$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa File: a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa (raw, json) Hash identifier: CapBNrh0JyaPIoelKjxnjoCILsLjzMBZR+WYl7GrY2s= Subject key identifier: B7:3A:58:58:A8:F8:11:53:49:CB:54:55:78:7F:CE:3A:00:EE:F8:98 Certificate issuer: /CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b Certificate serial: 010D0C9F4328584A51D06DA26A76B968A96AC380 Authority key identifier: 24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 396163 IP address blocks: 69.194.4.0/23 maxlen: 24 104.225.212.0/23 maxlen: 24 162.251.240.0/21 maxlen: 24 198.181.60.0/23 maxlen: 24 208.84.90.0/24 maxlen: 24 208.84.92.0/23 maxlen: 24 208.117.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6d:a2:6a:76:b9:68:a9:6a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=bb3fdf87-83f8-478d-97bc-399ae713bdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:aa:c7:a5:cf:22:a6:03:74:99:4c:2a:50: f8:65:72:ec:5d:69:21:f7:44:62:d7:54:72:68:64: 63:42:f6:26:b8:be:c2:bf:43:a0:51:31:ce:2b:d0: fe:fb:65:be:2c:86:bd:f9:a9:ad:59:9a:6c:b3:87: 2d:dc:87:0a:a3:22:c5:8e:b1:8e:40:2e:9e:6e:36: 3f:2e:59:89:24:f6:c3:87:87:ee:b8:c2:b7:49:32: 98:3f:c6:26:61:5d:e1:b2:4a:77:66:01:85:41:f6: 31:f9:fb:f5:1f:61:20:5c:d7:ae:75:a6:3b:9a:26: 3c:c6:b4:a3:e4:3d:fc:19:8e:c4:1f:ad:98:f6:e6: e2:66:2c:a7:d0:2d:11:d2:3d:9c:86:6e:3f:a3:b8: 7a:85:13:79:b8:a4:98:44:e8:de:9e:66:03:ad:f2: 8a:d4:ff:12:2b:ec:02:2c:b1:ac:d6:52:1e:bf:5a: bf:cc:6b:a1:b5:04:a2:de:bc:fb:e9:5e:1d:7d:09: 9c:b9:05:1c:6d:4e:86:05:59:96:aa:15:ae:d9:ca: c6:a2:25:b3:e0:77:3f:59:d1:4b:b0:42:4b:5f:04: cd:88:76:21:0f:b6:4c:01:0e:1f:74:35:19:de:96: 81:e8:08:d2:4f:0a:ab:4b:19:be:94:95:90:8c:5e: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3A:58:58:A8:F8:11:53:49:CB:54:55:78:7F:CE:3A:00:EE:F8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl X509v3 Authority Key Identifier: keyid:24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer sbgp-ipAddrBlock: critical IPv4: 69.194.4.0/23 104.225.212.0/23 162.251.240.0/21 198.181.60.0/23 208.84.90.0/24 208.84.92.0/23 208.117.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:67:d6:8a:ae:b0:9d:f1:d7:d9:3a:38:b5:bb:41:1e:9a:f8: 0d:12:67:c6:0c:8a:35:a1:3e:5e:31:f6:56:68:31:81:65:f1: 75:e8:e7:c6:6b:4f:cf:36:cb:eb:37:d9:d2:7c:a5:54:2d:c7: e5:ac:40:7c:22:cc:7a:d1:eb:9d:7b:e7:b6:be:15:f3:0a:35: 37:23:96:da:40:c5:e2:ce:aa:e4:b7:e6:e4:25:84:7f:f5:2f: 9a:2b:6a:d7:76:04:74:d3:2b:cf:98:8b:9c:93:67:92:02:e6: 46:7d:a9:66:c1:37:0d:cd:a3:e9:d5:cd:d1:9c:a0:af:4d:87: 9f:89:76:c8:c7:e3:7d:c1:d3:13:68:a2:39:36:0d:a6:22:77: 3d:8d:8a:18:ec:6b:eb:f9:c2:cf:75:9e:5e:66:9c:70:fa:a9: 98:fa:9a:9d:99:ba:fc:a0:a3:d3:91:a3:29:7d:da:e1:3e:8e: 74:dd:12:d8:6d:71:bd:b6:69:fc:cc:54:3e:89:28:e7:15:b7: f1:03:bd:82:1a:7a:1b:94:0d:bb:59:00:05:1e:16:5b:d3:22: 02:b8:d3:77:82:00:2e:94:1d:de:e2:d3:ca:45:71:6b:2f:eb: ed:cd:71:c7:78:4d:e7:49:50:f6:b8:e5:fe:c3:be:1c:9c:b4: d4:fd:48:72 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEpR0G2iana5aKlqw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNTE1YjctZjhkNy00MmFiLWI5MzUtMDBjYzBmZjNk MzViMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk YmIzZmRmODctODNmOC00NzhkLTk3YmMtMzk5YWU3MTNiZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK+qx6XPIqYDdJlMKlD4ZXLsXWkh90Ri11Ry aGRjQvYmuL7Cv0OgUTHOK9D++2W+LIa9+amtWZpss4ct3IcKoyLFjrGOQC6ebjY/ LlmJJPbDh4fuuMK3STKYP8YmYV3hskp3ZgGFQfYx+fv1H2EgXNeudaY7miY8xrSj 5D38GY7EH62Y9ubiZiyn0C0R0j2chm4/o7h6hRN5uKSYROjenmYDrfKK1P8SK+wC LLGs1lIev1q/zGuhtQSi3rz76V4dfQmcuQUcbU6GBVmWqhWu2crGoiWz4Hc/WdFL sEJLXwTNiHYhD7ZMAQ4fdDUZ3paB6AjSTwqrSxm+lJWQjF52fQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFLc6WFio+BFTSctUVXh/zjoA7viYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYWM1 MTViNy1mOGQ3LTQyYWItYjkzNS0wMGNjMGZmM2QzNWIvYTk0ZTJmZWMtYWIzMi0z OGIwLTkwMzEtOGUyYzZmMWIwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGFjNTE1YjctZjhkNy00MmFiLWI5 MzUtMDBjYzBmZjNkMzViL2RhYzUxNWI3LWY4ZDctNDJhYi1iOTM1LTAwY2MwZmYz ZDM1Yi5jcmwwHwYDVR0jBBgwFoAUJCOLpHCl/+Jobo+7XUGHDakeneswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYWM1MTViNy1mOGQ3LTQyYWItYjkzNS0wMGNj MGZmM2QzNWIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBRcIEAwQB aOHUAwQDovvwAwQBxrU8AwQA0FRaAwQB0FRcAwQA0HVfMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMBn1oqu sJ3x19k6OLW7QR6a+A0SZ8YMijWhPl4x9lZoMYFl8XXo58ZrT882y+s32dJ8pVQt x+WsQHwizHrR651757a+FfMKNTcjltpAxeLOquS35uQlhH/1L5oratd2BHTTK8+Y i5yTZ5IC5kZ9qWbBNw3No+nVzdGcoK9Nh5+JdsjH433B0xNoojk2DaYidz2Nihjs a+v5ws91nl5mnHD6qZj6mp2Zuvygo9ORoyl92uE+jnTdEthtcb22afzMVD6JKOcV t/EDvYIaehuUDbtZAAUeFlvTIgK403eCAC6UHd7i08pFcWsv6+3Nccd4TedJUPa4 5f7DvhyctNT9SHI= -----END CERTIFICATE-----Generated at Sun Jun 29 16:33:38 2025 by rpki-client