$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa File: b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa (raw, json) Hash identifier: y9DerCV/jLWD5/ufQvbf6n7PoYsNZbLAyfPwA3ZZqKI= Subject key identifier: 87:5F:5E:E2:09:A5:8E:AA:BE:72:9D:4A:2F:23:57:3E:F9:12:BC:F2 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285849CBCFA79DC3A4C799BF5E65C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 7181 IP address blocks: 208.69.108.0/22 maxlen: 24 208.88.240.0/22 maxlen: 24 209.59.0.0/19 maxlen: 24 209.92.7.0/24 maxlen: 24 209.92.39.0/24 maxlen: 24 209.92.44.0/24 maxlen: 24 209.92.53.0/24 maxlen: 24 209.92.56.0/24 maxlen: 24 209.92.62.0/24 maxlen: 24 209.92.68.0/24 maxlen: 24 209.92.70.0/23 maxlen: 24 209.92.74.0/23 maxlen: 24 209.92.79.0/24 maxlen: 24 209.92.88.0/24 maxlen: 24 209.92.90.0/23 maxlen: 24 209.92.137.0/24 maxlen: 24 209.92.224.0/21 maxlen: 24 209.177.16.0/22 maxlen: 24 216.27.0.0/18 maxlen: 24 216.27.64.0/19 maxlen: 24 216.46.48.0/20 maxlen: 24 216.48.112.0/20 maxlen: 24 216.58.224.0/19 maxlen: 24 216.150.128.0/19 maxlen: 24 216.182.80.0/20 maxlen: 24 216.211.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a7:9d:c3:a4:c7:99:bf:5e:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=7401fea9-b45e-4327-8752-9e0340214193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:b5:6a:4f:f2:ec:1a:a7:f0:ee:2e:f4:2b: 98:2d:34:7e:8f:1b:7f:39:b8:9d:f5:88:25:75:89: a8:93:cb:1d:4d:b9:67:51:6a:28:46:fe:27:fc:2f: e2:90:77:da:97:27:e3:62:36:6b:8e:86:2b:82:4d: a8:f7:c7:ee:a6:e8:73:68:e9:bd:f2:6b:6f:1e:ca: 57:cf:72:29:90:df:f5:17:8d:15:32:21:f5:33:1f: 09:0a:b5:d9:15:94:c8:ac:83:cc:a6:e1:88:18:cd: bf:ac:5f:4c:4d:b9:2c:3d:c4:04:b2:c2:d2:39:ec: d3:0b:7f:f0:ff:17:ee:a1:92:21:7c:60:5d:d2:0a: 73:96:db:f0:44:c0:47:c1:f1:4b:1e:45:da:97:e8: 45:fd:cc:6c:9d:52:06:97:30:b4:da:4e:0e:7e:0b: 47:77:3f:9e:f1:ea:88:5e:eb:f3:4d:d4:a8:92:b7: 54:a3:b0:27:6e:b1:a3:0e:a6:3d:35:6d:89:de:7b: c3:61:79:27:69:e0:0a:37:d8:70:b8:38:d1:79:ff: 90:4d:d6:32:8a:84:ea:a6:44:de:b1:c8:db:b1:f6: 71:2f:b0:d2:b1:ae:be:12:c3:66:b7:7c:f3:68:fc: c2:1f:b4:86:9c:ee:60:bb:9d:d0:87:f5:a5:a7:3d: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:5E:E2:09:A5:8E:AA:BE:72:9D:4A:2F:23:57:3E:F9:12:BC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.69.108.0/22 208.88.240.0/22 209.59.0.0/19 209.92.7.0/24 209.92.39.0/24 209.92.44.0/24 209.92.53.0/24 209.92.56.0/24 209.92.62.0/24 209.92.68.0/24 209.92.70.0/23 209.92.74.0/23 209.92.79.0/24 209.92.88.0/24 209.92.90.0/23 209.92.137.0/24 209.92.224.0/21 209.177.16.0/22 216.27.0.0-216.27.95.255 216.46.48.0/20 216.48.112.0/20 216.58.224.0/19 216.150.128.0/19 216.182.80.0/20 216.211.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a3:11:b5:95:92:4b:94:83:9d:84:f3:cb:88:9b:06:1b:f9: 36:97:92:4b:00:58:49:09:d2:9e:cb:46:ed:85:18:62:00:00: 16:cc:bc:f4:3e:b9:0a:ab:24:67:ea:fe:83:c7:3c:fe:e7:68: 35:c9:e6:53:2e:82:ce:d2:4e:14:70:64:d0:53:4f:e6:85:b0: 4a:65:98:b6:47:7d:41:6e:a5:1b:ae:90:fb:63:b0:ef:79:e9: c6:5c:5e:48:6a:0e:39:11:d8:a5:06:3d:c6:84:fd:ff:c6:23: 96:e1:2e:f3:b4:e4:fb:8a:bc:08:da:d2:d5:8c:88:25:18:36: 09:01:fa:98:69:68:03:ec:3c:d8:94:bc:7d:0b:23:2c:6b:05: ed:32:ab:f1:13:d9:90:99:4b:ca:c8:bb:2c:08:96:b9:9f:a5: c9:8c:c7:33:a6:45:d0:8c:94:44:af:86:b5:21:44:4b:ce:8f: 8f:d8:ac:7b:83:46:a4:de:b9:af:ea:a6:b6:7b:95:76:52:62: 50:3b:99:a2:d7:7d:a1:4f:92:66:e5:f7:44:a7:1b:44:43:98: 19:9b:06:ba:56:16:44:67:8e:f3:25:47:eb:9c:f0:e6:ef:83: b3:82:e5:af:56:f6:a1:45:6d:54:34:94:d6:74:36:72:a5:07: 51:01:5a:51 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWEnLz6edw6THmb9eZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NzQwMWZlYTktYjQ1ZS00MzI3LTg3NTItOWUwMzQwMjE0MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyze1ak/y7Bqn8O4u9CuYLTR+jxt/Obid9Ygl dYmok8sdTblnUWooRv4n/C/ikHfalyfjYjZrjoYrgk2o98fupuhzaOm98mtvHspX z3IpkN/1F40VMiH1Mx8JCrXZFZTIrIPMpuGIGM2/rF9MTbksPcQEssLSOezTC3/w /xfuoZIhfGBd0gpzltvwRMBHwfFLHkXal+hF/cxsnVIGlzC02k4OfgtHdz+e8eqI XuvzTdSokrdUo7AnbrGjDqY9NW2J3nvDYXknaeAKN9hwuDjRef+QTdYyioTqpkTe scjbsfZxL7DSsa6+EsNmt3zzaPzCH7SGnO5gu53Qh/Wlpz0N/wIDAQABo4ID8TCC A+0wHQYDVR0OBBYEFIdfXuIJpY6qvnKdSi8jVz75ErzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjkwZmJkOTctODgyMi0z NzQ1LWI0YTItZjNlNTQ0ZTljNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE 2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGGjEbWVkkuUg52E88uImwYb+TaXkksAWEkJ0p7L Ru2FGGIAABbMvPQ+uQqrJGfq/oPHPP7naDXJ5lMugs7SThRwZNBTT+aFsEplmLZH fUFupRuukPtjsO956cZcXkhqDjkR2KUGPcaE/f/GI5bhLvO05PuKvAja0tWMiCUY NgkB+phpaAPsPNiUvH0LIyxrBe0yq/ET2ZCZS8rIuywIlrmfpcmMxzOmRdCMlESv hrUhREvOj4/YrHuDRqTeua/qprZ7lXZSYlA7maLXfaFPkmbl90SnG0RDmBmbBrpW FkRnjvMlR+uc8Obvg7OC5a9W9qFFbVQ0lNZ0NnKlB1EBWlE= -----END CERTIFICATE-----Generated at Sat May 10 15:20:10 2025 by rpki-client