$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa File: 87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json) Hash identifier: 7JswBxQJ2v/bCB5sKO7g9WwfgRjAHIwpcFDzX9GNZZs= Subject key identifier: 0B:93:A6:B2:7A:C9:D7:9E:E5:B1:FC:3D:85:6D:31:DF:EA:2D:11:70 Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F4328584957F41042BDCD9AFC859B4160 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 1299 IP address blocks: 72.251.128.0/19 maxlen: 24 158.62.224.0/19 maxlen: 24 209.25.224.0/21 maxlen: 24 2605:d2c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:10:42:bd:cd:9a:fc:85:9b:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c163a12d-2637-41fa-9806-b59cde384340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:0f:b5:cd:5e:cc:09:0f:3e:5b:11:79:05: 34:54:7b:0d:80:18:96:77:6f:0e:72:82:54:6c:23: f5:d9:8b:dd:45:12:e4:b1:e1:d2:d4:ac:b7:3d:3c: 64:0c:8a:42:0b:d7:70:e9:53:30:36:10:3b:6e:4d: 52:01:1e:7d:85:5c:05:be:4e:97:4b:01:66:a0:39: 48:c1:81:a5:70:e0:da:c7:5c:27:ff:58:74:87:ea: 04:3d:18:7f:13:97:8e:42:09:28:d5:f6:98:6a:65: 98:ed:16:95:01:df:44:34:ef:6d:00:50:b8:39:2d: 34:b4:c6:34:2d:98:fb:57:0f:b7:5f:95:31:7b:91: b7:6d:80:8f:49:8c:35:e5:dc:3c:73:0c:c7:de:e5: 4c:80:25:68:7e:a1:21:5f:9e:7b:9a:30:fe:32:48: 3c:92:cd:65:65:68:6d:f7:64:e0:5d:71:74:7b:6a: 43:0b:3e:99:b9:b4:b7:69:d8:ee:ca:0c:19:ea:b6: f5:21:1e:4e:da:f3:2b:ef:ef:12:52:62:b7:d3:63: 57:f3:ab:33:a4:e6:a9:3c:42:b1:f3:b0:83:ad:ec: 85:a4:06:07:51:71:5d:46:7e:3d:db:4d:56:53:e0: 95:2d:a3:fe:e3:2f:f5:cb:30:e1:3c:ca:fd:3f:54: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:93:A6:B2:7A:C9:D7:9E:E5:B1:FC:3D:85:6D:31:DF:EA:2D:11:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 72.251.128.0/19 158.62.224.0/19 209.25.224.0/21 IPv6: 2605:d2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b1:43:ba:ee:bf:4a:c6:b7:f1:4d:4b:c4:75:1a:bc:c4:4c: 13:6e:e4:58:07:33:c0:52:bb:ef:7e:3c:49:ba:51:18:2e:f3: 99:d2:87:34:fd:c9:f9:a8:97:71:16:35:c8:4a:28:fc:5d:4a: 8e:2d:a1:0b:e5:12:f5:e9:7d:dc:05:e1:35:1a:38:7f:a7:ea: 36:f1:cc:d0:40:52:86:cc:e5:57:f7:e6:30:68:6f:11:01:02: 18:a7:5f:e7:65:4b:07:fe:72:b2:5d:ed:8d:d8:53:77:d8:ca: b7:bd:47:ac:a5:e4:02:a3:b9:aa:68:bf:32:72:10:0c:94:6c: 90:c4:cc:ad:4c:3b:7a:84:8d:a5:b5:66:b2:9f:53:00:a5:4d: 00:fc:bc:f7:98:3a:b7:95:eb:ec:1a:39:fc:1b:47:a5:1a:4c: 22:de:bd:a7:83:55:d6:6d:da:83:7d:3a:88:d1:7a:ae:5d:bd: db:a0:50:12:b0:42:da:b6:41:72:77:37:62:a5:92:75:b0:06: 5a:1e:ae:62:3b:30:b3:10:42:4e:2d:6b:1e:3d:e7:d0:a6:a2: 2a:77:0f:cb:23:c1:77:6f:29:a3:6c:5d:6d:52:22:77:9b:b4: 06:d9:14:5e:6d:cb:34:54:42:39:04:12:2b:37:b2:33:cb:c4: 92:ae:11:61 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWElX9BBCvc2a/IWbQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzE2M2ExMmQtMjYzNy00MWZhLTk4MDYtYjU5Y2RlMzg0MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsPtc1ezAkPPlsReQU0VHsNgBiWd28OcoJU bCP12YvdRRLkseHS1Ky3PTxkDIpCC9dw6VMwNhA7bk1SAR59hVwFvk6XSwFmoDlI wYGlcODax1wn/1h0h+oEPRh/E5eOQgko1faYamWY7RaVAd9ENO9tAFC4OS00tMY0 LZj7Vw+3X5Uxe5G3bYCPSYw15dw8cwzH3uVMgCVofqEhX557mjD+Mkg8ks1lZWht 92TgXXF0e2pDCz6ZubS3adjuygwZ6rb1IR5O2vMr7+8SUmK302NX86szpOapPEKx 87CDreyFpAYHUXFdRn49201WU+CVLaP+4y/1yzDhPMr9P1RluQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFAuTprJ6ydee5bH8PYVtMd/qLRFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvODdkNjMxNWItOGIzYi0z YmE4LTliZTQtYTViNzQzM2U2MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFSPuAAwQF nj7gAwQD0RngMA0EAgACMAcDBQAmBdLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIaxQ7ruv0rGt/FNS8R1 GrzETBNu5FgHM8BSu+9+PEm6URgu85nShzT9yfmol3EWNchKKPxdSo4toQvlEvXp fdwF4TUaOH+n6jbxzNBAUobM5Vf35jBobxEBAhinX+dlSwf+crJd7Y3YU3fYyre9 R6yl5AKjuapovzJyEAyUbJDEzK1MO3qEjaW1ZrKfUwClTQD8vPeYOreV6+waOfwb R6UaTCLevaeDVdZt2oN9OojReq5dvdugUBKwQtq2QXJ3N2KlknWwBloermI7MLMQ Qk4tax4959Cmoip3D8sjwXdvKaNsXW1SInebtAbZFF5tyzRUQjkEEis3sjPLxJKu EWE= -----END CERTIFICATE-----Generated at Thu May 8 12:20:15 2025 by rpki-client