$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa File: 28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json) Hash identifier: PWvcD6mtBa+7F6+jxpQ9fzI09SEi7TpZlVktA1nHm40= Subject key identifier: 11:8B:38:1C:9D:5B:BE:9D:A3:52:0D:E2:EB:2F:EB:2A:9E:B2:C1:B7 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584AD3A0F017BC5DC283B18EFC00 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 52.144.58.0/24 maxlen: 24 168.245.151.0/24 maxlen: 24 192.139.134.0/24 maxlen: 24 199.19.89.0/24 maxlen: 24 199.19.90.0/24 maxlen: 24 199.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f0:17:bc:5d:c2:83:b1:8e:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=3e7e8c64-b021-4724-81bb-00b4d542d639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:6a:f0:a5:ec:d6:93:82:6e:a7:0c:7a:1d: 78:fb:35:90:ae:d6:9b:d1:51:da:14:aa:41:a1:84: 9f:b2:79:70:31:9e:ae:20:95:88:a4:c2:1c:39:51: d4:4f:ac:43:d6:42:43:0b:e7:98:fb:dc:cb:ef:0a: 2c:05:14:a2:5f:aa:ca:87:eb:82:c4:4e:2c:b1:d2: 14:88:e3:41:0b:66:a6:39:24:00:61:e8:96:93:d1: 54:5e:61:f4:26:a2:45:11:4b:81:9f:0d:95:7b:1a: 86:d0:7a:ba:b5:83:14:81:43:ca:9d:2b:fd:49:b7: cb:d8:89:1f:de:ae:f0:63:d0:80:d8:58:c0:9e:8a: b1:2d:d3:d5:1b:6e:89:dc:84:2e:05:8f:11:af:55: 5f:86:f0:6f:1a:aa:97:3d:b1:91:cf:53:5a:fb:47: 28:33:a9:be:39:e5:52:7a:36:f0:15:b6:12:63:63: 00:ba:74:30:78:87:cf:75:15:df:e5:62:3d:bc:00: 63:a3:f5:11:72:4a:fe:5f:a3:1b:0d:3f:cb:e4:0d: ee:f2:f6:5f:05:cb:b6:44:ae:dd:ce:94:62:89:33: b2:e2:fe:31:bf:47:8d:29:81:90:8d:76:b3:d9:f0: 6c:df:2c:0d:4f:d3:5b:a9:12:b9:99:ec:03:64:f3: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8B:38:1C:9D:5B:BE:9D:A3:52:0D:E2:EB:2F:EB:2A:9E:B2:C1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.89.0-199.19.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:aa:0c:b5:d1:a5:ea:21:66:2d:3b:22:e2:21:00:71:39:2a: cd:53:e3:c2:e0:14:d1:94:ff:79:18:9b:84:f3:b3:58:e0:ef: 77:d2:d2:18:2e:7f:58:7d:f1:90:63:3b:f0:d7:39:bb:e1:4f: 6b:5e:bf:e9:f0:12:95:68:31:79:1c:2f:f2:bf:06:0c:57:21: ef:60:10:9b:40:16:4f:09:9b:60:bb:07:1e:e5:f6:85:de:7d: 69:86:1e:2c:fe:26:b8:53:36:4b:a0:6a:07:92:4a:a6:9b:f4: 65:03:26:13:76:93:97:d4:64:c4:be:c1:7e:48:88:b7:18:8b: ec:03:9d:99:5f:b9:8f:26:57:89:0b:d1:2f:41:cf:f5:c3:39: 16:53:54:d8:92:cf:5c:47:bc:d5:a2:c2:77:ea:3b:41:f4:d1: c6:fb:5a:21:56:71:94:ea:55:13:72:1c:ec:c0:d8:1f:30:84: 43:47:ee:d0:9c:07:9f:76:77:9f:60:81:19:57:0b:89:76:15: 7e:b7:8c:75:45:70:a3:27:09:f9:76:7a:08:af:ef:b2:9f:b7: 8c:29:55:54:d7:63:ea:f9:20:bf:07:c3:9d:fe:66:41:ea:b8: 52:6f:68:b0:66:5b:a5:00:05:9e:00:17:61:a7:86:fe:f1:1a: e1:ea:57:fd -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWErToPAXvF3Cg7GO/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk M2U3ZThjNjQtYjAyMS00NzI0LTgxYmItMDBiNGQ1NDJkNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXBq8KXs1pOCbqcMeh14+zWQrtab0VHaFKpB oYSfsnlwMZ6uIJWIpMIcOVHUT6xD1kJDC+eY+9zL7wosBRSiX6rKh+uCxE4ssdIU iONBC2amOSQAYeiWk9FUXmH0JqJFEUuBnw2VexqG0Hq6tYMUgUPKnSv9SbfL2Ikf 3q7wY9CA2FjAnoqxLdPVG26J3IQuBY8Rr1VfhvBvGqqXPbGRz1Na+0coM6m+OeVS ejbwFbYSY2MAunQweIfPdRXf5WI9vABjo/URckr+X6MbDT/L5A3u8vZfBcu2RK7d zpRiiTOy4v4xv0eNKYGQjXaz2fBs3ywNT9NbqRK5mewDZPOBUQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFBGLOBydW76do1IN4usv6yqessG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMjg2NjRhOWEtZTEyMC0z NzAxLWIwYjctYjU4NTg2NThiZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAd6oMtdGl6iFmLTsi4iEA cTkqzVPjwuAU0ZT/eRibhPOzWODvd9LSGC5/WH3xkGM78Nc5u+FPa16/6fASlWgx eRwv8r8GDFch72AQm0AWTwmbYLsHHuX2hd59aYYeLP4muFM2S6BqB5JKppv0ZQMm E3aTl9RkxL7BfkiItxiL7AOdmV+5jyZXiQvRL0HP9cM5FlNU2JLPXEe81aLCd+o7 QfTRxvtaIVZxlOpVE3Ic7MDYHzCEQ0fu0JwHn3Z3n2CBGVcLiXYVfreMdUVwoycJ +XZ6CK/vsp+3jClVVNdj6vkgvwfDnf5mQeq4Um9osGZbpQAFngAXYaeG/vEa4epX /Q== -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:11 2025 by rpki-client