$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa File: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json) Hash identifier: bl5dsfYcEWyE7/pPnbfDI1Crff/ZacT7QWdieYd9cWI= Subject key identifier: D7:AD:0C:50:10:6F:C5:55:E3:15:39:50:19:2C:15:B1:24:71:C7:A6 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584A225AC9F5619B461C9C895680 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 5009 IP address blocks: 64.56.0.0/19 maxlen: 24 64.237.64.0/19 maxlen: 24 66.186.224.0/19 maxlen: 24 108.179.160.0/19 maxlen: 24 159.48.192.0/19 maxlen: 24 160.223.208.0/20 maxlen: 24 205.233.40.0/22 maxlen: 24 206.124.192.0/19 maxlen: 24 206.204.112.0/20 maxlen: 24 208.97.32.0/20 maxlen: 24 209.62.192.0/19 maxlen: 24 209.124.192.0/19 maxlen: 24 209.124.224.0/19 maxlen: 24 216.115.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c9:f5:61:9b:46:1c:9c:89:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=7a5902f1-b500-4b60-8f35-d26ce353e264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:9f:fe:ce:b2:21:0e:2a:6f:3d:d6:02:6f: dd:d1:ea:15:81:68:56:9d:4b:dd:46:8f:1f:4a:e9: 91:7c:69:cb:c4:d7:53:45:b3:c0:1a:51:63:3c:3f: 6c:9c:7d:73:28:8c:a0:a2:d6:68:6d:bf:a9:20:61: 5a:c9:08:99:58:15:39:b1:fe:4a:b8:ee:a8:e6:eb: 56:b0:04:83:8b:cf:0f:07:4f:8c:4c:c8:77:5c:39: 91:89:74:89:44:33:62:2c:62:85:ef:64:d6:35:c2: 21:3e:bf:3d:91:2c:4d:a8:e9:9c:13:d1:12:29:c1: 0f:5c:c6:3d:ef:da:aa:57:93:1e:71:11:cb:39:a6: 19:20:18:6d:af:64:b2:21:9c:17:20:48:f4:11:cf: 3f:f6:6e:94:ff:e9:1f:68:ad:08:7b:22:31:d2:b0: 72:f8:5d:69:7f:25:cd:53:33:43:1a:26:b1:6f:f2: 6e:3f:cc:65:6c:53:e1:f9:98:31:87:df:7d:5a:ab: aa:a8:e6:5f:22:5a:ad:fc:e8:ab:69:83:98:95:23: 47:c3:b2:7a:26:ef:56:0d:03:45:1f:76:9e:a6:b6: 1a:66:e6:1f:28:d4:d5:3a:6f:e1:45:88:f1:33:cd: f3:03:a5:d8:e4:13:b1:22:bc:bd:ac:99:bb:cb:4b: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AD:0C:50:10:6F:C5:55:E3:15:39:50:19:2C:15:B1:24:71:C7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 64.56.0.0/19 64.237.64.0/19 66.186.224.0/19 108.179.160.0/19 159.48.192.0/19 160.223.208.0/20 205.233.40.0/22 206.124.192.0/19 206.204.112.0/20 208.97.32.0/20 209.62.192.0/19 209.124.192.0/18 216.115.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ea:f7:68:97:06:51:1e:23:7b:a0:99:80:f9:db:1e:72:9c: 8f:82:43:be:e7:c6:37:d3:64:d2:b7:13:35:7c:ff:0c:98:ee: b1:94:e6:04:13:90:06:ce:e2:53:64:df:5e:a3:d6:2b:4d:d6: 5d:14:b4:c5:28:4a:87:d8:77:0e:ad:02:4d:b5:52:eb:4b:f0: e1:fc:56:a3:81:44:68:e6:f4:ae:75:6b:dd:4c:85:f1:26:79: e0:20:91:dd:2b:2f:7d:a7:60:4d:e7:b7:86:77:c4:42:52:79: 35:80:92:2b:15:ed:d2:f2:a7:43:e9:74:87:b9:cf:0f:14:ea: a0:6f:43:bb:b8:db:62:9f:a8:b8:5f:77:6c:36:0b:20:ff:94: 0a:ea:a8:a5:39:89:3f:74:1d:89:a0:cf:4c:36:ed:32:2a:09: 71:22:9f:18:b3:f5:d0:10:74:0f:41:46:c5:46:14:a2:39:9c: 2b:34:85:12:db:b3:0b:80:e4:59:52:95:ef:a3:9c:cc:43:10: f4:56:0b:39:a6:69:c9:e0:ac:1e:9a:10:f0:59:57:fb:4b:7b: 72:ec:b7:7b:33:34:96:fa:e9:04:1d:d8:c4:9c:a4:e6:09:4a: 13:1f:9b:7b:b9:b7:b8:a8:51:1a:a9:3c:87:0c:e2:df:2d:ad: be:1b:6b:65 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEoiWsn1YZtGHJyJVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk N2E1OTAyZjEtYjUwMC00YjYwLThmMzUtZDI2Y2UzNTNlMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMWf/s6yIQ4qbz3WAm/d0eoVgWhWnUvdRo8f SumRfGnLxNdTRbPAGlFjPD9snH1zKIygotZobb+pIGFayQiZWBU5sf5KuO6o5utW sASDi88PB0+MTMh3XDmRiXSJRDNiLGKF72TWNcIhPr89kSxNqOmcE9ESKcEPXMY9 79qqV5MecRHLOaYZIBhtr2SyIZwXIEj0Ec8/9m6U/+kfaK0IeyIx0rBy+F1pfyXN UzNDGiaxb/JuP8xlbFPh+Zgxh999WquqqOZfIlqt/OiraYOYlSNHw7J6Ju9WDQNF H3aeprYaZuYfKNTVOm/hRYjxM83zA6XY5BOxIry9rJm7y0vglwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFNetDFAQb8VV4xU5UBksFbEkccemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvYzVjMWFiOWEtZjk5ZC0z Yjc1LWI3ZjQtOThmYmVmMzE1ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQFQDgAAwQF QO1AAwQFQrrgAwQFbLOgAwQFnzDAAwQEoN/QAwQCzekoAwQFznzAAwQEzsxwAwQE 0GEgAwQF0T7AAwQG0XzAAwQF2HOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAErq92iXBlEeI3ugmYD52x5y nI+CQ77nxjfTZNK3EzV8/wyY7rGU5gQTkAbO4lNk316j1itN1l0UtMUoSofYdw6t Ak21UutL8OH8VqOBRGjm9K51a91MhfEmeeAgkd0rL32nYE3nt4Z3xEJSeTWAkisV 7dLyp0PpdIe5zw8U6qBvQ7u422KfqLhfd2w2CyD/lArqqKU5iT90HYmgz0w27TIq CXEinxiz9dAQdA9BRsVGFKI5nCs0hRLbswuA5FlSle+jnMxDEPRWCzmmacngrB6a EPBZV/tLe3Lst3szNJb66QQd2MScpOYJShMfm3u5t7ioURqpPIcM4t8trb4ba2U= -----END CERTIFICATE-----Generated at Thu Jun 19 04:02:28 2025 by rpki-client