$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa File: 7f8ab63b-847b-34e6-a398-301d847ad7f0.roa (raw, json) Hash identifier: GvMGEvcDSBwcqOfDvSk8EvdIyl3vTxzczAFLMXN8RGc= Subject key identifier: 1D:A3:A1:79:A4:C1:A7:EC:B6:B3:42:68:18:61:B1:79:73:C6:46:01 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F43285849088159C8C7B263CD03CDDA00 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 19905 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:59:c8:c7:b2:63:cd:03:cd:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=3d346daa-077e-47b5-8d84-3802e5c1dfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:f9:1a:7e:bf:62:d2:4d:20:f7:a6:7a:b3: e7:f9:4c:47:4f:59:03:36:27:83:26:81:8a:72:2a: 12:fd:83:8c:95:86:31:ec:8b:bd:26:08:83:2b:8c: 09:14:92:7e:6d:64:f2:f8:5b:7f:fe:bd:c9:70:44: 01:58:91:79:dd:de:14:a7:5d:5f:02:e2:58:7b:c7: 8f:a6:f0:b2:58:32:f5:c2:37:44:f9:77:91:bc:97: e5:f4:2e:89:d5:ed:64:39:41:24:9a:d7:b2:72:f7: 3d:3e:ca:50:32:75:54:54:5e:0d:d1:57:e6:c1:3b: 5b:1e:e3:17:57:1c:a1:e2:9e:2b:2e:54:a6:6b:80: cb:27:a4:78:f5:ce:40:7a:19:f8:b0:16:ab:88:5d: a1:ce:0c:4a:ca:ad:99:90:dd:cb:73:3d:09:6f:ff: e2:e3:e4:b6:bd:9c:d6:01:40:7c:72:86:ea:2c:52: 98:84:44:a1:0d:14:6a:8f:34:52:37:fc:b8:d1:b9: 23:40:2a:32:ff:a0:19:23:94:79:23:cf:7f:42:0c: 40:fd:93:3c:28:22:4b:66:72:ea:9e:8c:17:a4:fe: 5e:f9:ad:9f:5f:bd:74:b2:a3:42:4b:f3:53:89:96: a1:06:27:ee:f4:87:1d:a4:9d:49:9b:eb:01:aa:a1: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:A1:79:A4:C1:A7:EC:B6:B3:42:68:18:61:B1:79:73:C6:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c2:34:57:69:d0:d1:e4:02:64:20:92:86:ff:20:95:0e:2a: af:97:72:ef:a0:8a:93:36:cd:8a:b8:93:64:c3:06:bd:28:1d: 97:ed:86:61:17:95:6f:af:58:bf:7b:c1:1f:a8:7d:0d:a5:d9: 15:b6:f9:e7:37:3d:72:ca:85:e1:bc:29:a1:e1:48:cd:c1:80: 79:9c:a0:01:ad:57:05:48:2f:cd:ef:a7:60:b4:f4:fa:12:a1: 3d:0c:d1:96:c4:93:40:21:32:b2:6b:ac:8b:1e:39:ca:9d:e4: 97:57:21:85:d4:09:1a:1a:49:f2:52:09:c4:d7:63:ae:a1:43: 49:4d:40:fc:f2:b3:05:3f:86:9a:af:27:88:cc:28:04:aa:ad: 12:e6:95:83:f8:88:91:ac:99:81:0e:49:79:79:1d:41:61:85: 83:52:b0:9b:74:65:dc:69:81:4c:0a:71:e0:d0:6b:24:da:77: 15:20:7e:3f:1e:d8:35:a7:07:4d:3f:41:a6:06:a9:6a:5e:ec: 4e:a3:1f:f1:58:75:03:90:ad:9a:2f:9a:cb:fb:f3:1d:70:14: de:1f:e2:6e:10:9a:5b:eb:e9:a9:5e:95:b5:17:f5:e0:23:86: ef:6b:fc:36:82:69:a5:6b:a6:81:35:f3:46:e6:77:46:2e:ae: 3a:dc:4e:67 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEkIgVnIx7JjzQPN2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk M2QzNDZkYWEtMDc3ZS00N2I1LThkODQtMzgwMmU1YzFkZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAran5Gn6/YtJNIPemerPn+UxHT1kDNieDJoGK cioS/YOMlYYx7Iu9JgiDK4wJFJJ+bWTy+Ft//r3JcEQBWJF53d4Up11fAuJYe8eP pvCyWDL1wjdE+XeRvJfl9C6J1e1kOUEkmteycvc9PspQMnVUVF4N0VfmwTtbHuMX Vxyh4p4rLlSma4DLJ6R49c5Aehn4sBariF2hzgxKyq2ZkN3Lcz0Jb//i4+S2vZzW AUB8cobqLFKYhEShDRRqjzRSN/y40bkjQCoy/6AZI5R5I89/QgxA/ZM8KCJLZnLq nowXpP5e+a2fX710sqNCS/NTiZahBifu9IcdpJ1Jm+sBqqE8IwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFB2joXmkwafstrNCaBhhsXlzxkYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvN2Y4YWI2M2ItODQ3Yi0z NGU2LWEzOTgtMzAxZDg0N2FkN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABrCNFdp0NHkAmQgkob/IJUOKq+Xcu+gipM2 zYq4k2TDBr0oHZfthmEXlW+vWL97wR+ofQ2l2RW2+ec3PXLKheG8KaHhSM3BgHmc oAGtVwVIL83vp2C09PoSoT0M0ZbEk0AhMrJrrIseOcqd5JdXIYXUCRoaSfJSCcTX Y66hQ0lNQPzyswU/hpqvJ4jMKASqrRLmlYP4iJGsmYEOSXl5HUFhhYNSsJt0Zdxp gUwKceDQayTadxUgfj8e2DWnB00/QaYGqWpe7E6jH/FYdQOQrZovmsv78x1wFN4f 4m4Qmlvr6alelbUX9eAjhu9r/DaCaaVrpoE180bmd0YurjrcTmc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:11 2025 by rpki-client