$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa File: a3325f5a-465e-3622-a353-ec026e3ae096.roa (raw, json) Hash identifier: 3oWS25wnQwhOlEiookTcDo3AvoUOvjDs1QBR87CAyHU= Subject key identifier: B5:F2:76:29:04:93:83:BE:DD:33:36:56:B4:4A:8E:76:4F:25:BC:87 Certificate issuer: /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Certificate serial: 010D0C9F43285849D85F87E88D97DB9F8DA265C0 Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 7065 IP address blocks: 23.93.0.0/16 maxlen: 24 50.0.0.0/15 maxlen: 24 64.142.0.0/17 maxlen: 24 69.12.128.0/17 maxlen: 24 70.36.128.0/17 maxlen: 24 75.101.0.0/17 maxlen: 24 76.191.128.0/17 maxlen: 24 107.156.0.0/15 maxlen: 24 108.169.0.0/17 maxlen: 24 135.180.0.0/16 maxlen: 24 142.254.0.0/17 maxlen: 24 157.131.0.0/16 maxlen: 24 173.228.0.0/17 maxlen: 24 184.23.0.0/16 maxlen: 24 192.184.128.0/17 maxlen: 24 198.27.128.0/17 maxlen: 24 199.245.68.0/24 maxlen: 24 208.106.0.0/17 maxlen: 24 209.148.96.0/19 maxlen: 24 209.204.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:87:e8:8d:97:db:9f:8d:a2:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=04e41edb-bf25-4dbc-ba4a-8f5f614a2805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:01:1e:49:34:f0:45:b3:28:bc:99:9f:ff: 21:6b:2d:fd:9f:02:36:e4:8f:dc:af:94:91:af:f4: 38:b9:8f:e5:6d:41:ac:93:aa:36:39:fd:59:37:c8: 2c:ee:d4:08:23:ce:1b:ee:db:ab:80:48:1e:ff:85: 24:f0:3e:06:b7:ba:bc:55:72:a0:04:a1:6e:55:53: 02:c1:09:53:bc:10:06:f9:76:7d:e0:05:2f:9e:72: e2:a4:a5:f8:86:79:ce:e2:01:cf:db:ce:a1:8b:32: f0:ec:e7:ea:a8:44:97:77:0d:86:04:b0:ca:7b:cd: 79:b5:9e:b6:b7:b8:67:98:55:b9:f9:1c:78:e9:7f: 19:60:54:94:86:fe:1b:ea:24:50:ee:b7:89:c3:0a: 18:f5:de:ca:2f:b8:c2:7e:30:a3:10:00:a8:ae:89: e9:cc:20:0b:3a:e4:99:86:66:3b:a2:29:86:54:06: 1c:7e:7f:fb:88:31:a7:8d:79:8f:cb:d9:ea:b1:48: 47:2a:0d:ad:bf:bf:3f:b2:0a:a3:0f:90:1d:68:c2: 78:15:62:97:1b:b6:92:da:04:35:7f:5b:a7:d5:12: 21:b8:1c:be:39:1c:82:11:2f:29:d6:33:c6:94:68: 45:96:3a:9f:ec:a1:9e:7b:67:b9:2f:e2:67:2d:9f: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F2:76:29:04:93:83:BE:DD:33:36:56:B4:4A:8E:76:4F:25:BC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl X509v3 Authority Key Identifier: keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer sbgp-ipAddrBlock: critical IPv4: 23.93.0.0/16 50.0.0.0/15 64.142.0.0/17 69.12.128.0/17 70.36.128.0/17 75.101.0.0/17 76.191.128.0/17 107.156.0.0/15 108.169.0.0/17 135.180.0.0/16 142.254.0.0/17 157.131.0.0/16 173.228.0.0/17 184.23.0.0/16 192.184.128.0/17 198.27.128.0/17 199.245.68.0/24 208.106.0.0/17 209.148.96.0/19 209.204.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:35:47:93:39:16:0f:fe:23:df:ec:af:c7:d4:72:49:b8:6c: 56:81:e7:0e:4a:06:61:18:dc:89:8f:52:ab:50:c5:f7:59:40: 1d:bc:7c:73:a0:d9:10:2e:80:64:bb:c1:a3:85:29:d8:61:a9: 2e:43:74:5a:c9:67:a2:3a:a1:2a:e3:27:54:d2:46:13:0c:94: 89:bf:38:a5:4c:bb:39:fb:38:dc:05:01:ae:2c:ea:56:22:5a: 8b:95:dc:9f:0d:a3:07:43:f0:9d:1a:95:5b:e5:27:1e:8a:6e: 9f:80:8d:0c:2c:23:20:9f:a8:dc:f4:2e:a4:7a:f6:97:22:4f: 6e:28:26:15:16:3a:53:74:1e:2a:bd:57:55:35:ea:94:76:b0: 2a:d2:9a:c8:f3:3c:76:f5:e2:38:09:cf:95:c1:0a:21:e9:72: 69:e8:2a:0d:8e:4e:10:0f:2a:91:c2:09:e2:de:cc:df:47:64: 97:8d:66:86:ef:43:02:af:a6:2a:6a:0b:1c:dd:86:a0:a8:d2: 9a:dc:42:bf:1c:f9:4c:be:59:64:78:3f:8a:e5:27:db:91:d8: ef:f5:5b:4a:f3:9f:29:71:c9:05:72:e3:7a:7e:70:eb:eb:0d: aa:01:45:e3:d0:9e:f0:a8:f9:12:19:c5:16:ac:db:10:f2:42: d5:cd:2a:89 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEnYX4fojZfbn42iZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi MDg3MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MDRlNDFlZGItYmYyNS00ZGJjLWJhNGEtOGY1ZjYxNGEyODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZoBHkk08EWzKLyZn/8hay39nwI25I/cr5SR r/Q4uY/lbUGsk6o2Of1ZN8gs7tQII84b7turgEge/4Uk8D4Gt7q8VXKgBKFuVVMC wQlTvBAG+XZ94AUvnnLipKX4hnnO4gHP286hizLw7OfqqESXdw2GBLDKe815tZ62 t7hnmFW5+Rx46X8ZYFSUhv4b6iRQ7reJwwoY9d7KL7jCfjCjEACoronpzCALOuSZ hmY7oimGVAYcfn/7iDGnjXmPy9nqsUhHKg2tv78/sgqjD5AdaMJ4FWKXG7aS2gQ1 f1un1RIhuBy+ORyCES8p1jPGlGhFljqf7KGee2e5L+JnLZ/diwIDAQABo4IDwjCC A74wHQYDVR0OBBYEFLXydikEk4O+3TM2VrRKjnZPJbyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYTMzMjVmNWEtNDY1ZS0z NjIyLWEzNTMtZWMwMjZlM2FlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0 AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQClNUeTORYP/iPf7K/H1HJJuGxWgecOSgZhGNyJ j1KrUMX3WUAdvHxzoNkQLoBku8GjhSnYYakuQ3RayWeiOqEq4ydU0kYTDJSJvzil TLs5+zjcBQGuLOpWIlqLldyfDaMHQ/CdGpVb5Sceim6fgI0MLCMgn6jc9C6kevaX Ik9uKCYVFjpTdB4qvVdVNeqUdrAq0prI8zx29eI4Cc+VwQoh6XJp6CoNjk4QDyqR wgni3szfR2SXjWaG70MCr6Yqagsc3YagqNKa3EK/HPlMvllkeD+K5Sfbkdjv9VtK 858pcckFcuN6fnDr6w2qAUXj0J7wqPkSGcUWrNsQ8kLVzSqJ -----END CERTIFICATE-----Generated at Mon Jun 16 13:13:02 2025 by rpki-client