$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa File: 0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa (raw, json) Hash identifier: JsYZXXDfxPmUsPLkSFbt/JzgwPl+ResE22+QzWSeP/s= Subject key identifier: 39:16:9F:6E:FC:1B:71:8D:E7:64:D8:8D:DA:A6:0A:4B:7E:83:13:C9 Certificate issuer: /CN=c2cb8327-ee3e-477c-990c-118e040b2de6 Certificate serial: 010D0C9F4328584A2B28FB692FE0C3CCD44A7940 Authority key identifier: FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa Signing time: Thu 12 Jun 2025 16:43:06 +0000 ROA not before: Thu 12 Jun 2025 16:43:06 +0000 ROA not after: Wed 10 Sep 2025 16:43:06 +0000 asID: 398242 IP address blocks: 152.86.0.0/20 maxlen: 20 170.117.192.0/21 maxlen: 21 198.71.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:28:fb:69:2f:e0:c3:cc:d4:4a:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cb8327-ee3e-477c-990c-118e040b2de6 Validity Not Before: Jun 12 16:43:06 2025 GMT Not After : Sep 10 16:43:06 2025 GMT Subject: CN=26b7a813-16a3-429d-9e3b-378cee8cc132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:e2:7a:dc:48:39:93:9b:4f:9b:a3:22:94: cc:fa:eb:06:78:ba:5b:ec:08:c2:3b:7e:91:1e:07: 20:9b:d9:e3:07:fe:88:0f:e6:4a:c0:d0:06:e7:8b: bd:61:0d:66:ab:22:66:7c:cd:a0:2b:98:e4:22:2b: 97:1c:6a:d8:d8:26:19:e7:1e:8c:b0:54:a7:88:00: 62:53:ac:1d:dc:af:f2:1a:75:28:0e:f2:05:c5:60: 5c:f6:d9:49:37:8b:b1:25:53:4a:c0:95:3b:00:1b: 59:cb:53:7d:1f:bf:8d:67:41:dd:46:d3:47:af:7d: 87:89:e4:9d:35:ba:4f:71:c2:fc:c1:35:20:02:6e: 82:47:6a:53:c0:c0:74:00:16:67:8a:df:50:c5:e8: a0:45:50:de:de:7e:ed:a4:c9:8e:85:86:85:80:6f: 81:ee:c7:af:5d:1c:5c:b1:b1:89:6e:2b:22:33:c8: 05:3c:3e:44:4f:40:b5:4b:d5:cd:41:16:1c:7b:58: a6:46:b8:6b:8d:61:86:ca:77:ae:b9:eb:18:d0:38: 6b:76:28:88:cc:87:fe:5f:88:03:65:5b:2a:df:52: 2a:c8:88:78:6e:10:de:92:a1:61:06:c4:49:c2:e4: e8:e8:9a:af:6b:00:ba:a4:33:da:e6:46:0c:9c:55: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:16:9F:6E:FC:1B:71:8D:E7:64:D8:8D:DA:A6:0A:4B:7E:83:13:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.crl X509v3 Authority Key Identifier: keyid:FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer sbgp-ipAddrBlock: critical IPv4: 152.86.0.0/20 170.117.192.0/21 198.71.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ef:18:8a:10:23:a6:f3:67:c6:41:f2:fa:1f:5e:98:0b:7a: bb:38:b8:2a:86:e9:01:f1:ae:be:12:75:67:36:fa:36:06:d3: 15:04:46:c3:a4:ad:ca:de:72:99:23:92:95:70:64:3f:04:55: c5:ca:27:f2:08:89:d7:24:15:54:ad:84:48:2b:de:7f:f8:4d: bc:1d:0f:db:bd:18:65:2a:3c:61:ac:49:61:f4:8d:3f:ee:d6: a6:50:62:f6:da:b0:7f:6e:9d:78:b8:51:6f:d6:f1:b4:74:7d: 20:0d:6d:d6:25:1e:33:1d:8e:87:7f:b5:2a:59:0b:86:75:69: 67:3c:c2:d5:cf:7a:46:f5:05:99:87:9e:aa:e7:1b:46:28:b2: 0e:3c:01:ba:d3:c0:52:57:34:f9:6b:00:d0:9b:a1:60:74:a4: 85:64:02:39:26:fa:98:b8:74:07:b5:e1:0c:31:19:12:89:fc: ad:4b:fc:09:69:98:1c:3b:55:1e:9c:00:f0:86:e2:72:9c:0e: 7d:79:0c:c8:76:bb:ed:52:f4:86:84:81:bb:5f:1d:e0:a3:ef: 4d:a9:6f:1e:a1:bf:7d:83:4b:b1:7d:56:2c:5f:3d:1e:60:f6: e5:9c:5b:8e:f7:a2:32:b0:5c:eb:28:ad:9a:8f:c8:63:4c:b9: ad:8a:de:5e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEorKPtpL+DDzNRKeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJjYjgzMjctZWUzZS00NzdjLTk5MGMtMTE4ZTA0MGIy ZGU2MB4XDTI1MDYxMjE2NDMwNloXDTI1MDkxMDE2NDMwNlowLzEtMCsGA1UEAxMk MjZiN2E4MTMtMTZhMy00MjlkLTllM2ItMzc4Y2VlOGNjMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4rietxIOZObT5ujIpTM+usGeLpb7AjCO36R Hgcgm9njB/6ID+ZKwNAG54u9YQ1mqyJmfM2gK5jkIiuXHGrY2CYZ5x6MsFSniABi U6wd3K/yGnUoDvIFxWBc9tlJN4uxJVNKwJU7ABtZy1N9H7+NZ0HdRtNHr32HieSd NbpPccL8wTUgAm6CR2pTwMB0ABZnit9QxeigRVDe3n7tpMmOhYaFgG+B7sevXRxc sbGJbisiM8gFPD5ET0C1S9XNQRYce1imRrhrjWGGyneuuesY0DhrdiiIzIf+X4gD ZVsq31IqyIh4bhDekqFhBsRJwuTo6JqvawC6pDPa5kYMnFX6kQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDkWn278G3GN52TYjdqmCkt+gxPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jMmNi ODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThlMDQwYjJkZTYvMGE5YTI2MTItMmEzYi0z ZGRkLTg2ZGMtZTc1ZjQzMjkwNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzJjYjgzMjctZWUzZS00NzdjLTk5 MGMtMTE4ZTA0MGIyZGU2L2MyY2I4MzI3LWVlM2UtNDc3Yy05OTBjLTExOGUwNDBi MmRlNi5jcmwwHwYDVR0jBBgwFoAU/r2JAKBnK3dZnTi/Twvf5d0LtqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jMmNiODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThl MDQwYjJkZTYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEmFYAAwQD qnXAAwQExkdQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHfvGIoQI6bzZ8ZB8vofXpgLers4uCqG6QHxrr4S dWc2+jYG0xUERsOkrcrecpkjkpVwZD8EVcXKJ/IIidckFVSthEgr3n/4TbwdD9u9 GGUqPGGsSWH0jT/u1qZQYvbasH9unXi4UW/W8bR0fSANbdYlHjMdjod/tSpZC4Z1 aWc8wtXPekb1BZmHnqrnG0Yosg48AbrTwFJXNPlrANCboWB0pIVkAjkm+pi4dAe1 4QwxGRKJ/K1L/AlpmBw7VR6cAPCG4nKcDn15DMh2u+1S9IaEgbtfHeCj702pbx6h v32DS7F9VixfPR5g9uWcW473ojKwXOsorZqPyGNMua2K3l4= -----END CERTIFICATE-----Generated at Thu Jul 3 22:56:41 2025 by rpki-client