$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa File: 8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json) Hash identifier: l+lALYFGDRgaB+7qJ85BMHHqXz1asFUBLz3zVfo3M8w= Subject key identifier: 48:1A:B8:08:E9:4C:4C:C5:D5:E9:BC:16:E2:19:B2:07:F1:79:14:C9 Certificate issuer: /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8 Certificate serial: 010D0C9F43285849D6FA4DEEC95825036022CF00 Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 55254 IP address blocks: 72.46.80.0/22 maxlen: 24 104.37.112.0/22 maxlen: 24 162.211.184.0/22 maxlen: 24 168.100.192.0/19 maxlen: 24 172.96.20.0/22 maxlen: 24 205.201.30.0/23 maxlen: 24 205.220.192.0/20 maxlen: 24 216.10.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:4d:ee:c9:58:25:03:60:22:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=1cabfcbd-7cd7-408c-b43f-4b97027fecd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:eb:0d:0b:be:c0:31:de:97:27:2f:b4:1b: 1f:2d:d4:43:26:5c:b1:b5:51:d9:45:3b:9e:35:ec: 7e:f3:0b:9e:fc:42:cc:b6:d1:9f:d1:90:a0:67:04: 39:50:9a:08:4b:5f:67:e2:b9:9c:6e:e1:84:d9:59: bf:67:a6:45:9e:2c:d1:2f:81:dc:2b:51:c5:fb:c5: 10:7b:1d:e7:fa:f4:09:65:44:9f:e1:3b:44:79:5b: a6:9a:d4:32:7b:a2:1c:99:d9:95:f4:32:b4:3f:80: f4:e2:82:ad:c8:43:69:cf:1e:4a:90:40:bc:96:f1: 72:98:9b:23:bb:4a:e3:b3:59:30:a5:ba:ae:00:cb: 69:f3:be:8f:fa:e2:e0:81:50:23:c0:96:79:f8:bb: 04:3d:29:e8:c1:a3:bc:0f:0a:8f:de:5e:39:23:f9: 81:3a:33:18:5e:71:7e:89:ad:02:55:7d:cc:81:37: 81:c2:fd:dc:4b:c0:0c:78:e7:4e:1d:76:a6:a0:25: da:11:60:75:c3:a7:dc:f1:26:9e:e9:96:e9:e1:0a: b0:89:e7:bc:88:3b:0b:28:39:0e:b6:71:78:e8:12: 51:43:fe:23:cd:54:ce:bb:b5:6b:a4:e6:bd:55:5d: 6e:3d:2b:68:8b:47:a3:19:53:aa:9b:e8:b8:fe:04: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1A:B8:08:E9:4C:4C:C5:D5:E9:BC:16:E2:19:B2:07:F1:79:14:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl X509v3 Authority Key Identifier: keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer sbgp-ipAddrBlock: critical IPv4: 72.46.80.0/22 104.37.112.0/22 162.211.184.0/22 168.100.192.0/19 172.96.20.0/22 205.201.30.0/23 205.220.192.0/20 216.10.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d8:f3:dd:7d:9f:0b:d4:50:5c:5b:2b:e0:23:2b:67:9b:e0: f8:56:89:78:9d:95:e0:9e:81:06:ae:e5:fd:1c:a9:48:21:5a: 87:39:05:4c:d5:6a:c4:cb:96:73:d3:59:5a:28:f1:c5:45:64: 9e:48:37:62:2c:29:5b:16:c4:5d:25:fb:66:b8:ff:35:23:6c: c3:e7:cd:9b:2f:d5:9a:97:11:18:bf:ab:3f:aa:64:52:22:f8: 66:4e:f4:b4:14:75:74:2f:22:e6:c9:ab:c1:d8:da:eb:2b:72: 20:41:73:1b:7b:37:eb:35:b9:35:dc:5d:0c:f0:6d:84:9c:87: e5:6a:de:55:1d:a7:fa:71:ce:59:ac:bd:c8:9f:e8:f4:91:cf: 08:1d:a4:ce:38:39:81:26:6a:1a:00:da:8c:f5:4e:8e:f4:90: 37:ed:20:14:cf:8b:d4:5c:c1:83:23:90:74:95:b3:c0:8b:98: 46:0c:cf:10:06:08:6e:bb:18:1f:72:f3:b5:8b:01:28:0b:da: 46:de:b4:30:d5:a3:89:a5:d4:a5:3a:d3:50:e3:cd:8d:e9:7e: fa:35:f9:2b:ce:01:21:1d:9b:2e:fa:f9:34:f7:b2:89:22:a0: d2:8a:e8:cf:17:9d:80:2a:d1:bd:d6:bf:17:32:6f:26:ea:a1: e9:67:cf:68 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEnW+k3uyVglA2AizwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ZmNjg3OGQtM2I3ZS00YzY3LWE5MWEtZTIxZjEwNDJm OWU4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk MWNhYmZjYmQtN2NkNy00MDhjLWI0M2YtNGI5NzAyN2ZlY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhnrDQu+wDHelycvtBsfLdRDJlyxtVHZRTue Nex+8wue/ELMttGf0ZCgZwQ5UJoIS19n4rmcbuGE2Vm/Z6ZFnizRL4HcK1HF+8UQ ex3n+vQJZUSf4TtEeVummtQye6IcmdmV9DK0P4D04oKtyENpzx5KkEC8lvFymJsj u0rjs1kwpbquAMtp876P+uLggVAjwJZ5+LsEPSnowaO8DwqP3l45I/mBOjMYXnF+ ia0CVX3MgTeBwv3cS8AMeOdOHXamoCXaEWB1w6fc8Sae6Zbp4Qqwiee8iDsLKDkO tnF46BJRQ/4jzVTOu7VrpOa9VV1uPStoi0ejGVOqm+i4/gS2AwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFEgauAjpTEzF1em8FuIZsgfxeRTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZmY2 ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFmMTA0MmY5ZTgvODQ1N2UxMWItMzJkMS0z NGMwLTgxZWEtNjI0ZjhlODUyNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2ZmNjg3OGQtM2I3ZS00YzY3LWE5 MWEtZTIxZjEwNDJmOWU4LzdmZjY4NzhkLTNiN2UtNGM2Ny1hOTFhLWUyMWYxMDQy ZjllOC5jcmwwHwYDVR0jBBgwFoAUSIQDc3pA3VHJ8UvNEUiQbeHdDJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZmY2ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFm MTA0MmY5ZTguY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSC5QAwQC aCVwAwQCotO4AwQFqGTAAwQCrGAUAwQBzckeAwQEzdzAAwQB2AroMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEPY8919nwvUUFxbK+AjK2eb4PhWiXidleCegQau5f0cqUghWoc5BUzVasTLlnPT WVoo8cVFZJ5IN2IsKVsWxF0l+2a4/zUjbMPnzZsv1ZqXERi/qz+qZFIi+GZO9LQU dXQvIubJq8HY2usrciBBcxt7N+s1uTXcXQzwbYSch+Vq3lUdp/pxzlmsvcif6PSR zwgdpM44OYEmahoA2oz1To70kDftIBTPi9RcwYMjkHSVs8CLmEYMzxAGCG67GB9y 87WLASgL2kbetDDVo4ml1KU601DjzY3pfvo1+SvOASEdmy76+TT3sokioNKK6M8X nYAq0b3Wvxcybybqoelnz2g= -----END CERTIFICATE-----Generated at Sun Jun 15 13:35:57 2025 by rpki-client