$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa File: 161d2218-a9be-3c8e-b719-b8cb4143902d.roa (raw, json) Hash identifier: QhZdyTFFYGmFDViFv+DU8bH8ugF6vyy0uxvhzIUFUDo= Subject key identifier: 17:9E:0D:8D:E0:1A:56:C3:85:C4:15:62:A7:4B:0D:52:06:06:F4:18 Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584A497071C8BFED279E5C2347C0 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 237 IP address blocks: 35.38.192.0/18 maxlen: 18 35.39.0.0/19 maxlen: 19 35.39.32.0/19 maxlen: 19 35.39.64.0/19 maxlen: 19 35.39.128.0/19 maxlen: 19 35.39.160.0/19 maxlen: 19 35.39.192.0/19 maxlen: 19 35.39.224.0/19 maxlen: 19 35.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:71:c8:bf:ed:27:9e:5c:23:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=1fc4bf2d-8c77-432d-b0ad-4db8be4edee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:d8:6b:38:86:be:ee:44:74:4f:2b:7a:90: c7:1c:b5:6c:2c:c3:2e:a5:d2:77:41:70:95:4b:f0: ee:04:6d:ae:75:03:76:ee:16:12:c9:db:ff:b3:81: 65:23:86:61:ed:af:c3:eb:96:47:15:ff:42:7c:b3: 43:3c:78:2f:7b:e5:0c:ad:38:c7:13:39:cb:cd:47: 48:8a:9c:d2:2a:a9:38:37:a8:a2:59:c1:3b:ad:23: 37:59:c0:84:d9:d3:08:61:50:bc:22:67:b9:12:5d: 54:79:5f:0f:61:f7:e4:de:f8:c6:95:81:f9:c4:1f: d5:b7:64:19:e0:eb:09:d3:f0:6d:0f:e9:e1:0c:fb: 5f:e6:72:91:a9:b9:fe:ab:85:68:7a:52:af:1e:00: 22:60:49:19:12:5b:c3:5b:90:79:34:fc:d7:da:79: 1b:8e:a8:39:2e:99:fb:64:63:18:36:fb:fb:81:0b: 3c:07:21:61:6d:19:81:bb:a2:16:78:be:76:93:c3: 3d:d5:cd:70:22:31:7a:55:9c:5c:80:46:20:92:9b: 3f:cc:74:a5:13:38:3f:fc:7f:e6:3c:9f:ae:75:72: e2:1b:b2:11:2d:58:39:39:16:d6:91:1d:ba:bf:ba: e0:50:78:5c:99:a1:d2:57:a3:c7:eb:95:92:14:b0: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:0D:8D:E0:1A:56:C3:85:C4:15:62:A7:4B:0D:52:06:06:F4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.38.192.0-35.39.95.255 35.39.128.0-35.40.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:97:74:f7:c9:1a:39:f2:fc:75:7f:56:09:79:53:82:f8:23: 83:23:cf:f8:55:9d:93:d1:05:f4:8a:2e:4e:65:b1:18:8a:cb: c9:fd:74:68:57:aa:e0:59:59:c0:d2:99:49:28:6c:59:ad:e3: 5a:04:e3:d2:47:3d:1b:91:4e:23:20:aa:17:4c:c1:a1:71:53: 46:54:18:21:c4:6a:ce:15:aa:0f:1b:57:1d:8d:6b:18:89:7d: f4:1d:72:a9:52:d4:d0:36:db:15:96:d2:4b:87:79:c9:75:2c: 0e:91:ff:05:ea:91:c1:96:f7:75:dd:85:60:a2:3a:96:c0:99: b4:be:fa:95:c9:0e:6a:34:98:93:27:c3:f7:f8:b2:d6:5e:dc: 15:97:70:48:b8:8e:4e:cc:90:b3:f8:4a:b2:c9:e1:40:1d:c5: 46:eb:41:5d:9f:f1:29:c7:7c:a4:84:38:7e:80:47:60:62:7b: 6a:b4:cc:c9:8f:a4:82:cd:74:51:60:93:b3:e2:a9:e9:ed:6c: 5e:f4:1a:ad:3b:da:3e:0f:bf:4d:fb:53:04:7d:11:c6:45:b5: f9:a4:4e:45:fe:ff:2f:f7:68:a6:8a:b2:a9:be:79:ad:0e:61: 72:d0:ff:56:32:be:f5:c7:17:13:30:7b:5a:91:4d:b0:e4:ba: a8:5e:2b:ca -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEpJcHHIv+0nnlwjR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MWZjNGJmMmQtOGM3Ny00MzJkLWIwYWQtNGRiOGJlNGVkZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R3YaziGvu5EdE8repDHHLVsLMMupdJ3QXCV S/DuBG2udQN27hYSydv/s4FlI4Zh7a/D65ZHFf9CfLNDPHgve+UMrTjHEznLzUdI ipzSKqk4N6iiWcE7rSM3WcCE2dMIYVC8Ime5El1UeV8PYffk3vjGlYH5xB/Vt2QZ 4OsJ0/BtD+nhDPtf5nKRqbn+q4VoelKvHgAiYEkZElvDW5B5NPzX2nkbjqg5Lpn7 ZGMYNvv7gQs8ByFhbRmBu6IWeL52k8M91c1wIjF6VZxcgEYgkps/zHSlEzg//H/m PJ+udXLiG7IRLVg5ORbWkR26v7rgUHhcmaHSV6PH65WSFLAiEQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFBeeDY3gGlbDhcQVYqdLDVIGBvQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMTYxZDIyMTgtYTliZS0z YzhlLWI3MTktYjhjYjQxNDM5MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAYjJsAD BAUjJ0AwCwMEByMngAMDACMoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACSXdPfJGjny/HV/Vgl5U4L4I4Mj z/hVnZPRBfSKLk5lsRiKy8n9dGhXquBZWcDSmUkobFmt41oE49JHPRuRTiMgqhdM waFxU0ZUGCHEas4Vqg8bVx2NaxiJffQdcqlS1NA22xWW0kuHecl1LA6R/wXqkcGW 93XdhWCiOpbAmbS++pXJDmo0mJMnw/f4stZe3BWXcEi4jk7MkLP4SrLJ4UAdxUbr QV2f8SnHfKSEOH6AR2Bie2q0zMmPpILNdFFgk7PiqentbF70Gq072j4Pv037UwR9 EcZFtfmkTkX+/y/3aKaKsqm+ea0OYXLQ/1YyvvXHFxMwe1qRTbDkuqheK8o= -----END CERTIFICATE-----Generated at Tue Jul 1 21:47:26 2025 by rpki-client