$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa File: 5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa (raw, json) Hash identifier: 61iOHrCYNLLIh/nMB/KQiqytp6SfTN3uBZ1WiCzT2Z0= Subject key identifier: 83:F4:D0:8C:8F:35:F7:CD:90:60:C5:4D:A7:51:BB:10:88:BD:A7:C7 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A8575F44D3C72695D3DC09660 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 32035 IP address blocks: 66.43.92.0/24 maxlen: 24 66.43.96.0/23 maxlen: 24 66.43.98.0/24 maxlen: 24 66.43.101.0/24 maxlen: 24 66.43.105.0/24 maxlen: 24 66.43.106.0/24 maxlen: 24 66.43.108.0/24 maxlen: 24 66.43.110.0/24 maxlen: 24 66.43.112.0/21 maxlen: 24 69.28.96.0/19 maxlen: 24 69.168.192.0/19 maxlen: 24 69.170.160.0/19 maxlen: 24 74.85.0.0/19 maxlen: 24 207.232.80.0/20 maxlen: 24 209.141.64.0/19 maxlen: 24 209.141.96.0/20 maxlen: 24 2607:f778::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f4:4d:3c:72:69:5d:3d:c0:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=91959b62-2680-49cc-9ccf-929d3d59c1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:86:65:2d:af:73:01:05:f7:a0:a0:31:a7: ee:86:2d:36:64:e4:9a:ec:61:6d:3b:36:57:f3:2e: 36:a8:98:86:c7:ab:69:06:3a:4e:83:68:b8:2c:28: 70:64:d4:c1:c5:68:ae:d1:5e:9c:35:9d:98:ce:45: 46:70:22:96:52:58:3d:df:83:6c:ae:c1:a5:76:2a: 94:c3:f4:3c:08:46:f0:c8:69:1f:8c:1f:fd:c6:b5: 46:55:fe:ef:ba:e8:d2:e6:c5:13:d9:b1:7c:68:45: e6:68:4f:06:27:c0:e5:c2:1c:0b:17:a6:53:53:87: 80:c3:c1:4e:52:65:b1:a5:72:d6:77:1f:fc:34:f1: 90:00:f9:50:98:8c:2e:07:b9:01:c0:ca:b9:2f:df: 16:63:99:6d:aa:fc:70:f3:7e:a3:e7:43:b3:44:8b: d3:91:39:94:7c:6f:d8:98:60:f6:ce:2c:47:53:af: 87:c5:24:eb:db:a5:60:11:91:18:3b:4c:3f:0c:ef: f6:1d:b5:0f:a7:9d:5d:ac:c5:ed:38:40:58:11:3c: ce:ad:ec:25:11:ef:5d:ff:7f:8a:ef:d7:76:b8:70: c8:8e:58:51:f7:77:2e:34:48:20:1b:dd:81:9c:54: ca:7b:ce:b8:1d:c3:f8:5a:f7:82:6a:1c:27:a6:24: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:D0:8C:8F:35:F7:CD:90:60:C5:4D:A7:51:BB:10:88:BD:A7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 66.43.92.0/24 66.43.96.0-66.43.98.255 66.43.101.0/24 66.43.105.0-66.43.106.255 66.43.108.0/24 66.43.110.0/24 66.43.112.0/21 69.28.96.0/19 69.168.192.0/19 69.170.160.0/19 74.85.0.0/19 207.232.80.0/20 209.141.64.0-209.141.111.255 IPv6: 2607:f778::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:46:92:96:4c:12:f1:eb:88:40:fb:be:64:10:fe:02:73:87: 04:db:a7:62:41:4b:ae:df:42:c8:78:99:b2:51:81:d9:a2:87: f5:e4:25:94:16:c3:bb:dd:3a:7d:14:69:93:09:25:09:8c:e1: 0a:1c:7a:75:aa:60:6e:b5:a6:bc:df:d1:57:23:74:78:83:07: d1:3c:42:4d:20:12:62:c4:b9:01:96:79:ac:ef:57:ca:a0:0b: 26:b2:05:10:7e:73:16:62:b3:6a:26:cb:0a:84:c5:2a:a5:ca: 58:8a:73:0a:cd:bd:b6:08:48:51:9b:bd:15:6f:8c:d9:26:22: 34:27:46:be:5c:5e:d6:b4:35:57:d2:4f:bf:2d:c7:4a:e2:6f: 16:23:70:c0:ec:67:56:45:21:45:3f:0e:3d:d4:42:3a:7c:82: 5f:e5:8f:f9:b9:50:2f:6d:6e:5c:27:99:98:ad:5c:5f:04:53: 43:fe:99:e8:10:45:aa:89:01:fe:71:f6:3c:cc:c4:69:8c:c5: b3:5f:cb:9a:d2:b9:6f:c6:45:f9:7a:de:9f:7e:f2:14:cb:2d: 8d:2f:21:d3:df:5b:b0:ce:98:1c:8d:53:fc:8a:a8:88:0d:9d: 17:21:f5:17:2f:a8:d2:5b:8a:1c:28:cf:63:f9:66:a0:10:dc: 0a:71:e4:96 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEqFdfRNPHJpXT3AlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk OTE5NTliNjItMjY4MC00OWNjLTljY2YtOTI5ZDNkNTljMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI+GZS2vcwEF96CgMafuhi02ZOSa7GFtOzZX 8y42qJiGx6tpBjpOg2i4LChwZNTBxWiu0V6cNZ2YzkVGcCKWUlg934NsrsGldiqU w/Q8CEbwyGkfjB/9xrVGVf7vuujS5sUT2bF8aEXmaE8GJ8DlwhwLF6ZTU4eAw8FO UmWxpXLWdx/8NPGQAPlQmIwuB7kBwMq5L98WY5ltqvxw836j50OzRIvTkTmUfG/Y mGD2zixHU6+HxSTr26VgEZEYO0w/DO/2HbUPp51drMXtOEBYETzOrewlEe9d/3+K 79d2uHDIjlhR93cuNEggG92BnFTKe864HcP4WveCahwnpiQycQIDAQABo4IDxTCC A8EwHQYDVR0OBBYEFIP00IyPNffNkGDFTadRuxCIvafHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNWIwMzZkYTEtN2FhZi0z MmI1LWFkNWMtNWNhZmY3MWM4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAEIrXDAM AwQFQitgAwQAQitiAwQAQitlMAwDBABCK2kDBABCK2oDBABCK2wDBABCK24DBANC K3ADBAVFHGADBAVFqMADBAVFqqADBAVKVQADBATP6FAwDAMEBtGNQAMEBNGNYDAN BAIAAjAHAwUAJgf3eDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVRpKWTBLx64hA+75kEP4Cc4cE26diQUuu 30LIeJmyUYHZoof15CWUFsO73Tp9FGmTCSUJjOEKHHp1qmButaa839FXI3R4gwfR PEJNIBJixLkBlnms71fKoAsmsgUQfnMWYrNqJssKhMUqpcpYinMKzb22CEhRm70V b4zZJiI0J0a+XF7WtDVX0k+/LcdK4m8WI3DA7GdWRSFFPw491EI6fIJf5Y/5uVAv bW5cJ5mYrVxfBFND/pnoEEWqiQH+cfY8zMRpjMWzX8ua0rlvxkX5et6ffvIUyy2N LyHT31uwzpgcjVP8iqiIDZ0XIfUXL6jSW4ocKM9j+WagENwKceSW -----END CERTIFICATE-----Generated at Sun Jul 27 00:36:27 2025 by rpki-client