$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa File: 225c70bf-4322-3691-bda9-5b4b15a20e82.roa (raw, json) Hash identifier: JcC5dJrwglnUMlCCRd0QaeyDQszISUW06i/KCphKPYw= Subject key identifier: D1:2D:45:EA:56:08:85:BD:61:31:A0:63:77:73:B1:00:27:73:4C:93 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F432858493C09274A419B045899EABEC0 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 36103 IP address blocks: 23.88.160.0/20 maxlen: 20 64.77.208.0/23 maxlen: 23 68.70.232.0/22 maxlen: 22 68.70.236.0/24 maxlen: 24 68.70.247.0/24 maxlen: 24 68.70.253.0/24 maxlen: 24 68.70.254.0/24 maxlen: 24 74.50.216.0/21 maxlen: 21 97.75.224.0/23 maxlen: 23 198.135.172.0/22 maxlen: 22 204.225.16.0/20 maxlen: 20 208.101.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:27:4a:41:9b:04:58:99:ea:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=9a56ed0e-f63e-4c2c-9757-34aeb718f050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a3:0d:4b:b2:6d:ac:3e:a5:2d:01:f8:7c:9e: 8a:e7:21:c0:0c:b9:3c:01:20:bf:d2:36:1a:a5:26: a4:be:df:97:07:6b:b7:96:40:70:91:02:df:53:c5: 2e:81:9d:a2:f6:00:6c:94:09:6b:ad:9d:97:28:7b: e7:27:7d:88:c5:85:dc:84:a4:fe:24:3b:4a:84:e5: 8f:c8:d0:22:af:88:0a:e1:6e:4a:59:c9:c0:ba:dc: 49:12:d0:f8:0e:dc:36:63:7f:fc:1c:1e:4f:86:a2: d5:eb:e3:ba:02:08:6d:36:75:e2:33:7f:ef:ce:ad: a5:d4:95:ba:6d:5f:a8:46:f5:43:f5:67:41:b9:29: 37:80:aa:1f:d9:88:c9:6e:42:af:71:e0:b6:29:06: b4:3a:11:1a:93:8f:94:84:28:c3:8f:f9:92:4b:9e: b4:66:a6:8e:d1:f5:4a:c1:6a:26:72:5c:5b:65:96: ae:d7:32:bb:a2:7f:64:8b:9f:dc:61:d3:c7:97:e4: 02:ee:e2:56:3e:b6:d5:0f:ee:f5:b2:7b:e7:6f:49: fd:a2:08:f9:63:6e:eb:f6:07:8a:d6:98:ef:94:04: ab:84:5e:80:17:6b:8c:87:49:c3:f8:85:b0:02:c5: 1d:3f:63:c0:ad:56:51:25:b1:be:33:73:e0:14:f8: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2D:45:EA:56:08:85:BD:61:31:A0:63:77:73:B1:00:27:73:4C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 23.88.160.0/20 64.77.208.0/23 68.70.232.0-68.70.236.255 68.70.247.0/24 68.70.253.0-68.70.254.255 74.50.216.0/21 97.75.224.0/23 198.135.172.0/22 204.225.16.0/20 208.101.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d0:77:78:64:0b:a9:20:bf:46:d0:85:32:3d:01:f4:62:8e: fe:02:1e:79:38:c4:f6:45:4e:52:77:1a:f9:c0:f8:16:da:4a: 0a:ed:a8:a1:b1:ae:31:c2:6d:41:72:88:24:e3:c6:91:ba:62: 66:52:86:79:1b:b4:cd:cc:a9:ac:2a:bb:65:17:4b:fb:af:37: 10:7b:b6:97:a4:4b:d2:ef:60:8a:2f:57:30:56:e9:db:c2:a6: 6b:66:92:7a:8a:dd:d4:e0:78:90:71:5c:66:4f:30:a3:5a:3f: 12:8a:17:d1:2f:40:9c:c8:d5:bc:64:bb:32:87:8a:44:cb:84: 8b:2f:ac:eb:08:cd:b2:bf:03:eb:a5:cd:6f:d3:c2:5f:8a:b8: b0:ec:14:7d:0d:0f:08:f9:57:42:25:7f:4f:11:35:68:6c:ad: 0f:1d:a5:f6:2b:c2:61:03:f5:86:01:9b:42:23:4e:78:a1:21: e8:78:f8:04:7d:d5:60:44:bf:3d:20:aa:b0:b5:5a:29:39:32: 31:12:a1:8c:35:26:94:cb:42:5a:06:79:13:7e:4b:07:8c:67: a3:2a:5e:93:77:f0:18:5c:3b:e9:cc:8e:8c:9b:2a:3e:67:87: 82:6a:a5:97:49:c9:41:29:33:10:86:4f:5a:22:ed:59:e8:c1: 6f:23:41:48 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUAQ0Mn0MoWEk8CSdKQZsEWJnqvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OWE1NmVkMGUtZjYzZS00YzJjLTk3NTctMzRhZWI3MThmMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaMNS7JtrD6lLQH4fJ6K5yHADLk8ASC/0jYa pSakvt+XB2u3lkBwkQLfU8UugZ2i9gBslAlrrZ2XKHvnJ32IxYXchKT+JDtKhOWP yNAir4gK4W5KWcnAutxJEtD4Dtw2Y3/8HB5PhqLV6+O6AghtNnXiM3/vzq2l1JW6 bV+oRvVD9WdBuSk3gKof2YjJbkKvceC2KQa0OhEak4+UhCjDj/mSS560ZqaO0fVK wWomclxbZZau1zK7on9ki5/cYdPHl+QC7uJWPrbVD+71snvnb0n9ogj5Y27r9geK 1pjvlASrhF6AF2uMh0nD+IWwAsUdP2PArVZRJbG+M3PgFPiA9QIDAQABo4IDmzCC A5cwHQYDVR0OBBYEFNEtRepWCIW9YTGgY3dzsQAnc0yTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvMjI1YzcwYmYtNDMyMi0z NjkxLWJkYTktNWI0YjE1YTIwZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQEF1igAwQB QE3QMAwDBANERugDBABERuwDBABERvcwDAMEAERG/QMEAERG/gMEA0oy2AMEAWFL 4AMEAsaHrAMEBMzhEAMEAdBl0jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw0Hd4ZAupIL9G0IUyPQH0Yo7+ Ah55OMT2RU5Sdxr5wPgW2koK7aihsa4xwm1Bcogk48aRumJmUoZ5G7TNzKmsKrtl F0v7rzcQe7aXpEvS72CKL1cwVunbwqZrZpJ6it3U4HiQcVxmTzCjWj8SihfRL0Cc yNW8ZLsyh4pEy4SLL6zrCM2yvwPrpc1v08Jfiriw7BR9DQ8I+VdCJX9PETVobK0P HaX2K8JhA/WGAZtCI054oSHoePgEfdVgRL89IKqwtVopOTIxEqGMNSaUy0JaBnkT fksHjGejKl6Td/AYXDvpzI6Mmyo+Z4eCaqWXSclBKTMQhk9aIu1Z6MFvI0FI -----END CERTIFICATE-----Generated at Mon May 12 10:26:00 2025 by rpki-client