$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa File: 5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa (raw, json) Hash identifier: AMjmSj9xzokPnlZRA9ym/KpgaSQCCDoIMUBlY/qVPgQ= Subject key identifier: C1:24:92:6D:E0:89:1F:3C:83:DD:D3:EA:89:22:71:A3:C0:02:08:23 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B6631F1FBF263CC44CA176C00 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 32035 IP address blocks: 66.43.92.0/24 maxlen: 24 66.43.96.0/23 maxlen: 24 66.43.98.0/24 maxlen: 24 66.43.101.0/24 maxlen: 24 66.43.105.0/24 maxlen: 24 66.43.106.0/24 maxlen: 24 66.43.108.0/24 maxlen: 24 66.43.110.0/24 maxlen: 24 66.43.112.0/21 maxlen: 24 69.28.96.0/19 maxlen: 24 69.168.192.0/19 maxlen: 24 69.170.160.0/19 maxlen: 24 74.85.0.0/19 maxlen: 24 207.232.80.0/20 maxlen: 24 209.141.64.0/19 maxlen: 24 209.141.96.0/20 maxlen: 24 2607:f778::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f1:fb:f2:63:cc:44:ca:17:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=3e351cd4-ac0b-4611-a408-757cf93a6e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:f7:0d:fd:14:9d:2b:ba:db:62:b5:e1:10: b2:a6:ad:69:a4:77:42:54:3f:6d:ad:7b:5d:90:39: 55:e1:fd:3c:01:2e:6e:81:19:15:1d:23:9f:3a:ff: 55:63:25:a4:93:a3:9b:03:08:0c:fa:f7:21:50:4e: 9e:81:8c:70:33:58:1e:8c:ab:f9:e1:2d:be:33:07: 44:44:d3:16:73:8f:b4:6a:5d:35:a6:28:f3:3d:a2: 43:47:ae:38:67:80:e6:9c:77:eb:cb:da:b2:4c:11: 0c:2a:4e:e1:b0:f3:19:2a:9c:93:8d:18:ea:45:08: ce:a9:77:3c:dc:c0:84:5f:e6:fa:bd:c2:38:65:c9: 88:05:15:b8:58:57:2e:b9:05:f1:2d:c3:c6:04:1b: b6:ee:e0:73:21:e0:6c:de:7d:79:c1:b5:bd:30:26: 08:47:23:88:e5:07:91:2f:57:c7:67:65:50:61:99: 06:ee:8f:e4:4f:00:16:ca:e5:2e:49:6b:e0:21:51: aa:82:06:ac:88:b4:b9:1e:2d:fe:72:61:dd:f0:f5: f4:2e:d3:ad:e3:ed:3e:14:fa:73:a4:a9:76:c6:ac: 45:49:27:49:58:77:c6:f8:da:45:e5:c4:6b:9c:3a: 1f:a9:63:08:7d:04:ed:1c:e2:8c:3d:f0:f5:c9:23: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:92:6D:E0:89:1F:3C:83:DD:D3:EA:89:22:71:A3:C0:02:08:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 66.43.92.0/24 66.43.96.0-66.43.98.255 66.43.101.0/24 66.43.105.0-66.43.106.255 66.43.108.0/24 66.43.110.0/24 66.43.112.0/21 69.28.96.0/19 69.168.192.0/19 69.170.160.0/19 74.85.0.0/19 207.232.80.0/20 209.141.64.0-209.141.111.255 IPv6: 2607:f778::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ed:0e:3c:bb:95:29:60:c0:51:ce:c8:4a:dc:82:ae:59:a8: f7:55:72:43:cf:59:05:e3:27:7c:98:df:8b:1c:da:7e:bd:c9: 06:ed:72:1c:9a:51:d9:b9:c3:0b:e5:46:c5:9f:8e:ca:0e:48: a7:05:b5:7a:d0:f4:2f:be:17:bf:2b:cb:f4:df:6e:37:d7:6d: f5:32:87:03:ef:58:1d:27:49:0f:b6:f4:b7:48:a6:60:13:f9: 29:b2:f4:3d:54:95:e4:41:e3:82:ec:79:82:cd:af:df:be:83: 62:ff:b7:15:60:8b:d1:de:aa:98:ed:2f:8a:06:e3:80:28:84: 17:63:1a:fc:16:eb:85:23:82:38:9e:2e:bb:ab:d4:09:a5:9a: 27:4f:f5:f4:f0:32:ea:bc:cc:2c:26:c1:35:98:7a:ed:5a:85: a4:30:97:03:ea:23:bd:02:0f:ed:3f:c8:1c:24:c7:ee:39:44: ed:19:6b:ad:8b:4a:67:3a:2a:46:43:f9:e3:0b:fc:ac:db:30: e0:c7:3c:d8:96:ca:1f:2e:80:19:73:09:47:03:3a:27:2c:49: 69:a0:20:53:ae:9a:7d:30:aa:af:51:aa:08:5c:e2:f3:66:54: fb:0c:30:1e:25:28:45:18:24:70:d6:87:68:54:d2:83:56:be: c4:5e:63:5c -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEtmMfH78mPMRMoXbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk M2UzNTFjZDQtYWMwYi00NjExLWE0MDgtNzU3Y2Y5M2E2ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRP3Df0UnSu622K14RCypq1ppHdCVD9trXtd kDlV4f08AS5ugRkVHSOfOv9VYyWkk6ObAwgM+vchUE6egYxwM1gejKv54S2+MwdE RNMWc4+0al01pijzPaJDR644Z4DmnHfry9qyTBEMKk7hsPMZKpyTjRjqRQjOqXc8 3MCEX+b6vcI4ZcmIBRW4WFcuuQXxLcPGBBu27uBzIeBs3n15wbW9MCYIRyOI5QeR L1fHZ2VQYZkG7o/kTwAWyuUuSWvgIVGqggasiLS5Hi3+cmHd8PX0LtOt4+0+FPpz pKl2xqxFSSdJWHfG+NpF5cRrnDofqWMIfQTtHOKMPfD1ySMMGQIDAQABo4IDxTCC A8EwHQYDVR0OBBYEFMEkkm3giR88g93T6okicaPAAggjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNWIwMzZkYTEtN2FhZi0z MmI1LWFkNWMtNWNhZmY3MWM4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAEIrXDAM AwQFQitgAwQAQitiAwQAQitlMAwDBABCK2kDBABCK2oDBABCK2wDBABCK24DBANC K3ADBAVFHGADBAVFqMADBAVFqqADBAVKVQADBATP6FAwDAMEBtGNQAMEBNGNYDAN BAIAAjAHAwUAJgf3eDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB67Q48u5UpYMBRzshK3IKuWaj3VXJDz1kF 4yd8mN+LHNp+vckG7XIcmlHZucML5UbFn47KDkinBbV60PQvvhe/K8v032431231 MocD71gdJ0kPtvS3SKZgE/kpsvQ9VJXkQeOC7HmCza/fvoNi/7cVYIvR3qqY7S+K BuOAKIQXYxr8FuuFI4I4ni67q9QJpZonT/X08DLqvMwsJsE1mHrtWoWkMJcD6iO9 Ag/tP8gcJMfuOUTtGWuti0pnOipGQ/njC/ys2zDgxzzYlsofLoAZcwlHAzonLElp oCBTrpp9MKqvUaoIXOLzZlT7DDAeJShFGCRw1odoVNKDVr7EXmNc -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:07 2025 by rpki-client