$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/4c04743b-9968-3403-b6a2-8a262f9ce224.roa File: 4c04743b-9968-3403-b6a2-8a262f9ce224.roa (raw, json) Hash identifier: HQ1W6IbVOvCp2v8P2oMAYEr8O0NXFDpm7QrWDe2Enfs= Subject key identifier: 91:C0:5F:C4:A6:07:F7:BC:4F:A3:5E:E0:73:CD:00:85:23:D9:F1:1A Certificate issuer: /CN=0283679c-8839-42d6-90a3-4215f8491683 Certificate serial: 010D0C9F43285849F0A2DEABBD9C0F11E84E72F7 Authority key identifier: 8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/4c04743b-9968-3403-b6a2-8a262f9ce224.roa Signing time: Thu 22 May 2025 17:32:28 +0000 ROA not before: Thu 22 May 2025 17:32:28 +0000 ROA not after: Wed 20 Aug 2025 17:32:28 +0000 asID: 33494 IP address blocks: 67.222.96.0/20 maxlen: 20 72.34.32.0/19 maxlen: 19 162.219.248.0/22 maxlen: 22 192.40.112.0/22 maxlen: 22 192.69.235.0/24 maxlen: 24 2606:5600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:a2:de:ab:bd:9c:0f:11:e8:4e:72:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0283679c-8839-42d6-90a3-4215f8491683 Validity Not Before: May 22 17:32:28 2025 GMT Not After : Aug 20 17:32:28 2025 GMT Subject: CN=48f917df-1582-4d2f-912d-34c04a110748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:98:76:c4:da:49:70:ec:34:ca:6f:2b:e3: 89:98:75:d9:2f:5e:e5:0b:cb:d0:d9:04:e5:0f:96: 3e:0e:10:c2:18:61:6c:49:ba:4a:c0:38:b5:a0:14: 44:48:a2:d7:39:4d:42:48:d6:66:91:43:bb:e8:54: 09:8b:7e:0e:dc:53:9c:18:5f:e4:27:7d:b0:77:f3: 94:9e:2a:96:d0:d8:a2:56:74:40:45:5b:f1:8d:97: 50:23:bb:c3:39:9a:34:cb:a6:d8:26:83:14:60:a2: 46:71:1c:69:a0:a6:6f:44:81:d3:1e:92:e1:b1:12: 97:16:76:43:a6:f8:56:10:ab:3f:d7:5b:2c:1c:e8: 5e:4d:d5:d7:e9:96:ce:e1:2b:e7:6d:35:0e:00:07: c0:e2:48:40:1e:b3:d2:3a:19:b8:fc:90:3f:b6:ff: 52:4b:c1:46:d2:7c:33:9d:5f:85:4b:e7:70:7a:50: 81:af:c8:79:73:85:2d:20:7a:a3:6a:0b:83:bd:8b: f5:80:95:03:32:25:b0:6a:7c:ea:0b:32:77:af:74: f3:96:c0:cd:ba:0f:68:4a:7e:74:09:35:d6:b4:8e: 7c:02:c7:77:7a:04:dd:94:28:dd:3f:17:81:27:5b: 62:19:aa:d9:5b:1f:ef:41:3b:c8:b1:17:79:4e:41: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C0:5F:C4:A6:07:F7:BC:4F:A3:5E:E0:73:CD:00:85:23:D9:F1:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/4c04743b-9968-3403-b6a2-8a262f9ce224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.crl X509v3 Authority Key Identifier: keyid:8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer sbgp-ipAddrBlock: critical IPv4: 67.222.96.0/20 72.34.32.0/19 162.219.248.0/22 192.40.112.0/22 192.69.235.0/24 IPv6: 2606:5600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7f:20:cc:d8:80:ae:d4:be:5b:c8:f7:45:65:a6:0c:25:d8: cc:e0:d3:6a:46:47:89:27:df:d0:a5:4f:b0:a3:a9:70:4d:73: b2:4a:b5:c9:39:63:9a:49:aa:ff:4e:d6:4e:4d:ea:7c:7d:d1: 10:62:de:6e:80:b7:8e:d2:94:28:f0:74:a6:d8:12:3b:fc:2d: 05:06:91:06:bf:36:73:dd:ce:14:a3:18:6d:bc:33:b0:d1:0f: 0c:b4:3f:0b:eb:c1:29:45:1f:c7:87:6b:51:2f:4a:9d:89:66: 13:4c:c6:7e:e3:4c:64:3d:29:ce:63:82:dc:8e:19:7d:72:16: df:c5:e7:94:a5:1c:c1:37:84:66:1a:ab:06:19:4f:47:8b:de: a6:26:38:6e:07:d9:b1:d6:5e:93:f1:93:c3:fb:6f:77:fc:34: 75:60:fe:9d:c1:62:b7:9b:de:21:e7:31:4d:92:1a:6e:cb:19: 3f:98:bd:f1:ee:7e:bc:19:16:ed:08:e3:fb:f3:19:42:60:fc: 04:50:0b:9b:a0:bc:6c:bf:df:8b:a4:46:8e:8a:81:7b:93:2c: 58:8c:3d:4e:70:72:d3:5e:02:62:f9:55:5b:87:9f:3f:f8:31: 6a:73:9d:08:c1:32:05:b1:c1:7d:45:9e:73:73:0a:1e:3f:a8: 75:1e:c3:3f -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEnwot6rvZwPEehOcvcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4MzY3OWMtODgzOS00MmQ2LTkwYTMtNDIxNWY4NDkx NjgzMB4XDTI1MDUyMjE3MzIyOFoXDTI1MDgyMDE3MzIyOFowLzEtMCsGA1UEAxMk NDhmOTE3ZGYtMTU4Mi00ZDJmLTkxMmQtMzRjMDRhMTEwNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss2YdsTaSXDsNMpvK+OJmHXZL17lC8vQ2QTl D5Y+DhDCGGFsSbpKwDi1oBRESKLXOU1CSNZmkUO76FQJi34O3FOcGF/kJ32wd/OU niqW0NiiVnRARVvxjZdQI7vDOZo0y6bYJoMUYKJGcRxpoKZvRIHTHpLhsRKXFnZD pvhWEKs/11ssHOheTdXX6ZbO4SvnbTUOAAfA4khAHrPSOhm4/JA/tv9SS8FG0nwz nV+FS+dwelCBr8h5c4UtIHqjaguDvYv1gJUDMiWwanzqCzJ3r3TzlsDNug9oSn50 CTXWtI58Asd3egTdlCjdPxeBJ1tiGarZWx/vQTvIsRd5TkEVvQIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFJHAX8SmB/e8T6Ne4HPNAIUj2fEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMjgz Njc5Yy04ODM5LTQyZDYtOTBhMy00MjE1Zjg0OTE2ODMvNGMwNDc0M2ItOTk2OC0z NDAzLWI2YTItOGEyNjJmOWNlMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDI4MzY3OWMtODgzOS00MmQ2LTkw YTMtNDIxNWY4NDkxNjgzLzAyODM2NzljLTg4MzktNDJkNi05MGEzLTQyMTVmODQ5 MTY4My5jcmwwHwYDVR0jBBgwFoAUjlwAqEW/IfKRTHcejPJGz7gjbaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMjgzNjc5Yy04ODM5LTQyZDYtOTBhMy00MjE1 Zjg0OTE2ODMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEQ95gAwQF SCIgAwQCotv4AwQCwChwAwQAwEXrMA0EAgACMAcDBQAmBlYAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADJ/ IMzYgK7UvlvI90Vlpgwl2Mzg02pGR4kn39ClT7CjqXBNc7JKtck5Y5pJqv9O1k5N 6nx90RBi3m6At47SlCjwdKbYEjv8LQUGkQa/NnPdzhSjGG28M7DRDwy0PwvrwSlF H8eHa1EvSp2JZhNMxn7jTGQ9Kc5jgtyOGX1yFt/F55SlHME3hGYaqwYZT0eL3qYm OG4H2bHWXpPxk8P7b3f8NHVg/p3BYreb3iHnMU2SGm7LGT+YvfHufrwZFu0I4/vz GUJg/ARQC5ugvGy/34ukRo6KgXuTLFiMPU5wctNeAmL5VVuHnz/4MWpznQjBMgWx wX1FnnNzCh4/qHUewz8= -----END CERTIFICATE-----Generated at Mon Jun 30 17:08:32 2025 by rpki-client