$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa File: be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (raw, json) Hash identifier: ZrbeOSATTmat2aPtV6ln4tC4vkICqo8X02ZeDt59Wy4= Subject key identifier: 52:EC:A5:62:B6:52:24:A7:5E:C5:53:31:E3:1D:65:54:0E:97:17:21 Certificate issuer: /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Certificate serial: 010D0C9F4328584A03A54BE829AE7B10425AA400 Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 31849 IP address blocks: 67.213.128.0/21 maxlen: 24 104.219.20.0/22 maxlen: 24 162.212.96.0/22 maxlen: 24 199.30.104.0/22 maxlen: 24 199.102.56.0/22 maxlen: 24 2607:2a80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4b:e8:29:ae:7b:10:42:5a:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=8f73ca09-b392-43f6-ba43-8c4b91154371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:c1:20:36:0b:73:1c:49:33:2f:d6:0c:b9: 72:e9:7e:b8:c0:7f:64:c6:81:5f:eb:d5:10:49:8a: f3:5e:74:fa:72:27:51:9d:f5:55:03:b3:79:fb:8a: dd:4c:c1:ef:34:7e:e9:ed:e8:58:8e:98:1c:d9:2e: c0:a3:37:40:70:79:c2:59:4a:b1:25:60:1d:08:1a: cc:67:88:79:2b:aa:23:93:6b:07:3c:20:64:a2:f5: 99:6e:2e:1a:98:19:9a:20:7c:7f:7f:56:e6:88:1f: e2:3c:ab:17:c8:b6:73:d4:13:b3:fb:6f:0d:1e:df: 0b:50:d7:05:7b:dc:de:1d:ce:67:4d:85:94:59:24: 5b:b0:ac:ec:f5:6a:14:26:60:6a:22:d8:8a:50:1c: 86:18:48:c4:62:2a:ec:5c:68:f8:fa:f9:d6:02:2a: 2f:65:64:2d:12:8c:c0:70:37:5d:2f:62:32:5a:9f: 4d:62:0b:27:31:14:71:3e:60:49:d3:99:de:8a:43: 40:5d:49:4a:83:ff:b2:6e:69:a4:3f:a3:91:b2:4d: c6:db:9b:50:29:f4:c2:d6:91:9f:c0:98:f5:cb:a1: 79:8e:c7:a9:08:38:9f:17:dc:f3:f3:de:84:34:d8: c7:ad:d4:f5:f1:2c:7f:82:ab:43:09:a9:c4:33:2f: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EC:A5:62:B6:52:24:A7:5E:C5:53:31:E3:1D:65:54:0E:97:17:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl X509v3 Authority Key Identifier: keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer sbgp-ipAddrBlock: critical IPv4: 67.213.128.0/21 104.219.20.0/22 162.212.96.0/22 199.30.104.0/22 199.102.56.0/22 IPv6: 2607:2a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b3:e4:f0:52:46:8f:18:84:e0:a9:8c:7b:e0:30:4a:c7:5c: b2:95:20:7e:53:a9:b6:ce:cc:38:d2:64:82:c4:63:1f:42:91: 28:a5:7e:6a:a9:e3:2b:13:2f:38:8c:df:78:30:09:a7:46:d1: a9:d1:c7:a5:f8:bc:a5:ef:3e:95:69:98:2d:8e:f0:e1:22:a4: b3:cf:c4:54:bc:6c:40:f9:e9:7f:9b:b6:73:11:8f:99:5c:4c: 24:b7:e1:26:be:d0:79:95:3b:e1:3e:c0:fc:61:06:ae:33:b2: 54:fc:16:1d:3a:6d:e3:ce:dc:48:fa:eb:21:aa:89:a7:51:9b: 31:d6:7c:92:5e:c9:89:e7:00:01:08:91:a5:c4:5b:b3:73:37: 0e:ca:ab:00:04:f3:d3:ba:bc:5e:36:c3:8e:f4:51:ed:67:74: 6e:d8:25:e5:4d:0d:6e:16:b7:f7:74:e4:f2:55:96:4e:f3:fc: a9:32:5d:88:87:ee:ea:08:40:b3:1b:af:40:22:e8:4d:bc:5f: 0b:22:11:20:64:04:75:d8:8b:97:3d:ef:c0:50:d5:b8:a0:3d: 91:da:c3:ea:b1:a6:86:f9:c3:d5:a5:6d:0c:5b:e0:5e:07:a0: cf:d7:cf:78:df:f1:7b:7a:06:7d:97:de:54:56:b1:92:b4:90: a9:83:84:56 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEoDpUvoKa57EEJapAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5 ZjQxMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OGY3M2NhMDktYjM5Mi00M2Y2LWJhNDMtOGM0YjkxMTU0MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYTBIDYLcxxJMy/WDLly6X64wH9kxoFf69UQ SYrzXnT6cidRnfVVA7N5+4rdTMHvNH7p7ehYjpgc2S7AozdAcHnCWUqxJWAdCBrM Z4h5K6ojk2sHPCBkovWZbi4amBmaIHx/f1bmiB/iPKsXyLZz1BOz+28NHt8LUNcF e9zeHc5nTYWUWSRbsKzs9WoUJmBqItiKUByGGEjEYirsXGj4+vnWAiovZWQtEozA cDddL2IyWp9NYgsnMRRxPmBJ05neikNAXUlKg/+ybmmkP6ORsk3G25tQKfTC1pGf wJj1y6F5jsepCDifF9zz896ENNjHrdT18Sx/gqtDCanEMy/n6QIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFFLspWK2UiSnXsVTMeMdZVQOlxchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvYmU3YWQ3YjktYTI0Ny0z YTRiLTg3NjQtZjIzZDhmYjBjMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4 M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5 MWZjZDlmNDEuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDQ9WAAwQC aNsUAwQCotRgAwQCxx5oAwQCx2Y4MA0EAgACMAcDBQAmByqAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB6z 5PBSRo8YhOCpjHvgMErHXLKVIH5TqbbOzDjSZILEYx9CkSilfmqp4ysTLziM33gw CadG0anRx6X4vKXvPpVpmC2O8OEipLPPxFS8bED56X+btnMRj5lcTCS34Sa+0HmV O+E+wPxhBq4zslT8Fh06bePO3Ej66yGqiadRmzHWfJJeyYnnAAEIkaXEW7NzNw7K qwAE89O6vF42w470Ue1ndG7YJeVNDW4Wt/d05PJVlk7z/KkyXYiH7uoIQLMbr0Ai 6E28XwsiESBkBHXYi5c978BQ1bigPZHaw+qxpob5w9WlbQxb4F4HoM/Xz3jf8Xt6 Bn2X3lRWsZK0kKmDhFY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:34:26 2025 by rpki-client