$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: o7uA6B1+4G9U+dhUZzXhe95fOWK7iZ/DFlEjzV4OO90= Subject key identifier: 98:9D:2B:D1:B3:89:3F:8A:12:D0:94:3F:A2:98:32:9A:59:E3:CA:CD Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584A0C055E4D87C73F7251A1AB00 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5e:4d:87:c7:3f:72:51:a1:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=95fd9051-ec88-4b58-8125-d1fee0037ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:fb:db:c4:1a:83:13:44:73:55:e8:f6:87: 7d:45:f6:d3:d8:8b:e0:0d:3e:66:77:b7:5f:5e:fd: fa:be:96:e5:24:cd:82:46:2a:a8:b1:da:32:80:5a: f3:f5:05:3d:0f:a5:82:a0:8d:1e:b8:f9:21:ed:dd: 37:85:91:3a:d6:b8:ad:b8:6e:da:e6:e9:5f:3c:7e: 21:e2:2a:e4:3c:f3:a4:12:ed:c4:94:74:eb:e5:db: 49:cf:c5:5c:15:87:34:00:c5:50:80:0e:89:56:89: f5:1b:25:93:96:1f:68:32:57:fd:5b:6a:00:32:a9: d0:94:01:63:9a:03:3e:c4:7d:74:46:f0:0f:84:3a: 3d:3a:f3:19:62:89:aa:79:32:00:11:94:87:cb:11: 39:b9:42:74:5c:82:ea:ae:03:85:7b:c5:22:e5:26: a7:5c:d2:20:e4:38:f8:39:86:d6:b5:93:d9:66:6f: e1:a0:b2:c9:0b:c5:95:dc:10:3e:a5:b7:f2:96:c5: db:37:b7:7d:84:37:5c:df:e1:71:ff:7b:9a:66:35: 81:8e:03:4e:9c:b2:2a:06:81:0c:60:b3:28:99:c9: a2:0e:26:1a:cb:ed:db:3b:b5:30:e8:8e:fc:2f:13: bb:1e:b9:1c:40:f6:31:61:26:39:ce:5a:9b:f2:55: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:2B:D1:B3:89:3F:8A:12:D0:94:3F:A2:98:32:9A:59:E3:CA:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:60:b3:fe:5b:bc:e5:58:1b:1e:41:55:0d:5e:41:11:b5:d9: af:d6:e5:e1:44:c7:dc:9b:01:7b:6a:2b:e4:11:e1:56:88:6c: 32:2b:9d:07:78:a6:df:55:77:8c:ef:6c:94:b9:df:e7:68:03: 21:89:25:11:58:ed:db:6b:34:1c:41:43:ca:75:5a:c7:9c:08: 4b:51:9a:03:bc:26:d1:c5:ee:3e:28:b0:04:99:67:34:1c:4e: 0c:33:63:a4:31:8b:70:87:fd:c9:ff:db:bf:f3:36:31:34:99: 18:7b:0c:06:82:e2:76:e7:c9:8d:ab:0e:a1:d9:58:09:f5:ba: cf:5e:ac:ca:8c:4d:59:b6:05:95:71:fd:62:c3:cd:14:4f:11: c6:a1:18:43:df:b6:72:00:c9:1c:ff:05:91:d6:5e:f1:c0:c7: cc:67:55:2c:38:02:14:3e:48:ec:de:ac:44:96:2e:7d:3a:62: 1b:e0:9f:69:54:9e:ca:44:fb:81:ed:d4:db:d6:fa:11:26:7a: 07:8a:28:40:ed:f3:39:87:98:76:8c:ba:a8:56:bc:54:f3:8d: 5a:26:3d:bb:0e:59:84:3d:59:0d:55:34:54:a1:96:53:53:4e: 37:70:50:ce:08:23:57:52:2b:ab:88:c0:0a:e5:af:bc:16:14: a7:55:0a:f4 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEoMBV5Nh8c/clGhqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OTVmZDkwNTEtZWM4OC00YjU4LTgxMjUtZDFmZWUwMDM3ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtar728QagxNEc1Xo9od9RfbT2IvgDT5md7df Xv36vpblJM2CRiqosdoygFrz9QU9D6WCoI0euPkh7d03hZE61rituG7a5ulfPH4h 4irkPPOkEu3ElHTr5dtJz8VcFYc0AMVQgA6JVon1GyWTlh9oMlf9W2oAMqnQlAFj mgM+xH10RvAPhDo9OvMZYomqeTIAEZSHyxE5uUJ0XILqrgOFe8Ui5SanXNIg5Dj4 OYbWtZPZZm/hoLLJC8WV3BA+pbfylsXbN7d9hDdc3+Fx/3uaZjWBjgNOnLIqBoEM YLMomcmiDiYay+3bO7Uw6I78LxO7HrkcQPYxYSY5zlqb8lUPAQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFJidK9GziT+KEtCUP6KYMppZ48rNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABBgs/5bvOVYGx5BVQ1eQRG1 2a/W5eFEx9ybAXtqK+QR4VaIbDIrnQd4pt9Vd4zvbJS53+doAyGJJRFY7dtrNBxB Q8p1WsecCEtRmgO8JtHF7j4osASZZzQcTgwzY6Qxi3CH/cn/27/zNjE0mRh7DAaC 4nbnyY2rDqHZWAn1us9erMqMTVm2BZVx/WLDzRRPEcahGEPftnIAyRz/BZHWXvHA x8xnVSw4AhQ+SOzerESWLn06Yhvgn2lUnspE+4Ht1NvW+hEmegeKKEDt8zmHmHaM uqhWvFTzjVomPbsOWYQ9WQ1VNFShllNTTjdwUM4II1dSK6uIwArlr7wWFKdVCvQ= -----END CERTIFICATE-----Generated at Tue Jun 17 11:14:20 2025 by rpki-client