$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa File: 3e6eca20-984c-38bb-912e-539ca9ab80f4.roa (raw, json) Hash identifier: hF3wGaoTHQ128Sh78w5/rauY3OgC1Rw0zhx4CAU/JN8= Subject key identifier: 36:46:3E:5D:5B:53:1A:48:B9:37:0F:A0:87:B2:39:C8:3E:BB:A8:4A Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858496FAF0E2EC2A5E6F4B9C56880 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 6621 IP address blocks: 72.168.0.0/19 maxlen: 19 72.168.80.0/21 maxlen: 21 72.168.87.0/24 maxlen: 24 72.168.88.0/21 maxlen: 21 72.168.94.0/24 maxlen: 24 72.168.95.0/24 maxlen: 24 72.168.96.0/19 maxlen: 19 72.168.96.0/21 maxlen: 21 72.168.128.0/22 maxlen: 22 72.168.132.0/22 maxlen: 22 72.168.136.0/22 maxlen: 22 72.168.140.0/22 maxlen: 22 72.168.142.0/23 maxlen: 23 72.168.144.0/22 maxlen: 22 72.168.148.0/22 maxlen: 22 72.168.152.0/22 maxlen: 22 72.168.156.0/22 maxlen: 22 72.168.160.0/22 maxlen: 22 72.168.164.0/22 maxlen: 22 72.168.168.0/22 maxlen: 22 72.168.172.0/22 maxlen: 22 72.168.176.0/22 maxlen: 22 72.168.180.0/22 maxlen: 22 72.168.184.0/22 maxlen: 22 72.168.188.0/22 maxlen: 22 72.168.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0e:2e:c2:a5:e6:f4:b9:c5:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=bd9dba12-e1c5-43e0-8943-b1adc5da3b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:c6:7a:35:9e:81:93:25:27:49:6e:fe:a1: 5e:9d:8c:58:03:09:df:45:f9:34:3d:d5:01:5a:51: 0c:32:91:80:0d:c9:10:03:40:55:9c:c5:92:05:e1: ff:1c:b7:b8:4f:16:b3:67:3b:23:27:fd:30:90:fd: 45:e3:21:48:16:23:23:18:a0:3a:75:c9:0a:7f:02: d7:e2:45:51:a6:f2:59:e9:3a:18:70:eb:31:14:6e: cc:35:57:78:9e:44:61:4a:7f:bb:e6:86:7f:d9:49: 98:64:6b:b0:2d:56:a2:32:ee:dd:74:30:14:fa:fd: 9d:4c:01:44:c5:9f:5d:73:cf:69:0d:e3:45:35:d7: 71:5f:43:dc:09:8c:aa:5c:cf:0c:bd:59:97:19:4b: 99:80:f8:4f:22:e7:2f:d6:f2:e5:49:8f:c0:90:ef: 3c:49:35:17:6c:8d:b4:7a:6c:ec:3c:84:fc:3a:b8: ec:b5:93:e9:d1:52:38:0b:76:1d:a8:5a:f2:dd:69: 84:d9:e5:86:6b:86:fb:ee:d2:05:d4:33:6a:ee:c9: d5:25:9b:87:4c:62:39:3e:8d:61:64:eb:c5:56:01: 19:8e:03:2b:5f:cd:4f:9e:1b:35:c5:fd:b5:09:3e: b3:98:ad:8c:6a:24:8f:e3:e2:ac:e5:4a:a1:4d:aa: 4c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:3E:5D:5B:53:1A:48:B9:37:0F:A0:87:B2:39:C8:3E:BB:A8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.168.0.0/19 72.168.80.0-72.168.191.255 72.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:94:7a:1d:d0:db:0b:10:30:21:6c:5a:29:14:52:b1:58:98: 20:88:d8:1d:24:49:d8:c5:46:57:58:a2:f4:cf:6d:83:53:de: 53:70:37:9a:90:97:5f:d3:b2:50:59:e0:87:3a:fb:25:1e:00: 21:90:e3:dd:95:29:65:51:43:b8:4a:d6:be:34:bf:e8:3a:1c: e0:ab:9f:c1:51:1b:3c:7c:08:33:96:fd:71:af:36:ff:08:0e: 15:40:3d:94:dc:9f:ad:a1:75:1c:94:fa:60:18:11:e9:f5:ec: bb:78:ef:71:11:33:7e:cc:66:29:3b:ff:74:24:6f:04:12:0c: a8:ce:ad:47:6c:53:09:c8:0b:3a:e9:e4:36:e7:58:ef:c1:70: 07:73:78:c9:a1:21:f8:a5:0e:4c:7a:3c:69:bd:96:f5:e4:58: 6c:92:47:e1:2a:07:31:53:fa:ab:8d:1f:c6:da:a7:1d:f7:0d: b3:9c:9c:4d:e2:6e:ad:43:4b:78:a2:99:d6:9f:21:66:40:e2: 1b:27:53:c9:98:15:42:ef:15:bc:66:2e:9d:c8:da:f3:f7:c9: 86:d4:d9:37:87:1d:31:3d:dd:68:9f:bb:be:b5:e1:fc:cd:c6: 0a:dd:00:1d:88:d9:72:3b:7b:68:83:4d:27:12:55:f0:37:16: a1:10:e3:b6 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWElvrw4uwqXm9LnFaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk YmQ5ZGJhMTItZTFjNS00M2UwLTg5NDMtYjFhZGM1ZGEzYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAvGejWegZMlJ0lu/qFenYxYAwnfRfk0PdUB WlEMMpGADckQA0BVnMWSBeH/HLe4TxazZzsjJ/0wkP1F4yFIFiMjGKA6dckKfwLX 4kVRpvJZ6ToYcOsxFG7MNVd4nkRhSn+75oZ/2UmYZGuwLVaiMu7ddDAU+v2dTAFE xZ9dc89pDeNFNddxX0PcCYyqXM8MvVmXGUuZgPhPIucv1vLlSY/AkO88STUXbI20 emzsPIT8OrjstZPp0VI4C3YdqFry3WmE2eWGa4b77tIF1DNq7snVJZuHTGI5Po1h ZOvFVgEZjgMrX81Pnhs1xf21CT6zmK2MaiSP4+Ks5UqhTapMsQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFDZGPl1bUxpIuTcPoIeyOcg+u6hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2U2ZWNhMjAtOTg0Yy0z OGJiLTkxMmUtNTM5Y2E5YWI4MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQFSKgAMAwD BARIqFADBAZIqIADBAVIqOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWpR6HdDbCxAwIWxaKRRSsViYIIjY HSRJ2MVGV1ii9M9tg1PeU3A3mpCXX9OyUFnghzr7JR4AIZDj3ZUpZVFDuErWvjS/ 6Doc4KufwVEbPHwIM5b9ca82/wgOFUA9lNyfraF1HJT6YBgR6fXsu3jvcREzfsxm KTv/dCRvBBIMqM6tR2xTCcgLOunkNudY78FwB3N4yaEh+KUOTHo8ab2W9eRYbJJH 4SoHMVP6q40fxtqnHfcNs5ycTeJurUNLeKKZ1p8hZkDiGydTyZgVQu8VvGYuncja 8/fJhtTZN4cdMT3daJ+7vrXh/M3GCt0AHYjZcjt7aINNJxJV8DcWoRDjtg== -----END CERTIFICATE-----Generated at Mon Jun 16 23:39:35 2025 by rpki-client