$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16f7f5de-e262-3754-8591-1984d9b209e9.roa File: 16f7f5de-e262-3754-8591-1984d9b209e9.roa (raw, json) Hash identifier: rC1jdi+ZUHrNXqWY/tgxesg+eOtVRV3YBGb7tjDJnLc= Subject key identifier: 76:A3:81:6A:89:6E:EB:A7:61:EA:4D:74:73:53:A3:BD:A0:98:C6:84 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE03212E25CE0B6303749BD20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16f7f5de-e262-3754-8591-1984d9b209e9.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 5065 IP address blocks: 66.253.10.0/24 maxlen: 24 66.253.11.0/24 maxlen: 24 66.253.12.0/24 maxlen: 24 66.253.13.0/24 maxlen: 24 66.253.14.0/24 maxlen: 24 66.253.15.0/24 maxlen: 24 66.253.16.0/24 maxlen: 24 66.253.17.0/24 maxlen: 24 66.253.18.0/24 maxlen: 24 66.253.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:12:e2:5c:e0:b6:30:37:49:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=bc74854d-5645-4e50-ad32-714fca0d62a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:4b:a1:9c:8a:1e:bb:a3:d8:db:b1:c9:c0: 87:ea:f0:30:d3:b5:a2:c1:18:4f:1f:c4:6b:c7:76: e1:86:46:61:88:31:42:40:16:e5:66:08:bc:86:08: 66:02:60:fb:36:f9:5e:29:6d:ac:a5:e7:68:03:80: 43:76:df:e0:63:ea:95:4b:f7:66:3d:0a:30:c0:06: ea:f9:d9:b4:f1:e4:9f:51:16:44:49:f1:7f:96:d7: aa:10:2e:88:db:a3:78:b9:c9:9d:0b:22:2c:f6:6f: 9d:c1:4a:5e:d8:46:f4:b2:15:2a:f4:90:41:6c:31: 5b:0b:1f:68:6b:64:65:ad:c6:41:f4:00:7d:37:3e: 30:ca:6c:0e:e4:ca:a7:1c:d3:b7:f6:75:02:2b:c5: 81:a6:11:ca:93:61:d9:35:a6:fa:9c:f4:27:a5:51: 05:32:06:05:bf:26:dc:4f:44:4f:c8:be:50:9e:f6: c0:b4:bc:2c:f3:a7:61:df:a4:a7:6b:9e:1f:51:4c: 91:44:41:b9:ea:b1:1e:dd:f4:b0:17:66:d6:19:cb: 90:9a:c2:42:ea:c2:a2:b6:33:2a:75:db:f4:d1:9d: fa:5c:56:0d:eb:41:9a:50:94:c1:0c:60:39:e9:40: 19:b6:d0:bd:04:8b:10:e6:df:b0:5d:f8:72:4e:13: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A3:81:6A:89:6E:EB:A7:61:EA:4D:74:73:53:A3:BD:A0:98:C6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16f7f5de-e262-3754-8591-1984d9b209e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.10.0-66.253.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e8:e4:fb:33:43:51:1b:a4:ca:49:ef:6a:1d:ae:14:31:c8: 74:3e:56:f5:39:32:e0:f7:65:36:51:25:f8:fe:4b:eb:04:a7: 85:07:b8:e3:1c:89:76:ce:28:63:5b:52:53:4c:47:e7:13:81: de:10:9a:e1:c7:d7:2a:3f:59:bb:1d:c5:7e:4c:53:27:69:e3: 9d:d1:46:70:05:ad:0a:19:c6:b8:79:0a:7c:c8:b1:f8:75:7c: 9b:f8:cc:cd:93:cc:ae:94:42:37:51:11:bb:4c:06:56:d4:94: c5:e6:b4:b4:48:f5:dd:f9:9b:4a:f5:67:35:d2:c4:75:be:f6: 71:71:1f:06:12:e2:15:59:21:fd:65:f1:56:48:4c:37:c8:b8: 98:52:85:6c:c0:ec:8c:1a:ac:d8:e7:1f:df:ab:e5:d1:f7:e7: 9a:26:7f:a2:4c:36:f3:b5:46:67:fa:4f:4a:23:40:d5:ef:b1: 4f:83:43:a6:93:51:da:bb:a8:d9:4d:e1:83:01:74:ae:5a:b0: 06:72:1a:a1:3e:7f:a1:00:09:40:85:43:9c:ad:df:ce:7f:e0: b7:9c:09:36:76:7f:90:7f:9f:f9:c6:d6:a7:3d:1c:46:d9:bd: 6f:21:b0:d7:4f:ed:7f:ba:ed:d7:e9:22:cb:e0:a4:27:e3:0d: 8e:a2:b0:26 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErgMhLiXOC2MDdJvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk YmM3NDg1NGQtNTY0NS00ZTUwLWFkMzItNzE0ZmNhMGQ2MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vVLoZyKHruj2NuxycCH6vAw07WiwRhPH8Rr x3bhhkZhiDFCQBblZgi8hghmAmD7NvleKW2spedoA4BDdt/gY+qVS/dmPQowwAbq +dm08eSfURZESfF/lteqEC6I26N4ucmdCyIs9m+dwUpe2Eb0shUq9JBBbDFbCx9o a2RlrcZB9AB9Nz4wymwO5MqnHNO39nUCK8WBphHKk2HZNab6nPQnpVEFMgYFvybc T0RPyL5QnvbAtLws86dh36Sna54fUUyRREG56rEe3fSwF2bWGcuQmsJC6sKitjMq ddv00Z36XFYN60GaUJTBDGA56UAZttC9BIsQ5t+wXfhyThNZuwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHajgWqJbuunYepNdHNTo72gmMaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTZmN2Y1ZGUtZTI2Mi0z NzU0LTg1OTEtMTk4NGQ5YjIwOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFC/QoD BAJC/RAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAAujk+zNDURukyknvah2uFDHIdD5W9Tky4PdlNlEl+P5L 6wSnhQe44xyJds4oY1tSU0xH5xOB3hCa4cfXKj9Zux3FfkxTJ2njndFGcAWtChnG uHkKfMix+HV8m/jMzZPMrpRCN1ERu0wGVtSUxea0tEj13fmbSvVnNdLEdb72cXEf BhLiFVkh/WXxVkhMN8i4mFKFbMDsjBqs2Ocf36vl0ffnmiZ/okw287VGZ/pPSiNA 1e+xT4NDppNR2ruo2U3hgwF0rlqwBnIaoT5/oQAJQIVDnK3fzn/gt5wJNnZ/kH+f +cbWpz0cRtm9byGw10/tf7rt1+kiy+CkJ+MNjqKwJg== -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:19 2025 by rpki-client