$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa File: 33a9ddc2-deb3-3384-ac02-7422445b9b79.roa (raw, json) Hash identifier: BOXKriMVvkPMpL/8fhIL68IY4buNfS8WS1lPwDCzfZY= Subject key identifier: ED:D3:81:C9:1E:C8:A2:83:BC:A5:B4:4D:CC:4E:ED:22:7D:C7:EA:59 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F43285849244E8A4E9C56592882F49480 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 400981 IP address blocks: 23.105.192.0/19 maxlen: 24 23.106.128.0/19 maxlen: 24 23.252.96.0/20 maxlen: 24 45.62.96.0/19 maxlen: 24 45.78.0.0/18 maxlen: 24 66.112.208.0/20 maxlen: 24 67.209.176.0/20 maxlen: 24 74.121.148.0/22 maxlen: 24 104.128.80.0/20 maxlen: 24 104.160.32.0/20 maxlen: 24 104.194.64.0/19 maxlen: 24 104.224.128.0/18 maxlen: 24 107.182.176.0/20 maxlen: 24 138.128.192.0/19 maxlen: 24 144.168.56.0/21 maxlen: 24 162.211.224.0/21 maxlen: 24 192.243.112.0/20 maxlen: 24 198.35.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8a:4e:9c:56:59:28:82:f4:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=5ba3e2f8-0c38-4f73-aef9-733f5e605734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:63:e2:d0:83:ff:8e:e1:24:d2:e0:07:98:37: c9:91:e6:65:ec:2a:d1:83:1f:42:5e:2e:ef:31:52: 00:99:a5:aa:f3:3e:9a:8d:e9:ef:f4:d2:77:b3:f9: f8:c6:50:f2:7d:ff:8d:92:cf:ae:1d:59:57:5e:4b: e3:e3:91:6b:64:b6:96:dd:76:af:ea:fd:d3:be:9e: 6b:85:83:fb:09:9c:96:b1:c3:16:e2:dc:6a:0e:db: c1:d7:d5:fc:56:9b:1c:8a:15:a0:6b:6b:1f:d1:d7: ef:c0:ea:43:88:cc:2f:6c:ca:c5:2c:91:c3:e8:df: 6b:64:09:7f:e3:94:3f:2f:0a:df:0b:5f:f2:c2:da: dc:25:b2:f7:3a:cf:3a:66:af:4b:dc:50:18:d2:5c: 4b:5e:d1:a7:0e:8b:72:b2:51:9a:b0:ae:c0:d8:36: 2f:83:40:fb:24:03:c1:a7:38:99:8a:ef:2c:fe:35: 6a:fc:97:bd:f4:ba:79:59:2c:c1:35:d5:50:1e:df: 8e:9b:66:d5:2a:a2:32:d7:f1:39:6a:8c:72:1d:f4: 1a:bf:82:7e:d9:ac:6b:e0:a9:87:c3:dc:37:f4:00: 86:d4:de:26:2c:66:99:e9:c4:89:d0:c6:ac:bf:ec: f5:7f:db:48:93:06:50:ce:91:60:1f:ff:f1:f3:18: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:81:C9:1E:C8:A2:83:BC:A5:B4:4D:CC:4E:ED:22:7D:C7:EA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv4: 23.105.192.0/19 23.106.128.0/19 23.252.96.0/20 45.62.96.0/19 45.78.0.0/18 66.112.208.0/20 67.209.176.0/20 74.121.148.0/22 104.128.80.0/20 104.160.32.0/20 104.194.64.0/19 104.224.128.0/18 107.182.176.0/20 138.128.192.0/19 144.168.56.0/21 162.211.224.0/21 192.243.112.0/20 198.35.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:17:c4:50:dc:bd:45:28:f2:35:71:56:39:14:51:8d:23:b8: cd:4c:b8:ec:0a:7d:80:b4:0a:3e:86:3f:7f:74:c7:e0:ef:73: 1f:2d:0f:35:21:5c:0d:59:c3:48:93:ab:d9:5b:7f:b4:22:38: f9:e4:c0:8d:b6:5e:bb:35:22:cf:a8:91:a4:3a:d1:ba:0b:f7: a5:c7:33:fd:cd:2c:a5:00:86:8e:a0:55:10:c3:04:2d:bf:5f: 28:df:a5:37:4c:9c:de:5c:bd:5c:e5:b5:26:25:cb:2d:5f:36: ca:01:85:ae:0f:d5:be:b1:85:b6:af:b6:0d:50:be:4b:b9:6f: db:4e:c1:7a:fc:27:8b:e1:07:8f:6b:1c:17:88:ee:5b:5d:7e: 59:40:3a:32:87:a1:a8:0b:c6:03:e5:83:05:51:da:2a:10:78: a3:6c:0a:cd:29:da:45:19:c5:04:e4:6e:7d:8a:b0:6c:58:f6: 4d:c3:d7:04:42:c7:d7:f6:cc:d8:66:ad:12:35:6b:3b:a7:fd: 72:a3:93:ff:fd:d1:c8:17:10:63:7d:b6:8c:e5:dd:1f:9b:97: 4a:7d:b0:88:a2:98:fd:23:33:e0:94:83:a0:9c:08:bb:a5:ce: e6:47:31:a9:68:4b:25:b1:ca:24:5b:88:ed:e6:14:aa:d0:1b: e0:46:95:d0 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEkkTopOnFZZKIL0lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NWJhM2UyZjgtMGMzOC00ZjczLWFlZjktNzMzZjVlNjA1NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWPi0IP/juEk0uAHmDfJkeZl7CrRgx9CXi7v MVIAmaWq8z6ajenv9NJ3s/n4xlDyff+Nks+uHVlXXkvj45FrZLaW3Xav6v3Tvp5r hYP7CZyWscMW4txqDtvB19X8VpscihWga2sf0dfvwOpDiMwvbMrFLJHD6N9rZAl/ 45Q/LwrfC1/ywtrcJbL3Os86Zq9L3FAY0lxLXtGnDotyslGasK7A2DYvg0D7JAPB pziZiu8s/jVq/Je99Lp5WSzBNdVQHt+Om2bVKqIy1/E5aoxyHfQav4J+2axr4KmH w9w39ACG1N4mLGaZ6cSJ0Masv+z1f9tIkwZQzpFgH//x8xiq9QIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFO3TgckeyKKDvKW0TcxO7SJ9x+pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvMzNhOWRkYzItZGViMy0z Mzg0LWFjMDItNzQyMjQ0NWI5Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAuF8RQ3L1FKPI1cVY5FFGNI7jNTLjsCn2AtAo+hj9/dMfg 73MfLQ81IVwNWcNIk6vZW3+0Ijj55MCNtl67NSLPqJGkOtG6C/elxzP9zSylAIaO oFUQwwQtv18o36U3TJzeXL1c5bUmJcstXzbKAYWuD9W+sYW2r7YNUL5LuW/bTsF6 /CeL4QePaxwXiO5bXX5ZQDoyh6GoC8YD5YMFUdoqEHijbArNKdpFGcUE5G59irBs WPZNw9cEQsfX9szYZq0SNWs7p/1yo5P//dHIFxBjfbaM5d0fm5dKfbCIopj9IzPg lIOgnAi7pc7mRzGpaEslscokW4jt5hSq0BvgRpXQ -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:21 2025 by rpki-client