$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa File: a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json) Hash identifier: sgeY7SnbqMTq01y0uI2zzwF8SsSND3OEceJ4RZ/Nn+k= Subject key identifier: 71:32:A4:B9:7E:E3:FD:C8:52:40:27:5E:6D:73:57:44:CE:4C:EA:FF Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285849CBCFA78CFC119203263D6E00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 17378 IP address blocks: 208.69.108.0/22 maxlen: 24 208.88.240.0/22 maxlen: 24 209.59.0.0/19 maxlen: 24 209.92.7.0/24 maxlen: 24 209.92.39.0/24 maxlen: 24 209.92.44.0/24 maxlen: 24 209.92.53.0/24 maxlen: 24 209.92.56.0/24 maxlen: 24 209.92.62.0/24 maxlen: 24 209.92.68.0/24 maxlen: 24 209.92.70.0/23 maxlen: 24 209.92.74.0/23 maxlen: 24 209.92.79.0/24 maxlen: 24 209.92.88.0/24 maxlen: 24 209.92.90.0/23 maxlen: 24 209.92.137.0/24 maxlen: 24 209.92.224.0/21 maxlen: 24 209.177.16.0/22 maxlen: 24 216.27.0.0/18 maxlen: 24 216.27.64.0/19 maxlen: 24 216.46.48.0/20 maxlen: 24 216.48.112.0/20 maxlen: 24 216.58.224.0/19 maxlen: 24 216.150.128.0/19 maxlen: 24 216.182.80.0/20 maxlen: 24 216.211.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a7:8c:fc:11:92:03:26:3d:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=71abf2be-d5e6-401a-8ea4-13808991640e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:73:91:08:d6:72:ec:99:ab:8a:9a:d1:8f: fa:b9:0b:05:37:c0:be:a1:67:2f:e3:8f:50:f1:6c: 70:2e:1f:24:dc:f2:a8:02:8d:29:49:54:f3:99:7a: 99:5a:82:b2:26:8a:28:d3:b8:2d:70:b4:55:f2:37: a0:89:7e:74:01:87:58:ea:b1:6d:48:76:08:69:2d: 1c:a8:ee:7c:24:85:17:cf:8a:ef:ac:59:cd:19:eb: dc:1b:b3:45:63:e6:12:9c:2c:d9:99:ca:2a:3b:ab: e3:ee:04:e5:2a:ad:17:a4:07:a8:b8:c4:a7:23:c9: 6f:33:7f:b3:69:65:9a:47:f0:86:87:26:a0:bf:e0: 6c:db:ad:b6:84:3c:30:81:ac:f1:9f:43:7c:b5:1f: 1c:29:9d:c2:62:a5:57:75:ff:e5:b0:01:f2:da:2f: 39:2e:dc:1d:9d:1e:30:d3:29:9e:f6:e0:42:ec:55: 80:a5:0d:80:bc:45:8f:f6:b6:ca:c3:1c:f1:45:ca: 7e:4b:90:71:ea:ad:69:c7:fd:ae:86:29:59:df:66: 7e:22:b8:34:68:fe:f3:a4:24:1e:f9:1f:29:92:ad: 5e:af:b5:0b:9f:f4:c7:ee:d5:6a:14:df:77:54:e6: fa:92:b0:b1:ad:e4:8a:b4:1e:bb:da:82:99:98:7d: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:32:A4:B9:7E:E3:FD:C8:52:40:27:5E:6D:73:57:44:CE:4C:EA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.69.108.0/22 208.88.240.0/22 209.59.0.0/19 209.92.7.0/24 209.92.39.0/24 209.92.44.0/24 209.92.53.0/24 209.92.56.0/24 209.92.62.0/24 209.92.68.0/24 209.92.70.0/23 209.92.74.0/23 209.92.79.0/24 209.92.88.0/24 209.92.90.0/23 209.92.137.0/24 209.92.224.0/21 209.177.16.0/22 216.27.0.0-216.27.95.255 216.46.48.0/20 216.48.112.0/20 216.58.224.0/19 216.150.128.0/19 216.182.80.0/20 216.211.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:28:a1:8c:ee:3d:42:2f:43:73:3a:95:2f:31:0c:0d:58:fd: 1c:b1:c2:10:c5:e2:ae:20:6b:11:13:99:d2:4c:fc:af:f9:af: 18:6f:cd:90:24:ce:13:cb:14:93:e8:3b:eb:ef:ff:e5:0c:8b: 2b:e4:d0:37:c4:c6:a3:04:d1:b3:17:67:ef:2c:82:90:87:8e: 1c:ba:01:d0:b5:e6:9d:fa:46:95:c6:cd:ea:4f:ea:94:fa:c5: 04:41:c7:2b:b3:19:0c:bf:ee:b7:20:37:e4:eb:c1:c7:4c:c5: 83:c5:83:b0:28:ec:51:13:0c:8f:27:eb:54:89:bc:a0:b6:4a: 17:db:f8:46:7e:b3:21:5d:aa:52:8a:6a:12:3d:d0:15:ca:f4: 92:8c:fc:55:d8:f2:5a:f0:5a:27:c2:64:97:6c:d6:65:16:dc: 53:5b:7f:23:bf:95:d9:62:93:01:c0:3f:22:5b:34:34:2b:e7: fe:23:5c:fa:1a:b3:11:1d:5e:fc:01:bc:e2:ea:94:7d:6f:35: cf:06:4e:60:32:ed:1b:e6:a2:89:54:d1:ef:b3:1c:8f:03:ee: ca:9b:30:7b:c8:f2:21:2c:41:29:07:ec:95:4a:8e:61:2d:cd: d0:93:ef:37:0b:1b:1c:31:c5:3c:58:1a:4d:ee:7d:8e:f2:84: f9:a6:08:b0 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWEnLz6eM/BGSAyY9bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NzFhYmYyYmUtZDVlNi00MDFhLThlYTQtMTM4MDg5OTE2NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymRzkQjWcuyZq4qa0Y/6uQsFN8C+oWcv449Q 8WxwLh8k3PKoAo0pSVTzmXqZWoKyJooo07gtcLRV8jegiX50AYdY6rFtSHYIaS0c qO58JIUXz4rvrFnNGevcG7NFY+YSnCzZmcoqO6vj7gTlKq0XpAeouMSnI8lvM3+z aWWaR/CGhyagv+Bs2622hDwwgazxn0N8tR8cKZ3CYqVXdf/lsAHy2i85LtwdnR4w 0yme9uBC7FWApQ2AvEWP9rbKwxzxRcp+S5Bx6q1px/2uhilZ32Z+Irg0aP7zpCQe +R8pkq1er7ULn/TH7tVqFN93VOb6krCxreSKtB672oKZmH2rLwIDAQABo4ID8TCC A+0wHQYDVR0OBBYEFHEypLl+4/3IUkAnXm1zV0TOTOr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTUyNjM1M2YtMmRkYy0z NDU3LWJjNDEtZGExY2QxY2MwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE 2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGkooYzuPUIvQ3M6lS8xDA1Y/RyxwhDF4q4gaxET mdJM/K/5rxhvzZAkzhPLFJPoO+vv/+UMiyvk0DfExqME0bMXZ+8sgpCHjhy6AdC1 5p36RpXGzepP6pT6xQRBxyuzGQy/7rcgN+TrwcdMxYPFg7Ao7FETDI8n61SJvKC2 Shfb+EZ+syFdqlKKahI90BXK9JKM/FXY8lrwWifCZJds1mUW3FNbfyO/ldlikwHA PyJbNDQr5/4jXPoasxEdXvwBvOLqlH1vNc8GTmAy7RvmoolU0e+zHI8D7sqbMHvI 8iEsQSkH7JVKjmEtzdCT7zcLGxwxxTxYGk3ufY7yhPmmCLA= -----END CERTIFICATE-----Generated at Sat May 10 14:46:06 2025 by rpki-client