$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa File: 2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa (raw, json) Hash identifier: M4o8KRhEvHbjBXLPhE7PcPFIjs98enmMwqfjmZhNxfg= Subject key identifier: FE:D1:94:79:43:AB:47:A2:37:2F:65:1F:77:12:9C:59:B3:37:E8:78 Certificate issuer: /CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Certificate serial: 010D0C9F43285849BDDA3CA0D525A1B34B434AC0 Authority key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 32354 IP address blocks: 162.244.56.0/21 maxlen: 24 173.239.64.0/20 maxlen: 24 204.11.104.0/22 maxlen: 24 208.64.184.0/22 maxlen: 24 208.71.156.0/22 maxlen: 24 208.76.28.0/22 maxlen: 24 208.80.116.0/22 maxlen: 24 208.87.216.0/21 maxlen: 24 2607:f640::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:3c:a0:d5:25:a1:b3:4b:43:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=59dc8f41-ecd2-4d1b-b10c-e205edd66172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:e0:fc:ec:47:25:3b:05:59:8d:23:6b:78: d7:e0:96:07:5d:a8:c1:f5:17:ac:b3:2e:e8:0d:13: bf:66:22:96:f0:4a:b4:35:14:25:2b:29:7d:2e:89: b5:29:c6:f5:24:40:2c:03:15:9a:d8:ff:5d:3d:4e: e4:dd:d2:3a:eb:18:41:83:e0:5c:04:23:e0:ca:bb: bf:cb:15:db:68:13:51:78:36:cb:40:4f:53:8d:7e: 86:2d:5b:7a:ef:e0:09:aa:d6:8d:45:48:4f:de:02: c3:95:d6:a1:18:1c:22:ab:41:63:ec:e9:4a:de:4c: a7:74:3a:55:13:fb:f2:64:6b:8c:da:64:8d:05:64: 84:1d:1d:e1:c6:69:98:41:b4:7a:7f:d4:29:04:9e: 16:d9:a4:82:9f:e7:40:8a:81:65:43:c5:8b:74:0e: 21:77:c6:cd:e5:74:56:0c:6e:bd:a1:e9:9f:8f:2f: f4:35:5c:7f:63:88:90:89:c0:1f:27:b8:f1:c8:65: 47:4b:30:8b:d3:dd:04:05:e4:18:f0:6a:e8:c2:4c: 75:aa:8c:5c:bd:93:3b:b2:7b:19:91:f9:5e:9b:23: 6f:bb:c4:10:e5:9e:f8:5f:64:92:b9:7a:b8:54:9c: db:db:0d:9e:ee:1e:28:ba:30:47:0d:c7:9d:09:aa: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D1:94:79:43:AB:47:A2:37:2F:65:1F:77:12:9C:59:B3:37:E8:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl X509v3 Authority Key Identifier: keyid:DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer sbgp-ipAddrBlock: critical IPv4: 162.244.56.0/21 173.239.64.0/20 204.11.104.0/22 208.64.184.0/22 208.71.156.0/22 208.76.28.0/22 208.80.116.0/22 208.87.216.0/21 IPv6: 2607:f640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:54:e1:56:c8:cd:c8:fa:8d:d0:53:0f:b1:45:e3:9d:6a:f5: e1:a7:f5:c2:43:c7:4f:2a:18:c5:77:39:52:9c:e2:e1:21:d4: a2:8e:7d:79:50:73:de:a5:f5:3e:0b:9e:7c:69:64:93:34:bb: fa:b5:1e:67:29:6d:5f:68:d8:6e:f0:fa:c7:65:dc:2b:b1:d6: e0:9d:62:3b:c8:a3:8e:35:52:44:7c:b5:cd:d6:69:9d:0b:b5: 2d:f6:fd:5a:21:ba:22:44:44:96:32:83:cd:9c:1f:2f:b7:1a: 73:dd:47:56:71:99:88:8b:05:20:84:6d:2c:03:8e:92:16:b7: c8:8b:89:92:1f:18:7a:1d:40:62:a4:36:eb:08:0b:09:39:9a: 2c:84:c7:bb:3a:3d:e9:d0:93:26:ef:49:cb:6a:07:a5:f4:be: 60:c1:1b:47:37:99:eb:2e:c1:d7:7f:3f:8f:6d:2e:ce:82:00: 2f:ed:45:5a:42:49:29:6c:5f:b2:7e:df:f6:51:19:57:84:db: bb:0c:50:96:cc:a8:d0:e9:25:2f:27:14:e1:7a:2e:15:b7:8c: 47:9e:37:61:9d:2a:e5:60:7c:20:ff:d9:08:13:dc:2d:6f:89: bb:14:f9:58:e2:e8:40:6c:5a:01:75:16:7b:cf:46:20:f2:f0: 53:5e:2b:05 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEm92jyg1SWhs0tDSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTlkOWI5YmMtYTIwZC00MjM1LWFjYzUtMDQ1ZmI5MWEz ODM3MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NTlkYzhmNDEtZWNkMi00ZDFiLWIxMGMtZTIwNWVkZDY2MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGDg/OxHJTsFWY0ja3jX4JYHXajB9Ressy7o DRO/ZiKW8Eq0NRQlKyl9Lom1Kcb1JEAsAxWa2P9dPU7k3dI66xhBg+BcBCPgyru/ yxXbaBNReDbLQE9TjX6GLVt67+AJqtaNRUhP3gLDldahGBwiq0Fj7OlK3kyndDpV E/vyZGuM2mSNBWSEHR3hxmmYQbR6f9QpBJ4W2aSCn+dAioFlQ8WLdA4hd8bN5XRW DG69oemfjy/0NVx/Y4iQicAfJ7jxyGVHSzCL090EBeQY8Growkx1qoxcvZM7snsZ kflemyNvu8QQ5Z74X2SSuXq4VJzb2w2e7h4oujBHDcedCaqLJwIDAQABo4IDjjCC A4owHQYDVR0OBBYEFP7RlHlDq0eiNy9lH3cSnFmzN+h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xOWQ5 YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVmYjkxYTM4MzcvMmEwZmRjZDctZWE3ZS0z ZjFkLWI1NzktMGFkODJhZjQ4NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTlkOWI5YmMtYTIwZC00MjM1LWFj YzUtMDQ1ZmI5MWEzODM3LzE5ZDliOWJjLWEyMGQtNDIzNS1hY2M1LTA0NWZiOTFh MzgzNy5jcmwwHwYDVR0jBBgwFoAU34fod3+klGLUaPSuy3vuqs5GDdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xOWQ5YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVm YjkxYTM4MzcuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDovQ4AwQE re9AAwQCzAtoAwQC0EC4AwQC0EecAwQC0EwcAwQC0FB0AwQD0FfYMA0EAgACMAcD BQAmB/ZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBALZU4VbIzcj6jdBTD7FF451q9eGn9cJDx08qGMV3OVKc 4uEh1KKOfXlQc96l9T4LnnxpZJM0u/q1HmcpbV9o2G7w+sdl3Cux1uCdYjvIo441 UkR8tc3WaZ0LtS32/VohuiJERJYyg82cHy+3GnPdR1ZxmYiLBSCEbSwDjpIWt8iL iZIfGHodQGKkNusICwk5miyEx7s6PenQkybvSctqB6X0vmDBG0c3mesuwdd/P49t Ls6CAC/tRVpCSSlsX7J+3/ZRGVeE27sMUJbMqNDpJS8nFOF6LhW3jEeeN2GdKuVg fCD/2QgT3C1vibsU+Vji6EBsWgF1FnvPRiDy8FNeKwU= -----END CERTIFICATE-----Generated at Mon May 12 20:49:07 2025 by rpki-client