$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa File: 7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa (raw, json) Hash identifier: CIim2suZMPk5/vA84xP8Nb+raQdv+afwayMAtyuuoH0= Subject key identifier: C8:F2:58:2E:B0:B7:D5:FC:2A:B2:E6:EA:2C:99:4F:95:10:02:88:ED Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B23FFE7DCA92B450CA8000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 66.17.130.0/23 maxlen: 24 66.17.132.0/22 maxlen: 24 66.17.140.0/24 maxlen: 24 66.17.143.0/24 maxlen: 24 66.17.213.0/24 maxlen: 24 66.17.214.0/23 maxlen: 24 66.17.220.0/24 maxlen: 24 66.17.222.0/23 maxlen: 24 66.17.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3f:fe:7d:ca:92:b4:50:ca:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=d8eb1638-bd92-4932-af39-13002dc936d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:98:40:4d:46:08:be:cf:5f:07:57:b1:59:0a: 5b:84:9a:45:0f:91:8a:9a:0c:b7:eb:66:ce:74:9f: 4c:b5:32:97:d1:7a:95:82:c7:72:90:69:bf:2a:03: dc:0c:52:ba:03:64:94:2f:21:81:a7:3e:ac:4d:7f: 51:fd:d8:c4:65:74:e7:78:dc:d9:26:7a:00:0d:ad: 86:f9:08:a3:8b:de:4b:52:63:39:3f:88:a1:82:51: 11:ba:6f:09:76:da:62:09:47:90:34:76:42:59:4d: 93:0d:7e:de:ff:d1:12:95:7a:77:87:cd:28:1c:3f: 69:2e:26:44:66:f3:a8:ae:25:da:81:2f:4c:3f:ab: cc:a7:b7:1b:f1:f8:72:85:6f:4b:a5:f0:4e:23:be: c1:71:12:56:24:78:53:d6:e5:f9:be:39:67:3f:03: d7:ff:b7:05:ee:20:55:6d:b0:79:e9:5e:ad:77:c4: a2:b4:b4:ee:12:19:a5:7e:67:a9:7e:f0:3f:67:9d: c3:60:7a:9f:69:29:b7:91:67:8f:58:4a:4c:00:22: 8d:49:57:2e:5e:7b:40:5e:7d:9e:ba:84:95:9b:32: e0:24:6b:28:6e:9b:53:34:ed:45:2f:d4:f0:ea:e8: b3:47:20:db:81:3e:2a:48:a3:ea:96:f3:62:b3:7a: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:58:2E:B0:B7:D5:FC:2A:B2:E6:EA:2C:99:4F:95:10:02:88:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.17.130.0-66.17.135.255 66.17.140.0/24 66.17.143.0/24 66.17.213.0-66.17.215.255 66.17.220.0/24 66.17.222.0/23 66.17.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a2:01:eb:1a:24:6d:b6:2e:1d:57:e6:c4:5f:c1:4e:6b:81: 79:5f:59:52:82:7a:69:51:28:4d:c8:6b:68:f7:0f:98:4c:c4: 3b:1e:f8:68:9a:b1:46:b5:f8:88:8a:17:14:43:36:2f:80:d8: bc:36:38:06:e7:20:cb:d1:bd:82:90:fe:48:cc:8f:a0:cb:1f: 4a:b4:e0:57:59:13:bd:54:50:61:bc:d5:bc:fc:a9:f5:2a:0d: 77:c1:ec:bf:e3:13:be:a6:3a:2c:17:d5:12:3d:bd:3f:4f:8a: f4:2b:da:6a:f9:3e:06:10:b4:1f:3a:15:65:49:84:90:3e:dd: b1:69:76:3e:1c:fa:42:af:60:94:9d:a6:56:c9:1a:42:15:5d: 19:b1:a4:83:e4:e2:63:b5:ab:83:78:b6:8b:66:bf:44:37:a1: dc:ae:09:7b:0b:3c:b4:b3:32:f0:db:d5:81:8a:c9:49:78:4b: 36:bc:23:6a:50:77:cf:3e:6e:b0:1c:f1:a3:02:df:b2:2b:3b: 1c:bc:46:5a:28:79:27:2e:61:b2:39:4f:38:36:e5:f7:41:eb: 79:b4:95:05:2c:d9:a6:58:f8:f5:92:6a:25:c4:ae:f9:65:7b: 2e:4e:12:f9:19:af:02:fe:cc:4a:14:cd:6a:07:73:12:65:57: b0:0f:6f:c6 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEuHsj/+fcqStFDKgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZDhlYjE2MzgtYmQ5Mi00OTMyLWFmMzktMTMwMDJkYzkzNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJhATUYIvs9fB1exWQpbhJpFD5GKmgy362bO dJ9MtTKX0XqVgsdykGm/KgPcDFK6A2SULyGBpz6sTX9R/djEZXTneNzZJnoADa2G +Qiji95LUmM5P4ihglERum8JdtpiCUeQNHZCWU2TDX7e/9ESlXp3h80oHD9pLiZE ZvOoriXagS9MP6vMp7cb8fhyhW9LpfBOI77BcRJWJHhT1uX5vjlnPwPX/7cF7iBV bbB56V6td8SitLTuEhmlfmepfvA/Z53DYHqfaSm3kWePWEpMACKNSVcuXntAXn2e uoSVmzLgJGsobptTNO1FL9Tw6uizRyDbgT4qSKPqlvNis3oSvwIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFMjyWC6wt9X8KrLm6iyZT5UQAojtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2FhZGJiZWEtMGY1NC0z MGQ3LTg2YTktYTI5OTk1M2NkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAFCEYID BANCEYADBABCEYwDBABCEY8wDAMEAEIR1QMEA0IR0AMEAEIR3AMEAUIR3gMEAUIR /DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBMogHrGiRtti4dV+bEX8FOa4F5X1lSgnppUShNyGto9w+YTMQ7 HvhomrFGtfiIihcUQzYvgNi8NjgG5yDL0b2CkP5IzI+gyx9KtOBXWRO9VFBhvNW8 /Kn1Kg13wey/4xO+pjosF9USPb0/T4r0K9pq+T4GELQfOhVlSYSQPt2xaXY+HPpC r2CUnaZWyRpCFV0ZsaSD5OJjtauDeLaLZr9EN6Hcrgl7Czy0szLw29WBislJeEs2 vCNqUHfPPm6wHPGjAt+yKzscvEZaKHknLmGyOU84NuX3Qet5tJUFLNmmWPj1kmol xK75ZXsuThL5Ga8C/sxKFM1qB3MSZVewD2/G -----END CERTIFICATE-----Generated at Sun Oct 19 22:40:06 2025 by rpki-client