$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/2145dd7e-ab65-3c98-bc0d-77196940761e.roa File: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (raw, json) Hash identifier: 0d/IegpviOk65lO4euoOgT3CGcSfFQlcuoGEU077SXY= Subject key identifier: 69:90:E3:87:00:12:C9:FF:6B:A7:EB:E1:48:68:51:B2:49:9B:B1:81 Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584AE46148BB54E28D13C6A6EA80 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/2145dd7e-ab65-3c98-bc0d-77196940761e.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 18450 IP address blocks: 23.252.112.0/20 maxlen: 24 50.115.32.0/20 maxlen: 24 64.140.160.0/20 maxlen: 24 64.185.224.0/20 maxlen: 24 67.220.192.0/19 maxlen: 24 100.42.208.0/20 maxlen: 24 104.237.48.0/20 maxlen: 24 107.182.160.0/20 maxlen: 24 108.171.192.0/19 maxlen: 24 142.4.32.0/19 maxlen: 24 173.231.0.0/18 maxlen: 24 192.69.192.0/19 maxlen: 24 216.18.192.0/19 maxlen: 24 216.158.64.0/19 maxlen: 24 2607:f2d8::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:48:bb:54:e2:8d:13:c6:a6:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=b76f20cf-6d56-441d-9adf-ccfe6eefd911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:d0:05:a9:3e:69:41:1f:c1:5e:23:25:21: 6a:87:ef:ed:bd:ae:0a:1c:4f:53:62:1a:d1:82:7a: e9:98:bb:18:a1:f4:d5:bd:c3:1f:e8:56:60:ad:f0: 4b:9e:b1:40:23:c7:00:cc:19:ab:5c:1f:33:84:b3: a2:0e:1c:b4:6d:09:f7:3b:31:05:57:e6:d3:bc:92: 99:76:5f:e0:2c:96:c3:43:a0:b0:6c:e7:6d:8a:de: d1:c5:78:b1:6e:21:70:1e:b1:7c:96:82:59:18:2e: cf:52:e5:ba:9c:fc:b7:91:f2:53:f9:3f:ce:94:44: 62:aa:a4:29:ef:9b:c1:ea:c5:c6:9c:dd:c1:25:ed: f4:56:51:64:b3:cb:b4:7b:b7:8a:e0:f6:a4:9f:f2: a0:30:68:d7:70:8c:cd:57:60:2e:a5:d5:f9:40:a7: 7a:0d:24:4c:f5:f2:17:7d:14:88:1f:1d:d5:39:27: 2b:89:ef:7c:6d:e4:06:e6:5b:cc:fd:dd:ad:ea:bc: 01:e3:a1:0c:c4:88:f8:58:23:ab:11:5b:cd:64:d2: bc:ce:2a:24:88:90:d5:3f:8e:14:32:e0:4c:f9:61: f8:7d:18:3a:3a:a1:38:ca:ad:7c:1b:c2:8c:56:aa: 1e:9c:bf:4f:fb:1e:c6:3a:8d:d9:5f:d0:47:cb:fe: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:90:E3:87:00:12:C9:FF:6B:A7:EB:E1:48:68:51:B2:49:9B:B1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/2145dd7e-ab65-3c98-bc0d-77196940761e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: 23.252.112.0/20 50.115.32.0/20 64.140.160.0/20 64.185.224.0/20 67.220.192.0/19 100.42.208.0/20 104.237.48.0/20 107.182.160.0/20 108.171.192.0/19 142.4.32.0/19 173.231.0.0/18 192.69.192.0/19 216.18.192.0/19 216.158.64.0/19 IPv6: 2607:f2d8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2d:80:2f:9a:9f:6a:e6:14:6e:8a:bf:14:af:a7:89:e6:95: 48:8f:a8:6f:ae:7c:ed:7c:65:00:ee:2b:09:38:9c:17:ce:4f: 95:ce:3f:ba:08:d8:be:b6:30:ad:f0:fa:e8:ec:78:00:06:47: f8:ef:69:67:eb:9c:7b:77:a1:1c:aa:c3:71:3f:2a:0e:f2:9b: a1:08:b0:e9:c5:0a:9e:12:a9:e8:eb:9d:a2:1c:88:49:67:67: 17:ad:dc:1d:d4:4b:b5:f9:12:1c:60:2f:9a:9e:f2:5f:29:98: 88:74:40:f6:63:72:a1:4f:b9:e1:21:66:17:76:f6:7e:ab:62: c4:21:e1:0f:aa:b5:73:5b:da:b4:1e:e1:54:58:66:57:7e:5a: 2b:38:4b:28:f1:83:86:e2:e1:b0:17:1f:4c:0b:2e:1c:9c:f6: 6f:b4:7c:24:89:22:ec:c7:4b:8a:24:3b:b3:f6:7f:e5:2e:9f: ac:99:75:20:fd:d5:c6:0e:ac:2c:a9:1e:19:7f:f8:20:79:b4: f0:a0:14:d4:e1:84:79:9d:bd:48:81:69:be:89:49:f9:55:95: e4:5f:65:bf:6a:8d:a3:a6:be:76:f5:1a:0d:ac:94:3d:34:14: cc:22:b7:1b:3c:4f:a7:7c:dc:3c:cc:fc:fa:7f:aa:eb:a5:b4: 47:91:c1:65 -----BEGIN CERTIFICATE----- MIIGoDCCBYigAwIBAgIUAQ0Mn0MoWErkYUi7VOKNE8am6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk Yjc2ZjIwY2YtNmQ1Ni00NDFkLTlhZGYtY2NmZTZlZWZkOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zLQBak+aUEfwV4jJSFqh+/tva4KHE9TYhrR gnrpmLsYofTVvcMf6FZgrfBLnrFAI8cAzBmrXB8zhLOiDhy0bQn3OzEFV+bTvJKZ dl/gLJbDQ6CwbOdtit7RxXixbiFwHrF8loJZGC7PUuW6nPy3kfJT+T/OlERiqqQp 75vB6sXGnN3BJe30VlFks8u0e7eK4Pakn/KgMGjXcIzNV2AupdX5QKd6DSRM9fIX fRSIHx3VOScrie98beQG5lvM/d2t6rwB46EMxIj4WCOrEVvNZNK8ziokiJDVP44U MuBM+WH4fRg6OqE4yq18G8KMVqoenL9P+x7GOo3ZX9BHy/7h/wIDAQABo4IDsjCC A64wHQYDVR0OBBYEFGmQ44cAEsn/a6fr4UhoUbJJm7GBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvMjE0NWRkN2UtYWI2NS0z Yzk4LWJjMGQtNzcxOTY5NDA3NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQEF/xwAwQE MnMgAwQEQIygAwQEQLngAwQFQ9zAAwQEZCrQAwQEaO0wAwQEa7agAwQFbKvAAwQF jgQgAwQGrecAAwQFwEXAAwQF2BLAAwQF2J5AMA0EAgACMAcDBQAmB/LYMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAJctgC+an2rmFG6KvxSvp4nmlUiPqG+ufO18ZQDuKwk4nBfOT5XOP7oI2L62 MK3w+ujseAAGR/jvaWfrnHt3oRyqw3E/Kg7ym6EIsOnFCp4SqejrnaIciElnZxet 3B3US7X5EhxgL5qe8l8pmIh0QPZjcqFPueEhZhd29n6rYsQh4Q+qtXNb2rQe4VRY Zld+Wis4Syjxg4bi4bAXH0wLLhyc9m+0fCSJIuzHS4okO7P2f+Uun6yZdSD91cYO rCypHhl/+CB5tPCgFNThhHmdvUiBab6JSflVleRfZb9qjaOmvnb1Gg2slD00FMwi txs8T6d83DzM/Pp/quultEeRwWU= -----END CERTIFICATE-----Generated at Sun Aug 24 03:20:03 2025 by rpki-client