$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa File: 3e519e15-ed2f-37f7-b867-1bc35f84f338.roa (raw, json) Hash identifier: gqu9oy7+3HV40YOyLrGJPwz90LeR8HSU9nFrncE02eU= Subject key identifier: 9D:38:EF:28:F6:67:06:55:5E:DE:F3:8D:B6:86:4C:D3:85:69:BC:6B Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584973DEEA2C65B8A65CEC0C1500 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 62240 IP address blocks: 65.254.57.0/24 maxlen: 24 65.254.60.0/24 maxlen: 24 72.9.230.0/24 maxlen: 24 72.9.245.0/24 maxlen: 24 72.9.247.0/24 maxlen: 24 75.127.119.0/24 maxlen: 24 205.251.132.0/24 maxlen: 24 205.251.133.0/24 maxlen: 24 205.251.134.0/24 maxlen: 24 207.210.76.0/24 maxlen: 24 207.210.77.0/24 maxlen: 24 207.210.78.0/24 maxlen: 24 207.210.81.0/24 maxlen: 24 209.51.148.0/24 maxlen: 24 209.51.149.0/24 maxlen: 24 209.51.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:ea:2c:65:b8:a6:5c:ec:0c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=95ca2d6c-0d51-4686-b95e-935e464ab8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:de:eb:6b:c7:ab:eb:49:2c:dc:3d:f9:fe: 14:56:ec:70:3a:bc:05:5e:4d:6d:ad:4d:72:8c:ef: 95:e2:35:9c:8c:1e:cc:99:94:62:e9:e6:0c:c0:82: 04:04:f5:24:dd:c9:fe:fd:aa:8a:d9:de:f0:dd:fd: f9:8e:2e:43:52:f8:4b:e3:4a:18:c5:02:6c:e2:e5: 58:4d:01:d0:00:72:0d:31:ef:10:39:c9:8d:65:64: c1:6f:23:a0:e9:0a:7a:5e:a8:6f:b3:d0:b2:14:36: c6:05:0e:35:b2:ed:7c:3a:83:1c:42:0f:79:b5:67: a5:1c:20:40:58:d1:a4:e6:a6:fb:fc:c2:96:e1:3d: 4c:d0:2b:4e:cd:a0:84:a8:67:36:c8:c1:c9:3d:62: b7:30:d4:4b:c2:f7:b6:23:83:2f:4f:20:16:f3:eb: 22:bd:ff:61:c4:65:62:be:3c:80:83:90:1f:91:77: 33:08:35:92:75:4a:61:1b:f9:82:8b:f9:9f:18:26: c8:c6:01:df:5e:7b:8b:6e:5d:cd:0d:91:d5:da:e5: 96:4b:89:02:dc:9c:14:49:df:49:7c:66:f7:8e:41: 9e:46:32:49:a8:8a:63:4e:fe:00:f2:65:88:a3:54: a3:05:cd:89:af:cf:d9:cf:20:68:9a:90:b5:d5:e5: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:EF:28:F6:67:06:55:5E:DE:F3:8D:B6:86:4C:D3:85:69:BC:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 65.254.57.0/24 65.254.60.0/24 72.9.230.0/24 72.9.245.0/24 72.9.247.0/24 75.127.119.0/24 205.251.132.0-205.251.134.255 207.210.76.0-207.210.78.255 207.210.81.0/24 209.51.148.0-209.51.150.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b4:97:8e:6c:d8:c6:e4:d2:c9:ae:82:c5:4f:28:62:95:0e: 67:8e:08:6a:42:73:9c:db:76:90:c9:07:17:69:55:60:d9:25: 7d:d7:b5:6c:51:a6:8f:4c:0f:2f:c1:5b:31:49:6e:c4:a5:d8: 93:db:8a:34:ca:d0:66:b7:52:89:a9:91:8e:aa:95:68:d0:ff: 9e:9e:2f:b2:72:59:cf:b3:94:3f:2c:27:b4:56:66:4f:03:f6: d3:f9:4e:a0:af:6a:ed:e9:17:d1:0c:f4:b4:3f:cc:59:c6:76: 87:18:87:61:ad:33:3a:f5:c2:eb:01:31:06:96:05:6b:50:95: dd:09:6c:b0:16:26:ec:2c:b1:c9:0c:12:44:cc:59:f5:f7:f8: b0:9a:a1:3a:32:90:cc:94:36:24:74:9d:1e:fb:ff:03:11:1d: bb:34:c6:d4:5f:8a:d2:03:4f:fc:22:24:40:42:98:f7:cb:7c: 38:e1:5c:39:2f:86:f4:8b:e9:88:e6:0c:03:2b:0a:73:ee:50: 71:c7:64:96:ce:30:42:3b:5a:d5:76:52:d8:4f:52:9d:79:e6: 64:8b:83:55:ff:6d:5a:18:58:74:6c:c6:e5:a6:cf:41:68:f8: a8:8a:11:db:85:0f:be:80:21:af:24:28:68:4b:56:6a:4d:ab: 23:04:60:4b -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWElz3uosZbimXOwMFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk OTVjYTJkNmMtMGQ1MS00Njg2LWI5NWUtOTM1ZTQ2NGFiOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsXe62vHq+tJLNw9+f4UVuxwOrwFXk1trU1y jO+V4jWcjB7MmZRi6eYMwIIEBPUk3cn+/aqK2d7w3f35ji5DUvhL40oYxQJs4uVY TQHQAHINMe8QOcmNZWTBbyOg6Qp6Xqhvs9CyFDbGBQ41su18OoMcQg95tWelHCBA WNGk5qb7/MKW4T1M0CtOzaCEqGc2yMHJPWK3MNRLwve2I4MvTyAW8+sivf9hxGVi vjyAg5AfkXczCDWSdUphG/mCi/mfGCbIxgHfXnuLbl3NDZHV2uWWS4kC3JwUSd9J fGb3jkGeRjJJqIpjTv4A8mWIo1SjBc2Jr8/ZzyBompC11eVcmQIDAQABo4IDozCC A58wHQYDVR0OBBYEFJ047yj2ZwZVXt7zjbaGTNOFabxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvM2U1MTllMTUtZWQyZi0z N2Y3LWI4NjctMWJjMzVmODRmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAQf45AwQA Qf48AwQASAnmAwQASAn1AwQASAn3AwQAS393MAwDBALN+4QDBADN+4YwDAMEAs/S TAMEAM/STgMEAM/SUTAMAwQC0TOUAwQA0TOWMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGi0l45s2Mbk0smu gsVPKGKVDmeOCGpCc5zbdpDJBxdpVWDZJX3XtWxRpo9MDy/BWzFJbsSl2JPbijTK 0Ga3UompkY6qlWjQ/56eL7JyWc+zlD8sJ7RWZk8D9tP5TqCvau3pF9EM9LQ/zFnG docYh2GtMzr1wusBMQaWBWtQld0JbLAWJuwssckMEkTMWfX3+LCaoToykMyUNiR0 nR77/wMRHbs0xtRfitIDT/wiJEBCmPfLfDjhXDkvhvSL6YjmDAMrCnPuUHHHZJbO MEI7WtV2UthPUp155mSLg1X/bVoYWHRsxuWmz0Fo+KiKEduFD76AIa8kKGhLVmpN qyMEYEs= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:28 2025 by rpki-client