$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa File: 094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa (raw, json) Hash identifier: tIWV43smjegWNB97zLWQcwSN7CDXnSarXdTNRaYuBas= Subject key identifier: A7:00:15:C2:4D:D5:B2:6E:99:C9:00:92:54:AD:C8:A8:E8:AA:41:54 Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F4328584A00DABF3597DABB8ADD6ECAA0 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 20283 IP address blocks: 64.90.64.0/19 maxlen: 24 68.170.112.0/20 maxlen: 20 69.168.240.0/20 maxlen: 24 161.199.130.0/24 maxlen: 24 167.94.42.0/23 maxlen: 23 167.94.52.0/23 maxlen: 23 167.94.62.0/23 maxlen: 23 167.94.76.0/23 maxlen: 23 172.87.0.0/20 maxlen: 21 199.59.116.0/22 maxlen: 22 205.214.160.0/20 maxlen: 20 209.212.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bf:35:97:da:bb:8a:dd:6e:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=72e92c44-bb2e-4c8c-8a87-58244106e774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f1:96:de:f1:59:b6:6d:78:47:81:3a:61:7b: 63:d1:16:92:ca:8d:ae:ee:dd:5f:81:fe:78:a3:9c: 3a:68:9b:05:99:25:1c:ed:1b:be:48:c5:5e:d4:e8: 8a:ee:1a:a8:34:18:92:f4:33:d9:8e:df:6c:0b:21: 58:9b:c1:60:69:90:74:ed:6e:8c:72:49:f3:73:b5: 04:a5:dd:7b:97:bf:fa:cb:0a:e4:c6:a0:ec:34:b4: 29:f8:e4:21:58:73:b4:86:b2:3f:6a:c0:8e:06:16: 17:58:51:69:de:0d:80:29:33:9d:ae:2c:1c:94:95: 65:36:45:79:23:29:cb:1d:30:ae:b9:01:f8:c7:a5: 3d:32:f0:b3:ea:4b:0b:b6:9a:14:cf:61:c4:6f:7b: 5f:12:6c:d4:3d:c1:67:c5:c8:73:c9:19:84:aa:46: f7:e0:e6:f6:ea:4b:2b:63:ac:fa:43:2d:63:1a:1b: 08:6d:cd:12:40:2e:78:69:b0:41:ee:16:4a:7e:84: ed:8d:ce:43:cc:c2:7d:73:e2:f5:b3:71:f5:6c:9f: 39:a5:ea:06:ef:aa:f1:a8:2b:c2:96:59:0e:3a:d4: 50:eb:95:07:92:1c:db:65:20:54:c2:d7:15:53:58: 2f:22:fa:4c:32:90:10:9e:66:f2:e9:71:fd:84:3a: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:00:15:C2:4D:D5:B2:6E:99:C9:00:92:54:AD:C8:A8:E8:AA:41:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.212.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:df:ce:1b:7e:78:9f:cf:15:93:14:65:8f:59:0d:39:03:2d: 79:d2:a5:8a:23:c3:07:a4:0c:f2:9d:6c:04:99:5d:00:f7:e5: f9:ce:7c:b6:ba:49:ee:32:25:ed:00:00:77:d7:e4:7c:78:48: 7d:ef:7c:55:06:2e:49:4d:f0:e1:e2:b0:f6:ad:ca:9f:f2:dc: 66:9d:69:fb:1d:fb:6a:1c:85:ee:57:f9:0b:f6:03:87:0f:44: e0:cf:b0:37:dc:19:a4:30:6d:9e:ea:67:27:93:66:ab:fa:23: 7b:84:9b:64:08:48:a9:4a:4f:43:c9:8a:f7:ed:3d:b4:84:96: cd:22:34:ab:c7:1e:7b:a7:9c:d6:84:45:8e:66:7e:e8:a8:cb: 56:9b:dc:54:22:05:a8:fd:75:18:4e:80:3b:2c:2b:26:b7:11: 9f:c5:cc:f1:12:52:6c:d0:cb:06:dd:d6:eb:87:db:23:fa:58: 35:25:ba:4e:21:18:92:6f:f0:0c:34:06:4d:a9:f2:5f:5e:bd: b8:be:10:2c:c0:6e:3e:a0:51:70:9b:ed:e0:b8:dc:e9:2e:af: 70:62:5b:e3:d5:a6:6f:bc:1e:aa:d2:27:7b:a8:f0:96:6a:87: 58:de:66:86:ca:87:b4:19:09:a4:91:26:1b:3f:48:be:19:bc: 59:67:15:16 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEoA2r81l9q7it1uyqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzJlOTJjNDQtYmIyZS00YzhjLThhODctNTgyNDQxMDZlNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/GW3vFZtm14R4E6YXtj0RaSyo2u7t1fgf54 o5w6aJsFmSUc7Ru+SMVe1OiK7hqoNBiS9DPZjt9sCyFYm8FgaZB07W6Mcknzc7UE pd17l7/6ywrkxqDsNLQp+OQhWHO0hrI/asCOBhYXWFFp3g2AKTOdriwclJVlNkV5 IynLHTCuuQH4x6U9MvCz6ksLtpoUz2HEb3tfEmzUPcFnxchzyRmEqkb34Ob26ksr Y6z6Qy1jGhsIbc0SQC54abBB7hZKfoTtjc5DzMJ9c+L1s3H1bJ85peoG76rxqCvC llkOOtRQ65UHkhzbZSBUwtcVU1gvIvpMMpAQnmby6XH9hDr7fQIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFKcAFcJN1bJumckAklStyKjoqkFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMDk0ZGIzZjQtZmE3ZC0z NmQ2LWE3Y2YtNmVlOGY3YWMwY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQFQFpAAwQE RKpwAwQERajwAwQAoceCAwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQC xzt0AwQEzdagAwQE0dQgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJjfzht+eJ/PFZMUZY9ZDTkDLXnSpYoj wwekDPKdbASZXQD35fnOfLa6Se4yJe0AAHfX5Hx4SH3vfFUGLklN8OHisPatyp/y 3Gadafsd+2oche5X+Qv2A4cPRODPsDfcGaQwbZ7qZyeTZqv6I3uEm2QISKlKT0PJ ivftPbSEls0iNKvHHnunnNaERY5mfuioy1ab3FQiBaj9dRhOgDssKya3EZ/FzPES UmzQywbd1uuH2yP6WDUluk4hGJJv8Aw0Bk2p8l9evbi+ECzAbj6gUXCb7eC43Oku r3BiW+PVpm+8HqrSJ3uo8JZqh1jeZobKh7QZCaSRJhs/SL4ZvFlnFRY= -----END CERTIFICATE-----Generated at Wed Jun 18 10:59:17 2025 by rpki-client