$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa File: 7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa (raw, json) Hash identifier: /RPmpbg1W7hei15jl6GH56GpCihQZ+iC09547rB/yTM= Subject key identifier: 4F:6F:5F:19:43:87:08:75:C7:56:1A:F6:5C:92:03:28:45:01:C3:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB189101C0E21D3BB76C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa Signing time: Wed 07 May 2025 15:15:07 +0000 ROA not before: Wed 07 May 2025 15:15:07 +0000 ROA not after: Tue 05 Aug 2025 15:15:07 +0000 asID: 199527 IP address blocks: 66.17.130.0/23 maxlen: 24 66.17.132.0/22 maxlen: 24 66.17.140.0/24 maxlen: 24 66.17.143.0/24 maxlen: 24 66.17.213.0/24 maxlen: 24 66.17.214.0/23 maxlen: 24 66.17.220.0/24 maxlen: 24 66.17.222.0/23 maxlen: 24 66.17.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b1:89:10:1c:0e:21:d3:bb:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:07 2025 GMT Not After : Aug 5 15:15:07 2025 GMT Subject: CN=1dcf2f91-e98e-4544-ac49-6fac8c143186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:a2:8b:30:af:6d:fa:d3:af:89:df:82:f0: 75:1f:8b:25:1d:44:4e:9e:8d:69:c2:bd:f4:28:6b: 7c:ff:33:bc:8b:d4:6f:40:7c:dc:eb:9f:37:3f:87: 9f:9c:1a:d4:83:98:16:cf:6c:45:c8:26:02:d2:3d: 25:0f:6c:bc:64:be:4e:c6:77:a2:b5:a9:00:6a:df: 16:10:cf:94:a3:02:70:3c:38:8a:1a:1e:b2:5a:20: 14:6f:a5:9e:9d:9d:99:7d:ed:b5:79:bc:f9:01:39: 6b:f5:a6:e1:66:43:b3:43:82:84:38:ab:d9:22:39: eb:39:3e:03:90:5d:0a:62:e3:f5:20:a9:55:cc:85: 6c:6e:2a:ea:03:7a:2d:02:d2:b0:03:ee:34:f6:03: 75:5f:da:2d:e5:69:a6:59:e7:14:bb:73:6a:05:e5: 6c:fe:76:3c:f9:f0:2f:1a:7f:9b:d9:ee:db:b7:55: 4a:88:11:2d:4c:10:c4:62:c7:5a:ca:fa:67:85:de: 04:d9:78:e2:6e:0f:19:a9:96:4d:be:e6:80:35:41: b2:16:ca:39:4c:64:f5:d2:78:0e:72:e3:b2:28:f3: 8e:12:a0:db:c2:4a:02:bd:f0:e4:a7:6a:83:43:45: a5:e0:99:dc:af:0c:92:66:03:7c:d1:23:c8:05:d4: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6F:5F:19:43:87:08:75:C7:56:1A:F6:5C:92:03:28:45:01:C3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.17.130.0-66.17.135.255 66.17.140.0/24 66.17.143.0/24 66.17.213.0-66.17.215.255 66.17.220.0/24 66.17.222.0/23 66.17.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:0d:a8:e7:38:f1:bd:9a:c2:fe:0d:fb:6a:e7:f8:89:4b:1b: 21:03:dc:7c:0b:2e:10:11:9f:51:8f:76:c3:3a:8d:39:b7:69: 12:5c:32:4a:62:74:8f:4f:c0:94:a9:26:e3:f9:d6:be:4b:cc: 39:0c:6f:d3:70:df:8a:9f:61:37:ae:47:82:94:07:e0:52:5f: 33:fa:4c:9f:21:2e:35:d5:1a:70:69:f1:c9:e1:52:33:88:0c: de:1f:b2:cd:88:ab:1b:be:a9:44:ad:d2:5d:ad:ac:db:f9:06: da:74:89:38:70:34:fb:86:1f:3f:9c:a1:30:a5:52:e6:d9:0a: d4:8b:4a:6f:26:31:c2:b1:99:0b:c0:ff:77:fd:68:bc:ff:cd: 79:db:c2:5c:1f:3b:4d:8b:6b:7d:c9:97:a6:61:58:9d:99:aa: 2b:98:05:1c:eb:1f:40:0d:29:c6:c4:84:de:9a:8f:8d:0b:41: 5e:04:9f:06:c0:fa:60:07:c2:9f:33:e4:05:cb:cf:91:db:d6: 51:15:99:c8:84:2e:1e:e8:92:3a:9b:41:54:0e:82:30:7c:07: 35:2b:a4:c5:91:51:a8:8f:90:0a:2c:4b:46:32:ac:07:a5:59: ff:bb:40:e9:fa:22:68:f9:ea:df:0d:0c:1a:13:eb:b8:cf:00: 82:fd:16:b8 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEnGfLGJEBwOIdO7dsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwN1oXDTI1MDgwNTE1MTUwN1owLzEtMCsGA1UEAxMk MWRjZjJmOTEtZTk4ZS00NTQ0LWFjNDktNmZhYzhjMTQzMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/KiizCvbfrTr4nfgvB1H4slHUROno1pwr30 KGt8/zO8i9RvQHzc6583P4efnBrUg5gWz2xFyCYC0j0lD2y8ZL5OxneitakAat8W EM+UowJwPDiKGh6yWiAUb6WenZ2Zfe21ebz5ATlr9abhZkOzQ4KEOKvZIjnrOT4D kF0KYuP1IKlVzIVsbirqA3otAtKwA+409gN1X9ot5WmmWecUu3NqBeVs/nY8+fAv Gn+b2e7bt1VKiBEtTBDEYsdayvpnhd4E2Xjibg8ZqZZNvuaANUGyFso5TGT10ngO cuOyKPOOEqDbwkoCvfDkp2qDQ0Wl4JncrwySZgN80SPIBdRnvwIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFE9vXxlDhwh1x1Ya9lySAyhFAcNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2FhZGJiZWEtMGY1NC0z MGQ3LTg2YTktYTI5OTk1M2NkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAFCEYID BANCEYADBABCEYwDBABCEY8wDAMEAEIR1QMEA0IR0AMEAEIR3AMEAUIR3gMEAUIR /DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBTDajnOPG9msL+Dftq5/iJSxshA9x8Cy4QEZ9Rj3bDOo05t2kS XDJKYnSPT8CUqSbj+da+S8w5DG/TcN+Kn2E3rkeClAfgUl8z+kyfIS411RpwafHJ 4VIziAzeH7LNiKsbvqlErdJdrazb+QbadIk4cDT7hh8/nKEwpVLm2QrUi0pvJjHC sZkLwP93/Wi8/81528JcHztNi2t9yZemYVidmaormAUc6x9ADSnGxITemo+NC0Fe BJ8GwPpgB8KfM+QFy8+R29ZRFZnIhC4e6JI6m0FUDoIwfAc1K6TFkVGoj5AKLEtG MqwHpVn/u0Dp+iJo+erfDQwaE+u4zwCC/Ra4 -----END CERTIFICATE-----Generated at Wed May 14 12:38:12 2025 by rpki-client