:df:82:dc:1e:85:0b: 67:89:c6:6c:80:48:53:a9:45:9b:47:52:39:35:2c: 49:b4:e9:1b:f1:a3:94:06:e7:ee:c2:06:3a:8f:85: b5:69:ba:25:41:8a:68:fa:0b:e5:32:d2:15:f8:d5: 55:a6:1b:8b:16:73:4b:24:ba:39:ef:af:fd:01:9f: 6f:9f:c1:62:11:2f:d3:b9:ec:59:98:f1:d1:ca:b1: c1:66:64:29:62:c6:f9:e6:5b:9b:71:12:76:0b:ee: 6c:23:7f:97:0e:22:b0:c3:fd:90:94:8e:95:db:93: e1:c1:c9:b9:29:95:f0:dc:23:7a:0e:17:9f:fc:fe: 7a:56:86:28:f1:9b:29:f7:10:44:15:34:0b:d7:a2: 41:dc:24:b1:24:33:1a:7a:ae:3a:a4:f5:e4:95:82: 99:08:8a:d3:fe:04:0c:b9:4b:ed:04:3e:47:c1:47: d2:bc:ae:35:c7:53:81:39:92:9b:13:a8:b2:40:03: e0:ce:13:ff:e4:c1:61:2c:25:9b:0f:74:91:96:ee: 3f:ff:97:af:79:f0:01:05:42:0f:c9:74:06:e5:f3: d7:eb:7f:34:35:7f:f6:b9:94:b1:dc:09:42:10:44: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DB:35:07:D8:85:14:E4:DA:E1:3E:8A:CC:92:49:97:F5:10:C9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.81.0/24 198.16.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:8f:2f:d1:0c:e7:db:50:33:07:e8:7a:03:03:46:bf:22:d5: c3:f0:4d:f8:d5:ca:9a:74:79:c6:66:78:95:75:6c:9a:ca:38: d2:b2:ab:21:d4:4f:18:d1:e3:0c:fe:4d:76:b3:8b:30:11:83: 66:df:53:69:95:f6:6d:23:c6:56:0f:00:9c:cd:5f:d6:1d:83: 7b:3e:59:a6:49:da:3c:15:bb:6f:ab:dd:9a:ed:6b:e7:4a:6d: f8:04:c6:b5:14:15:18:0e:1b:a3:cf:72:bd:e0:20:53:04:88: 39:e4:7f:56:3a:9a:62:49:69:40:87:0d:17:44:bb:99:95:17: 27:54:6a:62:59:05:bd:e2:80:2a:26:5f:e3:c4:f6:af:78:56: 14:10:fc:cc:45:68:de:fb:40:71:d5:4a:91:5a:b9:73:8f:d2: f0:ca:47:e7:0d:c4:8e:3f:3c:9c:7d:f8:ba:fd:cb:a3:fc:1c: f4:78:96:5f:c9:a8:0f:ff:3e:f8:87:91:50:e0:57:2c:2e:c8: b7:0f:64:d7:90:41:f8:78:27:4e:5e:75:26:93:50:56:eb:61: 6d:dd:51:1c:37:8b:24:f0:49:de:17:ee:01:f9:fa:1b:ae:3b: 5f:13:14:52:75:d5:78:34:35:d5:e0:3b:24:df:97:41:d7:98: 3f:8c:f4:82 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEp7sLYyzCGFdyly9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk YmVkN2NiODQtNzgyYS00ZTc0LWFjNGUtM2Q4ZmM5NWI4NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsonm5Y+cfpYbwZHANzUjUqwh/6wIWEPfgtwe hQtnicZsgEhTqUWbR1I5NSxJtOkb8aOUBufuwgY6j4W1abolQYpo+gvlMtIV+NVV phuLFnNLJLo576/9AZ9vn8FiES/TuexZmPHRyrHBZmQpYsb55lubcRJ2C+5sI3+X DiKww/2QlI6V25Phwcm5KZXw3CN6Dhef/P56VoYo8Zsp9xBEFTQL16JB3CSxJDMa eq46pPXklYKZCIrT/gQMuUvtBD5HwUfSvK41x1OBOZKbE6iyQAPgzhP/5MFhLCWb D3SRlu4//5evefABBUIPyXQG5fPX6380NX/2uZSx3AlCEEQW1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNjbNQfYhRTk2uE+isySSZf1EMlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmJmYTk4ZDctYzA1YS0z MGQ3LWIxMzEtZDVhY2VhYWFmZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQlpRAwQB xhBuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALiPL9EM59tQMwfoegMDRr8i1cPwTfjVypp0ecZmeJV1bJrK ONKyqyHUTxjR4wz+TXazizARg2bfU2mV9m0jxlYPAJzNX9Ydg3s+WaZJ2jwVu2+r 3Zrta+dKbfgExrUUFRgOG6PPcr3gIFMEiDnkf1Y6mmJJaUCHDRdEu5mVFydUamJZ Bb3igComX+PE9q94VhQQ/MxFaN77QHHVSpFauXOP0vDKR+cNxI4/PJx9+Lr9y6P8 HPR4ll/JqA//PviHkVDgVywuyLcPZNeQQfh4J05edSaTUFbrYW3dURw3iyTwSd4X 7gH5+huuO18TFFJ11Xg0NdXgOyTfl0HXmD+M9II= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:00 2025 by rpki-client