$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa File: cadfb715-8e26-3e18-83e8-8fb22e97789c.roa (raw, json) Hash identifier: bhVpZD/fLNVlV9LMQ2O/2clRtq1jCa3mfwiIRwmRZQ4= Subject key identifier: E5:A4:A3:0C:2C:E0:00:C5:AD:71:AF:B9:AA:1F:E3:E5:3D:77:08:F0 Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4 Certificate serial: 010D0C9F4328584A0C0552C98F59FB17079A43E0 Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 13657 IP address blocks: 67.215.192.0/20 maxlen: 24 104.242.0.0/17 maxlen: 24 216.235.0.0/20 maxlen: 24 2001:4900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:52:c9:8f:59:fb:17:07:9a:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ba64e2b9-dbb7-4ad7-9a16-80982f024c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:22:38:b7:64:44:30:91:3e:de:18:c2:7d:9e: bf:16:e6:10:5e:3b:17:85:a8:2d:dd:96:d8:c0:f6: 1d:17:33:09:59:29:84:b0:d7:3e:72:44:38:2b:e7: 37:72:48:af:54:88:d9:7a:41:dd:2f:7f:a5:d6:84: c2:1b:04:da:4d:1b:e3:f9:2f:2a:89:08:e9:91:09: 80:86:54:7d:15:93:19:f0:ed:38:65:99:d6:bb:4c: e5:e8:6d:c8:f8:4a:50:c6:90:6a:2c:33:bc:fa:24: 85:fb:5b:74:cf:1d:85:30:79:c5:c1:04:b8:36:c2: c9:fb:7b:4e:48:cd:b4:70:f6:00:c0:69:59:84:14: e8:31:16:b8:e5:cf:55:f5:e1:1c:fe:33:55:db:67: be:7d:91:6f:a6:cb:b8:4d:d9:8a:89:06:69:f6:f9: 3c:45:34:a2:ce:fe:03:82:21:5b:4d:03:f8:7a:55: ae:4f:35:5f:5f:f8:1a:ff:33:b7:f4:d4:6b:8f:e9: 0c:54:1e:db:cc:ab:60:74:d9:0f:5c:2c:0b:4c:84: 6d:23:ac:6f:73:dc:87:62:60:23:dc:12:5c:e7:73: c2:58:56:7b:c1:7e:98:33:b4:b2:f7:7e:10:c7:c0: 89:bb:ec:5a:da:32:f2:d6:e0:7e:ba:a3:ed:12:c7: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A4:A3:0C:2C:E0:00:C5:AD:71:AF:B9:AA:1F:E3:E5:3D:77:08:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl X509v3 Authority Key Identifier: keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer sbgp-ipAddrBlock: critical IPv4: 67.215.192.0/20 104.242.0.0/17 216.235.0.0/20 IPv6: 2001:4900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:29:fe:87:e3:9a:bb:fc:61:5a:e7:e0:22:83:7f:5c:83:22: 26:c0:a6:33:69:f4:a1:2b:00:74:11:11:81:3a:44:5c:48:ea: 1b:3d:36:7e:cf:7b:ea:da:34:58:a5:59:cf:88:ad:79:e3:b9: f4:cd:b3:72:b2:03:75:e6:1d:da:fc:db:23:df:39:ea:bb:b6: 01:90:3e:fe:47:db:a9:e9:8a:db:b4:72:38:2d:2b:0e:86:dd: a2:25:68:2d:84:7e:de:12:57:69:89:9f:73:c3:f5:eb:15:04: 7f:a7:f8:67:16:2e:6c:b8:da:14:19:c5:07:2e:a1:ec:44:86: 82:f7:c6:1c:3a:40:dc:4c:7a:f6:a4:7d:ae:c1:19:ed:25:59: 89:09:08:29:bc:90:78:5f:f7:17:0f:a1:19:9f:92:a7:51:14: ae:c9:c3:4e:35:1b:86:57:82:24:41:83:90:f6:e5:ac:f3:c4: 92:fa:a5:0a:d4:b6:77:f4:dc:2b:25:90:17:55:fe:e3:b4:8a: 48:7e:19:e1:87:78:11:78:ca:20:1a:54:f1:3f:dd:e8:f6:b3: 1c:ed:ac:e9:fe:6b:4b:8d:96:89:31:23:16:06:1b:27:3e:4d: 7c:ea:b4:4a:e7:1b:19:63:de:f8:03:80:ad:28:09:37:94:b9: 29:be:12:80 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEoMBVLJj1n7FweaQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy MGU0MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YmE2NGUyYjktZGJiNy00YWQ3LTlhMTYtODA5ODJmMDI0YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyI4t2REMJE+3hjCfZ6/FuYQXjsXhagt3ZbY wPYdFzMJWSmEsNc+ckQ4K+c3ckivVIjZekHdL3+l1oTCGwTaTRvj+S8qiQjpkQmA hlR9FZMZ8O04ZZnWu0zl6G3I+EpQxpBqLDO8+iSF+1t0zx2FMHnFwQS4NsLJ+3tO SM20cPYAwGlZhBToMRa45c9V9eEc/jNV22e+fZFvpsu4TdmKiQZp9vk8RTSizv4D giFbTQP4elWuTzVfX/ga/zO39NRrj+kMVB7bzKtgdNkPXCwLTIRtI6xvc9yHYmAj 3BJc53PCWFZ7wX6YM7Sy934Qx8CJu+xa2jLy1uB+uqPtEscTaQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFOWkowws4ADFrXGvuaof4+U9dwjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvY2FkZmI3MTUtOGUyNi0z ZTE4LTgzZTgtOGZiMjJlOTc3ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3 ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3 MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz NWU1NzIwZTQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQ9fAAwQH aPIAAwQE2OsAMA0EAgACMAcDBQAgAUkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGUp/ofjmrv8YVrn4CKD f1yDIibApjNp9KErAHQREYE6RFxI6hs9Nn7Pe+raNFilWc+IrXnjufTNs3KyA3Xm Hdr82yPfOeq7tgGQPv5H26npitu0cjgtKw6G3aIlaC2Eft4SV2mJn3PD9esVBH+n +GcWLmy42hQZxQcuoexEhoL3xhw6QNxMevakfa7BGe0lWYkJCCm8kHhf9xcPoRmf kqdRFK7Jw041G4ZXgiRBg5D25azzxJL6pQrUtnf03CslkBdV/uO0ikh+GeGHeBF4 yiAaVPE/3ej2sxztrOn+a0uNlokxIxYGGyc+TXzqtErnGxlj3vgDgK0oCTeUuSm+ EoA= -----END CERTIFICATE-----Generated at Mon Jun 16 04:21:20 2025 by rpki-client