$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa File: 5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (raw, json) Hash identifier: bTgcHPUxUuBikeOTj16r809pPAhyIIRMM549jAM8PZM= Subject key identifier: D4:F7:83:F9:72:D0:32:87:9A:BD:94:47:23:93:DB:DD:59:B0:1C:75 Certificate issuer: /CN=baff326b-1f24-468c-b9c6-fa089a461350 Certificate serial: 010D0C9F4328584980847AA9AB8DE07201345700 Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa Signing time: Sat 12 Apr 2025 13:44:13 +0000 ROA not before: Sat 12 Apr 2025 13:44:13 +0000 ROA not after: Fri 11 Jul 2025 13:44:13 +0000 asID: 395776 IP address blocks: 107.163.0.0/19 maxlen: 24 107.163.32.0/19 maxlen: 24 107.163.64.0/19 maxlen: 24 192.155.160.0/20 maxlen: 24 192.186.0.0/18 maxlen: 24 192.250.192.0/22 maxlen: 24 192.250.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:84:7a:a9:ab:8d:e0:72:01:34:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350 Validity Not Before: Apr 12 13:44:13 2025 GMT Not After : Jul 11 13:44:13 2025 GMT Subject: CN=c950e838-92e8-4a80-a944-7b4d4b573fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:48:c8:61:1f:85:e1:0d:a9:09:85:eb:39: 12:56:c4:22:82:e2:40:53:75:f3:72:e9:01:82:97: b0:c9:dc:c9:3c:80:88:33:1f:a2:80:5f:d2:6b:f9: 2e:76:0c:45:44:51:63:70:c5:5b:11:68:bb:38:aa: e5:1f:45:72:cb:1d:bf:76:d8:5a:c6:60:40:b9:c6: 9f:e3:4d:b2:70:b6:8f:68:be:34:a1:56:18:c2:bd: c1:c2:23:66:56:e6:d8:29:df:a5:28:e8:3f:0c:bb: 6a:20:f9:9e:95:10:aa:91:2d:51:80:9d:b3:06:05: b4:41:a0:2e:c3:42:d8:05:4d:09:d7:c1:3a:74:36: bd:24:cc:9f:90:c6:b7:9d:9f:77:c6:81:80:44:1b: fe:9c:da:8e:2f:c0:cf:e5:c9:a7:28:81:41:60:d8: 40:01:2e:f2:b1:5a:57:15:ca:75:0c:51:a8:62:52: 01:a7:13:e6:14:ef:d1:64:48:1d:4b:f3:29:25:23: c0:94:66:ff:47:17:e4:53:6b:60:4f:01:71:d2:ab: 9c:c4:fa:cc:69:eb:d6:ef:2a:e5:ac:12:3f:31:b2: 0e:92:ec:0a:f6:9b:7e:57:cf:f5:6e:e2:41:81:60: bb:d7:1c:b3:6a:77:9e:8c:8a:9d:9e:63:45:b4:75: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F7:83:F9:72:D0:32:87:9A:BD:94:47:23:93:DB:DD:59:B0:1C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl X509v3 Authority Key Identifier: keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer sbgp-ipAddrBlock: critical IPv4: 107.163.0.0-107.163.95.255 192.155.160.0/20 192.186.0.0/18 192.250.192.0/22 192.250.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4b:aa:0a:7b:a8:0d:a0:cf:03:a8:56:d2:57:d4:ba:d0:2e: 64:31:b9:4f:c9:f7:60:18:84:5c:ca:f7:91:b8:1a:6d:d4:b8: bb:77:bf:a0:b0:27:8c:a9:db:8c:50:c9:40:03:ff:34:00:1c: 81:70:b9:35:05:9c:d3:6c:1e:d9:eb:5b:b2:9c:40:85:96:39: 73:50:b1:aa:47:f8:be:d8:47:a4:84:bb:51:47:1c:a3:70:f5: 83:c6:70:cd:af:6d:d9:78:8c:4b:f3:5a:bb:0a:46:ec:d9:b8: 3f:4d:3c:20:bc:8f:56:38:4a:b6:dd:14:8a:5e:03:3d:00:b0: 50:d6:96:fa:bc:39:eb:89:e3:5d:9e:3f:2f:4d:fa:14:66:69: f2:d2:e4:69:ea:bf:64:c9:9d:35:d0:65:0b:a7:9a:8b:81:62: 73:7c:a3:a6:d7:ca:69:5d:64:7b:1a:af:f2:2c:f2:b9:9d:95: f7:f4:a8:dc:47:ca:ca:e7:0b:36:9d:a7:a9:a9:6e:1a:56:94: 07:00:31:d9:0f:ce:03:ed:2d:fd:f6:43:97:a7:09:66:3c:39: fa:2e:a4:c2:bb:f2:96:db:c9:ec:fa:e2:86:18:80:73:11:b0: 3f:4e:fd:91:71:e7:a3:0c:4f:16:e2:8b:aa:68:d0:07:8f:c7: 09:c0:75:12 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEmAhHqpq43gcgE0VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFmZjMyNmItMWYyNC00NjhjLWI5YzYtZmEwODlhNDYx MzUwMB4XDTI1MDQxMjEzNDQxM1oXDTI1MDcxMTEzNDQxM1owLzEtMCsGA1UEAxMk Yzk1MGU4MzgtOTJlOC00YTgwLWE5NDQtN2I0ZDRiNTczZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVVIyGEfheENqQmF6zkSVsQiguJAU3XzcukB gpewydzJPICIMx+igF/Sa/kudgxFRFFjcMVbEWi7OKrlH0Vyyx2/dthaxmBAucaf 402ycLaPaL40oVYYwr3BwiNmVubYKd+lKOg/DLtqIPmelRCqkS1RgJ2zBgW0QaAu w0LYBU0J18E6dDa9JMyfkMa3nZ93xoGARBv+nNqOL8DP5cmnKIFBYNhAAS7ysVpX Fcp1DFGoYlIBpxPmFO/RZEgdS/MpJSPAlGb/RxfkU2tgTwFx0qucxPrMaevW7yrl rBI/MbIOkuwK9pt+V8/1buJBgWC71xyzaneejIqdnmNFtHXCrwIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFNT3g/ly0DKHmr2URyOT291ZsBx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWZm MzI2Yi0xZjI0LTQ2OGMtYjljNi1mYTA4OWE0NjEzNTAvNWM5NTExZWUtMTQwYS0z ZTE1LWFhNTctZDE4OWU3YWUwN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFmZjMyNmItMWYyNC00NjhjLWI5 YzYtZmEwODlhNDYxMzUwL2JhZmYzMjZiLTFmMjQtNDY4Yy1iOWM2LWZhMDg5YTQ2 MTM1MC5jcmwwHwYDVR0jBBgwFoAUBS2WIHdO/bxHLByhCY5bMV0c/DIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWZmMzI2Yi0xZjI0LTQ2OGMtYjljNi1mYTA4 OWE0NjEzNTAuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlMAsDAwBrowME BWujQAMEBMCboAMEBsC6AAMEAsD6wAMEA8D6yDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdS6oKe6gNoM8D qFbSV9S60C5kMblPyfdgGIRcyveRuBpt1Li7d7+gsCeMqduMUMlAA/80AByBcLk1 BZzTbB7Z61uynECFljlzULGqR/i+2EekhLtRRxyjcPWDxnDNr23ZeIxL81q7Ckbs 2bg/TTwgvI9WOEq23RSKXgM9ALBQ1pb6vDnrieNdnj8vTfoUZmny0uRp6r9kyZ01 0GULp5qLgWJzfKOm18ppXWR7Gq/yLPK5nZX39KjcR8rK5ws2naepqW4aVpQHADHZ D84D7S399kOXpwlmPDn6LqTCu/KW28ns+uKGGIBzEbA/Tv2RceejDE8W4ouqaNAH j8cJwHUS -----END CERTIFICATE-----Generated at Tue Apr 29 18:40:24 2025 by rpki-client