$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa File: 8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json) Hash identifier: 3z+EvvUssMKDYVJb5hCE/xAScGRV62laDYVjGXwfKUk= Subject key identifier: 00:CB:9B:64:25:D5:D8:52:F5:7B:69:D8:0E:C0:D0:56:B1:BB:3A:52 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A10354D10E21CDDAAA34A8820 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 17378 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4d:10:e2:1c:dd:aa:a3:4a:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=01a89b79-9b72-472d-a535-ae77ef14af71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:61:52:30:c6:6e:05:66:60:81:cf:25:8e: 5d:e4:4b:6c:28:80:73:31:24:71:41:7e:7a:04:a2: 54:05:ee:19:2e:db:ca:db:e4:b7:92:da:a5:74:f1: 61:e1:36:1c:8a:fc:37:e8:ff:d4:a3:69:06:c6:a1: be:7c:19:dd:4b:e9:67:3e:b9:30:1f:1c:2e:47:1a: e8:b0:2a:8f:ce:7e:05:22:3d:38:81:cf:a7:59:75: e3:5e:68:17:f6:5d:94:90:cf:2c:38:e1:b5:a2:44: ad:27:bf:0b:90:06:3e:da:58:2b:69:da:e0:87:ab: 3c:4f:b8:0c:1b:9a:5f:e2:c2:ad:c4:fd:7c:20:8a: 71:20:9f:cc:63:18:2e:15:21:20:e3:3b:48:92:f7: cf:f0:4e:4a:87:12:35:19:4d:40:62:1c:8b:fc:b5: 3f:b2:e7:31:f6:da:29:f8:fd:52:29:70:c4:ba:5f: ce:c7:38:ab:bd:2e:b3:ac:db:35:aa:21:1b:96:01: f6:62:0d:b1:16:15:6b:e7:23:41:8c:12:65:2a:af: a6:26:f0:bd:ff:49:41:f0:ab:dd:30:ad:cc:2f:de: bd:9c:87:18:2c:d9:65:93:16:11:4a:c1:ce:3b:25: e7:a8:0a:94:01:5e:12:0c:1e:ae:fe:90:c2:83:94: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CB:9B:64:25:D5:D8:52:F5:7B:69:D8:0E:C0:D0:56:B1:BB:3A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a6:8f:2b:f4:51:ac:6f:8c:5d:fa:89:c8:b0:78:42:98:25: 5c:8c:b0:97:bf:81:f6:a6:a8:fc:4a:8f:86:53:28:eb:ce:92: d5:98:e1:d3:85:da:6f:23:88:00:a3:40:1f:90:0f:1f:ee:a2: bc:b6:15:a5:07:e6:7e:56:d9:0c:95:0a:e6:7b:b9:d1:f7:16: c7:18:cd:44:29:a5:3d:1d:23:c3:b4:b4:cc:2d:93:58:df:51: 78:b7:4b:b0:05:88:70:fa:be:47:c0:3e:ed:d2:5f:7c:80:cd: ff:bc:ba:87:4a:5b:89:01:3f:05:c4:f3:0e:38:d8:8d:5f:c3: b6:d5:a3:8b:7e:a9:32:ae:3d:7b:56:0f:dd:e4:4a:2d:a1:0a: b7:39:8c:15:d4:c0:bc:b6:54:a3:b1:63:44:39:b9:06:2b:d7: 4c:00:9a:46:d4:d2:a8:4c:1a:a6:3c:66:9a:99:bc:0d:3c:a3: 81:7f:2f:08:85:ab:1e:74:cd:ef:09:37:6d:81:8c:23:62:65: e9:8b:c5:64:eb:e1:b7:a6:31:b4:b2:19:ce:ef:9b:2e:ca:e7: ac:0b:f3:1d:d4:36:ba:d9:99:44:f5:6f:30:e5:0b:17:51:30: 90:9b:21:ff:98:37:bb:e5:8c:ff:ea:d4:54:d3:09:4b:5f:00: 23:eb:00:3e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEoQNU0Q4hzdqqNKiCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MDFhODliNzktOWI3Mi00NzJkLWE1MzUtYWU3N2VmMTRhZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNhUjDGbgVmYIHPJY5d5EtsKIBzMSRxQX56 BKJUBe4ZLtvK2+S3ktqldPFh4TYcivw36P/Uo2kGxqG+fBndS+lnPrkwHxwuRxro sCqPzn4FIj04gc+nWXXjXmgX9l2UkM8sOOG1okStJ78LkAY+2lgradrgh6s8T7gM G5pf4sKtxP18IIpxIJ/MYxguFSEg4ztIkvfP8E5KhxI1GU1AYhyL/LU/sucx9top +P1SKXDEul/OxzirvS6zrNs1qiEblgH2Yg2xFhVr5yNBjBJlKq+mJvC9/0lB8Kvd MK3ML969nIcYLNllkxYRSsHOOyXnqAqUAV4SDB6u/pDCg5RSWQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFADLm2Ql1dhS9Xtp2A7A0FaxuzpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMaaPK/RRrG+MXfqJyLB4QpglXIyw l7+B9qao/EqPhlMo686S1Zjh04XabyOIAKNAH5APH+6ivLYVpQfmflbZDJUK5nu5 0fcWxxjNRCmlPR0jw7S0zC2TWN9ReLdLsAWIcPq+R8A+7dJffIDN/7y6h0pbiQE/ BcTzDjjYjV/DttWji36pMq49e1YP3eRKLaEKtzmMFdTAvLZUo7FjRDm5BivXTACa RtTSqEwapjxmmpm8DTyjgX8vCIWrHnTN7wk3bYGMI2Jl6YvFZOvht6YxtLIZzu+b LsrnrAvzHdQ2utmZRPVvMOULF1EwkJsh/5g3u+WM/+rUVNMJS18AI+sAPg== -----END CERTIFICATE-----Generated at Sun Jun 15 17:14:50 2025 by rpki-client