$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json) Hash identifier: Hm1aIZ3lmXAojU2rmP+28VthOX/+O53IB5Ko+txjzqU= Subject key identifier: 68:26:44:A6:E8:B0:2E:5C:AB:75:9D:02:2E:E1:DB:6B:96:55:1B:AC Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A305036CCA2F5FD329122B900 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 10397 IP address blocks: 162.244.96.0/24 maxlen: 24 162.244.97.0/24 maxlen: 24 162.244.98.0/24 maxlen: 24 162.244.99.0/24 maxlen: 24 162.244.100.0/24 maxlen: 24 162.244.101.0/24 maxlen: 24 204.16.48.0/24 maxlen: 24 208.67.12.0/24 maxlen: 24 208.67.13.0/24 maxlen: 24 208.67.14.0/24 maxlen: 24 208.67.15.0/24 maxlen: 24 208.85.128.0/24 maxlen: 24 208.85.133.0/24 maxlen: 24 208.85.134.0/24 maxlen: 24 208.85.135.0/24 maxlen: 24 209.42.166.0/24 maxlen: 24 209.42.191.0/24 maxlen: 24 209.209.128.0/21 maxlen: 21 209.209.139.0/24 maxlen: 24 209.209.140.0/22 maxlen: 22 209.209.141.0/24 maxlen: 24 209.209.144.0/20 maxlen: 20 209.209.160.0/20 maxlen: 20 209.209.163.0/24 maxlen: 24 209.209.167.0/24 maxlen: 24 209.209.176.0/22 maxlen: 22 209.209.180.0/23 maxlen: 23 209.209.181.0/24 maxlen: 24 209.209.183.0/24 maxlen: 24 209.209.184.0/24 maxlen: 24 209.209.186.0/23 maxlen: 23 209.209.189.0/24 maxlen: 24 209.209.190.0/23 maxlen: 23 209.250.32.0/19 maxlen: 19 2607:b600::/48 maxlen: 48 2607:b600:1::/48 maxlen: 48 2607:b600:2::/48 maxlen: 48 2607:b600:4::/48 maxlen: 48 2607:b600:5::/48 maxlen: 48 2607:b600:6::/48 maxlen: 48 2607:b600:8::/48 maxlen: 48 2607:b600:10::/48 maxlen: 48 2607:b600:12::/48 maxlen: 48 2607:b600:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:36:cc:a2:f5:fd:32:91:22:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=643d5f78-9a9e-4c8f-b8cc-9f4d2c3f0d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c5:fe:4a:e6:af:23:3f:71:79:79:73:47:f3: 0e:38:f5:45:b9:f9:e5:66:11:0c:5c:24:b6:c7:ca: ed:5b:7f:1e:8c:cf:df:aa:44:7b:b5:6a:58:98:0d: 52:22:63:5e:c0:71:be:7b:9e:12:19:c7:e0:33:3f: 54:bc:58:b1:c6:f1:0a:e8:bf:6f:c9:f2:bd:76:40: e1:25:1a:77:32:ef:2b:a1:59:f3:ae:77:ed:79:be: 62:c2:56:2d:61:f8:21:92:c7:55:4a:ca:ed:6f:8e: 60:d8:62:3b:81:1a:43:1d:d8:85:96:95:34:86:d3: e8:8b:47:58:63:95:53:8f:fe:b9:46:02:4d:29:2e: 7a:62:b3:57:eb:85:d6:c5:c0:a3:31:39:72:26:81: 5b:e0:28:4d:9c:92:c4:0b:eb:8b:df:02:73:3f:35: b9:b7:3c:f7:bb:c9:6d:ad:d4:a0:f3:52:86:87:98: 09:cc:b2:04:40:fc:0b:5d:d3:85:ff:46:89:d0:6c: 59:3c:a0:a2:3a:40:d9:87:27:ad:59:2b:e2:f9:81: cd:8b:d8:08:c6:d7:75:b7:fa:89:5a:4a:d8:1c:2b: 6b:22:ba:c0:dc:4e:9f:63:0a:c5:be:85:e9:f9:f4: e8:44:38:73:76:8f:ae:3d:04:c9:ca:d6:b3:2a:9e: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:44:A6:E8:B0:2E:5C:AB:75:9D:02:2E:E1:DB:6B:96:55:1B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 162.244.96.0-162.244.101.255 204.16.48.0/24 208.67.12.0/22 208.85.128.0/24 208.85.133.0-208.85.135.255 209.42.166.0/24 209.42.191.0/24 209.209.128.0/21 209.209.139.0-209.209.181.255 209.209.183.0-209.209.184.255 209.209.186.0/23 209.209.189.0-209.209.191.255 209.250.32.0/19 IPv6: 2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff 2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff 2607:b600:8::/48 2607:b600:10::/48 2607:b600:12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a0:8e:8c:08:9d:04:7d:31:1f:08:78:3f:31:35:03:46:4a: d0:18:f4:f8:53:8e:ea:66:ed:23:b3:9f:db:3c:fa:f2:ad:0e: ec:11:9d:01:90:b2:cd:29:3e:4f:f8:a0:34:3c:53:b4:33:06: 2e:39:90:ca:da:26:90:bd:eb:07:6d:0a:fd:7b:0a:e5:9a:01: 7c:f7:ea:66:a4:ba:a9:f5:16:1f:1a:47:f7:f9:6d:bb:2c:10: 4e:56:a0:ae:3b:fa:4d:49:24:f7:48:93:13:f7:30:c4:72:e1: db:09:45:cd:4c:f5:a2:f9:f6:8f:41:82:37:84:3d:ba:5f:c7: 95:56:93:e6:72:ec:2a:10:c8:f4:27:ac:98:11:01:c7:2b:50: 17:ca:83:3d:bc:e1:ad:ad:c0:8b:a9:32:6a:5a:2d:d8:0c:89: 69:5c:62:da:c9:6f:31:4f:8f:d6:14:d6:df:5d:2f:52:f1:e9: 1f:e8:39:ba:40:44:64:81:b5:54:74:bf:a1:ae:08:f0:b4:b6: 41:59:fa:c5:fb:3c:1a:1d:d3:e6:2e:d3:23:cc:64:af:0a:83: 6a:96:4a:e8:94:8c:a5:8a:cd:18:79:31:f9:71:20:11:4f:cb: f2:09:9e:26:cb:af:a1:bd:b9:1a:24:50:df:62:8d:49:e4:f6: 18:fa:a9:33 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEowUDbMovX9MpEiuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjQzZDVmNzgtOWE5ZS00YzhmLWI4Y2MtOWY0ZDJjM2YwZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38X+SuavIz9xeXlzR/MOOPVFufnlZhEMXCS2 x8rtW38ejM/fqkR7tWpYmA1SImNewHG+e54SGcfgMz9UvFixxvEK6L9vyfK9dkDh JRp3Mu8roVnzrnfteb5iwlYtYfghksdVSsrtb45g2GI7gRpDHdiFlpU0htPoi0dY Y5VTj/65RgJNKS56YrNX64XWxcCjMTlyJoFb4ChNnJLEC+uL3wJzPzW5tzz3u8lt rdSg81KGh5gJzLIEQPwLXdOF/0aJ0GxZPKCiOkDZhyetWSvi+YHNi9gIxtd1t/qJ WkrYHCtrIrrA3E6fYwrFvoXp+fToRDhzdo+uPQTJytazKp5ukwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFGgmRKbosC5cq3WdAi7h22uWVRusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi 9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBSoI6MCJ0EfTEfCHg/MTUDRkrQGPT4U47qZu0js5/bPPryrQ7sEZ0BkLLNKT5P +KA0PFO0MwYuOZDK2iaQvesHbQr9ewrlmgF89+pmpLqp9RYfGkf3+W27LBBOVqCu O/pNSST3SJMT9zDEcuHbCUXNTPWi+faPQYI3hD26X8eVVpPmcuwqEMj0J6yYEQHH K1AXyoM9vOGtrcCLqTJqWi3YDIlpXGLayW8xT4/WFNbfXS9S8ekf6Dm6QERkgbVU dL+hrgjwtLZBWfrF+zwaHdPmLtMjzGSvCoNqlkrolIylis0YeTH5cSART8vyCZ4m y6+hvbkaJFDfYo1J5PYY+qkz -----END CERTIFICATE-----Generated at Mon Jun 30 19:00:16 2025 by rpki-client