$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/433a87db-3abb-3463-985c-6b6a6686327f.roa File: 433a87db-3abb-3463-985c-6b6a6686327f.roa (raw, json) Hash identifier: TtGfD1r0dKVlAs3NmvXHrQNfqfdkYokBkCRWG1GCO0I= Subject key identifier: C8:19:D1:DE:E1:B1:AB:BB:20:2A:0E:AE:21:74:BE:43:8C:3B:D8:E5 Certificate issuer: /CN=0d6bb559-168b-45eb-91f1-f7988760221d Certificate serial: 010D0C9F43285849ED4FC861310B0417A25BD940 Authority key identifier: 76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/433a87db-3abb-3463-985c-6b6a6686327f.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 46437 IP address blocks: 74.118.112.0/21 maxlen: 24 162.210.16.0/22 maxlen: 24 162.252.224.0/22 maxlen: 24 172.96.152.0/21 maxlen: 24 192.96.44.0/24 maxlen: 24 198.135.182.0/23 maxlen: 24 199.85.63.0/24 maxlen: 24 208.80.140.0/22 maxlen: 24 208.91.88.0/23 maxlen: 24 208.91.92.0/22 maxlen: 24 208.95.136.0/21 maxlen: 24 216.120.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c8:61:31:0b:04:17:a2:5b:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb559-168b-45eb-91f1-f7988760221d Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=9970b954-a939-4de4-b50c-a7dc646c6563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:9e:84:8e:7f:88:97:be:1a:fb:d3:0e:84: e9:e5:4a:ac:d8:75:41:fa:e7:e2:22:d0:08:4c:97: ae:ec:47:41:70:b5:05:f9:62:35:51:d3:37:67:7f: bb:57:04:6a:5c:d7:6c:dd:b9:62:62:18:bb:3a:91: e5:6c:d5:e6:c1:1f:db:35:00:13:51:e8:d0:b8:9f: 9f:42:c9:0e:70:67:8e:cc:c8:bc:21:2c:ea:4a:d7: e9:66:1c:37:e0:4c:7a:5a:a3:99:1c:35:6e:67:4f: e8:95:40:93:ec:f6:8b:4e:29:2b:7a:62:1c:ae:a8: 29:a5:7a:8b:45:1b:e5:ac:79:01:2e:eb:49:89:e4: 55:9a:d2:63:4c:5d:e4:44:eb:32:10:0a:96:c1:3e: b4:a2:7e:01:fe:c2:d0:9b:be:df:1d:71:e7:21:5a: 12:3c:1c:8d:86:b5:b1:64:23:fc:1d:47:28:70:e6: dc:23:8a:ff:d1:d2:17:a7:19:a2:13:d9:8d:9f:fc: 27:d7:ae:d8:df:e1:3f:5e:63:55:f6:82:0e:d8:9f: f6:b0:1f:de:9d:21:5a:81:fd:f2:6e:38:50:bd:80: 3f:e8:55:be:ca:e0:cd:fd:ba:aa:4a:dd:72:e4:b2: b7:3e:84:d4:cc:9c:0e:92:4a:1a:15:87:cd:17:a5: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:D1:DE:E1:B1:AB:BB:20:2A:0E:AE:21:74:BE:43:8C:3B:D8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/433a87db-3abb-3463-985c-6b6a6686327f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl X509v3 Authority Key Identifier: keyid:76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer sbgp-ipAddrBlock: critical IPv4: 74.118.112.0/21 162.210.16.0/22 162.252.224.0/22 172.96.152.0/21 192.96.44.0/24 198.135.182.0/23 199.85.63.0/24 208.80.140.0/22 208.91.88.0/23 208.91.92.0/22 208.95.136.0/21 216.120.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:31:47:26:80:54:f3:96:81:98:ae:49:81:02:25:d3:8f:a3: f1:58:ed:be:3d:db:d5:ec:1a:b9:82:71:b4:e5:2a:bf:9f:38: 17:b4:be:ae:0c:08:47:50:17:36:33:f5:db:5b:ab:46:2d:41: 67:5d:02:41:dc:56:34:a6:4e:43:99:72:80:bd:64:ef:f3:76: a8:2b:c6:c6:68:dd:f4:94:d8:32:b5:f4:de:98:7f:86:45:1c: b1:86:78:e5:0a:2c:9e:c4:9d:e2:00:24:1b:8e:5e:fd:a3:74: f1:13:35:79:a7:4b:ea:2e:4e:cf:db:16:5c:ba:d4:4b:37:4e: 69:5f:a2:f1:77:b4:c6:e0:02:6b:ec:bb:e1:7d:c8:80:b7:44: 9c:4d:d3:88:79:3e:f3:53:2d:36:be:5a:a3:f3:de:e9:c5:4e: ca:72:d9:c3:57:06:6c:bf:cd:4b:36:c2:b8:25:18:d7:d3:f9: b9:eb:d2:bc:77:7b:25:89:14:17:ce:0a:53:ef:72:cc:f2:05: 08:7a:14:ab:c1:c1:5e:16:1f:d6:bd:66:4b:fe:7c:49:be:e9: 08:a7:44:0a:30:c9:d7:d7:10:70:b9:c4:90:59:4b:26:65:89: b2:80:61:9c:8f:d3:8e:1f:10:4e:58:83:ba:0c:92:c4:5c:cb: c5:68:0a:42 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEntT8hhMQsEF6Jb2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2YmI1NTktMTY4Yi00NWViLTkxZjEtZjc5ODg3NjAy MjFkMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTk3MGI5NTQtYTkzOS00ZGU0LWI1MGMtYTdkYzY0NmM2NTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOiehI5/iJe+GvvTDoTp5Uqs2HVB+ufiItAI TJeu7EdBcLUF+WI1UdM3Z3+7VwRqXNds3bliYhi7OpHlbNXmwR/bNQATUejQuJ+f QskOcGeOzMi8ISzqStfpZhw34Ex6WqOZHDVuZ0/olUCT7PaLTikremIcrqgppXqL RRvlrHkBLutJieRVmtJjTF3kROsyEAqWwT60on4B/sLQm77fHXHnIVoSPByNhrWx ZCP8HUcocObcI4r/0dIXpxmiE9mNn/wn167Y3+E/XmNV9oIO2J/2sB/enSFagf3y bjhQvYA/6FW+yuDN/bqqSt1y5LK3PoTUzJwOkkoaFYfNF6XVkwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFMgZ0d7hsau7ICoOriF0vkOMO9jlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDZi YjU1OS0xNjhiLTQ1ZWItOTFmMS1mNzk4ODc2MDIyMWQvNDMzYTg3ZGItM2FiYi0z NDYzLTk4NWMtNmI2YTY2ODYzMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGQ2YmI1NTktMTY4Yi00NWViLTkx ZjEtZjc5ODg3NjAyMjFkLzBkNmJiNTU5LTE2OGItNDVlYi05MWYxLWY3OTg4NzYw MjIxZC5jcmwwHwYDVR0jBBgwFoAUdgVjZCvXvC75OWUe+wCuP+wHzckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDZiYjU1OS0xNjhiLTQ1ZWItOTFmMS1mNzk4 ODc2MDIyMWQuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQDSnZwAwQC otIQAwQCovzgAwQDrGCYAwQAwGAsAwQBxoe2AwQAx1U/AwQC0FCMAwQB0FtYAwQC 0FtcAwQD0F+IAwQC2HiYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABsxRyaAVPOWgZiuSYECJdOPo/FY7b49 29XsGrmCcbTlKr+fOBe0vq4MCEdQFzYz9dtbq0YtQWddAkHcVjSmTkOZcoC9ZO/z dqgrxsZo3fSU2DK19N6Yf4ZFHLGGeOUKLJ7EneIAJBuOXv2jdPETNXmnS+ouTs/b Fly61Es3TmlfovF3tMbgAmvsu+F9yIC3RJxN04h5PvNTLTa+WqPz3unFTspy2cNX Bmy/zUs2wrglGNfT+bnr0rx3eyWJFBfOClPvcszyBQh6FKvBwV4WH9a9Zkv+fEm+ 6QinRAowydfXEHC5xJBZSyZlibKAYZyP044fEE5Yg7oMksRcy8VoCkI= -----END CERTIFICATE-----Generated at Sun Jun 15 23:16:57 2025 by rpki-client