$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa File: 08780fc2-df88-3de5-b147-ed57d81f5382.roa (raw, json) Hash identifier: tR7J+88CMNwxUL3JIZrmRav/Z0bMeQ/xi6KnlLnQ6Y4= Subject key identifier: 6D:14:8B:F3:FC:E4:14:5E:C5:4E:3D:52:C2:8B:33:21:FC:DC:47:61 Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F43285849B57A0F0FC859484B6F343100 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 32524 IP address blocks: 66.244.128.0/20 maxlen: 24 100.42.192.0/23 maxlen: 24 100.42.194.0/24 maxlen: 24 100.42.196.0/22 maxlen: 24 100.42.200.0/21 maxlen: 24 162.208.112.0/22 maxlen: 24 192.30.176.0/21 maxlen: 24 199.38.200.0/22 maxlen: 24 199.87.184.0/21 maxlen: 24 199.255.24.0/22 maxlen: 24 208.82.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:0f:0f:c8:59:48:4b:6f:34:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=93251621-e2da-40b5-8478-071812b0ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:23:ce:15:c4:50:6e:97:57:30:a6:76:14:1d: 2a:2e:eb:cf:25:88:f9:e2:79:a9:e3:c0:6f:3b:de: 53:a4:ba:bf:36:48:aa:28:aa:6a:6b:3e:46:53:92: d5:72:74:2b:5a:1a:1d:56:c5:1c:10:35:bc:8b:79: 51:ff:af:ff:d8:2e:bf:27:6b:0a:4e:81:81:00:44: bc:6a:88:a3:d6:c3:c1:ca:70:db:d7:a5:63:9e:bc: d2:0f:78:86:ca:8e:af:48:85:e4:8d:d9:50:40:e2: 6f:59:08:a2:70:28:1c:c1:24:1a:48:6a:20:ef:61: 4f:3f:a8:e8:91:d0:30:43:98:61:89:cf:c1:38:95: 21:48:70:cd:2a:f1:62:d9:d2:b3:83:a9:5c:58:a6: 2f:c4:d0:fe:7e:87:a2:11:2a:91:c2:1d:f1:da:3a: 8f:60:ec:37:76:df:79:dc:40:00:f4:09:a8:1e:9a: 35:69:77:4c:b4:03:fe:11:2c:3e:30:14:ea:10:a0: a9:08:4f:85:9c:2d:d2:f7:7d:2a:5d:62:9e:d2:bb: 1a:f1:86:c4:d7:76:4a:31:18:43:ce:80:9b:25:61: e2:9b:b6:5d:52:f0:18:b7:e4:92:28:98:4f:de:d1: 53:69:86:ed:8b:f6:d6:d4:e1:a5:00:d2:30:c9:85: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:14:8B:F3:FC:E4:14:5E:C5:4E:3D:52:C2:8B:33:21:FC:DC:47:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv4: 66.244.128.0/20 100.42.192.0-100.42.194.255 100.42.196.0-100.42.207.255 162.208.112.0/22 192.30.176.0/21 199.38.200.0/22 199.87.184.0/21 199.255.24.0/22 208.82.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:64:57:2f:82:d3:f6:7e:f3:0e:74:3e:0c:03:bf:7e:36:97: 8c:75:6f:94:19:e3:1d:b4:0d:1e:a4:f1:b3:f3:fd:29:5a:1e: 19:ad:16:a5:59:91:e1:28:a7:af:ab:0c:66:dd:ee:11:3f:81: 4d:92:a1:fd:52:a0:97:ad:7f:39:3a:ae:19:8e:5d:3f:cd:4a: 93:e1:cd:72:2e:fa:57:77:69:73:db:fc:19:ed:b7:ea:81:0a: c8:63:ac:49:eb:2d:a8:31:b0:b3:b8:0d:3f:64:5a:a5:85:53: 44:5c:a1:fd:52:e2:03:e1:93:e4:17:b2:3d:97:e9:d9:22:4f: 3d:61:7c:61:42:e4:de:70:1c:c6:d5:9a:17:71:84:64:e6:61: a0:c4:46:6e:7f:76:1f:41:b1:28:e5:b4:5a:2a:e2:7b:29:16: 50:af:26:96:02:4c:7a:30:69:95:3a:5c:88:32:03:ce:e2:34: da:ad:28:54:37:c7:ea:27:1d:87:c7:60:6b:0c:16:00:33:f1: 28:6a:d3:9c:88:f6:11:13:36:e8:b7:62:e9:df:8a:d8:bd:f9: f9:ef:18:c5:48:7b:eb:26:3c:c7:96:17:bf:17:0b:47:86:56: 82:48:60:ce:38:a4:c2:86:e6:18:98:4a:4f:87:2b:7f:e1:2e: 1c:ab:76:62 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEm1eg8PyFlIS280MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk OTMyNTE2MjEtZTJkYS00MGI1LTg0NzgtMDcxODEyYjBhYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSPOFcRQbpdXMKZ2FB0qLuvPJYj54nmp48Bv O95TpLq/NkiqKKpqaz5GU5LVcnQrWhodVsUcEDW8i3lR/6//2C6/J2sKToGBAES8 aoij1sPBynDb16VjnrzSD3iGyo6vSIXkjdlQQOJvWQiicCgcwSQaSGog72FPP6jo kdAwQ5hhic/BOJUhSHDNKvFi2dKzg6lcWKYvxND+foeiESqRwh3x2jqPYOw3dt95 3EAA9AmoHpo1aXdMtAP+ESw+MBTqEKCpCE+FnC3S930qXWKe0rsa8YbE13ZKMRhD zoCbJWHim7ZdUvAYt+SSKJhP3tFTaYbti/bW1OGlANIwyYWpNQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFG0Ui/P85BRexU49UsKLMyH83EdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvMDg3ODBmYzItZGY4OC0z ZGU1LWIxNDctZWQ1N2Q4MWY1MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQEQvSAMAwD BAZkKsADBABkKsIwDAMEAmQqxAMEBGQqwAMEAqLQcAMEA8AesAMEAscmyAMEA8dX uAMEAsf/GAMEA9BSiDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1ZFcvgtP2fvMOdD4MA79+NpeMdW+UGeMd tA0epPGz8/0pWh4ZrRalWZHhKKevqwxm3e4RP4FNkqH9UqCXrX85Oq4Zjl0/zUqT 4c1yLvpXd2lz2/wZ7bfqgQrIY6xJ6y2oMbCzuA0/ZFqlhVNEXKH9UuID4ZPkF7I9 l+nZIk89YXxhQuTecBzG1ZoXcYRk5mGgxEZuf3YfQbEo5bRaKuJ7KRZQryaWAkx6 MGmVOlyIMgPO4jTarShUN8fqJx2Hx2BrDBYAM/EoatOciPYREzbot2Lp34rYvfn5 7xjFSHvrJjzHlhe/FwtHhlaCSGDOOKTChuYYmEpPhyt/4S4cq3Zi -----END CERTIFICATE-----Generated at Sun May 11 15:53:32 2025 by rpki-client