$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/aab3d6f9-48f6-3307-b84a-93f7c0538486.roa File: aab3d6f9-48f6-3307-b84a-93f7c0538486.roa (raw, json) Hash identifier: /9jIEwv8pyTUI0gtDRqNp9jVUHM8G7m4R+T5y+l68V4= Subject key identifier: 71:53:70:43:7F:6D:EB:C5:BD:FB:53:1B:13:7A:38:06:46:23:6C:0D Certificate issuer: /CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded Certificate serial: 010D0C9F4328584A43DAFE35C323CB3136A21900 Authority key identifier: 00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/aab3d6f9-48f6-3307-b84a-93f7c0538486.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 26271 IP address blocks: 64.25.192.0/20 maxlen: 24 107.161.128.0/20 maxlen: 24 107.181.192.0/19 maxlen: 24 138.229.32.0/19 maxlen: 24 162.249.112.0/22 maxlen: 24 162.250.24.0/21 maxlen: 24 207.241.128.0/20 maxlen: 24 2606:e400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fe:35:c3:23:cb:31:36:a2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=4e0f23d6-6218-46c6-ad1d-2d072a1c5cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:b6:cf:98:8d:9b:7c:dc:5d:dd:47:b2:86: e4:eb:8b:23:da:92:41:37:b9:44:42:9d:4a:ea:89: 0e:3b:ba:10:e9:b2:5b:e5:32:37:47:3c:57:ed:f0: 82:fe:72:44:20:66:ac:35:30:18:ba:ae:fb:11:39: 08:b5:59:f6:ec:49:8d:9c:49:7d:79:bc:24:ae:66: 87:32:9e:cd:c6:18:31:c9:69:14:f8:80:cf:5c:2b: 0b:e9:f1:8b:a6:c0:60:51:7a:cb:58:0f:e1:10:fb: 55:f7:c7:a8:50:8d:e1:5e:88:55:a2:ba:6e:3c:1d: 7f:2d:f4:52:fb:5c:cf:5f:f0:ab:db:48:c3:db:a0: 67:70:b7:10:bb:f5:5b:30:4a:5e:41:10:6a:3b:73: 8a:d6:8c:42:51:72:f7:14:3a:70:cf:88:ed:3b:c6: f6:8e:50:5c:11:66:24:54:a8:23:09:6d:f5:fb:73: 02:9e:51:3a:32:ed:f0:3c:82:ee:e8:cc:29:39:98: e8:dc:92:61:9a:ca:90:34:09:97:4a:f5:71:d1:7c: b1:98:12:ec:01:e0:d3:a9:8e:99:c7:09:4f:81:eb: 29:bd:99:a2:57:d4:7e:4b:69:d4:89:01:3c:a3:90: 14:31:91:7f:bf:6d:c0:af:1c:2e:0a:a2:b3:63:f6: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:53:70:43:7F:6D:EB:C5:BD:FB:53:1B:13:7A:38:06:46:23:6C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/aab3d6f9-48f6-3307-b84a-93f7c0538486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.crl X509v3 Authority Key Identifier: keyid:00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer sbgp-ipAddrBlock: critical IPv4: 64.25.192.0/20 107.161.128.0/20 107.181.192.0/19 138.229.32.0/19 162.249.112.0/22 162.250.24.0/21 207.241.128.0/20 IPv6: 2606:e400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:96:46:1e:7a:2a:9e:f2:22:a5:b5:c7:71:71:d2:dc:fa:54: bb:d6:c7:d5:5f:c2:00:40:7a:8b:85:ed:23:91:2f:6a:a7:01: b0:44:d4:ad:f7:6f:b2:53:9b:6d:05:81:7d:1c:1c:56:f6:97: 15:20:04:47:78:38:c4:ff:e8:68:61:20:7e:98:70:3c:c0:7d: 56:da:f3:e8:9c:93:12:59:dd:83:35:81:08:72:cb:b1:9d:0f: d9:f6:b7:9c:61:37:13:d7:65:b0:6e:2a:1e:d5:32:59:36:41: 58:3c:bd:27:90:10:12:d0:67:e2:d3:b0:2b:06:3a:62:b8:50: 24:e0:09:56:b7:3b:24:80:4b:78:a7:4c:4a:7a:20:6f:e2:af: 3b:16:a4:dd:51:7e:9a:e4:aa:be:00:f0:6d:58:f0:b4:3c:54: 4c:26:46:20:c2:c6:21:49:67:b6:ef:5b:8a:29:95:f1:eb:39: d7:a1:c1:f3:43:e5:5a:7f:bf:e5:72:97:e2:95:db:b1:db:41: ed:29:a8:58:72:31:ab:18:ba:83:68:8f:56:1a:58:0c:bc:f4: 44:89:28:f0:4e:04:c6:c2:2f:ce:ee:17:cd:a8:af:b1:a8:ee: fa:2d:ae:f5:ac:c2:fa:8a:db:ef:f9:e5:5d:4a:93:a5:47:0f: a9:5c:d8:76 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEpD2v41wyPLMTaiGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmNzMyMmUtOGU0MS00Y2JiLTgwNWQtYWI2ZjY3MjI2 ZGVkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NGUwZjIzZDYtNjIxOC00NmM2LWFkMWQtMmQwNzJhMWM1Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl+2z5iNm3zcXd1Hsobk64sj2pJBN7lEQp1K 6okOO7oQ6bJb5TI3RzxX7fCC/nJEIGasNTAYuq77ETkItVn27EmNnEl9ebwkrmaH Mp7NxhgxyWkU+IDPXCsL6fGLpsBgUXrLWA/hEPtV98eoUI3hXohVorpuPB1/LfRS +1zPX/Cr20jD26BncLcQu/VbMEpeQRBqO3OK1oxCUXL3FDpwz4jtO8b2jlBcEWYk VKgjCW31+3MCnlE6Mu3wPILu6MwpOZjo3JJhmsqQNAmXSvVx0XyxmBLsAeDTqY6Z xwlPgespvZmiV9R+S2nUiQE8o5AUMZF/v23ArxwuCqKzY/Z4mwIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFHFTcEN/bevFvftTGxN6OAZGI2wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZGY3 MzIyZS04ZTQxLTRjYmItODA1ZC1hYjZmNjcyMjZkZWQvYWFiM2Q2ZjktNDhmNi0z MzA3LWI4NGEtOTNmN2MwNTM4NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGRmNzMyMmUtOGU0MS00Y2JiLTgw NWQtYWI2ZjY3MjI2ZGVkL2RkZjczMjJlLThlNDEtNGNiYi04MDVkLWFiNmY2NzIy NmRlZC5jcmwwHwYDVR0jBBgwFoAUACcrBhw1wzY7aZSNxCvM8E6Elw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZGY3MzIyZS04ZTQxLTRjYmItODA1ZC1hYjZm NjcyMjZkZWQuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQBnAAwQE a6GAAwQFa7XAAwQFiuUgAwQCovlwAwQDovoYAwQEz/GAMA0EAgACMAcDBQAmBuQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGOWRh56Kp7yIqW1x3Fx0tz6VLvWx9VfwgBAeouF7SORL2qnAbBE 1K33b7JTm20FgX0cHFb2lxUgBEd4OMT/6GhhIH6YcDzAfVba8+ickxJZ3YM1gQhy y7GdD9n2t5xhNxPXZbBuKh7VMlk2QVg8vSeQEBLQZ+LTsCsGOmK4UCTgCVa3OySA S3inTEp6IG/irzsWpN1Rfprkqr4A8G1Y8LQ8VEwmRiDCxiFJZ7bvW4oplfHrOdeh wfND5Vp/v+Vyl+KV27HbQe0pqFhyMasYuoNoj1YaWAy89ESJKPBOBMbCL87uF82o r7Go7votrvWswvqK2+/55V1Kk6VHD6lc2HY= -----END CERTIFICATE-----Generated at Wed Jul 2 14:38:38 2025 by rpki-client