$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa File: 5f470726-ba1c-3327-8ebe-1cd7737a8735.roa (raw, json) Hash identifier: RCNyo6Ma+H7Fvt20faXOCGuw5fMP3n31B5MuefgY8gM= Subject key identifier: EA:CB:0B:BA:31:3C:E2:63:2D:83:D4:89:57:F8:3A:4E:06:E5:70:B7 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF0780E96838A2BAA24240 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 17054 IP address blocks: 64.72.128.0/19 maxlen: 24 64.255.240.0/20 maxlen: 24 66.11.0.0/19 maxlen: 24 66.159.64.0/19 maxlen: 24 66.181.64.0/19 maxlen: 24 66.230.64.0/20 maxlen: 24 69.7.96.0/20 maxlen: 24 206.41.192.0/19 maxlen: 24 206.183.0.0/19 maxlen: 24 206.210.64.0/19 maxlen: 24 206.223.22.0/24 maxlen: 24 207.54.128.0/18 maxlen: 24 207.114.0.0/17 maxlen: 24 208.40.128.0/18 maxlen: 24 208.40.192.0/20 maxlen: 24 208.40.224.0/19 maxlen: 24 209.114.128.0/18 maxlen: 24 209.143.64.0/18 maxlen: 24 209.166.128.0/18 maxlen: 24 209.190.128.0/18 maxlen: 24 209.221.0.0/19 maxlen: 24 216.37.0.0/18 maxlen: 24 216.82.64.0/18 maxlen: 24 216.130.0.0/19 maxlen: 24 216.151.64.0/18 maxlen: 24 216.183.160.0/19 maxlen: 24 216.230.96.0/19 maxlen: 24 216.239.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:07:80:e9:68:38:a2:ba:a2:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=956d4c54-0f8e-49cb-9891-ec7f76e4faf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:1e:0b:78:65:2c:3f:f0:cb:e0:f9:05:58: 9e:0a:fb:fc:c0:4a:5c:69:dd:a4:96:6b:2b:b5:7d: bf:48:f8:b9:fe:b2:3c:2f:17:7a:a4:dc:3d:35:6a: 4e:b9:9c:bd:24:a7:7a:b9:20:5f:b2:f8:ee:d6:6d: df:19:46:09:a5:0b:9d:18:54:20:83:82:00:3a:c1: da:a3:07:4f:d6:a1:4b:13:79:47:5f:4d:80:c0:47: 97:5a:97:5b:fd:25:ab:ef:ce:af:64:6b:fb:5c:ac: 6c:1f:9c:64:a4:86:44:95:fc:96:bb:d7:85:58:63: 01:33:14:54:b7:a7:91:50:51:18:5e:64:d7:6b:3e: cd:24:75:16:be:d9:28:44:b4:cc:d1:b9:dd:d5:83: 43:bb:05:92:f1:a6:14:21:04:52:85:15:7e:4d:75: 76:94:d5:45:02:55:79:1d:cf:26:a7:f3:54:ab:a4: ff:5b:9c:d7:8a:2e:df:54:8c:54:1f:d9:12:ff:a5: 1b:77:90:39:4e:0c:86:71:f2:de:dc:5e:16:80:5d: ab:a6:18:9c:e7:74:f5:86:e5:f2:a4:1f:d8:1d:0b: 08:a6:f0:5e:9a:47:67:95:cc:aa:84:87:dd:e9:70: 13:d6:e2:66:d2:10:d8:28:5f:03:75:6b:8d:54:14: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:0B:BA:31:3C:E2:63:2D:83:D4:89:57:F8:3A:4E:06:E5:70:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 64.72.128.0/19 64.255.240.0/20 66.11.0.0/19 66.159.64.0/19 66.181.64.0/19 66.230.64.0/20 69.7.96.0/20 206.41.192.0/19 206.183.0.0/19 206.210.64.0/19 206.223.22.0/24 207.54.128.0/18 207.114.0.0/17 208.40.128.0-208.40.207.255 208.40.224.0/19 209.114.128.0/18 209.143.64.0/18 209.166.128.0/18 209.190.128.0/18 209.221.0.0/19 216.37.0.0/18 216.82.64.0/18 216.130.0.0/19 216.151.64.0/18 216.183.160.0/19 216.230.96.0/19 216.239.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0c:c4:8b:a1:6b:ac:69:de:3f:be:7c:30:74:d4:a0:d9:54: 72:df:85:1f:26:ba:1a:31:64:ef:be:28:dc:49:86:c2:82:45: e5:0a:c2:04:7e:1b:fc:27:b7:98:2b:40:8a:d5:60:cb:8a:97: 51:60:ad:87:a0:59:46:eb:cb:30:5b:3c:04:b3:64:d4:12:07: b6:7e:72:a4:a4:bf:10:44:fd:75:41:0d:eb:16:60:90:4a:1d: 40:4d:95:b5:a4:68:4c:1e:94:ad:e5:2e:df:5b:c9:47:b6:bf: 0a:80:c3:93:d0:ca:02:84:91:84:18:15:e7:77:10:17:1a:ec: 5a:3a:2f:bc:52:04:91:93:a0:eb:aa:bb:1d:7a:9d:b6:f6:b0: fc:bd:40:53:de:a4:41:7f:0b:fa:6a:d4:2c:13:be:54:d9:bb: 70:a0:c1:ff:fd:d6:69:c3:1b:f4:d7:57:2a:4d:8e:cf:02:ff: a9:99:92:b7:e1:d0:29:b4:53:e9:60:38:a4:cd:3a:98:39:bc: eb:b4:3e:f0:bd:e7:ac:d0:83:7a:91:36:07:4d:7c:9e:64:61: 73:49:28:a5:fe:8d:5b:74:ab:a6:1f:44:0d:69:2b:c3:b1:4c: 12:30:4a:2c:63:f0:b5:f6:50:86:20:ce:26:de:79:91:e8:5b: 9a:01:5d:66 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEmM/weA6Wg4orqiQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OTU2ZDRjNTQtMGY4ZS00OWNiLTk4OTEtZWM3Zjc2ZTRmYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdkeC3hlLD/wy+D5BVieCvv8wEpcad2klmsr tX2/SPi5/rI8Lxd6pNw9NWpOuZy9JKd6uSBfsvju1m3fGUYJpQudGFQgg4IAOsHa owdP1qFLE3lHX02AwEeXWpdb/SWr786vZGv7XKxsH5xkpIZElfyWu9eFWGMBMxRU t6eRUFEYXmTXaz7NJHUWvtkoRLTM0bnd1YNDuwWS8aYUIQRShRV+TXV2lNVFAlV5 Hc8mp/NUq6T/W5zXii7fVIxUH9kS/6Ubd5A5TgyGcfLe3F4WgF2rphic53T1huXy pB/YHQsIpvBemkdnlcyqhIfd6XAT1uJm0hDYKF8DdWuNVBTT3QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFOrLC7oxPOJjLYPUiVf4Ok4G5XC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWY0NzA3MjYtYmExYy0z MzI3LThlYmUtMWNkNzczN2E4NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAVA SIADBARA//ADBAVCCwADBAVCn0ADBAVCtUADBARC5kADBARFB2ADBAXOKcADBAXO twADBAXO0kADBADO3xYDBAbPNoADBAfPcgAwDAMEB9AogAMEBNAowAMEBdAo4AME BtFygAMEBtGPQAMEBtGmgAMEBtG+gAMEBdHdAAMEBtglAAMEBthSQAMEBdiCAAME BtiXQAMEBdi3oAMEBdjmYAMEBNjv8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhDMSLoWusad4/vnwwdNSg 2VRy34UfJroaMWTvvijcSYbCgkXlCsIEfhv8J7eYK0CK1WDLipdRYK2HoFlG68sw WzwEs2TUEge2fnKkpL8QRP11QQ3rFmCQSh1ATZW1pGhMHpSt5S7fW8lHtr8KgMOT 0MoChJGEGBXndxAXGuxaOi+8UgSRk6Drqrsdep229rD8vUBT3qRBfwv6atQsE75U 2btwoMH//dZpwxv011cqTY7PAv+pmZK34dAptFPpYDikzTqYObzrtD7wvees0IN6 kTYHTXyeZGFzSSil/o1bdKumH0QNaSvDsUwSMEosY/C19lCGIM4m3nmR6FuaAV1m -----END CERTIFICATE-----Generated at Tue Apr 29 19:59:36 2025 by rpki-client