$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa File: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (raw, json) Hash identifier: 7xc1Nfnu7bfD9DSSb6VlVSJz3ROW9438j0/GVr7TW90= Subject key identifier: C6:82:C1:90:C4:DB:97:EC:5B:B6:F8:7E:14:FD:7E:A7:44:FC:F7:6C Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584A2A9FD334B1F86392280A2A20 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa Signing time: Tue 06 May 2025 20:00:21 +0000 ROA not before: Tue 06 May 2025 20:00:21 +0000 ROA not after: Mon 04 Aug 2025 20:00:21 +0000 asID: 19684 IP address blocks: 23.174.152.0/24 maxlen: 24 23.174.153.0/24 maxlen: 24 69.67.164.0/22 maxlen: 22 69.67.164.0/23 maxlen: 23 69.67.166.0/23 maxlen: 23 162.254.224.0/21 maxlen: 21 207.29.192.0/21 maxlen: 21 207.29.192.0/23 maxlen: 23 207.29.194.0/23 maxlen: 23 207.29.196.0/23 maxlen: 23 207.29.198.0/23 maxlen: 23 2607:9540::/32 maxlen: 32 2607:9540::/44 maxlen: 44 2607:9540:10::/44 maxlen: 44 2607:9540:20::/44 maxlen: 44 2607:9540:30::/44 maxlen: 44 2607:9540:40::/44 maxlen: 44 2607:9540:50::/44 maxlen: 44 2607:9540:60::/44 maxlen: 44 2607:9540:40f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:9f:d3:34:b1:f8:63:92:28:0a:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: May 6 20:00:21 2025 GMT Not After : Aug 4 20:00:21 2025 GMT Subject: CN=dd051bd0-c8c2-49e9-ab04-d39af4499d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:58:0e:54:6c:fd:ce:9f:39:19:65:4c:70: 86:07:df:20:f0:c1:c6:89:f6:f0:2a:6e:6e:56:f1: d3:c7:4c:7d:ca:c4:c5:46:07:bc:b3:23:10:88:cc: a8:08:c0:86:38:b8:4a:d0:35:67:a5:16:d6:2a:b4: 28:0e:6c:6b:cb:3d:34:95:32:a7:4c:7e:6b:19:4a: f9:89:43:51:3c:47:00:a5:cb:c5:04:ab:27:76:c1: ce:85:1f:8a:2a:9a:26:5b:18:25:24:b8:ee:e5:75: 63:06:bb:8d:bc:16:bd:50:b1:07:ab:c2:54:d2:5c: be:e8:bb:83:1e:99:b8:49:4c:48:3c:43:df:0a:b5: f1:35:d7:92:0a:dd:25:bc:e5:63:47:c0:ed:39:31: ea:c4:e4:ea:c0:c0:13:cf:6e:0d:60:03:cd:01:bd: cd:36:ce:2e:8d:fe:c5:ed:23:85:16:6b:e1:46:ae: 39:bd:ff:8f:af:26:18:b4:58:79:68:79:94:6d:30: 8c:67:df:e0:7d:04:c0:f2:2d:89:38:a2:a5:e7:fb: cc:44:5d:ea:d0:d4:26:b5:f4:c4:d0:98:80:33:d9: 16:8d:70:91:07:e3:9c:62:81:2b:cd:ae:46:cb:05: ad:0d:c4:f3:44:87:8f:58:64:6b:a3:ba:4c:93:06: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:82:C1:90:C4:DB:97:EC:5B:B6:F8:7E:14:FD:7E:A7:44:FC:F7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: 23.174.152.0/23 69.67.164.0/22 162.254.224.0/21 207.29.192.0/21 IPv6: 2607:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c0:62:f8:9b:72:50:81:75:59:8c:8b:46:bd:87:fd:ff:fe: 52:d9:9b:06:0e:db:8f:a3:d7:2c:5e:98:87:0c:88:d1:b7:7a: 84:d6:02:07:ff:37:c9:96:18:94:19:38:be:68:28:d7:db:ce: fd:b1:0c:fb:99:8c:ae:13:69:b3:6d:b6:c2:e3:87:9e:95:af: 0b:fc:e3:6e:24:dc:eb:bb:bf:95:02:fc:90:a5:83:7c:80:d2: f8:26:2b:e7:90:d3:6a:00:57:ac:20:a2:4b:e1:0d:21:a3:53: 07:58:46:84:3d:b6:cd:2a:12:16:fc:81:61:5d:47:98:6e:6f: 17:a1:25:c5:09:57:50:8b:cb:2d:16:cd:81:34:d9:45:89:a2: 56:07:20:02:c9:3d:e9:d3:30:85:13:49:a2:f3:f1:88:08:62: 11:fc:66:f9:36:35:ed:f3:47:7f:3b:95:d9:7b:6a:ff:c4:8f: 06:0e:63:01:a4:76:7c:06:3d:7d:e6:49:18:66:6e:8c:0a:18: cf:32:00:72:30:9e:2d:8e:24:4c:01:e4:10:de:dd:ff:0e:5d: 7e:e8:d1:16:64:c2:43:06:e3:08:7f:0a:67:11:0e:8f:9b:32: 28:69:b9:a2:d1:c5:90:29:2a:e4:d9:20:4e:6b:45:22:48:f8: c3:d3:91:42 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEoqn9M0sfhjkigKKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MDUwNjIwMDAyMVoXDTI1MDgwNDIwMDAyMVowLzEtMCsGA1UEAxMk ZGQwNTFiZDAtYzhjMi00OWU5LWFiMDQtZDM5YWY0NDk5ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIJYDlRs/c6fORllTHCGB98g8MHGifbwKm5u VvHTx0x9ysTFRge8syMQiMyoCMCGOLhK0DVnpRbWKrQoDmxryz00lTKnTH5rGUr5 iUNRPEcApcvFBKsndsHOhR+KKpomWxglJLju5XVjBruNvBa9ULEHq8JU0ly+6LuD Hpm4SUxIPEPfCrXxNdeSCt0lvOVjR8DtOTHqxOTqwMATz24NYAPNAb3NNs4ujf7F 7SOFFmvhRq45vf+PryYYtFh5aHmUbTCMZ9/gfQTA8i2JOKKl5/vMRF3q0NQmtfTE 0JiAM9kWjXCRB+OcYoErza5GywWtDcTzRIePWGRro7pMkwb3KQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFMaCwZDE25fsW7b4fhT9fqdE/PdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvMGMxZmVmYjEtNTZjZS0z NmVkLTk2NjAtN2Y2OTZlYWFkMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBF66YAwQC RUOkAwQDov7gAwQDzx3AMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACHAYvibclCB dVmMi0a9h/3//lLZmwYO24+j1yxemIcMiNG3eoTWAgf/N8mWGJQZOL5oKNfbzv2x DPuZjK4TabNttsLjh56Vrwv8424k3Ou7v5UC/JClg3yA0vgmK+eQ02oAV6wgokvh DSGjUwdYRoQ9ts0qEhb8gWFdR5hubxehJcUJV1CLyy0WzYE02UWJolYHIALJPenT MIUTSaLz8YgIYhH8Zvk2Ne3zR387ldl7av/EjwYOYwGkdnwGPX3mSRhmbowKGM8y AHIwni2OJEwB5BDe3f8OXX7o0RZkwkMG4wh/CmcRDo+bMihpuaLRxZApKuTZIE5r RSJI+MPTkUI= -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:55 2025 by rpki-client