$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa File: c655fc5a-2609-3240-abf3-7db143f47639.roa (raw, json) Hash identifier: qvSNQ6PKmFIo5QHfR9v9iFVTGPXq5aqxbsEVrt7Zoqs= Subject key identifier: 90:06:FC:30:2A:BC:57:33:91:34:17:63:F3:76:07:63:33:56:1E:8A Certificate issuer: /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a Certificate serial: 010D0C9F43285849955F1FC369572ABEA0A12000 Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 3223 IP address blocks: 23.226.64.0/20 maxlen: 32 104.161.8.0/21 maxlen: 32 104.161.16.0/20 maxlen: 32 104.161.32.0/19 maxlen: 32 104.161.64.0/18 maxlen: 32 107.167.64.0/19 maxlen: 32 107.178.64.0/18 maxlen: 32 107.189.128.0/18 maxlen: 32 148.163.0.0/17 maxlen: 32 162.213.208.0/22 maxlen: 32 162.218.112.0/21 maxlen: 32 184.164.64.0/19 maxlen: 32 192.30.136.0/22 maxlen: 32 192.110.160.0/21 maxlen: 32 199.231.84.0/22 maxlen: 32 2604:6280::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1f:c3:69:57:2a:be:a0:a1:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=5a888e3b-e338-4685-b7f1-38af1c607753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:ba:93:ee:4c:cf:fa:e8:79:3a:b6:30:14: 79:0b:b7:81:da:11:b4:2c:78:3d:56:f9:ac:be:78: 67:6f:6b:c5:c6:84:10:6d:fe:cb:47:c7:0a:a1:05: 3f:a4:25:24:a0:4f:fb:71:ef:4e:41:e8:14:c9:00: c6:de:3a:17:36:44:10:f4:00:2f:43:a5:b2:ae:90: eb:d9:af:a2:db:bd:e1:72:8b:65:a6:d2:5b:03:5e: 14:38:0a:71:d6:81:26:0b:f3:78:fa:0c:00:5f:0d: 65:10:7e:bf:0c:2f:5a:a0:2a:f9:13:c2:2d:11:ed: 1f:ec:f5:6c:d6:62:87:c1:75:95:d6:52:93:d2:04: fb:b6:a7:3d:1e:cf:ed:99:18:a4:bd:15:0d:f7:01: 1b:8c:21:f3:15:03:ea:52:da:c3:81:37:1d:db:0a: 63:73:6a:ee:ba:e4:fe:84:9e:ed:33:4f:22:8a:f5: 8c:cc:02:86:90:cb:fe:f7:de:95:db:a1:8d:74:9c: cf:a7:35:d0:a9:5d:1d:01:dc:c2:83:19:15:5f:b1: 73:f2:ca:bf:02:bf:1d:dc:a6:8b:1d:5a:87:49:7c: 84:81:62:90:18:90:bf:b0:f3:46:42:ae:e7:4c:22: 50:05:98:65:85:db:b2:19:b5:02:45:2b:33:ea:28: 77:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:06:FC:30:2A:BC:57:33:91:34:17:63:F3:76:07:63:33:56:1E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl X509v3 Authority Key Identifier: keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer sbgp-ipAddrBlock: critical IPv4: 23.226.64.0/20 104.161.8.0-104.161.127.255 107.167.64.0/19 107.178.64.0/18 107.189.128.0/18 148.163.0.0/17 162.213.208.0/22 162.218.112.0/21 184.164.64.0/19 192.30.136.0/22 192.110.160.0/21 199.231.84.0/22 IPv6: 2604:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:09:ad:1a:a8:63:9f:9b:b7:c5:2b:2e:3f:4d:7e:2b:75:95: 6e:58:e8:05:a5:ab:ee:49:d3:d3:70:f0:01:88:e0:03:ec:74: ae:4b:5e:69:7f:43:93:d4:14:2c:df:de:54:12:91:a2:81:ed: f7:3a:ee:78:1c:3e:d5:94:1a:db:32:bc:82:f6:3d:af:3c:24: 13:54:5a:b7:6e:09:d4:cb:b6:fd:82:28:8e:52:92:bc:26:c4: 21:f4:dc:02:e5:b0:ab:d2:31:b3:6d:eb:d4:78:15:e4:b1:f5: 6a:0d:bd:d9:f4:95:9b:45:61:07:52:57:24:6c:9f:de:9a:a8: 35:94:f3:da:d4:76:aa:a3:5c:70:07:3d:60:7d:ce:dc:eb:d5: bf:80:dd:73:4f:f9:42:af:96:a5:d2:f1:16:9f:ab:20:5d:65: 74:07:c4:fa:8a:b3:80:c3:a0:81:00:ed:8c:18:ea:07:2d:ec: 6a:4c:af:87:9a:a5:a3:82:73:b7:fe:cc:d1:e9:f7:e3:35:ab: bd:b4:01:6a:ed:55:7c:db:3a:d9:8b:0b:e1:3e:3d:98:28:1a: d4:aa:ba:4f:04:bf:9d:a9:f1:ad:d5:e3:e4:12:62:5c:22:35: d8:7e:70:2f:51:ad:70:62:ff:3d:b4:01:fb:d6:f2:b2:4a:c0: bc:f9:96:ed -----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgIUAQ0Mn0MoWEmVXx/DaVcqvqChIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ1OTJkMTgtODlhMi00YjMxLWExNGItYjVlYTNlYWUy YzRhMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NWE4ODhlM2ItZTMzOC00Njg1LWI3ZjEtMzhhZjFjNjA3NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRi6k+5Mz/roeTq2MBR5C7eB2hG0LHg9Vvms vnhnb2vFxoQQbf7LR8cKoQU/pCUkoE/7ce9OQegUyQDG3joXNkQQ9AAvQ6WyrpDr 2a+i273hcotlptJbA14UOApx1oEmC/N4+gwAXw1lEH6/DC9aoCr5E8ItEe0f7PVs 1mKHwXWV1lKT0gT7tqc9Hs/tmRikvRUN9wEbjCHzFQPqUtrDgTcd2wpjc2ruuuT+ hJ7tM08iivWMzAKGkMv+996V26GNdJzPpzXQqV0dAdzCgxkVX7Fz8sq/Ar8d3KaL HVqHSXyEgWKQGJC/sPNGQq7nTCJQBZhlhduyGbUCRSsz6ih3DQIDAQABo4IDrjCC A6owHQYDVR0OBBYEFJAG/DAqvFczkTQXY/N2B2MzVh6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5 MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVhM2VhZTJjNGEvYzY1NWZjNWEtMjYwOS0z MjQwLWFiZjMtN2RiMTQzZjQ3NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQ1OTJkMTgtODlhMi00YjMxLWEx NGItYjVlYTNlYWUyYzRhL2U0NTkyZDE4LTg5YTItNGIzMS1hMTRiLWI1ZWEzZWFl MmM0YS5jcmwwHwYDVR0jBBgwFoAUh1+i/+WTO7UW3kS/uT6vv/39WYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVh M2VhZTJjNGEuY2VyMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQEF+JAMAwD BANooQgDBAdooQADBAVrp0ADBAZrskADBAZrvYADBAeUowADBAKi1dADBAOi2nAD BAW4pEADBALAHogDBAPAbqADBALH51QwDQQCAAIwBwMFACYEYoAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA cwmtGqhjn5u3xSsuP01+K3WVbljoBaWr7knT03DwAYjgA+x0rkteaX9Dk9QULN/e VBKRooHt9zrueBw+1ZQa2zK8gvY9rzwkE1Rat24J1Mu2/YIojlKSvCbEIfTcAuWw q9Ixs23r1HgV5LH1ag292fSVm0VhB1JXJGyf3pqoNZTz2tR2qqNccAc9YH3O3OvV v4Ddc0/5Qq+WpdLxFp+rIF1ldAfE+oqzgMOggQDtjBjqBy3sakyvh5qlo4Jzt/7M 0en34zWrvbQBau1VfNs62YsL4T49mCga1Kq6TwS/nanxrdXj5BJiXCI12H5wL1Gt cGL/PbQB+9byskrAvPmW7Q== -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:37 2025 by rpki-client