$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: 2A1HlE/SgK9TQY86yrUX4NKnRpLrwpk6hmBuSinDAf8= Subject key identifier: 17:A6:9B:D9:EA:CF:02:D2:39:E9:5C:2F:1E:EE:1D:76:23:0B:BE:46 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F43285849CC983A0E8DFB4E4EC5FBF5C0 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Fri 09 May 2025 19:45:27 +0000 ROA not before: Fri 09 May 2025 19:45:27 +0000 ROA not after: Thu 07 Aug 2025 19:45:27 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 16 137.187.0.0/16 maxlen: 16 156.40.0.0/18 maxlen: 18 156.40.64.0/20 maxlen: 20 156.40.80.0/21 maxlen: 21 156.40.88.0/22 maxlen: 22 156.40.92.0/24 maxlen: 24 156.40.96.0/19 maxlen: 19 156.40.128.0/18 maxlen: 18 156.40.192.0/22 maxlen: 22 156.40.196.0/24 maxlen: 24 156.40.198.0/23 maxlen: 23 156.40.200.0/21 maxlen: 21 156.40.208.0/20 maxlen: 20 156.40.224.0/19 maxlen: 19 165.112.0.0/16 maxlen: 16 192.231.145.0/24 maxlen: 24 192.231.146.0/24 maxlen: 24 192.231.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:98:3a:0e:8d:fb:4e:4e:c5:fb:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: May 9 19:45:27 2025 GMT Not After : Aug 7 19:45:27 2025 GMT Subject: CN=26e90d7c-b64e-44d3-a1b6-229fe3723acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:f5:5d:93:40:0c:54:31:3a:e7:9b:df:96: bd:15:fe:83:60:fa:81:bd:d8:af:62:27:c4:2a:cf: 6b:de:b0:71:54:0d:fe:c9:de:73:c8:b9:bf:58:46: 77:d3:0e:b9:c7:e2:ab:5d:89:24:2c:b9:44:d5:2f: 52:50:3c:69:e5:8e:e8:d9:0b:7e:6f:9b:81:43:e1: c0:0a:09:86:54:d7:88:95:a9:26:22:8f:67:75:ed: 86:92:8b:1e:05:0a:ab:25:84:88:19:1f:94:2d:06: 2f:b7:3f:23:61:54:a6:a3:11:35:f3:c5:d8:1d:01: c5:00:fb:73:42:d7:8c:44:51:ac:3f:9f:ba:17:0e: 5c:f8:bf:96:de:3f:24:ac:cd:95:da:d7:d8:c0:3a: ad:ce:c2:50:94:39:55:2a:26:23:19:c8:4b:3b:6c: d0:62:1b:7e:1a:7e:60:fc:9c:e1:10:69:62:ef:ce: 3d:11:8d:92:2b:3f:6c:95:46:26:6a:8c:10:6d:93: 42:42:31:e8:75:44:95:f4:a6:ad:c0:47:df:78:83: 2a:de:6a:e2:80:7d:c9:c7:cb:87:8f:61:3e:25:5a: da:4d:c5:3f:4b:37:0b:3a:92:88:db:40:0f:50:ad: 9a:db:2f:b8:77:ec:86:92:ef:eb:ce:75:fa:03:60: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A6:9B:D9:EA:CF:02:D2:39:E9:5C:2F:1E:EE:1D:76:23:0B:BE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8e:34:0f:04:8a:e2:6d:4a:41:0e:07:82:43:ab:bc:7b:18: 5a:af:86:33:49:4f:3b:81:fa:e2:0d:62:85:b0:1b:b3:1d:4d: 3e:1b:4b:8d:e9:8a:62:67:54:11:c5:0e:ae:90:38:d4:0c:90: ea:e5:9d:88:3f:74:ad:c0:51:30:df:0a:7b:b0:45:dc:6c:6c: 7d:a9:2c:54:a7:cc:6d:0e:6f:72:30:eb:45:3f:ae:88:2e:5a: 4e:d2:96:a8:be:fd:92:0a:32:76:a8:b2:04:dc:0c:db:9f:70: 92:02:81:53:3d:49:4d:a5:3e:03:14:40:e1:58:dc:c3:0e:76: 04:1f:d8:bc:1a:0b:be:42:1c:ea:48:0a:42:72:59:97:ff:55: a6:2e:dd:d1:df:8f:94:ed:35:ec:bc:0d:5e:d9:58:af:90:7c: 84:1e:40:d0:93:40:90:2f:19:0f:07:ad:15:a4:91:8c:69:56: 22:8f:dd:01:61:1a:c1:4a:b3:f5:bd:5f:40:55:07:2e:9a:c9: ee:63:25:36:09:06:c1:cc:7e:26:90:85:4b:22:2e:9b:b1:a9: d3:d8:57:f0:a5:70:85:cd:e6:71:72:ad:70:08:16:4a:41:cb: c5:04:9a:e6:56:2c:ec:a7:1d:ee:b4:1e:01:25:8e:f0:74:c8: f1:e2:5a:e8 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEnMmDoOjftOTsX79cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDUwOTE5NDUyN1oXDTI1MDgwNzE5NDUyN1owLzEtMCsGA1UEAxMk MjZlOTBkN2MtYjY0ZS00NGQzLWExYjYtMjI5ZmUzNzIzYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJX1XZNADFQxOueb35a9Ff6DYPqBvdivYifE Ks9r3rBxVA3+yd5zyLm/WEZ30w65x+KrXYkkLLlE1S9SUDxp5Y7o2Qt+b5uBQ+HA CgmGVNeIlakmIo9nde2GkoseBQqrJYSIGR+ULQYvtz8jYVSmoxE188XYHQHFAPtz QteMRFGsP5+6Fw5c+L+W3j8krM2V2tfYwDqtzsJQlDlVKiYjGchLO2zQYht+Gn5g /JzhEGli7849EY2SKz9slUYmaowQbZNCQjHodUSV9KatwEffeIMq3mrigH3Jx8uH j2E+JVraTcU/SzcLOpKI20APUK2a2y+4d+yGku/rznX6A2Ci0QIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFBemm9nqzwLSOelcLx7uHXYjC75GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEKONA8EiuJtSkEOB4JDq7x7GFqvhjNJTzuB +uINYoWwG7MdTT4bS43pimJnVBHFDq6QONQMkOrlnYg/dK3AUTDfCnuwRdxsbH2p LFSnzG0Ob3Iw60U/roguWk7Slqi+/ZIKMnaosgTcDNufcJICgVM9SU2lPgMUQOFY 3MMOdgQf2LwaC75CHOpICkJyWZf/VaYu3dHfj5TtNey8DV7ZWK+QfIQeQNCTQJAv GQ8HrRWkkYxpViKP3QFhGsFKs/W9X0BVBy6aye5jJTYJBsHMfiaQhUsiLpuxqdPY V/ClcIXN5nFyrXAIFkpBy8UEmuZWLOynHe60HgEljvB0yPHiWug= -----END CERTIFICATE-----Generated at Mon Jun 30 20:14:18 2025 by rpki-client