$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa File: f7e7861a-7949-3299-a067-2db09c6ed01c.roa (raw, json) Hash identifier: ELht+0zIkSYQGnqX74zeaIvR91DnIRKTKTWklXFS4kM= Subject key identifier: D6:AD:FD:FA:9F:D3:50:73:95:F3:52:F1:D6:EC:7A:DD:7A:1E:6A:A0 Certificate issuer: /CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Certificate serial: 010D0C9F43285849C4D4BDCD5042BD8A2D885998 Authority key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 18786 IP address blocks: 162.254.112.0/22 maxlen: 24 192.157.20.0/22 maxlen: 24 199.193.180.0/22 maxlen: 24 204.62.56.0/21 maxlen: 24 208.77.8.0/23 maxlen: 24 216.146.224.0/20 maxlen: 24 2607:ffe8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bd:cd:50:42:bd:8a:2d:88:59:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=d2e66e2b-b0e3-45ff-94b4-bf236200c5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c9:03:d8:11:9b:87:cd:bd:1c:9a:2b:c2:95: 88:1c:43:29:29:c1:f8:09:04:4d:b6:ab:a6:5a:78: 9c:81:41:65:91:f0:80:c0:13:43:72:8e:45:5a:c8: 98:b9:09:46:c0:e3:c5:16:c2:60:61:8b:4b:fb:d6: a1:a1:d0:c6:49:b7:42:4b:93:9d:68:8f:87:7d:0d: 85:ed:64:21:62:17:9d:69:5d:71:16:19:55:ed:08: a7:b0:08:13:2f:39:cc:84:0f:bd:3e:e3:68:00:30: c7:59:15:59:3b:09:b6:a0:26:fc:35:fe:97:80:56: a3:ab:0b:db:00:e8:a6:b5:a8:db:b6:c6:17:14:1f: 96:19:62:fc:86:8a:2b:ff:86:d1:13:92:c7:04:2e: ef:27:1a:e8:75:6d:6f:13:ce:26:8b:03:08:b7:97: 9b:4b:da:f0:a7:a4:e0:c5:d2:22:1f:95:9e:84:68: ec:f1:c6:15:2c:fa:ce:cb:46:f7:6e:6c:7d:fe:df: 6a:85:43:9c:48:00:85:46:54:f6:fc:c2:c7:21:7b: 4a:c8:3e:15:09:d4:75:ab:d5:d1:90:2a:90:54:9a: 11:df:02:13:f7:d9:b2:94:41:7d:a2:d3:c3:04:ce: 32:42:29:d8:87:e3:be:c2:01:e0:d0:66:88:75:04: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AD:FD:FA:9F:D3:50:73:95:F3:52:F1:D6:EC:7A:DD:7A:1E:6A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl X509v3 Authority Key Identifier: keyid:F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer sbgp-ipAddrBlock: critical IPv4: 162.254.112.0/22 192.157.20.0/22 199.193.180.0/22 204.62.56.0/21 208.77.8.0/23 216.146.224.0/20 IPv6: 2607:ffe8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d0:e3:23:db:62:0d:66:c1:c5:45:f6:68:4d:ac:b2:17:41: 14:da:b2:7b:2c:2d:d3:fa:75:8b:94:85:03:81:f5:bb:ab:21: 8d:0a:0f:d2:42:13:89:49:51:0d:c6:8f:57:d6:e7:45:0a:68: 2c:e1:75:f0:b4:95:fc:75:51:03:69:ed:a2:c9:68:6c:3b:77: bb:b5:a5:a5:8d:80:3e:40:71:c4:8d:89:7f:5d:65:85:bc:aa: 4b:4b:99:bf:32:c1:11:1a:66:09:34:a6:2c:2a:ae:81:e6:32: 6f:0f:1a:7a:dd:c3:8a:46:8c:ed:ca:60:f1:f3:d1:6b:3b:da: 37:a7:9f:45:fb:17:f3:f0:57:9b:37:38:9f:f6:81:3c:0c:6e: ce:7d:bc:f8:6c:c5:e7:ab:0b:36:4d:ce:c9:4f:04:12:c7:bb: d6:d1:77:7b:f1:79:08:78:0f:94:c9:80:74:b2:5f:f6:2e:38: 2a:b6:9f:60:b1:c8:84:18:07:a3:92:e9:b2:a6:ff:74:fe:17: 7c:6b:a5:b7:78:0d:92:03:a4:33:97:76:6c:da:51:2e:cd:04: 6b:b6:61:b7:42:03:fa:c9:70:1a:ec:01:03:dd:05:8a:76:85: ac:4a:c8:b7:73:3d:76:5f:13:6c:75:1a:34:0c:38:12:86:20: c8:2d:63:2a -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEnE1L3NUEK9ii2IWZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0MmNhMjQtZDc4NS00YWI4LTgxZDMtYmFlYzNhMzBi NjYwMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZDJlNjZlMmItYjBlMy00NWZmLTk0YjQtYmYyMzYyMDBjNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8kD2BGbh829HJorwpWIHEMpKcH4CQRNtqum WnicgUFlkfCAwBNDco5FWsiYuQlGwOPFFsJgYYtL+9ahodDGSbdCS5OdaI+HfQ2F 7WQhYhedaV1xFhlV7QinsAgTLznMhA+9PuNoADDHWRVZOwm2oCb8Nf6XgFajqwvb AOimtajbtsYXFB+WGWL8hoor/4bRE5LHBC7vJxrodW1vE84miwMIt5ebS9rwp6Tg xdIiH5WehGjs8cYVLPrOy0b3bmx9/t9qhUOcSACFRlT2/MLHIXtKyD4VCdR1q9XR kCqQVJoR3wIT99mylEF9otPDBM4yQinYh+O+wgHg0GaIdQSBUwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFNat/fqf01BzlfNS8dbset16HmqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYzQy Y2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2EzMGI2NjAvZjdlNzg2MWEtNzk0OS0z Mjk5LWEwNjctMmRiMDljNmVkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWM0MmNhMjQtZDc4NS00YWI4LTgx ZDMtYmFlYzNhMzBiNjYwL2FjNDJjYTI0LWQ3ODUtNGFiOC04MWQzLWJhZWMzYTMw YjY2MC5jcmwwHwYDVR0jBBgwFoAU9Lb17wuDSXlrUGJZ8DZGjecIH68wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVj M2EzMGI2NjAuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCov5wAwQC wJ0UAwQCx8G0AwQDzD44AwQB0E0IAwQE2JLgMA0EAgACMAcDBQAmB//oMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFXQ4yPbYg1mwcVF9mhNrLIXQRTasnssLdP6dYuUhQOB9burIY0KD9JCE4lJ UQ3Gj1fW50UKaCzhdfC0lfx1UQNp7aLJaGw7d7u1paWNgD5AccSNiX9dZYW8qktL mb8ywREaZgk0piwqroHmMm8PGnrdw4pGjO3KYPHz0Ws72jenn0X7F/PwV5s3OJ/2 gTwMbs59vPhsxeerCzZNzslPBBLHu9bRd3vxeQh4D5TJgHSyX/YuOCq2n2CxyIQY B6OS6bKm/3T+F3xrpbd4DZIDpDOXdmzaUS7NBGu2YbdCA/rJcBrsAQPdBYp2haxK yLdzPXZfE2x1GjQMOBKGIMgtYyo= -----END CERTIFICATE-----Generated at Sun Jun 15 14:33:01 2025 by rpki-client