$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa File: 820be15f-1ab0-3e6c-8554-951d99d18e99.roa (raw, json) Hash identifier: rXqC0vyBkARdKh+nCjUq1Eye4p3s8JdmBlsRVRI1hLg= Subject key identifier: 8D:9B:8B:7B:24:46:4A:A2:38:16:21:71:01:20:73:E6:EA:BC:67:AF Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Certificate serial: 010D0C9F43285849FE0FFDCB6FF4F53F8DE366A0 Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 3555 IP address blocks: 192.31.9.0/24 maxlen: 24 198.17.99.0/24 maxlen: 24 198.22.152.0/24 maxlen: 24 198.137.234.0/23 maxlen: 23 199.74.244.0/24 maxlen: 24 199.79.216.0/24 maxlen: 24 199.89.132.0/23 maxlen: 23 199.89.158.0/23 maxlen: 23 199.89.160.0/24 maxlen: 24 204.89.153.0/24 maxlen: 24 204.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fd:cb:6f:f4:f5:3f:8d:e3:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=2839736d-9b00-4cf7-ae21-75f66e0581c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:fa:70:2d:76:06:4c:5a:db:c4:82:75:d5: 08:d1:81:91:55:68:ba:4e:7f:42:d6:6e:17:2f:b2: 38:58:a0:67:cf:16:2b:d6:95:91:28:73:37:c2:6b: ed:8d:f4:a4:b4:66:ef:b9:ad:4c:b0:28:eb:7f:3f: b9:25:f3:14:26:f5:75:74:e2:f2:9c:56:e6:09:3a: 33:9b:4d:f5:f4:e5:aa:cb:ea:a9:5a:0a:72:95:84: 43:97:b1:07:2c:cd:b5:bc:41:03:c7:0d:80:a6:e2: 1d:19:5b:c4:02:bc:eb:2f:0e:81:4c:d7:80:d2:dd: 6b:9e:0b:64:84:d5:23:41:3b:87:c5:d7:2e:e8:42: bf:aa:2a:f9:31:27:59:e1:07:f1:f4:62:8b:eb:bd: d0:87:f2:aa:b1:93:d7:b3:d1:27:e8:67:af:a3:67: e2:88:23:54:a4:f4:6d:bd:ea:bf:a2:d2:12:cd:a2: 32:e8:29:57:ff:17:1d:ec:0e:3d:7b:f6:8c:b1:c1: 70:ff:8a:db:f0:28:ba:20:55:e8:b8:e0:44:3c:aa: 08:23:27:7e:71:47:4e:2d:78:be:c9:da:66:2d:3c: 91:a0:b6:db:95:71:08:70:33:00:56:80:f9:a0:fb: 28:02:46:99:97:a6:a8:47:af:07:9c:f9:37:06:93: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9B:8B:7B:24:46:4A:A2:38:16:21:71:01:20:73:E6:EA:BC:67:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl X509v3 Authority Key Identifier: keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d3:10:df:e1:65:5a:6c:69:81:40:cd:7e:53:58:10:8e:a0: e0:3a:f8:b8:c8:70:d3:5c:09:15:38:59:54:65:e0:cf:90:69: 00:88:b5:73:3f:08:8d:0e:95:ef:f7:0f:69:7c:94:66:20:78: 3c:aa:78:a0:87:8b:f0:bd:91:73:f8:39:30:92:e9:ce:aa:4e: 21:ac:be:3f:16:c9:d7:be:1f:da:fe:f3:e0:22:25:a6:5d:20: 63:bd:8e:60:41:15:6f:89:53:73:27:e0:c8:9b:07:dc:ef:ec: 55:b2:10:4f:0b:b2:bc:cb:4c:2d:7f:92:36:97:60:00:1d:f1: 60:56:14:bf:93:e1:dd:1a:1e:9d:b2:0e:87:55:28:8d:52:44: f0:d9:5e:f9:b5:53:f9:f7:fe:94:0f:fb:35:b6:48:5b:2f:bd: 4e:88:c7:72:59:a7:a6:ac:0d:86:b7:b8:ed:21:18:05:50:e6: 30:03:50:f4:7e:35:10:8b:71:6d:01:8e:d9:b5:da:b2:8f:1c: 9c:72:85:ea:75:b9:29:8a:57:27:f1:f8:f0:6d:59:82:90:a1: 91:2d:30:d7:69:3e:9c:fd:0f:fe:a8:1f:d6:cb:60:04:ab:fa: b5:ea:6f:c6:a8:0e:69:95:ba:68:38:15:ac:46:9d:c9:b9:b9: e6:cb:d6:0e -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEn+D/3Lb/T1P43jZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlh YmYxMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MjgzOTczNmQtOWIwMC00Y2Y3LWFlMjEtNzVmNjZlMDU4MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF/6cC12Bkxa28SCddUI0YGRVWi6Tn9C1m4X L7I4WKBnzxYr1pWRKHM3wmvtjfSktGbvua1MsCjrfz+5JfMUJvV1dOLynFbmCToz m0319OWqy+qpWgpylYRDl7EHLM21vEEDxw2ApuIdGVvEArzrLw6BTNeA0t1rngtk hNUjQTuHxdcu6EK/qir5MSdZ4Qfx9GKL673Qh/KqsZPXs9En6Gevo2fiiCNUpPRt veq/otISzaIy6ClX/xcd7A49e/aMscFw/4rb8Ci6IFXouOBEPKoIIyd+cUdOLXi+ ydpmLTyRoLbblXEIcDMAVoD5oPsoAkaZl6aoR68HnPk3BpOdVwIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFI2bi3skRkqiOBYhcQEgc+bqvGevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJj ZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvODIwYmUxNWYtMWFiMC0z ZTZjLTg1NTQtOTUxZDk5ZDE4ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzJiY2YzOGItYzQ2ZC00YmYxLTg3 MDUtODhhZWVjMTlhYmYxLzMyYmNmMzhiLWM0NmQtNGJmMS04NzA1LTg4YWVlYzE5 YWJmMS5jcmwwHwYDVR0jBBgwFoAUZ4kEXXo/RjGOHDz4F8NW8uOG+JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFl ZWMxOWFiZjEuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAwB8JAwQA xhFjAwQAxhaYAwQBxonqAwQAx0r0AwQAx0/YAwQBx1mEMAwDBAHHWZ4DBADHWaAw DAMEAMxZmQMEAMxZmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD0xDf4WVabGmBQM1+U1gQjqDgOvi4yHDT XAkVOFlUZeDPkGkAiLVzPwiNDpXv9w9pfJRmIHg8qnigh4vwvZFz+DkwkunOqk4h rL4/FsnXvh/a/vPgIiWmXSBjvY5gQRVviVNzJ+DImwfc7+xVshBPC7K8y0wtf5I2 l2AAHfFgVhS/k+HdGh6dsg6HVSiNUkTw2V75tVP59/6UD/s1tkhbL71OiMdyWaem rA2Gt7jtIRgFUOYwA1D0fjUQi3FtAY7ZtdqyjxyccoXqdbkpilcn8fjwbVmCkKGR LTDXaT6c/Q/+qB/Wy2AEq/q16m/GqA5plbpoOBWsRp3Jubnmy9YO -----END CERTIFICATE-----Generated at Sun Jun 15 11:57:31 2025 by rpki-client