$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa File: 3e6eca20-984c-38bb-912e-539ca9ab80f4.roa (raw, json) Hash identifier: ri7c32Mj5rLFfoM0RI93qhm9K1oY4/llG0IKH4EboEE= Subject key identifier: EB:39:1C:76:48:A3:34:D6:E7:FC:6C:7B:35:E4:54:D3:F2:65:40:73 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584A4F05C7EDA4ACFC0CE017AB80 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 6621 IP address blocks: 72.168.0.0/19 maxlen: 19 72.168.80.0/21 maxlen: 21 72.168.87.0/24 maxlen: 24 72.168.88.0/21 maxlen: 21 72.168.94.0/24 maxlen: 24 72.168.95.0/24 maxlen: 24 72.168.96.0/19 maxlen: 19 72.168.96.0/21 maxlen: 21 72.168.128.0/22 maxlen: 22 72.168.132.0/22 maxlen: 22 72.168.136.0/22 maxlen: 22 72.168.140.0/22 maxlen: 22 72.168.142.0/23 maxlen: 23 72.168.144.0/22 maxlen: 22 72.168.148.0/22 maxlen: 22 72.168.152.0/22 maxlen: 22 72.168.156.0/22 maxlen: 22 72.168.160.0/22 maxlen: 22 72.168.164.0/22 maxlen: 22 72.168.168.0/22 maxlen: 22 72.168.172.0/22 maxlen: 22 72.168.176.0/22 maxlen: 22 72.168.180.0/22 maxlen: 22 72.168.184.0/22 maxlen: 22 72.168.188.0/22 maxlen: 22 72.168.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c7:ed:a4:ac:fc:0c:e0:17:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=56358a4a-b3cd-40ec-abc5-ea7d58b1dec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:30:71:29:6b:9c:97:d1:4f:93:dc:bc:70: 4d:61:65:55:d9:c5:ab:86:69:d6:59:a3:9c:bd:0f: 9c:c6:70:37:f8:dd:24:1c:19:b8:c0:4f:40:c4:47: 63:93:84:13:62:5f:bc:4d:68:48:d0:92:6d:d8:85: b1:60:64:18:1d:f8:79:23:63:6c:13:6b:e4:19:da: d3:8e:7e:10:f7:80:89:e2:b0:1b:f5:b2:b5:f7:c6: 1a:f1:d4:66:11:d5:0f:21:8a:a1:bc:29:23:4c:57: 9f:03:9e:1b:14:35:85:98:1a:da:e9:50:b7:0f:63: 63:48:65:0c:25:df:b5:f8:8d:14:14:e9:3b:37:1c: f1:06:82:ce:ac:9b:cb:8a:66:25:67:02:c7:3e:24: a7:e8:a6:4a:ba:56:40:a3:20:83:dc:cb:39:c3:0b: 00:f3:77:b6:af:77:a4:e6:5d:b8:42:c5:80:84:27: 34:d0:c7:6a:ef:e1:d0:e7:13:4e:fd:ad:f2:f7:1c: c8:9a:f0:3a:6c:58:c5:e3:cf:54:4d:7f:6d:9c:55: 66:32:90:92:03:3c:0f:2d:45:07:9e:e3:bc:e4:08: 4f:d4:0d:cd:90:b9:8a:8b:b9:35:e9:d8:42:2e:3b: c3:01:01:47:8a:d0:e6:17:01:84:a9:09:a1:47:7c: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:1C:76:48:A3:34:D6:E7:FC:6C:7B:35:E4:54:D3:F2:65:40:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.168.0.0/19 72.168.80.0-72.168.191.255 72.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f3:c5:36:59:3a:85:be:f6:a2:b5:fc:1e:d5:cd:66:eb:e1: 57:4a:49:2a:90:df:e8:a9:e6:9f:c2:b8:c6:dc:de:ba:7e:d4: 53:aa:a3:24:b1:8a:2a:13:de:dd:73:36:86:c0:ac:24:f4:4e: 17:bb:64:44:f4:08:88:be:2d:87:25:82:3a:ca:6c:35:ff:d7: 14:99:91:68:d8:e7:2f:70:8d:3a:5d:83:90:31:56:38:d3:af: 1c:98:b2:5a:f4:3a:be:33:b5:ee:e9:36:f8:8b:96:7f:29:18: 39:9f:06:56:2f:f9:9e:0e:22:3b:d0:06:14:10:80:9e:b0:be: f3:51:76:16:5f:a4:23:74:0d:29:85:93:88:13:ab:a2:95:ef: 86:d2:48:3d:7f:31:56:35:dc:6b:f0:e7:d3:3f:2a:b3:e3:94: 86:99:f6:78:2e:dc:d9:7c:79:f9:4d:3c:84:42:b6:29:d4:e3: 5b:37:4f:cc:a2:1e:69:7c:06:4a:9a:90:f2:f0:fa:05:42:d6: 1b:c6:68:e0:e0:25:c0:61:e2:41:7c:86:ca:cc:e7:22:3f:e3: 62:32:b1:b5:7b:67:04:cf:af:d7:9f:9b:a6:49:47:06:38:4d: 00:86:4b:46:26:b7:5e:43:ee:97:fc:32:bc:15:cb:a7:a5:dd: c7:20:fd:fc -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEpPBcftpKz8DOAXq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk NTYzNThhNGEtYjNjZC00MGVjLWFiYzUtZWE3ZDU4YjFkZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTcwcSlrnJfRT5PcvHBNYWVV2cWrhmnWWaOc vQ+cxnA3+N0kHBm4wE9AxEdjk4QTYl+8TWhI0JJt2IWxYGQYHfh5I2NsE2vkGdrT jn4Q94CJ4rAb9bK198Ya8dRmEdUPIYqhvCkjTFefA54bFDWFmBra6VC3D2NjSGUM Jd+1+I0UFOk7NxzxBoLOrJvLimYlZwLHPiSn6KZKulZAoyCD3Ms5wwsA83e2r3ek 5l24QsWAhCc00Mdq7+HQ5xNO/a3y9xzImvA6bFjF489UTX9tnFVmMpCSAzwPLUUH nuO85AhP1A3NkLmKi7k16dhCLjvDAQFHitDmFwGEqQmhR3x/WQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFOs5HHZIozTW5/xsezXkVNPyZUBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2U2ZWNhMjAtOTg0Yy0z OGJiLTkxMmUtNTM5Y2E5YWI4MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQFSKgAMAwD BARIqFADBAZIqIADBAVIqOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAi/PFNlk6hb72orX8HtXNZuvhV0pJ KpDf6Knmn8K4xtzeun7UU6qjJLGKKhPe3XM2hsCsJPROF7tkRPQIiL4thyWCOsps Nf/XFJmRaNjnL3CNOl2DkDFWONOvHJiyWvQ6vjO17uk2+IuWfykYOZ8GVi/5ng4i O9AGFBCAnrC+81F2Fl+kI3QNKYWTiBOropXvhtJIPX8xVjXca/Dn0z8qs+OUhpn2 eC7c2Xx5+U08hEK2KdTjWzdPzKIeaXwGSpqQ8vD6BULWG8Zo4OAlwGHiQXyGyszn Ij/jYjKxtXtnBM+v15+bpklHBjhNAIZLRia3XkPul/wyvBXLp6XdxyD9/A== -----END CERTIFICATE-----Generated at Tue Jul 1 16:53:27 2025 by rpki-client