$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa File: efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa (raw, json) Hash identifier: Cb5/sIqwEy6PgR/I0hEgDiQ55gP0o+8kF2QiGEjOeVY= Subject key identifier: 11:8A:AB:5F:9A:62:82:9D:A6:07:00:7B:B4:FB:B1:20:53:CE:E8:98 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB226D510275276C520C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa Signing time: Wed 07 May 2025 15:15:07 +0000 ROA not before: Wed 07 May 2025 15:15:07 +0000 ROA not after: Tue 05 Aug 2025 15:15:07 +0000 asID: 199527 IP address blocks: 66.227.64.0/22 maxlen: 24 66.227.72.0/22 maxlen: 24 66.227.77.0/24 maxlen: 24 66.227.78.0/23 maxlen: 24 66.227.88.0/22 maxlen: 24 66.227.92.0/23 maxlen: 24 66.227.95.0/24 maxlen: 24 66.227.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b2:26:d5:10:27:52:76:c5:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:07 2025 GMT Not After : Aug 5 15:15:07 2025 GMT Subject: CN=e27251f3-db63-45d0-be9a-45c441b10058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:94:57:4a:43:42:f8:81:48:15:d9:97:fd: 64:0d:73:81:77:d2:63:bc:e2:c8:ca:29:47:14:34: 2a:38:29:1e:92:7e:84:bb:73:0c:fd:f7:a2:42:d1: 12:6f:b2:c3:6d:70:39:63:00:e0:23:5f:38:10:48: 9a:10:b2:d9:6c:c5:3e:27:72:5b:08:cb:e9:6d:b7: 59:7b:25:79:94:05:e0:13:cf:4f:b6:9f:24:c1:23: 3e:df:53:99:ee:2d:d9:6a:87:2f:69:0d:32:9f:c6: 4b:31:1e:39:4b:09:be:fb:1d:e6:c6:5e:53:92:19: 1b:e7:5c:b8:b5:20:b5:c8:5a:fc:99:5d:cd:54:92: 97:d7:b9:e2:40:98:03:f5:6b:e2:10:dd:94:74:c6: 37:6b:e0:37:04:75:3d:4c:57:24:57:77:1a:f9:5d: 51:bd:56:c8:40:b7:22:e6:24:33:04:e5:67:f2:69: 16:35:f8:67:9a:75:63:80:43:5b:07:fa:cd:48:8d: 2f:ce:7a:b1:1c:04:bb:2e:a7:b2:36:68:39:d2:3e: 88:97:a9:95:f1:11:fa:bc:23:c6:93:33:3c:06:a5: e9:11:be:4b:84:98:d6:e0:54:38:93:66:18:6b:02: 97:08:ba:e0:9b:0a:ad:50:aa:21:77:90:49:cf:57: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:AB:5F:9A:62:82:9D:A6:07:00:7B:B4:FB:B1:20:53:CE:E8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.64.0/22 66.227.72.0/22 66.227.77.0-66.227.79.255 66.227.88.0-66.227.93.255 66.227.95.0/24 66.227.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b1:6d:04:62:58:aa:b2:5f:fc:1d:64:47:ec:17:53:0b:57: 88:89:69:a7:fe:d6:f5:ba:e3:1e:3c:5a:2a:74:18:10:14:e2: ed:28:58:dd:92:1a:27:56:eb:ba:64:b9:3b:29:ca:18:e9:32: 7e:e7:29:7f:63:ad:88:45:f2:d4:d8:04:02:32:60:6b:dc:ad: 9d:1d:12:61:7d:5d:15:3a:c4:c5:49:72:a3:fd:66:5f:7f:11: f1:67:1c:36:dc:ae:40:0d:7d:cb:89:ef:00:82:b0:38:a1:6d: fc:f8:2e:3b:95:d9:63:9e:30:88:a2:28:bb:0c:de:d8:7a:76: 5a:fc:01:d8:aa:83:1c:61:8f:11:92:6e:16:07:d7:f8:ba:98: 3a:67:78:ad:76:5c:56:7e:96:39:9a:1b:25:48:09:96:b0:e2: f2:42:58:cc:86:b5:2b:9c:f3:c5:3f:86:bf:20:60:c4:16:bc: 39:aa:34:6a:e0:6c:a9:f4:ab:d7:69:da:73:17:5c:77:fe:7d: 48:a5:78:32:d5:46:14:ee:fb:05:f5:5a:31:6b:48:31:19:17: 14:45:02:d8:51:30:c8:9c:ef:12:04:e6:2e:72:ef:d1:69:21: 5d:48:29:3f:9c:5d:3d:ed:9f:f0:12:ae:a3:a3:5c:4b:a9:0e: c4:88:8c:d3 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEnGfLIm1RAnUnbFIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwN1oXDTI1MDgwNTE1MTUwN1owLzEtMCsGA1UEAxMk ZTI3MjUxZjMtZGI2My00NWQwLWJlOWEtNDVjNDQxYjEwMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6UV0pDQviBSBXZl/1kDXOBd9JjvOLIyilH FDQqOCkekn6Eu3MM/feiQtESb7LDbXA5YwDgI184EEiaELLZbMU+J3JbCMvpbbdZ eyV5lAXgE89Ptp8kwSM+31OZ7i3ZaocvaQ0yn8ZLMR45Swm++x3mxl5Tkhkb51y4 tSC1yFr8mV3NVJKX17niQJgD9WviEN2UdMY3a+A3BHU9TFckV3ca+V1RvVbIQLci 5iQzBOVn8mkWNfhnmnVjgENbB/rNSI0vznqxHAS7LqeyNmg50j6Il6mV8RH6vCPG kzM8BqXpEb5LhJjW4FQ4k2YYawKXCLrgmwqtUKohd5BJz1eyUQIDAQABo4IDgzCC A38wHQYDVR0OBBYEFBGKq1+aYoKdpgcAe7T7sSBTzuiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWZiMjI2YzItMmQyOC0z YjljLWJmY2UtZjdkMGQzNTRmOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCQuNAAwQC QuNIMAwDBABC400DBARC40AwDAMEA0LjWAMEAULjXAMEAELjXwMEAELjbDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAWsW0EYliqsl/8HWRH7BdTC1eIiWmn/tb1uuMePFoqdBgQFOLtKFjdkhon Vuu6ZLk7KcoY6TJ+5yl/Y62IRfLU2AQCMmBr3K2dHRJhfV0VOsTFSXKj/WZffxHx Zxw23K5ADX3Lie8AgrA4oW38+C47ldljnjCIoii7DN7YenZa/AHYqoMcYY8Rkm4W B9f4upg6Z3itdlxWfpY5mhslSAmWsOLyQljMhrUrnPPFP4a/IGDEFrw5qjRq4Gyp 9KvXadpzF1x3/n1IpXgy1UYU7vsF9Voxa0gxGRcURQLYUTDInO8SBOYucu/RaSFd SCk/nF097Z/wEq6jo1xLqQ7EiIzT -----END CERTIFICATE-----Generated at Wed May 14 12:30:25 2025 by rpki-client