$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: oek1U3y+l1f/dyWDnXtRX30MdCGQOOxxvYMqxdFZAK8= Subject key identifier: 7F:D8:6C:77:03:83:FA:83:E4:9D:5A:09:45:A8:18:97:B8:08:C1:AA Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584AAC8B7DDFA7443DF1AC740D80 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 16 137.187.0.0/16 maxlen: 16 156.40.0.0/18 maxlen: 18 156.40.64.0/20 maxlen: 20 156.40.80.0/21 maxlen: 21 156.40.88.0/22 maxlen: 22 156.40.92.0/24 maxlen: 24 156.40.96.0/19 maxlen: 19 156.40.128.0/18 maxlen: 18 156.40.192.0/22 maxlen: 22 156.40.196.0/24 maxlen: 24 156.40.198.0/23 maxlen: 23 156.40.200.0/21 maxlen: 21 156.40.208.0/20 maxlen: 20 156.40.224.0/19 maxlen: 19 165.112.0.0/16 maxlen: 16 192.231.145.0/24 maxlen: 24 192.231.146.0/24 maxlen: 24 192.231.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:7d:df:a7:44:3d:f1:ac:74:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=46ce54df-fd95-49d2-becb-a5359a24f1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:03:b4:62:eb:52:eb:2f:27:29:ed:42:53: e6:19:7c:38:9e:7e:79:81:3d:28:c0:3d:03:e6:7c: 30:9b:0c:c5:e1:20:37:01:43:50:a9:7c:27:ec:30: 4a:70:00:55:de:50:bf:09:10:d0:b4:bf:06:34:a7: ec:27:a6:12:36:83:6c:da:ac:c7:7a:26:b5:f0:60: b2:14:9b:3e:68:a4:e5:8b:ba:64:9b:e7:55:37:a8: cf:0b:b7:70:86:59:f9:c6:1f:84:a4:9b:17:c4:48: 37:b6:4c:02:e4:25:0a:24:21:cf:1b:25:a4:ef:4c: ef:62:ef:e6:c3:a2:76:d7:0b:72:06:06:e0:00:33: 9c:d6:1e:89:4b:7b:43:8d:2a:e2:a5:b3:1a:1b:58: bd:5e:f3:25:c8:8f:ce:7b:75:7a:9e:c7:ec:5f:1f: 3f:aa:7c:21:d6:cf:3e:66:44:d6:37:b0:32:df:2e: 38:dc:f0:a3:81:77:99:5d:4f:5f:ce:9c:69:f2:45: fc:6c:76:99:8a:80:29:e7:25:46:97:fb:a9:89:6e: 66:df:53:de:21:ad:d2:0f:dd:07:f9:b2:1f:39:39: 6b:24:c7:9b:5c:43:1d:6e:a3:6a:59:77:9d:72:d3: 0f:5f:2b:e8:26:18:70:d5:9c:5e:75:bf:b3:65:db: ab:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D8:6C:77:03:83:FA:83:E4:9D:5A:09:45:A8:18:97:B8:08:C1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:72:7f:34:ae:64:1a:4a:bc:e0:d7:9a:56:6d:6b:a4:1d:24: eb:ae:47:f3:7d:c0:33:67:6f:70:3c:90:69:ac:79:41:15:ca: 00:43:23:53:6c:47:6b:b6:2c:a9:ef:eb:33:81:2e:e3:23:97: 84:c3:4c:c6:56:6d:f3:b4:8a:fa:04:30:92:42:d8:ad:ab:74: 60:ed:42:38:1c:d6:27:d7:86:61:63:b0:6d:54:f9:6b:38:95: 00:52:8c:1c:9a:e1:00:6e:ff:35:3f:6d:fe:15:89:68:19:6e: 08:3a:08:82:58:f9:32:ee:b3:c8:02:ff:d0:17:af:8a:f9:fa: 8b:c4:d1:13:a9:51:d9:4a:25:21:7a:8b:f4:81:c0:fd:42:17: 4f:be:ed:f8:b3:50:1c:70:85:e4:6e:0c:0b:0b:1c:b8:92:c3: 5e:d6:ba:b4:21:48:1c:d4:e2:27:93:4f:3f:2e:8c:46:c5:63: e5:dd:f8:d9:cb:54:6c:21:f5:15:a4:4a:e8:e8:50:0a:b1:3f: a3:04:57:c7:1f:50:25:96:51:36:06:53:62:4a:1e:ed:e0:c2: 53:4a:ef:2a:b6:77:4b:2e:89:cc:41:75:73:2f:4c:d9:a5:f6: e6:69:f9:07:56:be:42:cc:0a:38:13:c6:cb:ab:b7:31:99:48: 93:96:5a:aa -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEqsi33fp0Q98ax0DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDZjZTU0ZGYtZmQ5NS00OWQyLWJlY2ItYTUzNTlhMjRmMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3UDtGLrUusvJyntQlPmGXw4nn55gT0owD0D 5nwwmwzF4SA3AUNQqXwn7DBKcABV3lC/CRDQtL8GNKfsJ6YSNoNs2qzHeia18GCy FJs+aKTli7pkm+dVN6jPC7dwhln5xh+EpJsXxEg3tkwC5CUKJCHPGyWk70zvYu/m w6J21wtyBgbgADOc1h6JS3tDjSripbMaG1i9XvMlyI/Oe3V6nsfsXx8/qnwh1s8+ ZkTWN7Ay3y443PCjgXeZXU9fzpxp8kX8bHaZioAp5yVGl/upiW5m31PeIa3SD90H +bIfOTlrJMebXEMdbqNqWXedctMPXyvoJhhw1Zxedb+zZdurQQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFH/YbHcDg/qD5J1aCUWoGJe4CMGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFlyfzSuZBpKvODXmlZta6QdJOuuR/N9wDNn b3A8kGmseUEVygBDI1NsR2u2LKnv6zOBLuMjl4TDTMZWbfO0ivoEMJJC2K2rdGDt Qjgc1ifXhmFjsG1U+Ws4lQBSjBya4QBu/zU/bf4ViWgZbgg6CIJY+TLus8gC/9AX r4r5+ovE0ROpUdlKJSF6i/SBwP1CF0++7fizUBxwheRuDAsLHLiSw17WurQhSBzU 4ieTTz8ujEbFY+Xd+NnLVGwh9RWkSujoUAqxP6MEV8cfUCWWUTYGU2JKHu3gwlNK 7yq2d0suicxBdXMvTNml9uZp+QdWvkLMCjgTxsurtzGZSJOWWqo= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:34 2025 by rpki-client