$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa File: a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json) Hash identifier: QFwL9E+AMfNoDgpbBNcZ+DzedK3fkmWHnnNH38uBeo8= Subject key identifier: 66:14:09:E5:50:08:27:CA:62:FD:C5:4C:D1:91:A1:68:2C:1E:CB:69 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F43285849C20A1AA7743611AD66800780 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46844 IP address blocks: 45.58.128.0/18 maxlen: 24 64.32.0.0/19 maxlen: 24 67.21.64.0/19 maxlen: 24 70.39.64.0/18 maxlen: 24 104.37.244.0/22 maxlen: 24 104.160.160.0/19 maxlen: 24 107.167.0.0/19 maxlen: 24 170.178.160.0/19 maxlen: 24 174.128.224.0/19 maxlen: 24 198.148.80.0/20 maxlen: 24 199.115.100.0/22 maxlen: 24 204.188.192.0/18 maxlen: 24 208.98.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1a:a7:74:36:11:ad:66:80:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=f999fb25-085e-4072-b610-953a5ecf170f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:89:dc:0f:2a:8f:d2:21:eb:39:b7:25:65: 5f:0a:fb:06:5b:46:19:84:0f:46:e4:82:39:2e:05: 2b:8f:5d:68:59:3a:df:3a:57:41:bf:84:43:f2:f2: df:6b:5d:50:90:d7:93:2c:c2:e3:64:9d:69:d9:30: 36:b6:ff:5f:89:34:6b:f8:7f:86:b0:63:66:07:75: 0a:7d:7d:fd:de:6b:38:0c:ad:68:38:d6:bb:d2:c0: f4:60:64:2c:6a:e2:99:2d:1e:22:4d:c2:e2:32:d8: 1c:1d:fe:72:26:c2:68:ec:fe:99:80:cb:ba:65:6b: 0d:77:ea:d6:42:fc:34:fc:65:22:33:42:12:41:eb: 6d:58:49:cf:b0:b1:20:33:7c:38:c2:9d:dd:77:77: 25:de:c4:a3:17:df:20:96:eb:59:dd:98:fe:3d:c3: 1f:0c:98:59:5b:a7:7e:fa:8c:56:f6:87:2c:8d:56: fa:16:d7:0d:1c:ac:53:88:77:20:b2:ef:08:e0:48: e6:6e:b5:99:ba:9b:ab:93:fd:4a:a7:ae:69:47:41: ac:68:23:c6:5a:77:d0:d4:10:9d:60:79:33:20:12: 22:d4:52:d4:e7:b0:67:17:63:6d:e0:c7:4b:ec:e3: a7:75:59:e2:00:21:64:64:aa:b6:35:e9:cc:d9:9e: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:14:09:E5:50:08:27:CA:62:FD:C5:4C:D1:91:A1:68:2C:1E:CB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 45.58.128.0/18 64.32.0.0/19 67.21.64.0/19 70.39.64.0/18 104.37.244.0/22 104.160.160.0/19 107.167.0.0/19 170.178.160.0/19 174.128.224.0/19 198.148.80.0/20 199.115.100.0/22 204.188.192.0/18 208.98.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fd:13:46:ec:c3:a4:dd:19:2e:ba:83:18:9a:e8:e4:98:0b: 15:b3:90:ca:46:fb:fb:e3:d0:25:25:f4:75:70:94:35:05:9c: a3:e1:70:e1:ed:d1:4c:d0:95:b7:e4:10:f1:d7:ac:88:f8:da: e6:cb:ba:35:85:41:1b:e4:4e:5f:8b:63:7d:23:c2:5c:ba:a6: 47:4a:dd:34:ed:6f:ca:6d:05:1b:89:a0:a3:5b:34:72:e6:38: fc:1b:72:0e:43:bc:83:dc:27:7b:a3:3a:60:74:ef:23:68:30: 84:17:44:4e:92:ec:4b:30:c8:49:21:dc:47:a8:19:a7:55:3f: 34:4f:85:9c:9c:71:b4:61:86:c7:07:39:6a:63:53:b0:40:1b: 8e:6d:7c:1a:dc:19:39:e2:0b:00:a1:31:18:e7:13:6d:fa:d9: a4:b8:c8:b2:8f:f8:a0:da:56:7a:eb:ad:a3:90:91:30:a1:b5: 2a:ac:43:6d:29:d6:21:a2:40:55:1b:d4:8d:fe:d1:26:4c:b6: 2b:ef:5e:64:ec:c1:ad:8f:18:38:f6:db:bd:87:e6:cc:75:9e: 0b:15:15:48:8f:27:bb:1e:26:30:eb:b0:37:93:56:a3:8f:21: a4:ad:a2:2e:06:02:2c:ff:f6:9a:8f:9f:0a:44:8a:90:25:6a: 5d:1c:f9:a3 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEnCChqndDYRrWaAB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Zjk5OWZiMjUtMDg1ZS00MDcyLWI2MTAtOTUzYTVlY2YxNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmuJ3A8qj9Ih6zm3JWVfCvsGW0YZhA9G5II5 LgUrj11oWTrfOldBv4RD8vLfa11QkNeTLMLjZJ1p2TA2tv9fiTRr+H+GsGNmB3UK fX393ms4DK1oONa70sD0YGQsauKZLR4iTcLiMtgcHf5yJsJo7P6ZgMu6ZWsNd+rW Qvw0/GUiM0ISQettWEnPsLEgM3w4wp3dd3cl3sSjF98glutZ3Zj+PcMfDJhZW6d+ +oxW9ocsjVb6FtcNHKxTiHcgsu8I4EjmbrWZupurk/1Kp65pR0GsaCPGWnfQ1BCd YHkzIBIi1FLU57BnF2Nt4MdL7OOndVniACFkZKq2NenM2Z4rHQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFGYUCeVQCCfKYv3FTNGRoWgsHstpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYTVjYjRlOGItNTJiNy0z ZjNhLTgyNTktZjQ3YzU4NTVhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQGLTqAAwQF QCAAAwQFQxVAAwQGRidAAwQCaCX0AwQFaKCgAwQFa6cAAwQFqrKgAwQFroDgAwQE xpRQAwQCx3NkAwQGzLzAAwQG0GIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJX9E0bsw6TdGS66gxia6OSY CxWzkMpG+/vj0CUl9HVwlDUFnKPhcOHt0UzQlbfkEPHXrIj42ubLujWFQRvkTl+L Y30jwly6pkdK3TTtb8ptBRuJoKNbNHLmOPwbcg5DvIPcJ3ujOmB07yNoMIQXRE6S 7EswyEkh3EeoGadVPzRPhZyccbRhhscHOWpjU7BAG45tfBrcGTniCwChMRjnE236 2aS4yLKP+KDaVnrrraOQkTChtSqsQ20p1iGiQFUb1I3+0SZMtivvXmTswa2PGDj2 272H5sx1ngsVFUiPJ7seJjDrsDeTVqOPIaStoi4GAiz/9pqPnwpEipAlal0c+aM= -----END CERTIFICATE-----Generated at Fri May 9 00:04:05 2025 by rpki-client