$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa File: 688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa (raw, json) Hash identifier: BrIluyfoMXxQeXm+mF5ioJ1CBD08tlTdnivE0PuZm3E= Subject key identifier: DC:D9:5F:40:B8:53:81:6F:0C:9C:AE:D3:F1:7D:35:D0:AB:89:FB:A7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1589DCE32CD47B121F78FDFC Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa Signing time: Thu 04 Sep 2025 15:37:27 +0000 ROA not before: Thu 04 Sep 2025 15:37:27 +0000 ROA not after: Wed 03 Dec 2025 16:37:27 +0000 asID: 21859 IP address blocks: 66.167.144.0/24 maxlen: 24 66.167.151.0/24 maxlen: 24 66.167.201.0/24 maxlen: 24 66.167.204.0/24 maxlen: 24 68.165.104.0/24 maxlen: 24 209.101.27.0/24 maxlen: 24 209.101.51.0/24 maxlen: 24 209.101.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:89:dc:e3:2c:d4:7b:12:1f:78:fd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 4 15:37:27 2025 GMT Not After : Dec 3 16:37:27 2025 GMT Subject: CN=9c845fc0-32a1-498f-816f-0cbe5c48991d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:66:50:9b:1c:88:0d:c9:4a:20:ad:b1:6e: 9e:4a:32:f6:b0:e8:ef:ee:99:82:f9:64:cb:d6:71: 1b:72:da:a8:aa:76:c3:42:55:55:64:1f:a4:5b:55: 76:fb:3a:63:8e:61:36:6b:92:b9:81:60:78:39:1c: e8:6d:c1:40:d8:9f:c7:3c:60:1c:3c:5f:2b:75:9b: b8:d7:d4:9e:4b:8e:06:dd:9d:5e:92:4e:21:52:85: 83:37:bf:50:c7:56:f3:56:7f:27:21:7a:9f:f7:01: b7:4f:41:cc:34:c2:09:8c:b2:04:d4:35:bb:a7:a8: f9:07:83:ff:13:a0:27:a4:bf:9d:32:c6:c9:ad:72: 31:7b:b4:99:4c:d0:8d:55:f5:0b:a5:b3:cb:64:59: a4:8b:af:b0:a6:ba:b9:d9:17:53:29:47:e6:61:b3: 02:87:e7:c9:9f:98:72:0b:d8:9d:5d:c4:c9:97:01: ec:b3:00:ea:f5:cb:7e:f7:c9:bb:bd:44:32:5c:0d: 8b:6f:db:e9:af:ef:77:12:54:27:fa:31:15:43:2e: 0c:53:22:38:cc:99:28:05:50:ae:6e:21:fe:43:2e: c1:8d:21:81:58:41:9e:58:af:9d:15:e7:2d:aa:f3: 7e:70:2c:25:ad:4b:59:ee:7c:d8:e0:0b:c0:20:65: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:5F:40:B8:53:81:6F:0C:9C:AE:D3:F1:7D:35:D0:AB:89:FB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.167.144.0/24 66.167.151.0/24 66.167.201.0/24 66.167.204.0/24 68.165.104.0/24 209.101.27.0/24 209.101.51.0/24 209.101.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1f:5d:d3:57:b2:8b:98:62:dc:f4:f5:c1:ad:a6:a5:62:7e: 58:62:ae:8a:40:cb:56:f9:16:0e:36:7b:d6:59:7d:66:a7:10: 8d:7e:68:58:c2:2c:c7:87:4e:47:f0:bc:64:64:11:c1:a2:d8: 8f:86:2a:ed:69:f3:11:11:43:1f:44:4b:79:56:a0:10:d3:55: d1:ff:53:45:97:a0:04:c3:2e:72:2e:f8:44:8d:eb:83:89:7c: 2f:26:45:bd:bc:1d:32:44:c3:c2:c3:9e:1b:a6:dd:70:dd:c8: 1e:00:7d:8b:3c:6b:0f:85:07:53:cb:d3:65:51:86:16:9a:6c: a5:e8:5b:8c:01:5b:45:57:27:91:80:f6:2b:4b:13:70:be:49: dc:83:40:ed:bf:fb:d9:27:26:ef:e2:98:2a:01:b3:46:6b:82: bd:15:c6:60:ac:d2:9b:6a:bc:14:66:22:3a:4c:55:a5:f1:9a: aa:34:5f:db:0b:ed:e7:26:7d:39:89:7e:1d:22:b8:e3:40:7f: 3c:dc:c7:c3:33:56:cd:e0:f5:5c:98:60:1d:f5:20:1f:56:91: e8:7c:84:cf:cb:08:f0:b0:f1:7e:90:7d:1c:a2:52:01:3b:58: 43:02:7c:e7:1e:8d:e7:fd:b7:a1:f7:75:ac:5c:f5:11:16:61: d1:4d:53:c9 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEsVidzjLNR7Eh94/fwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwNDE1MzcyN1oXDTI1MTIwMzE2MzcyN1owLzEtMCsGA1UEAxMk OWM4NDVmYzAtMzJhMS00OThmLTgxNmYtMGNiZTVjNDg5OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAFmUJsciA3JSiCtsW6eSjL2sOjv7pmC+WTL 1nEbctqoqnbDQlVVZB+kW1V2+zpjjmE2a5K5gWB4ORzobcFA2J/HPGAcPF8rdZu4 19SeS44G3Z1ekk4hUoWDN79Qx1bzVn8nIXqf9wG3T0HMNMIJjLIE1DW7p6j5B4P/ E6AnpL+dMsbJrXIxe7SZTNCNVfULpbPLZFmki6+wprq52RdTKUfmYbMCh+fJn5hy C9idXcTJlwHsswDq9ct+98m7vUQyXA2Lb9vpr+93ElQn+jEVQy4MUyI4zJkoBVCu biH+Qy7BjSGBWEGeWK+dFectqvN+cCwlrUtZ7nzY4AvAIGWl0QIDAQABo4IDfzCC A3swHQYDVR0OBBYEFNzZX0C4U4FvDJyu0/F9NdCrifunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg4ZTE3YjgtZWRkMS0z ZmI5LWIwOGUtZDFkNjU3YTQ0N2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAQqeQAwQA QqeXAwQAQqfJAwQAQqfMAwQARKVoAwQA0WUbAwQA0WUzAwQA0WU8MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIsfXdNXsouYYtz09cGtpqViflhiropAy1b5Fg42e9ZZfWanEI1+aFjCLMeHTkfw vGRkEcGi2I+GKu1p8xERQx9ES3lWoBDTVdH/U0WXoATDLnIu+ESN64OJfC8mRb28 HTJEw8LDnhum3XDdyB4AfYs8aw+FB1PL02VRhhaabKXoW4wBW0VXJ5GA9itLE3C+ SdyDQO2/+9knJu/imCoBs0Zrgr0VxmCs0ptqvBRmIjpMVaXxmqo0X9sL7ecmfTmJ fh0iuONAfzzcx8MzVs3g9VyYYB31IB9Wkeh8hM/LCPCw8X6QfRyiUgE7WEMCfOce jef9t6H3daxc9REWYdFNU8k= -----END CERTIFICATE-----Generated at Fri Sep 19 07:47:49 2025 by rpki-client