$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa File: 3125937d-10bf-347b-bf28-785512b3e771.roa (raw, json) Hash identifier: lYOALaURaI/PBwidVT9K1dfSs60Lh4awMDPr23DWirU= Subject key identifier: B3:3E:3F:B2:A6:D1:C7:EA:79:5E:4A:56:A5:B4:B1:3F:77:7B:39:59 Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Certificate serial: 010D0C9F4328584A2ABAE6821AF26DBB418E4E00 Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 17 IP address blocks: 128.10.0.0/16 maxlen: 24 128.46.0.0/16 maxlen: 24 128.210.0.0/16 maxlen: 24 128.211.0.0/16 maxlen: 24 192.5.40.0/24 maxlen: 24 192.5.48.0/24 maxlen: 24 192.5.91.0/24 maxlen: 24 192.5.101.0/24 maxlen: 24 192.5.102.0/24 maxlen: 24 192.12.63.0/24 maxlen: 24 192.31.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e6:82:1a:f2:6d:bb:41:8e:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=9eff5033-6df4-44b3-a8e4-a8110fd0e264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:06:84:31:48:2d:98:07:d9:6d:b4:9a:7f: b8:a3:73:31:2e:e4:88:5c:fe:59:4e:d2:7e:ec:a6: 5f:6e:4c:51:ed:84:a3:9f:30:dc:af:f4:4d:63:33: d1:ab:98:b3:f3:13:af:bc:3c:3d:00:41:26:e4:fd: 43:e6:9b:cd:de:a4:82:b1:8e:f3:4c:57:d6:0d:d4: 4e:18:f7:69:86:b1:df:4f:7b:a1:66:18:62:f3:1a: 79:24:ec:80:b8:0d:8c:26:0c:16:b6:e8:6e:b9:72: 5b:3c:61:b6:66:2d:8e:b8:47:e9:01:c9:74:2d:54: 17:3a:49:53:81:10:b4:26:ec:74:70:3a:0b:06:98: b6:e3:8d:33:45:6d:a7:24:57:b5:0e:1a:c5:74:9c: 30:d7:0b:b6:c6:6c:6d:b4:e0:d1:63:4e:5c:8e:20: 14:d1:0f:32:f1:eb:fc:e9:bf:f8:14:41:58:5c:cc: fc:ff:f3:ac:a8:23:16:58:8a:ed:9d:9e:c4:fd:63: 0f:20:f4:2f:6a:c7:25:55:0e:98:45:15:dc:24:c2: 84:5e:35:08:6e:86:aa:d0:0c:3f:71:f6:25:89:43: 00:1f:7b:2d:4e:4c:46:3a:58:61:28:7e:cc:5b:42: f3:54:98:bf:3c:e6:fe:7c:ed:c2:56:dd:3b:6a:3e: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3E:3F:B2:A6:D1:C7:EA:79:5E:4A:56:A5:B4:B1:3F:77:7B:39:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl X509v3 Authority Key Identifier: keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer sbgp-ipAddrBlock: critical IPv4: 128.10.0.0/16 128.46.0.0/16 128.210.0.0/15 192.5.40.0/24 192.5.48.0/24 192.5.91.0/24 192.5.101.0-192.5.102.255 192.12.63.0/24 192.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d1:9c:90:52:ca:d2:e4:3d:65:7a:69:d1:06:45:92:1d:c7: e8:71:e8:c3:e8:2a:40:98:b3:48:24:fa:83:05:18:6a:13:e0: 43:80:53:9d:05:37:f8:77:fd:45:75:4b:75:66:09:84:82:e4: 28:1c:76:4e:7a:78:b4:78:ab:af:2c:c4:11:8f:13:ea:2a:32: de:7d:80:a0:5e:f6:a8:cf:3f:de:73:b6:36:5c:5d:30:3b:da: 68:21:ae:bd:12:06:95:60:bb:f3:75:9b:87:a3:3f:ac:d7:1c: 6c:92:f3:fe:01:db:95:8c:62:9c:3c:07:cc:ec:42:a6:e7:62: b1:b3:ba:64:fe:96:e8:ee:a4:2f:91:3c:80:3d:f1:70:cc:ff: b0:6e:2c:53:56:44:49:c2:12:f6:9a:ef:5c:7c:eb:09:46:b1: 13:1e:c6:3f:7a:b9:9f:de:30:76:6e:22:24:b4:2e:93:a0:25: b8:45:97:a4:dc:7b:ed:a3:4e:45:76:ee:f1:04:b1:e3:54:6f: af:1e:69:af:5d:96:3e:10:a8:70:2d:c1:36:15:bc:58:d5:6c: 3a:d4:da:3e:f0:73:20:67:0a:46:8c:46:47:6d:99:01:64:85: b0:3b:81:ae:b0:f0:54:ef:05:db:20:0e:03:a0:4a:f3:a4:f4: d1:18:e1:15 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEoquuaCGvJtu0GOTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3NDAxZGUtNGIwYS00NTMyLWFjMDgtZGJhOGIwNTg4 YzQ4MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OWVmZjUwMzMtNmRmNC00NGIzLWE4ZTQtYTgxMTBmZDBlMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ8GhDFILZgH2W20mn+4o3MxLuSIXP5ZTtJ+ 7KZfbkxR7YSjnzDcr/RNYzPRq5iz8xOvvDw9AEEm5P1D5pvN3qSCsY7zTFfWDdRO GPdphrHfT3uhZhhi8xp5JOyAuA2MJgwWtuhuuXJbPGG2Zi2OuEfpAcl0LVQXOklT gRC0Jux0cDoLBpi2440zRW2nJFe1DhrFdJww1wu2xmxttODRY05cjiAU0Q8y8ev8 6b/4FEFYXMz8//OsqCMWWIrtnZ7E/WMPIPQvasclVQ6YRRXcJMKEXjUIboaq0Aw/ cfYliUMAH3stTkxGOlhhKH7MW0LzVJi/POb+fO3CVt07aj5RQQIDAQABo4IDijCC A4YwHQYDVR0OBBYEFLM+P7Km0cfqeV5KVqW0sT93ezlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0 MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4YjA1ODhjNDgvMzEyNTkzN2QtMTBiZi0z NDdiLWJmMjgtNzg1NTEyYjNlNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTA3NDAxZGUtNGIwYS00NTMyLWFj MDgtZGJhOGIwNTg4YzQ4L2EwNzQwMWRlLTRiMGEtNDUzMi1hYzA4LWRiYThiMDU4 OGM0OC5jcmwwHwYDVR0jBBgwFoAULvOxC87kwzSIVBcirGl2pVE0A4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4 YjA1ODhjNDguY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwMAgAoDAwCA LgMDAYDSAwQAwAUoAwQAwAUwAwQAwAVbMAwDBADABWUDBADABWYDBADADD8DBADA HwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAF9GckFLK0uQ9ZXpp0QZFkh3H6HHow+gqQJizSCT6gwUYahPg Q4BTnQU3+Hf9RXVLdWYJhILkKBx2Tnp4tHirryzEEY8T6ioy3n2AoF72qM8/3nO2 NlxdMDvaaCGuvRIGlWC783Wbh6M/rNccbJLz/gHblYxinDwHzOxCpudisbO6ZP6W 6O6kL5E8gD3xcMz/sG4sU1ZEScIS9prvXHzrCUaxEx7GP3q5n94wdm4iJLQuk6Al uEWXpNx77aNORXbu8QSx41Rvrx5pr12WPhCocC3BNhW8WNVsOtTaPvBzIGcKRoxG R22ZAWSFsDuBrrDwVO8F2yAOA6BK86T00RjhFQ== -----END CERTIFICATE-----Generated at Mon Jun 16 13:22:09 2025 by rpki-client