$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa File: 1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa (raw, json) Hash identifier: XNpOL2gF8oUWKT680ZeB4TcW2q3ZgO+rZAxzmtNfAkU= Subject key identifier: 7F:63:48:F4:CC:76:8D:12:8C:2D:3A:BF:E2:0E:86:E3:6C:0A:ED:F4 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584A46A5A30F7DDFA40B35B29A60 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 63414 IP address blocks: 64.21.228.0/22 maxlen: 24 64.255.144.0/21 maxlen: 24 66.163.144.0/21 maxlen: 24 66.163.152.0/24 maxlen: 24 66.163.155.0/24 maxlen: 24 66.163.156.0/22 maxlen: 24 69.178.192.0/22 maxlen: 24 69.178.196.0/23 maxlen: 24 69.178.200.0/22 maxlen: 24 76.10.124.0/22 maxlen: 24 209.243.0.0/21 maxlen: 24 209.243.8.0/22 maxlen: 24 209.243.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:a3:0f:7d:df:a4:0b:35:b2:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=33833c64-31cf-408f-907c-ace8f854ad3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:3d:92:b6:cd:71:aa:77:a8:37:c2:ae:41: 96:31:9e:61:5e:3c:5c:dc:b0:16:78:55:e1:a0:09: 28:3c:ad:82:3f:f8:0a:30:81:dc:27:aa:c8:4f:00: cb:01:fd:6e:2e:1c:d9:a9:14:8b:b7:aa:35:76:0b: c0:8d:3c:ac:cc:ad:a2:9b:e8:a9:64:da:4f:d5:00: 5a:55:96:92:ca:2c:12:21:a5:6a:a5:ee:c8:9e:af: d9:a5:38:99:ba:a8:fa:ca:80:c6:5a:24:f0:4f:cc: 63:76:76:c7:ce:0e:95:d3:bd:3c:01:11:98:32:89: c6:42:46:8a:a5:a6:b5:c0:c0:da:01:8d:cc:3b:dc: ab:fe:b5:4c:1d:a7:c9:5c:44:d5:88:31:9f:29:16: a3:26:9e:93:8f:36:9c:85:00:25:a9:de:e3:94:f9: df:f7:ce:54:4f:a0:c5:41:61:19:88:b9:a4:dc:07: 45:81:b8:a2:12:1e:54:ed:3b:ae:1f:c7:b1:0c:2e: 53:0a:30:89:de:3d:57:98:c4:7e:fe:0a:21:87:c0: c9:dd:27:0d:0c:c1:1c:70:bc:06:a0:fe:84:99:2d: 94:d0:13:85:43:52:3d:df:95:e9:53:1e:f7:ce:10: 08:f0:3f:e0:11:26:2b:51:a2:a1:1d:31:6e:aa:75: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:63:48:F4:CC:76:8D:12:8C:2D:3A:BF:E2:0E:86:E3:6C:0A:ED:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.228.0/22 64.255.144.0/21 66.163.144.0-66.163.152.255 66.163.155.0-66.163.159.255 69.178.192.0-69.178.197.255 69.178.200.0/22 76.10.124.0/22 209.243.0.0-209.243.11.255 209.243.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1e:ad:19:48:03:67:d3:c6:ef:48:0b:07:e1:fb:85:3c:a2: 62:a0:0a:04:0a:85:4d:4e:1c:c5:90:b7:b1:ca:d6:10:fa:dd: 19:8f:50:2c:33:72:58:75:02:4b:f8:0a:f1:dc:67:5c:af:02: 0a:1a:a6:60:42:58:11:ec:f5:ef:1a:13:19:0d:fe:6a:27:77: a7:e8:a7:eb:8d:61:d3:8b:d2:3a:a8:7b:a2:a6:b3:f7:44:7e: 5a:6a:48:81:55:bd:bd:55:e4:fe:1a:42:17:7e:52:ee:b7:f6: 2b:55:f5:72:72:9d:14:61:2b:de:ba:81:56:63:a1:cd:77:d2: ba:63:4f:ab:75:c8:81:e9:cf:04:5d:f0:70:ee:3f:36:d4:5e: 21:93:91:4a:b1:11:bd:f6:79:0f:fb:37:af:ae:52:82:d4:6e: da:42:4f:b2:60:49:7d:4f:9e:6f:03:b8:51:e8:90:2c:7f:da: 17:e2:e0:86:60:47:4b:36:ec:66:a7:39:90:7c:e1:84:fa:f3: c7:84:d2:92:73:25:b1:05:ca:01:ef:02:b0:5a:0c:53:22:c3: 07:e4:73:02:94:e2:8c:5e:09:ef:13:dc:ba:6b:09:71:dc:d9: 01:72:28:7e:1e:b6:da:f1:f6:07:3b:bf:5f:ac:b6:81:91:f9: fa:b5:37:5b -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEpGpaMPfd+kCzWymmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk MzM4MzNjNjQtMzFjZi00MDhmLTkwN2MtYWNlOGY4NTRhZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEU9krbNcap3qDfCrkGWMZ5hXjxc3LAWeFXh oAkoPK2CP/gKMIHcJ6rITwDLAf1uLhzZqRSLt6o1dgvAjTyszK2im+ipZNpP1QBa VZaSyiwSIaVqpe7Inq/ZpTiZuqj6yoDGWiTwT8xjdnbHzg6V0708ARGYMonGQkaK paa1wMDaAY3MO9yr/rVMHafJXETViDGfKRajJp6TjzachQAlqd7jlPnf985UT6DF QWEZiLmk3AdFgbiiEh5U7TuuH8exDC5TCjCJ3j1XmMR+/gohh8DJ3ScNDMEccLwG oP6EmS2U0BOFQ1I935XpUx73zhAI8D/gESYrUaKhHTFuqnX1rwIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFH9jSPTMdo0SjC06v+IOhuNsCu30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvMTI4M2ViM2EtMDRlMC0z MmYyLWI1NGItMWJmNWE5NjE4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQCQBXkAwQD QP+QMAwDBARCo5ADBABCo5gwDAMEAEKjmwMEBUKjgDAMAwQGRbLAAwQBRbLEAwQC RbLIAwQCTAp8MAsDAwDR8wMEAtHzCAMEA9HzEDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvHq0ZSANn08bv SAsH4fuFPKJioAoECoVNThzFkLexytYQ+t0Zj1AsM3JYdQJL+Arx3GdcrwIKGqZg QlgR7PXvGhMZDf5qJ3en6KfrjWHTi9I6qHuiprP3RH5aakiBVb29VeT+GkIXflLu t/YrVfVycp0UYSveuoFWY6HNd9K6Y0+rdciB6c8EXfBw7j821F4hk5FKsRG99nkP +zevrlKC1G7aQk+yYEl9T55vA7hR6JAsf9oX4uCGYEdLNuxmpzmQfOGE+vPHhNKS cyWxBcoB7wKwWgxTIsMH5HMClOKMXgnvE9y6awlx3NkBcih+Hrba8fYHO79frLaB kfn6tTdb -----END CERTIFICATE-----Generated at Mon Jun 30 08:29:17 2025 by rpki-client