$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa File: da29dd16-44c5-3bb1-af0e-adfb48371078.roa (raw, json) Hash identifier: EYP/ldzgN3Ikfamgrgb9AzEwijoMh5TsOpJ9Uhh1vNM= Subject key identifier: 8D:54:C6:7D:8C:F8:BD:54:2F:66:EF:CE:98:D7:13:5C:77:08:2B:92 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584A41105E697D136EFACBF4E480 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 7150 IP address blocks: 148.137.0.0/16 maxlen: 20 151.161.0.0/16 maxlen: 20 157.62.0.0/16 maxlen: 20 192.149.243.0/24 maxlen: 24 204.108.180.0/23 maxlen: 24 204.108.184.0/23 maxlen: 24 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:5e:69:7d:13:6e:fa:cb:f4:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=3afd8659-45cb-4f0c-ad57-63286b7f8130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:c0:5d:bb:b9:21:ee:d1:19:a9:d2:d1:56: 72:9b:b6:33:3b:c2:c7:5d:e5:55:74:95:ae:d3:79: cf:8c:29:a7:b3:1f:64:37:e6:bc:e7:69:70:9a:6b: d6:d3:ba:ef:87:88:50:27:4f:d7:11:56:f2:e3:52: c9:69:8a:fa:79:62:6d:78:c3:68:ff:7f:b4:2a:b3: 25:84:52:e8:ab:01:a4:ca:1a:95:9a:c4:5b:38:b1: 3d:b9:41:32:c0:ea:2f:93:d7:5e:40:fb:ec:f8:7e: af:40:25:6a:9c:f3:c3:ac:af:89:b8:cd:95:17:d5: 32:81:8e:45:c3:d0:28:58:59:0b:fd:48:3b:3a:55: 7c:c3:7d:72:b4:ec:bf:c4:eb:ed:ad:f3:59:60:2d: ad:54:99:f9:23:fe:1a:b6:fe:60:88:73:7e:24:0f: d8:97:b0:8c:86:2b:4b:5c:61:f0:b5:0e:b5:18:be: 9b:e6:ab:f7:fd:4a:9a:c4:c6:db:6d:b6:7f:5c:29: 34:be:39:4d:bc:68:05:7a:f9:4b:5f:4f:cb:85:7e: a2:63:ba:2f:61:41:44:a2:7a:ad:53:27:2c:1a:b6: fc:e6:eb:98:95:a9:c5:7e:16:70:b8:27:8c:a9:eb: 88:39:2d:b9:ae:b8:a8:66:21:fe:92:23:a5:98:69: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:C6:7D:8C:F8:BD:54:2F:66:EF:CE:98:D7:13:5C:77:08:2B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 148.137.0.0/16 151.161.0.0/16 157.62.0.0/16 192.149.243.0/24 204.108.180.0/23 204.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:39:50:fe:d7:ac:61:4e:93:e3:fb:5c:13:66:04:58:18:dd: b9:6e:68:25:e8:35:5d:eb:aa:c8:a8:e6:0a:e9:7e:bf:7f:b4: 01:9b:ca:97:53:d8:f8:82:10:2d:be:2c:c7:da:be:65:4d:00: a6:be:c5:d4:ce:45:37:76:9b:fd:1b:ff:92:5e:d5:73:1a:64: 4d:fc:ce:df:0d:a8:b4:7f:8b:49:19:be:bf:62:ca:f8:f5:8a: 60:25:f8:70:33:39:29:58:48:db:61:82:e6:cd:60:90:7f:c6: 63:57:f4:c6:11:77:f5:9c:7b:2d:4a:07:69:c9:8d:4d:24:c2: 9e:8a:e1:54:d6:d8:3b:32:71:1f:82:05:3e:c7:c9:42:7c:c4: c5:ba:9e:bf:71:f5:7c:cb:6f:5d:62:f9:cd:5e:56:6e:1b:23: 38:3b:83:18:29:60:da:21:0f:ad:0f:c4:b0:bf:8a:a7:a0:64: ca:1f:c4:61:f4:b0:aa:cb:ac:01:1d:ec:8a:5e:21:22:7a:10: 4b:b7:0c:23:8b:dd:06:5c:0e:96:15:58:96:13:9d:f4:ba:f4: f9:05:d0:42:48:31:8f:8c:d1:45:76:91:e4:90:4a:ac:59:2e: da:99:2e:38:86:a3:2a:3c:37:a0:6a:4a:58:ee:fb:28:16:ae: 94:12:b6:da -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEpBEF5pfRNu+sv05IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk M2FmZDg2NTktNDVjYi00ZjBjLWFkNTctNjMyODZiN2Y4MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+DAXbu5Ie7RGanS0VZym7YzO8LHXeVVdJWu 03nPjCmnsx9kN+a852lwmmvW07rvh4hQJ0/XEVby41LJaYr6eWJteMNo/3+0KrMl hFLoqwGkyhqVmsRbOLE9uUEywOovk9deQPvs+H6vQCVqnPPDrK+JuM2VF9UygY5F w9AoWFkL/Ug7OlV8w31ytOy/xOvtrfNZYC2tVJn5I/4atv5giHN+JA/Yl7CMhitL XGHwtQ61GL6b5qv3/UqaxMbbbbZ/XCk0vjlNvGgFevlLX0/LhX6iY7ovYUFEonqt UycsGrb85uuYlanFfhZwuCeMqeuIOS25rrioZiH+kiOlmGnm0QIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFI1Uxn2M+L1UL2bvzpjXE1x3CCuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZGEyOWRkMTYtNDRjNS0z YmIxLWFmMGUtYWRmYjQ4MzcxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAlIkDAwCX oQMDAJ0+AwQAwJXzAwQBzGy0AwQCzGy4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACU5UP7XrGFOk+P7XBNm BFgY3bluaCXoNV3rqsio5grpfr9/tAGbypdT2PiCEC2+LMfavmVNAKa+xdTORTd2 m/0b/5Je1XMaZE38zt8NqLR/i0kZvr9iyvj1imAl+HAzOSlYSNthgubNYJB/xmNX 9MYRd/Wcey1KB2nJjU0kwp6K4VTW2DsycR+CBT7HyUJ8xMW6nr9x9XzLb11i+c1e Vm4bIzg7gxgpYNohD60PxLC/iqegZMofxGH0sKrLrAEd7IpeISJ6EEu3DCOL3QZc DpYVWJYTnfS69PkF0EJIMY+M0UV2keSQSqxZLtqZLjiGoyo8N6BqSlju+ygWrpQS tto= -----END CERTIFICATE-----Generated at Tue Jul 1 16:52:01 2025 by rpki-client