$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa File: 8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa (raw, json) Hash identifier: 1EZkAxuil+PM4+FSYMfvKv7jYEoGJHPXMNMXgmP4xRc= Subject key identifier: 39:AD:AC:A3:95:29:53:CE:A4:02:97:E4:D8:6C:5E:6B:6F:B3:DD:D4 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F43285849806F174E615168AB8BBBD5A0 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 62715 IP address blocks: 64.207.222.0/23 maxlen: 24 67.222.252.0/22 maxlen: 24 68.65.192.0/21 maxlen: 24 103.8.239.0/24 maxlen: 24 162.222.40.0/21 maxlen: 24 216.9.196.0/23 maxlen: 24 216.9.198.0/24 maxlen: 24 2606:4a80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:17:4e:61:51:68:ab:8b:bb:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=cadf69dc-823e-45b9-ba17-1d6cde8ae77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:c3:bf:1d:6b:09:71:a9:c3:ef:a3:5c:26: b8:1a:a8:70:cf:a6:b4:68:34:40:f6:91:6f:5f:e7: ae:3b:52:4c:1d:69:53:ae:ec:2a:1e:cc:e9:66:e7: 05:df:97:65:78:05:84:d9:c9:2b:ed:14:c4:c7:6f: f2:c3:04:bf:cd:f7:1a:0c:86:1a:e8:49:19:c7:5b: 8a:89:46:3a:d2:93:a9:83:ab:2c:ff:f2:02:7b:d7: a0:79:a0:07:df:1f:fd:f3:37:b1:4d:5e:3b:ef:2c: 0f:33:be:fd:e2:89:04:e2:f8:01:7b:c6:2a:f5:28: 4a:8e:ba:74:37:ef:95:b4:c9:8e:6f:eb:2e:c4:bc: f5:6e:41:c6:b3:fd:02:57:1c:90:dd:a6:11:c9:4d: 01:0f:0c:92:cd:ad:aa:88:ec:c0:cf:6d:dd:46:79: e1:b3:05:c1:d4:dd:68:d0:b0:d4:22:fa:41:81:8d: c7:c2:38:18:9b:89:f2:7a:d0:41:e6:36:fc:52:1c: dc:b6:a7:00:6c:d6:7b:e0:ab:c6:72:26:57:2c:63: 61:b1:e6:f1:7e:0a:de:f6:2c:78:ba:ba:45:0b:f8: 64:f3:44:fa:81:a4:16:81:75:52:56:22:41:3f:14: 02:1e:aa:72:01:c3:17:cd:bd:ce:1c:b9:85:b6:b9: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:AC:A3:95:29:53:CE:A4:02:97:E4:D8:6C:5E:6B:6F:B3:DD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.252.0/22 68.65.192.0/21 103.8.239.0/24 162.222.40.0/21 216.9.196.0-216.9.198.255 IPv6: 2606:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1d:a7:2a:a4:cc:db:c2:a7:7f:0c:51:2e:58:2f:ef:ca:a3: 91:2a:6f:fb:51:ca:8e:01:be:53:cc:09:21:e8:fd:b2:7a:50: c9:36:7b:6a:18:c6:1a:45:de:4d:bc:6b:57:c2:42:2e:ad:82: 5c:85:21:8e:4f:da:80:9c:74:da:39:86:07:3b:7f:82:c5:ad: ef:9e:6b:80:9a:48:fa:50:d8:98:1b:2b:2c:55:98:d8:d3:89: e0:75:24:e1:c1:11:51:dd:89:80:f5:1b:97:40:e8:9f:47:7e: be:ce:a7:85:96:6a:20:13:33:7e:1f:b1:68:4e:bc:cd:18:52: dd:6a:2f:21:c1:0e:34:25:4c:af:b6:07:24:f4:51:f0:42:66: 79:40:c7:e5:eb:fc:86:c5:9c:ee:9b:2e:c1:c0:2f:f5:0b:f5: ae:6f:3d:06:4f:d8:64:6b:27:e9:ae:c4:67:3b:9f:6b:9d:bc: 2f:d2:37:14:0a:f2:b0:86:ad:1a:a7:88:e7:bb:0f:e4:47:9f: 6f:11:dc:e7:f4:67:a6:db:38:6f:50:6e:a2:45:c5:66:cd:7c: 55:3f:3c:67:8c:52:0c:49:7d:88:ef:5a:79:2f:8e:b9:1d:92: 71:90:f3:37:29:af:1f:ee:ca:20:94:a4:d7:20:b0:ee:a2:9c: b1:71:51:2c -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEmAbxdOYVFoq4u71aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk Y2FkZjY5ZGMtODIzZS00NWI5LWJhMTctMWQ2Y2RlOGFlNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz3Dvx1rCXGpw++jXCa4Gqhwz6a0aDRA9pFv X+euO1JMHWlTruwqHszpZucF35dleAWE2ckr7RTEx2/ywwS/zfcaDIYa6EkZx1uK iUY60pOpg6ss//ICe9egeaAH3x/98zexTV477ywPM7794okE4vgBe8Yq9ShKjrp0 N++VtMmOb+suxLz1bkHGs/0CVxyQ3aYRyU0BDwySza2qiOzAz23dRnnhswXB1N1o 0LDUIvpBgY3HwjgYm4nyetBB5jb8UhzctqcAbNZ74KvGciZXLGNhsebxfgre9ix4 urpFC/hk80T6gaQWgXVSViJBPxQCHqpyAcMXzb3OHLmFtrnoKwIDAQABo4IDijCC A4YwHQYDVR0OBBYEFDmtrKOVKVPOpAKX5NhsXmtvs93UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvODA0MmU1YTUtY2I5Yi0z ZDNkLWFjZTMtMmRlMWUyMjcyYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQBQM/eAwQC Q978AwQDREHAAwQAZwjvAwQDot4oMAwDBALYCcQDBADYCcYwDQQCAAIwBwMFACYG SoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHh2nKqTM28KnfwxRLlgv78qjkSpv+1HKjgG+U8wJIej9snpQ yTZ7ahjGGkXeTbxrV8JCLq2CXIUhjk/agJx02jmGBzt/gsWt755rgJpI+lDYmBsr LFWY2NOJ4HUk4cERUd2JgPUbl0Don0d+vs6nhZZqIBMzfh+xaE68zRhS3WovIcEO NCVMr7YHJPRR8EJmeUDH5ev8hsWc7psuwcAv9Qv1rm89Bk/YZGsn6a7EZzufa528 L9I3FArysIatGqeI57sP5EefbxHc5/Rnpts4b1BuokXFZs18VT88Z4xSDEl9iO9a eS+OuR2ScZDzNymvH+7KIJSk1yCw7qKcsXFRLA== -----END CERTIFICATE-----Generated at Sun Apr 27 17:21:52 2025 by rpki-client