$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: Herl3mQ6shMPX18uqetLgb1S0WRUXkFLwbiVLguaO3I= Subject key identifier: B2:03:91:57:02:70:85:67:49:1A:C4:BC:FF:AD:19:33:51:3A:BF:92 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A10354D272016332A96648E00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4d:27:20:16:33:2a:96:64:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=33652c26-5994-4098-a591-354330635bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:66:6e:9a:35:6f:9b:c1:12:f3:a3:f2:e3: f9:b5:30:b2:81:a8:b2:5d:fa:a9:2b:c1:5d:ef:ac: d3:fe:c3:db:9c:f2:cc:86:3c:8c:3f:76:ac:90:a2: e3:cd:5d:8c:fe:ec:b1:ac:aa:95:0a:b7:29:f7:5b: 1b:a5:5f:ca:9c:8e:8f:a2:74:e2:1a:70:19:c0:89: b1:f6:c5:9b:97:f6:b3:43:88:95:f6:73:a6:f1:78: 0a:b6:a9:5b:08:1e:a7:97:9f:fc:e5:0e:b4:fb:50: 02:0d:9f:14:b2:a5:c5:9d:70:0d:de:82:03:39:54: ec:d2:1b:a3:b1:d5:67:c3:05:5c:f9:51:07:52:ba: 60:e4:48:05:fe:95:1f:e3:b5:a6:b4:f0:c5:89:a0: 89:ff:90:fc:0d:a0:61:13:d4:61:3b:f8:cf:0e:ce: cd:74:e6:01:d3:6e:02:50:50:a5:58:ab:c2:79:60: fe:59:7c:27:95:b4:7e:10:0d:ef:ab:83:0d:a1:0a: 91:2a:0c:30:fa:9d:06:ec:ba:9a:6d:8d:c8:34:ef: bc:f9:4f:79:3a:3e:8a:fc:83:be:20:59:cb:94:4b: c4:4d:61:0a:0d:cd:f4:72:66:dd:79:40:a1:b1:69: 2c:cc:0d:7a:72:31:33:49:39:91:0f:bc:34:cf:23: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:03:91:57:02:70:85:67:49:1A:C4:BC:FF:AD:19:33:51:3A:BF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:32:ec:c4:65:fb:eb:b5:f0:42:94:56:0f:06:2f:45:a5:cb: 3b:02:97:5f:be:80:d6:35:75:ab:7e:f9:18:2d:62:a4:b3:a6: 44:38:31:4c:90:c9:d6:48:25:84:9b:50:af:27:cc:21:f5:c9: 8b:4d:80:15:b0:28:72:47:a4:b6:b4:9d:a5:e3:56:9d:72:93: e7:e9:f2:c7:5c:d3:2a:91:c5:3e:da:71:be:9a:53:87:62:c1: 8f:57:bc:2b:22:36:de:45:04:bd:f1:08:c4:4d:c7:43:be:34: c4:39:9e:97:91:07:70:d9:d5:52:e7:98:6a:96:dc:9b:ba:c0: 84:51:da:09:ee:17:e2:9a:6e:8a:11:1b:39:1c:c7:6c:2b:b4: 3b:fd:95:80:d8:5c:2c:69:19:de:26:f1:dc:44:bb:d2:b7:df: 2b:84:55:8c:e6:c2:9e:e7:fb:f6:8f:f6:77:50:4a:60:20:1d: 97:f6:43:e0:b4:0f:eb:6c:14:95:cf:9f:49:34:75:ac:62:8d: 8c:3e:66:b4:89:1c:f8:d9:de:ed:97:72:57:ab:1a:6f:e3:0b: c5:eb:79:93:47:6d:36:e9:f9:69:fd:cd:da:ca:b9:fe:ea:bd: e7:01:f6:76:7d:27:6b:66:5b:25:47:bc:34:16:dc:70:88:60: 63:c1:07:33 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEoQNU0nIBYzKpZkjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MzM2NTJjMjYtNTk5NC00MDk4LWE1OTEtMzU0MzMwNjM1YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy5mbpo1b5vBEvOj8uP5tTCygaiyXfqpK8Fd 76zT/sPbnPLMhjyMP3askKLjzV2M/uyxrKqVCrcp91sbpV/KnI6PonTiGnAZwImx 9sWbl/azQ4iV9nOm8XgKtqlbCB6nl5/85Q60+1ACDZ8UsqXFnXAN3oIDOVTs0huj sdVnwwVc+VEHUrpg5EgF/pUf47WmtPDFiaCJ/5D8DaBhE9RhO/jPDs7NdOYB024C UFClWKvCeWD+WXwnlbR+EA3vq4MNoQqRKgww+p0G7LqabY3INO+8+U95Oj6K/IO+ IFnLlEvETWEKDc30cmbdeUChsWkszA16cjEzSTmRD7w0zyPkiwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFLIDkVcCcIVnSRrEvP+tGTNROr+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIjLsxGX767XwQpRWDwYvRaXLOwKX X76A1jV1q375GC1ipLOmRDgxTJDJ1kglhJtQryfMIfXJi02AFbAockektrSdpeNW nXKT5+nyx1zTKpHFPtpxvppTh2LBj1e8KyI23kUEvfEIxE3HQ740xDmel5EHcNnV UueYapbcm7rAhFHaCe4X4ppuihEbORzHbCu0O/2VgNhcLGkZ3ibx3ES70rffK4RV jObCnuf79o/2d1BKYCAdl/ZD4LQP62wUlc+fSTR1rGKNjD5mtIkc+Nne7ZdyV6sa b+MLxet5k0dtNun5af3N2sq5/uq95wH2dn0na2ZbJUe8NBbccIhgY8EHMw== -----END CERTIFICATE-----Generated at Sun Jun 15 15:49:10 2025 by rpki-client