$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa File: 5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (raw, json) Hash identifier: m0Xu/knTG6cFW6jvG94k31BiV+GQmapBb2pNKKRwhnc= Subject key identifier: E6:37:5F:A0:35:34:56:8B:07:91:91:E1:BA:15:C9:1A:EB:C3:C0:A4 Certificate issuer: /CN=baff326b-1f24-468c-b9c6-fa089a461350 Certificate serial: 010D0C9F4328584A612B014A78E7710E7B977EBA Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 395776 IP address blocks: 107.163.0.0/19 maxlen: 24 107.163.32.0/19 maxlen: 24 107.163.64.0/19 maxlen: 24 192.155.160.0/20 maxlen: 24 192.186.0.0/18 maxlen: 24 192.250.192.0/22 maxlen: 24 192.250.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:01:4a:78:e7:71:0e:7b:97:7e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=a9de6dcb-d566-4068-b9a2-74e0aa9e7d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:89:bb:68:63:f6:16:62:7c:d3:f0:39:47:12: e6:25:f2:fc:d8:75:b5:5d:98:26:8f:69:eb:3d:f5: 2e:3b:2a:51:03:88:09:58:17:5f:3c:9e:ee:13:52: b8:81:4c:db:7a:fe:c6:4d:30:d4:63:58:bc:cc:a0: 4c:3d:1f:90:f4:e6:7b:d5:c4:45:a2:1c:e6:0b:74: 81:c2:4c:34:7f:44:bf:59:9f:49:31:dd:ca:d6:5f: 59:07:da:68:cf:45:06:fa:d4:f9:88:59:c9:14:8a: 84:8a:0e:e6:e5:ce:9d:29:56:13:95:1b:6c:2d:17: ba:db:4c:41:1f:5b:20:40:96:38:c2:00:82:0d:b2: a4:63:33:3a:4c:01:51:b5:2c:ae:29:85:da:5a:db: 83:c9:49:c2:40:ee:c5:12:b8:d9:61:5a:aa:f6:de: 33:ca:9e:f9:5e:d0:fb:88:21:48:51:d1:30:26:b4: da:88:9c:e0:d3:09:cb:63:0d:86:6f:66:9f:6a:9d: 85:43:85:a1:bb:c9:ff:02:53:12:11:49:ed:e7:81: 80:1e:a8:b4:d0:20:6c:ce:48:1b:7d:9b:28:c2:6f: 6f:a4:7b:2b:50:67:36:64:f8:eb:16:48:2c:a0:94: 49:c6:4c:bd:90:e8:7f:43:35:cf:c0:f1:4f:85:d6: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:5F:A0:35:34:56:8B:07:91:91:E1:BA:15:C9:1A:EB:C3:C0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl X509v3 Authority Key Identifier: keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer sbgp-ipAddrBlock: critical IPv4: 107.163.0.0-107.163.95.255 192.155.160.0/20 192.186.0.0/18 192.250.192.0/22 192.250.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5d:fd:96:83:2b:a3:1e:f2:92:62:4e:3c:34:a4:db:91:1f: f3:9a:21:d9:ba:2c:4e:b0:ec:8a:03:3b:71:e6:7e:63:55:fe: 66:5d:f9:1b:8e:b2:a2:72:5c:6c:16:99:a6:33:20:e7:2e:97: fc:03:20:fc:0a:07:8b:a0:3c:5c:3b:7f:20:de:47:91:f4:f3: 21:bc:94:90:d2:64:60:53:c8:84:a5:05:2e:67:a9:72:96:24: f4:96:54:6b:34:3e:fe:8b:c8:bc:cf:2d:59:83:e1:11:76:85: c2:3f:a0:3e:c5:f0:1d:5a:4a:fb:14:c6:3c:14:71:d0:f0:20: de:83:18:45:df:02:e8:aa:4f:ef:57:5d:ba:60:a1:9f:86:02: 27:60:39:11:69:b7:5b:2c:a8:0c:dc:81:dd:fc:1b:20:8f:11: 0c:d8:6d:f3:43:b8:21:eb:53:8d:e8:3b:1f:16:d4:6c:38:b4: a0:28:e8:3d:b6:4c:8a:6a:fb:8c:10:20:22:12:7f:66:99:32: 82:24:ef:d4:c4:fc:84:4a:34:9b:cf:40:54:9b:c6:a6:46:f7: 24:3c:43:aa:8a:71:9a:9f:5f:f1:85:97:73:d3:d4:db:86:2d: 14:63:bb:97:3d:ef:ce:cd:c2:7d:cc:85:53:6a:13:64:66:b7: c5:e9:d2:b8 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEphKwFKeOdxDnuXfrowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFmZjMyNmItMWYyNC00NjhjLWI5YzYtZmEwODlhNDYx MzUwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YTlkZTZkY2ItZDU2Ni00MDY4LWI5YTItNzRlMGFhOWU3ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64m7aGP2FmJ80/A5RxLmJfL82HW1XZgmj2nr PfUuOypRA4gJWBdfPJ7uE1K4gUzbev7GTTDUY1i8zKBMPR+Q9OZ71cRFohzmC3SB wkw0f0S/WZ9JMd3K1l9ZB9poz0UG+tT5iFnJFIqEig7m5c6dKVYTlRtsLRe620xB H1sgQJY4wgCCDbKkYzM6TAFRtSyuKYXaWtuDyUnCQO7FErjZYVqq9t4zyp75XtD7 iCFIUdEwJrTaiJzg0wnLYw2Gb2afap2FQ4Whu8n/AlMSEUnt54GAHqi00CBszkgb fZsowm9vpHsrUGc2ZPjrFkgsoJRJxky9kOh/QzXPwPFPhdaVPQIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFOY3X6A1NFaLB5GR4boVyRrrw8CkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWZm MzI2Yi0xZjI0LTQ2OGMtYjljNi1mYTA4OWE0NjEzNTAvNWM5NTExZWUtMTQwYS0z ZTE1LWFhNTctZDE4OWU3YWUwN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFmZjMyNmItMWYyNC00NjhjLWI5 YzYtZmEwODlhNDYxMzUwL2JhZmYzMjZiLTFmMjQtNDY4Yy1iOWM2LWZhMDg5YTQ2 MTM1MC5jcmwwHwYDVR0jBBgwFoAUBS2WIHdO/bxHLByhCY5bMV0c/DIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWZmMzI2Yi0xZjI0LTQ2OGMtYjljNi1mYTA4 OWE0NjEzNTAuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlMAsDAwBrowME BWujQAMEBMCboAMEBsC6AAMEAsD6wAMEA8D6yDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvXf2WgyujHvKS Yk48NKTbkR/zmiHZuixOsOyKAztx5n5jVf5mXfkbjrKiclxsFpmmMyDnLpf8AyD8 CgeLoDxcO38g3keR9PMhvJSQ0mRgU8iEpQUuZ6lyliT0llRrND7+i8i8zy1Zg+ER doXCP6A+xfAdWkr7FMY8FHHQ8CDegxhF3wLoqk/vV126YKGfhgInYDkRabdbLKgM 3IHd/BsgjxEM2G3zQ7gh61ON6DsfFtRsOLSgKOg9tkyKavuMECAiEn9mmTKCJO/U xPyESjSbz0BUm8amRvckPEOqinGan1/xhZdz09Tbhi0UY7uXPe/OzcJ9zIVTahNk ZrfF6dK4 -----END CERTIFICATE-----Generated at Wed Jul 2 10:56:56 2025 by rpki-client