$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa File: a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa (raw, json) Hash identifier: GJglVDnNh5d2k9xaInvrSJ5eUA0va5w+i3aYDin7LGE= Subject key identifier: C4:FC:29:D6:4B:64:4C:AE:2E:38:24:D6:09:59:85:0F:B6:BE:92:E7 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A07D53A79A3868F101E5B5540 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 7181 IP address blocks: 72.29.96.0/19 maxlen: 24 72.249.0.0/17 maxlen: 24 72.249.128.0/18 maxlen: 24 74.112.92.0/22 maxlen: 24 74.114.180.0/22 maxlen: 24 74.118.40.0/22 maxlen: 24 74.120.208.0/22 maxlen: 24 74.213.128.0/19 maxlen: 24 96.31.160.0/20 maxlen: 24 98.142.80.0/20 maxlen: 24 104.37.108.0/22 maxlen: 24 144.202.128.0/17 maxlen: 24 162.216.52.0/22 maxlen: 24 162.220.104.0/22 maxlen: 24 162.222.96.0/22 maxlen: 24 162.248.248.0/21 maxlen: 24 173.237.128.0/18 maxlen: 24 173.240.48.0/20 maxlen: 24 174.136.0.0/18 maxlen: 24 192.197.58.0/23 maxlen: 24 198.35.116.0/22 maxlen: 24 199.21.64.0/21 maxlen: 24 199.87.60.0/22 maxlen: 24 199.96.248.0/21 maxlen: 24 199.188.208.0/22 maxlen: 24 199.193.140.0/22 maxlen: 24 199.193.176.0/22 maxlen: 24 199.233.224.0/22 maxlen: 24 204.11.208.0/22 maxlen: 24 204.15.100.0/22 maxlen: 24 204.16.108.0/22 maxlen: 24 205.147.202.0/24 maxlen: 24 205.147.208.0/24 maxlen: 24 205.147.218.0/24 maxlen: 24 205.147.235.0/24 maxlen: 24 206.123.64.0/18 maxlen: 24 206.245.164.0/24 maxlen: 24 207.8.244.0/22 maxlen: 24 207.45.160.0/20 maxlen: 24 207.154.0.0/18 maxlen: 24 207.210.192.0/18 maxlen: 24 207.254.208.0/20 maxlen: 24 208.67.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3a:79:a3:86:8f:10:1e:5b:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=35c67f0f-1a42-4d75-beff-740d62ea3791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:c9:4d:f8:7b:a0:dc:4d:37:d8:1f:20:eb: cd:52:ee:56:14:b3:1d:c1:33:0b:75:fe:47:0f:32: 5a:42:f0:70:76:e6:ed:2e:ed:32:5f:6b:49:ea:78: 0f:76:fd:8c:e5:70:b4:3c:f9:bc:0f:5d:6f:17:29: bc:90:0f:24:02:d6:17:6e:b8:dc:c2:c0:4f:e1:a3: 6f:80:c1:1e:67:c1:de:a9:63:73:e7:cf:68:9d:7f: b3:13:15:52:c0:15:d2:49:da:06:72:4a:00:57:7f: b3:dc:fc:d6:8e:b5:53:80:20:1b:8e:85:35:a2:3f: 53:57:3d:22:1d:ed:f9:fb:99:5d:62:75:42:4f:09: 67:25:2c:89:a6:1a:ba:56:d4:ae:27:37:e2:f8:bc: 2b:f1:c4:27:d3:bc:25:88:05:f7:ea:e2:37:55:89: ae:56:26:26:c4:a5:54:ba:b9:f7:7a:83:c5:b5:06: bc:b6:ee:24:d6:15:5d:84:4f:7b:da:8b:ac:30:d3: 34:5e:bd:d5:90:03:69:16:8a:8b:bb:a3:6e:02:b9: 0c:84:5e:37:23:c6:c0:a1:95:bb:97:81:fc:0d:9f: 7a:6d:2c:67:1d:0b:67:50:f2:b3:87:fd:82:29:30: ce:13:6f:61:b8:b9:fa:ed:f6:b7:6e:f9:45:0f:4e: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:29:D6:4B:64:4C:AE:2E:38:24:D6:09:59:85:0F:B6:BE:92:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.29.96.0/19 72.249.0.0-72.249.191.255 74.112.92.0/22 74.114.180.0/22 74.118.40.0/22 74.120.208.0/22 74.213.128.0/19 96.31.160.0/20 98.142.80.0/20 104.37.108.0/22 144.202.128.0/17 162.216.52.0/22 162.220.104.0/22 162.222.96.0/22 162.248.248.0/21 173.237.128.0/18 173.240.48.0/20 174.136.0.0/18 192.197.58.0/23 198.35.116.0/22 199.21.64.0/21 199.87.60.0/22 199.96.248.0/21 199.188.208.0/22 199.193.140.0/22 199.193.176.0/22 199.233.224.0/22 204.11.208.0/22 204.15.100.0/22 204.16.108.0/22 205.147.202.0/24 205.147.208.0/24 205.147.218.0/24 205.147.235.0/24 206.123.64.0/18 206.245.164.0/24 207.8.244.0/22 207.45.160.0/20 207.154.0.0/18 207.210.192.0/18 207.254.208.0/20 208.67.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a2:bd:ba:9a:f6:83:32:23:32:96:bd:af:5f:a3:63:43:49: 30:16:a2:d2:8b:7d:61:0f:37:e6:03:9c:4a:ff:ca:68:04:69: 47:e7:e7:29:d9:35:cc:8a:23:ab:4c:38:49:ce:79:96:2d:60: fe:55:29:55:ea:41:c3:27:2d:d1:36:be:1c:97:63:01:bf:a4: 16:45:fc:23:93:84:78:59:4a:34:78:e6:e8:ba:f4:52:03:54: a8:b6:2f:51:d6:57:f8:1f:24:01:0c:14:71:3c:cd:1c:61:1a: ff:45:0e:05:5d:b5:a6:1a:bf:8e:be:f5:47:c4:d6:f8:ae:46: d0:17:7e:18:55:45:a9:0b:a8:55:18:0c:4e:96:90:25:b1:37: fe:90:b4:b4:ed:64:b7:c9:cb:a8:c0:e5:ec:ca:44:d8:b7:26: 9d:ac:f6:62:b9:9a:ab:b7:87:49:5f:14:fa:d6:e4:4d:1a:f8: 3d:5d:49:ba:aa:7b:08:34:37:4b:3e:49:ef:06:f8:a7:87:99: 56:e4:90:b8:ed:a8:aa:63:da:79:3a:4f:da:44:a0:77:7e:4e: e1:cb:d0:38:ef:fd:29:4d:9f:31:d7:8d:21:23:49:73:14:8b: 0f:ab:3a:5d:c2:0f:e6:24:a7:cd:7f:ae:b4:5d:9e:3b:91:39: e9:a8:78:44 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWEoH1Tp5o4aPEB5bVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MzVjNjdmMGYtMWE0Mi00ZDc1LWJlZmYtNzQwZDYyZWEzNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZfJTfh7oNxNN9gfIOvNUu5WFLMdwTMLdf5H DzJaQvBwdubtLu0yX2tJ6ngPdv2M5XC0PPm8D11vFym8kA8kAtYXbrjcwsBP4aNv gMEeZ8HeqWNz589onX+zExVSwBXSSdoGckoAV3+z3PzWjrVTgCAbjoU1oj9TVz0i He35+5ldYnVCTwlnJSyJphq6VtSuJzfi+Lwr8cQn07wliAX36uI3VYmuViYmxKVU urn3eoPFtQa8tu4k1hVdhE972ousMNM0Xr3VkANpFoqLu6NuArkMhF43I8bAoZW7 l4H8DZ96bSxnHQtnUPKzh/2CKTDOE29huLn67fa3bvlFD0441QIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFMT8KdZLZEyuLjgk1glZhQ+2vpLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTc0OGY3NzctOGI3OS0z YWQ2LTkxMjctOGVhZDdhNGNmN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCCAQsEAgABMIIB AwMEBUgdYDALAwMASPkDBAZI+YADBAJKcFwDBAJKcrQDBAJKdigDBAJKeNADBAVK 1YADBARgH6ADBARijlADBAJoJWwDBAeQyoADBAKi2DQDBAKi3GgDBAKi3mADBAOi +PgDBAat7YADBASt8DADBAauiAADBAHAxToDBALGI3QDBAPHFUADBALHVzwDBAPH YPgDBALHvNADBALHwYwDBALHwbADBALH6eADBALMC9ADBALMD2QDBALMEGwDBADN k8oDBADNk9ADBADNk9oDBADNk+sDBAbOe0ADBADO9aQDBALPCPQDBATPLaADBAbP mgADBAbP0sADBATP/tADBAPQQ3gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJaK9upr2gzIjMpa9r1+jY0NJ MBai0ot9YQ835gOcSv/KaARpR+fnKdk1zIojq0w4Sc55li1g/lUpVepBwyct0Ta+ HJdjAb+kFkX8I5OEeFlKNHjm6Lr0UgNUqLYvUdZX+B8kAQwUcTzNHGEa/0UOBV21 phq/jr71R8TW+K5G0Bd+GFVFqQuoVRgMTpaQJbE3/pC0tO1kt8nLqMDl7MpE2Lcm naz2Yrmaq7eHSV8U+tbkTRr4PV1Juqp7CDQ3Sz5J7wb4p4eZVuSQuO2oqmPaeTpP 2kSgd35O4cvQOO/9KU2fMdeNISNJcxSLD6s6XcIP5iSnzX+utF2eO5E56ah4RA== -----END CERTIFICATE-----Generated at Sun Jun 15 17:33:06 2025 by rpki-client