$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa File: d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa (raw, json) Hash identifier: GQV5miYPq1KbVI9KX0SoAFRKzT7EbCerUjmVwDEPLls= Subject key identifier: 32:F0:1F:D8:0C:E1:C7:C4:67:36:5E:3D:29:68:03:8B:C8:96:BD:C2 Certificate issuer: /CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0 Certificate serial: 010D0C9F43285849C20A171D083412D42F4B1C80 Authority key identifier: B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 19171 IP address blocks: 64.253.128.0/19 maxlen: 24 98.143.80.0/20 maxlen: 24 162.245.56.0/22 maxlen: 24 192.189.36.0/22 maxlen: 24 199.182.220.0/22 maxlen: 24 208.65.232.0/22 maxlen: 24 208.118.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:17:1d:08:34:12:d4:2f:4b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=721511ad-77be-4b64-9d60-6c161e3bf401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:23:73:24:79:13:f6:99:4b:9e:e7:cd:ea: 16:25:f4:4c:13:05:39:ca:64:d4:33:75:91:c9:74: 51:60:2e:12:40:db:71:56:2e:b8:98:62:2b:40:3c: 46:8c:a2:8b:e2:32:ae:b7:0c:fc:fc:9e:9f:a0:bb: a6:69:b5:58:bf:ad:d4:72:5b:c1:49:d3:bb:45:52: 3f:ce:f7:18:53:51:26:d2:1a:3f:25:72:f6:8d:d7: 71:05:f7:95:9b:63:69:1f:f1:19:96:50:8b:46:24: 21:11:4f:fd:bb:4a:9d:02:0f:aa:f1:8b:e7:3e:53: 33:df:2a:c2:ea:9b:40:19:f9:d0:d6:3b:09:f0:cb: a7:f6:11:74:7d:42:fe:e0:4b:2a:a7:7e:f9:6e:3f: 88:7d:21:ad:d4:0c:2d:98:27:74:f1:fb:b1:8a:f9: d9:ee:cb:a8:7d:74:c9:78:ff:4b:91:4a:63:01:e7: ad:ab:1c:f7:9d:8c:c1:5a:38:cc:26:e5:8c:d9:69: 32:6e:f8:40:bb:8a:15:07:b7:60:09:b0:22:1e:d6: 58:d9:d0:fa:82:d0:1f:ae:e2:fa:f9:4f:ca:79:dc: 88:f0:9f:65:d3:4e:82:40:4b:75:28:36:f5:e5:9e: 29:62:ae:fd:d4:a0:dc:92:cf:d9:4c:e6:68:2f:0d: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F0:1F:D8:0C:E1:C7:C4:67:36:5E:3D:29:68:03:8B:C8:96:BD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl X509v3 Authority Key Identifier: keyid:B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer sbgp-ipAddrBlock: critical IPv4: 64.253.128.0/19 98.143.80.0/20 162.245.56.0/22 192.189.36.0/22 199.182.220.0/22 208.65.232.0/22 208.118.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:11:f8:1a:2c:d2:f6:63:16:60:25:59:53:f4:90:5b:25:cf: b0:40:ec:67:fe:3d:08:dd:09:98:a6:88:92:f4:e5:c4:14:28: 8f:8c:53:6d:a7:1c:65:7f:41:19:95:d4:a7:f4:aa:54:15:26: a6:06:3a:fb:9c:4c:41:d6:b0:12:b2:0f:2f:f0:c2:19:59:92: b6:2a:73:14:28:de:88:3e:ac:28:15:d5:de:7d:d2:41:26:00: a3:2b:55:68:78:58:58:e7:a3:27:11:05:dd:2f:01:c3:91:61: 9d:88:36:03:eb:6a:40:3b:23:cd:19:b2:68:b7:b9:db:83:97: 1c:12:86:a5:5e:ba:9d:92:75:e9:b6:e7:5c:b0:d5:c9:1f:f1: 88:81:c7:7f:05:e0:64:b1:0f:b6:5f:c6:2f:18:ed:ef:e7:d3: 7e:5a:5d:ae:18:c3:88:b9:a5:75:74:0a:2d:fe:2b:54:d0:6e: 0c:92:24:1f:b2:dc:ab:df:74:8b:82:65:e4:bb:39:39:68:4c: 00:5e:62:98:8d:be:2e:80:2f:c4:a7:d6:ce:3c:f7:20:73:7d: b3:84:0d:0a:ca:d6:71:bc:63:f6:14:7b:0c:2e:0d:4b:1f:90: 04:ac:b3:a0:05:f0:40:bf:6c:05:3c:e4:18:ae:dc:56:83:2a: b5:72:48:e1 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEnCChcdCDQS1C9LHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY3ODZlNWItNGFmZi00OWY0LTgxZTEtMWRjYThhMWRm ZGMwMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NzIxNTExYWQtNzdiZS00YjY0LTlkNjAtNmMxNjFlM2JmNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRojcyR5E/aZS57nzeoWJfRMEwU5ymTUM3WR yXRRYC4SQNtxVi64mGIrQDxGjKKL4jKutwz8/J6foLumabVYv63UclvBSdO7RVI/ zvcYU1Em0ho/JXL2jddxBfeVm2NpH/EZllCLRiQhEU/9u0qdAg+q8YvnPlMz3yrC 6ptAGfnQ1jsJ8Mun9hF0fUL+4Esqp375bj+IfSGt1AwtmCd08fuxivnZ7suofXTJ eP9LkUpjAeetqxz3nYzBWjjMJuWM2WkybvhAu4oVB7dgCbAiHtZY2dD6gtAfruL6 +U/KedyI8J9l006CQEt1KDb15Z4pYq791KDcks/ZTOZoLw2oUQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFDLwH9gM4cfEZzZePSloA4vIlr3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjc4 NmU1Yi00YWZmLTQ5ZjQtODFlMS0xZGNhOGExZGZkYzAvZDNjZGQ4YjgtYTVlMi0z MzU1LTljNDktZTIzOWUyOGU0ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTY3ODZlNWItNGFmZi00OWY0LTgx ZTEtMWRjYThhMWRmZGMwL2E2Nzg2ZTViLTRhZmYtNDlmNC04MWUxLTFkY2E4YTFk ZmRjMC5jcmwwHwYDVR0jBBgwFoAUszz6d8CmfQr2+RmOQYLuqTtr0q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjc4NmU1Yi00YWZmLTQ5ZjQtODFlMS0xZGNh OGExZGZkYzAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFQP2AAwQE Yo9QAwQCovU4AwQCwL0kAwQCx7bcAwQC0EHoAwQE0HaAMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAIR+Bos 0vZjFmAlWVP0kFslz7BA7Gf+PQjdCZimiJL05cQUKI+MU22nHGV/QRmV1Kf0qlQV JqYGOvucTEHWsBKyDy/wwhlZkrYqcxQo3og+rCgV1d590kEmAKMrVWh4WFjnoycR Bd0vAcORYZ2INgPrakA7I80Zsmi3uduDlxwShqVeup2Sdem251yw1ckf8YiBx38F 4GSxD7Zfxi8Y7e/n035aXa4Yw4i5pXV0Ci3+K1TQbgySJB+y3KvfdIuCZeS7OTlo TABeYpiNvi6AL8Sn1s489yBzfbOEDQrK1nG8Y/YUewwuDUsfkASss6AF8EC/bAU8 5Biu3FaDKrVySOE= -----END CERTIFICATE-----Generated at Wed May 7 21:02:48 2025 by rpki-client