$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json) Hash identifier: eChahqCjb+D7xpoBcf3qzZkRWuJGFldqGTOa0kuLIwQ= Subject key identifier: 5C:0E:36:B9:C0:4B:4A:8A:90:60:80:40:D1:9B:DE:45:86:5A:4C:1F Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584950F964F38DBF1AB260CA6900 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 10397 IP address blocks: 162.244.96.0/24 maxlen: 24 162.244.97.0/24 maxlen: 24 162.244.98.0/24 maxlen: 24 162.244.99.0/24 maxlen: 24 162.244.100.0/24 maxlen: 24 162.244.101.0/24 maxlen: 24 204.16.48.0/24 maxlen: 24 208.67.12.0/24 maxlen: 24 208.67.13.0/24 maxlen: 24 208.67.14.0/24 maxlen: 24 208.67.15.0/24 maxlen: 24 208.85.128.0/24 maxlen: 24 208.85.133.0/24 maxlen: 24 208.85.134.0/24 maxlen: 24 208.85.135.0/24 maxlen: 24 209.42.166.0/24 maxlen: 24 209.42.191.0/24 maxlen: 24 209.209.128.0/21 maxlen: 21 209.209.139.0/24 maxlen: 24 209.209.140.0/22 maxlen: 22 209.209.141.0/24 maxlen: 24 209.209.144.0/20 maxlen: 20 209.209.160.0/20 maxlen: 20 209.209.163.0/24 maxlen: 24 209.209.167.0/24 maxlen: 24 209.209.176.0/22 maxlen: 22 209.209.180.0/23 maxlen: 23 209.209.181.0/24 maxlen: 24 209.209.183.0/24 maxlen: 24 209.209.184.0/24 maxlen: 24 209.209.186.0/23 maxlen: 23 209.209.189.0/24 maxlen: 24 209.209.190.0/23 maxlen: 23 209.250.32.0/19 maxlen: 19 2607:b600::/48 maxlen: 48 2607:b600:1::/48 maxlen: 48 2607:b600:2::/48 maxlen: 48 2607:b600:4::/48 maxlen: 48 2607:b600:5::/48 maxlen: 48 2607:b600:6::/48 maxlen: 48 2607:b600:8::/48 maxlen: 48 2607:b600:10::/48 maxlen: 48 2607:b600:12::/48 maxlen: 48 2607:b600:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:64:f3:8d:bf:1a:b2:60:ca:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=fafd0a59-e5e1-4149-b1fa-db1c88c80f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:66:66:09:fb:44:75:1e:2e:7c:68:ff:a1: 7b:71:c4:c7:b9:f2:e5:28:fe:1f:c0:15:1d:3b:bb: 2e:be:e2:74:0a:7a:99:e4:a4:ec:4c:94:9c:84:83: 86:01:fa:30:30:36:70:59:78:cd:98:60:55:a3:63: e3:c5:ed:71:53:5a:6b:6f:20:46:d6:bf:b3:19:f3: 3a:3b:d3:9b:69:b3:a4:c8:10:db:e8:60:9a:2c:ed: 46:18:b1:8b:a6:03:05:87:fa:e1:94:b1:d4:44:4b: 33:63:c9:50:da:a1:43:66:4d:2d:4a:7b:25:0d:3d: 5e:d6:81:18:21:94:6f:0b:97:9f:25:10:a7:72:5c: 93:01:58:13:3b:56:3e:e8:91:3f:c8:50:4b:f4:f7: 46:f3:07:49:4e:a5:0b:53:92:60:c6:0e:7a:a5:a7: 4f:2b:88:b7:fc:4c:21:64:3a:7e:7a:9b:f0:ea:4e: c6:63:d0:c9:b4:58:16:59:0e:24:8f:22:5f:39:6e: a7:3d:bc:c2:10:f2:ea:af:ca:b1:d6:60:06:6d:6a: f0:52:63:31:fd:b8:54:cd:77:1a:48:4e:da:ec:07: 3c:f5:b1:1f:f7:0b:af:6b:25:3a:ad:8a:3b:53:d4: 68:87:db:8b:1d:e3:20:8f:33:04:db:ba:bf:08:27: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:36:B9:C0:4B:4A:8A:90:60:80:40:D1:9B:DE:45:86:5A:4C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 162.244.96.0-162.244.101.255 204.16.48.0/24 208.67.12.0/22 208.85.128.0/24 208.85.133.0-208.85.135.255 209.42.166.0/24 209.42.191.0/24 209.209.128.0/21 209.209.139.0-209.209.181.255 209.209.183.0-209.209.184.255 209.209.186.0/23 209.209.189.0-209.209.191.255 209.250.32.0/19 IPv6: 2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff 2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff 2607:b600:8::/48 2607:b600:10::/48 2607:b600:12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:84:a5:cf:ba:b5:9f:63:ae:dc:f4:95:50:f5:36:ca:05: 74:00:c4:84:0c:1f:69:87:71:29:e4:f9:42:74:28:07:19:9b: 98:3f:44:0a:b9:58:b5:65:e8:67:21:01:3f:dc:bd:56:06:f3: 55:4b:3c:b1:ff:b3:61:7a:52:82:85:a2:c5:65:4a:02:5f:22: 29:1a:6d:ca:dc:6d:a1:93:99:61:1d:7c:72:45:0a:cc:82:7e: fc:36:6a:7b:d2:21:84:83:7d:cc:04:d5:d9:4d:c2:46:f0:e8: 92:59:4f:af:63:3b:67:76:a8:b6:4c:0f:38:9e:60:4d:5a:5d: d6:79:6e:22:36:b5:a6:0d:f8:d7:1b:55:99:b5:58:37:c5:36: 64:3a:3e:57:c4:ab:c8:39:da:94:c0:35:35:66:84:32:a0:32: d4:9f:ad:cb:51:d7:ae:39:65:21:1b:83:da:85:6c:48:47:6d: 9f:a1:92:ea:f5:4e:c5:3f:50:a0:70:a6:2c:d7:6c:b4:2f:73: 49:40:77:87:64:01:3e:dd:72:6f:d5:b9:23:13:b7:f4:4b:03: 15:f6:60:0f:61:3e:6d:e7:d3:a6:17:fd:b9:98:3d:11:91:49: 14:c2:7f:7b:f7:0b:2f:18:94:6d:5c:b9:2a:96:d1:c3:d6:eb: 21:30:2d:f9 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWElQ+WTzjb8asmDKaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZmFmZDBhNTktZTVlMS00MTQ5LWIxZmEtZGIxYzg4YzgwZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE5mZgn7RHUeLnxo/6F7ccTHufLlKP4fwBUd O7suvuJ0CnqZ5KTsTJSchIOGAfowMDZwWXjNmGBVo2Pjxe1xU1prbyBG1r+zGfM6 O9ObabOkyBDb6GCaLO1GGLGLpgMFh/rhlLHUREszY8lQ2qFDZk0tSnslDT1e1oEY IZRvC5efJRCnclyTAVgTO1Y+6JE/yFBL9PdG8wdJTqULU5Jgxg56padPK4i3/Ewh ZDp+epvw6k7GY9DJtFgWWQ4kjyJfOW6nPbzCEPLqr8qx1mAGbWrwUmMx/bhUzXca SE7a7Ac89bEf9wuvayU6rYo7U9Roh9uLHeMgjzME27q/CCf0VwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFFwONrnAS0qKkGCAQNGb3kWGWkwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi 9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA5+ISlz7q1n2Ou3PSVUPU2ygV0AMSEDB9ph3Ep5PlCdCgHGZuYP0QKuVi1Zehn IQE/3L1WBvNVSzyx/7NhelKChaLFZUoCXyIpGm3K3G2hk5lhHXxyRQrMgn78Nmp7 0iGEg33MBNXZTcJG8OiSWU+vYztndqi2TA84nmBNWl3WeW4iNrWmDfjXG1WZtVg3 xTZkOj5XxKvIOdqUwDU1ZoQyoDLUn63LUdeuOWUhG4PahWxIR22foZLq9U7FP1Cg cKYs12y0L3NJQHeHZAE+3XJv1bkjE7f0SwMV9mAPYT5t59OmF/25mD0RkUkUwn97 9wsvGJRtXLkqltHD1ushMC35 -----END CERTIFICATE-----Generated at Mon Apr 28 10:38:30 2025 by rpki-client