$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/f3799cd7-a653-38e2-acea-c1824448da8f.roa File: f3799cd7-a653-38e2-acea-c1824448da8f.roa (raw, json) Hash identifier: reZEWerzdjJ6ssVcB/mxrod0o/q9T8mUN4CaChk11z8= Subject key identifier: 62:AB:9F:38:CB:1F:B6:C9:CE:4A:28:DF:42:96:15:3A:8D:EB:73:63 Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Certificate serial: 010D0C9F43285849FE7F09D243A7A08BC6D4CF00 Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/f3799cd7-a653-38e2-acea-c1824448da8f.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16276 IP address blocks: 15.204.128.0/17 maxlen: 17 23.92.224.0/19 maxlen: 19 40.160.128.0/19 maxlen: 19 51.81.0.0/17 maxlen: 17 51.81.128.0/17 maxlen: 17 107.189.64.0/18 maxlen: 18 135.148.0.0/17 maxlen: 17 135.148.128.0/17 maxlen: 17 147.135.0.0/17 maxlen: 17 2604:2dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:7f:09:d2:43:a7:a0:8b:c6:d4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=059bd200-2129-4a51-af1d-6911ee260249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:87:3b:a5:a0:31:48:e7:1a:08:d3:5f:0d: 12:8d:f6:be:d1:02:a0:27:14:c4:ba:d6:68:44:bc: 03:65:08:ee:bd:40:a8:8b:95:55:74:77:eb:22:d8: cd:8c:03:4d:66:f8:fd:9d:f0:87:56:39:c2:65:c6: c7:59:00:cc:6d:3d:15:2f:3b:c2:d4:56:74:e8:f2: 37:bf:74:22:b7:80:b3:26:65:69:64:3b:4c:a7:f5: 92:b3:84:08:7f:b2:cf:1f:81:13:07:c4:18:68:27: f5:ee:3b:57:9b:1e:28:35:e8:b7:0c:d0:9b:ea:43: 32:9f:ba:98:82:7d:33:ad:76:f0:63:92:63:b0:3a: 9f:5f:1e:07:ad:a0:8c:05:9a:7e:c4:3b:e8:24:7a: a3:f6:06:c9:4d:2c:db:bb:ac:6f:d0:3c:b3:32:be: c1:bd:91:55:f0:f5:07:4c:26:52:b2:a9:18:1b:11: ac:f5:dc:67:33:7f:14:21:ac:05:48:0c:2f:f9:c4: 08:68:b2:62:47:91:dd:27:f9:e7:53:f7:41:4f:b4: bb:16:3b:cd:b8:2d:3d:15:a6:a3:1c:1d:2d:35:59: fd:39:2e:db:fe:99:ee:ee:12:68:4a:d2:00:8a:e3: a6:ef:81:36:31:ad:b1:18:86:2a:30:45:21:fb:2a: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AB:9F:38:CB:1F:B6:C9:CE:4A:28:DF:42:96:15:3A:8D:EB:73:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/f3799cd7-a653-38e2-acea-c1824448da8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl X509v3 Authority Key Identifier: keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer sbgp-ipAddrBlock: critical IPv4: 15.204.128.0/17 23.92.224.0/19 40.160.128.0/19 51.81.0.0/16 107.189.64.0/18 135.148.0.0/16 147.135.0.0/17 IPv6: 2604:2dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8e:fa:03:32:5f:29:64:9a:cf:56:74:31:67:f3:a2:70:2f: d6:f3:8c:bd:df:32:af:f5:c0:0a:01:8d:e5:fc:a9:d6:4b:ef: 3c:19:23:db:11:60:bc:11:f6:2a:64:14:d3:65:0c:64:25:b6: 2a:c5:cd:44:f2:1a:a5:9c:6e:4c:b2:b0:2f:4c:c2:69:66:50: 71:33:09:98:03:f9:1e:44:3e:c2:40:37:52:b3:0f:6b:2f:9b: ec:a7:59:09:c6:d4:6f:a2:1c:10:c6:00:4b:78:6b:d9:26:65: e4:53:cc:27:f3:26:a9:4b:4c:b1:12:82:6d:e8:09:b2:5b:45: 7f:72:f7:6e:88:2d:c0:7c:d3:48:b3:16:53:42:76:32:1e:b1: b4:bc:56:df:fd:e1:aa:ee:94:c6:5b:1e:37:a8:44:16:0a:61: 07:39:6d:f0:28:0b:8c:d5:58:55:ba:e1:54:ce:8f:25:fc:d9: bc:9a:58:37:d1:df:01:f4:84:94:84:7a:4c:1d:82:ea:4a:79: 99:b1:e5:65:de:66:db:cd:06:74:75:db:d6:7f:eb:ab:06:cb: ee:a0:37:51:47:3d:4d:74:f3:2d:b6:17:ee:f8:40:73:10:ce: 38:aa:76:4d:11:e9:f9:56:4a:68:fb:a0:ca:87:77:da:16:17: 6e:aa:90:aa -----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgIUAQ0Mn0MoWEn+fwnSQ6egi8bUzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0 Mjg5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MDU5YmQyMDAtMjEyOS00YTUxLWFmMWQtNjkxMWVlMjYwMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx6HO6WgMUjnGgjTXw0Sjfa+0QKgJxTEutZo RLwDZQjuvUCoi5VVdHfrItjNjANNZvj9nfCHVjnCZcbHWQDMbT0VLzvC1FZ06PI3 v3Qit4CzJmVpZDtMp/WSs4QIf7LPH4ETB8QYaCf17jtXmx4oNei3DNCb6kMyn7qY gn0zrXbwY5JjsDqfXx4HraCMBZp+xDvoJHqj9gbJTSzbu6xv0DyzMr7BvZFV8PUH TCZSsqkYGxGs9dxnM38UIawFSAwv+cQIaLJiR5HdJ/nnU/dBT7S7FjvNuC09Faaj HB0tNVn9OS7b/pnu7hJoStIAiuOm74E2Ma2xGIYqMEUh+yr/eQIDAQABo4IDhjCC A4IwHQYDVR0OBBYEFGKrnzjLH7bJzkoo30KWFTqN63NjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2 ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvZjM3OTljZDctYTY1My0z OGUyLWFjZWEtYzE4MjQ0NDhkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw M2NjZjQyODkuY2VyMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQHD8yAAwQF F1zgAwQFKKCAAwMAM1EDBAZrvUADAwCHlAMEB5OHADANBAIAAjAHAwUAJgQtwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1jvoDMl8pZJrPVnQxZ/OicC/W84y93zKv9cAKAY3l/KnWS+88GSPb EWC8EfYqZBTTZQxkJbYqxc1E8hqlnG5MsrAvTMJpZlBxMwmYA/keRD7CQDdSsw9r L5vsp1kJxtRvohwQxgBLeGvZJmXkU8wn8yapS0yxEoJt6AmyW0V/cvduiC3AfNNI sxZTQnYyHrG0vFbf/eGq7pTGWx43qEQWCmEHOW3wKAuM1VhVuuFUzo8l/Nm8mlg3 0d8B9ISUhHpMHYLqSnmZseVl3mbbzQZ0ddvWf+urBsvuoDdRRz1NdPMtthfu+EBz EM44qnZNEen5Vkpo+6DKh3faFhduqpCq -----END CERTIFICATE-----Generated at Tue Jun 17 20:26:51 2025 by rpki-client