$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa File: 05d53889-8629-3f75-b779-6895e4c540d0.roa (raw, json) Hash identifier: wj+qh/9+wp6U2IGEOpv+5V80t8IU9F2jvbgQoT2HLIU= Subject key identifier: AB:C2:ED:D6:7D:78:8F:2B:59:7B:6C:3D:85:AC:F9:33:95:25:94:24 Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F43285849E7BA701FD65C2EDF41A4BB60 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 32329 IP address blocks: 52.119.112.0/20 maxlen: 24 104.193.168.0/22 maxlen: 24 104.244.24.0/22 maxlen: 24 148.64.96.0/20 maxlen: 24 158.247.68.0/22 maxlen: 24 162.217.72.0/22 maxlen: 24 162.245.20.0/22 maxlen: 24 176.108.136.0/21 maxlen: 24 192.195.80.0/22 maxlen: 24 199.83.220.0/22 maxlen: 24 199.116.72.0/22 maxlen: 24 199.188.192.0/22 maxlen: 24 199.230.10.0/23 maxlen: 24 199.241.200.0/22 maxlen: 24 207.53.252.0/22 maxlen: 24 208.69.40.0/22 maxlen: 24 208.90.212.0/22 maxlen: 24 2607:f598::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:70:1f:d6:5c:2e:df:41:a4:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=94fb204a-12db-4381-bbf6-1167fd366f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:fe:a8:9e:4b:5f:fd:0c:7b:0d:30:69:30: 70:4b:b0:9f:62:79:d3:ba:b1:cf:e0:b8:42:25:e6: 6b:c5:83:92:2b:3c:8b:68:45:15:1b:ec:fe:97:37: 2d:8f:2b:63:a0:4c:1d:cd:73:4a:8e:f5:0e:37:38: dd:ef:96:5b:ab:7d:fc:7b:ef:73:9b:1c:18:ba:b9: 27:b8:8d:c7:9b:11:11:4b:b6:4a:7b:55:ea:28:5c: 78:73:21:e3:e5:44:2d:74:72:bc:41:36:85:32:91: 57:c6:bb:b1:59:a6:12:8a:81:dd:2d:78:ea:bb:58: 3b:b6:36:0e:11:89:93:8e:24:42:f3:09:66:dd:1b: ed:ae:ed:8e:55:b1:d6:ad:18:e3:51:dc:13:7a:f0: 2f:75:85:41:c0:66:39:0b:a0:6d:50:98:ae:b1:dd: 55:c7:06:dc:30:f4:32:19:50:8a:a2:7c:17:fa:27: 43:fc:f4:37:25:ed:9b:69:5a:2a:fe:6f:45:3d:fd: 42:c1:36:3d:03:7b:c0:d1:72:22:8d:d6:88:78:a2: 89:e7:4a:c1:88:99:12:4b:e6:4f:54:bf:e8:d8:27: f2:4a:c1:20:f3:02:fe:fa:85:25:7c:fb:3d:33:ea: ed:43:52:91:e0:25:13:f6:3d:ca:55:42:bf:bb:e8: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:ED:D6:7D:78:8F:2B:59:7B:6C:3D:85:AC:F9:33:95:25:94:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 52.119.112.0/20 104.193.168.0/22 104.244.24.0/22 148.64.96.0/20 158.247.68.0/22 162.217.72.0/22 162.245.20.0/22 176.108.136.0/21 192.195.80.0/22 199.83.220.0/22 199.116.72.0/22 199.188.192.0/22 199.230.10.0/23 199.241.200.0/22 207.53.252.0/22 208.69.40.0/22 208.90.212.0/22 IPv6: 2607:f598::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:84:60:e3:9a:de:99:0f:1b:d4:2a:e2:15:24:76:d0:d8:a0: f3:97:f4:2d:7a:37:21:49:aa:a7:e5:4b:c6:1b:ef:74:77:10: b5:23:a5:ee:90:89:d0:2c:0d:d1:45:67:5b:1d:98:68:ba:5f: 20:d9:77:93:c5:8b:9c:e8:eb:1a:f7:3a:21:c3:78:a3:c2:67: 8d:b0:b1:70:18:e6:e9:79:60:09:ef:24:93:89:6b:ad:2e:2b: b1:a8:c6:2a:7b:c3:2d:19:a9:36:6f:45:b5:8d:db:03:70:fe: d3:f6:ec:95:49:14:80:8a:9f:b1:63:38:db:12:f6:f9:d1:99: 08:70:41:90:35:dc:e8:e5:7b:68:12:42:00:07:21:b5:22:b7: 43:f7:22:b2:bc:72:38:d4:a1:89:e7:67:03:00:30:d4:ce:09: 3b:78:ad:5a:d6:9a:3f:b6:03:8e:66:71:3e:27:11:9a:7a:40: 5b:a0:c4:ff:e2:33:d8:16:79:ad:0b:be:55:38:bc:05:74:3d: 8b:ae:be:b4:c1:33:6f:ca:b7:87:83:75:99:bb:85:da:3a:3f: 1d:16:34:0f:f5:9b:56:18:97:66:15:40:e8:e9:0e:f3:ef:da: f0:c2:77:ce:7a:f6:15:c2:3b:d6:4a:a6:b0:38:de:07:3d:0e: e6:55:a8:d1 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEnnunAf1lwu30Gku2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OTRmYjIwNGEtMTJkYi00MzgxLWJiZjYtMTE2N2ZkMzY2Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6f+qJ5LX/0Mew0waTBwS7CfYnnTurHP4LhC JeZrxYOSKzyLaEUVG+z+lzctjytjoEwdzXNKjvUONzjd75Zbq338e+9zmxwYurkn uI3HmxERS7ZKe1XqKFx4cyHj5UQtdHK8QTaFMpFXxruxWaYSioHdLXjqu1g7tjYO EYmTjiRC8wlm3Rvtru2OVbHWrRjjUdwTevAvdYVBwGY5C6BtUJiusd1VxwbcMPQy GVCKonwX+idD/PQ3Je2baVoq/m9FPf1CwTY9A3vA0XIijdaIeKKJ50rBiJkSS+ZP VL/o2CfySsEg8wL++oUlfPs9M+rtQ1KR4CUT9j3KVUK/u+hwbQIDAQABo4IDxTCC A8EwHQYDVR0OBBYEFKvC7dZ9eI8rWXtsPYWs+TOVJZQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMDVkNTM4ODktODYyOS0z Zjc1LWI3NzktNjg5NWU0YzU0MGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEBDR3cAME AmjBqAMEAmj0GAMEBJRAYAMEAp73RAMEAqLZSAMEAqL1FAMEA7BsiAMEAsDDUAME AsdT3AMEAsd0SAMEAse8wAMEAcfmCgMEAsfxyAMEAs81/AMEAtBFKAMEAtBa1DAN BAIAAjAHAwUAJgf1mDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvhGDjmt6ZDxvUKuIVJHbQ2KDzl/Qtejch Saqn5UvGG+90dxC1I6XukInQLA3RRWdbHZhoul8g2XeTxYuc6Osa9zohw3ijwmeN sLFwGObpeWAJ7ySTiWutLiuxqMYqe8MtGak2b0W1jdsDcP7T9uyVSRSAip+xYzjb Evb50ZkIcEGQNdzo5XtoEkIAByG1IrdD9yKyvHI41KGJ52cDADDUzgk7eK1a1po/ tgOOZnE+JxGaekBboMT/4jPYFnmtC75VOLwFdD2Lrr60wTNvyreHg3WZu4XaOj8d FjQP9ZtWGJdmFUDo6Q7z79rwwnfOevYVwjvWSqawON4HPQ7mVajR -----END CERTIFICATE-----Generated at Sun Jun 15 22:00:24 2025 by rpki-client