$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa File: 0d00392d-06ad-38f3-b449-d981399ddfac.roa (raw, json) Hash identifier: N/+WlIkogN6UMY3Ja5hq5gsyMtC0s2L0pcFx78K/dDI= Subject key identifier: 1D:AA:B3:5F:A5:89:98:08:61:B9:DD:6C:7C:DD:9B:D8:C9:51:F4:19 Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Certificate serial: 010D0C9F4328584A14657E9D0BD0BFAFD5DC94C0 Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 557 IP address blocks: 64.45.64.0/18 maxlen: 24 65.18.0.0/18 maxlen: 24 65.18.64.0/19 maxlen: 24 65.18.96.0/20 maxlen: 24 141.114.0.0/16 maxlen: 24 204.197.0.0/17 maxlen: 24 207.166.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7e:9d:0b:d0:bf:af:d5:dc:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=6db63bae-67cf-4140-8a26-8d1ea5992f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:d7:e3:b6:9a:ed:b6:70:1b:67:6c:d6:c4: 77:2e:3a:9e:ca:cf:0e:de:93:cc:ce:16:fa:59:9b: 06:a2:71:09:f3:13:55:aa:88:24:15:e3:bb:6f:44: d1:b9:7a:99:c9:da:00:38:0f:d8:f7:a9:4d:c1:c1: b3:e9:50:95:3f:2f:41:c0:4e:42:2c:23:0b:4c:c9: 34:53:ef:4b:08:c0:1d:0c:67:21:3d:5b:04:00:85: 9f:1b:2e:54:93:a6:a2:c8:bd:ad:2c:3f:40:de:d5: 7c:ef:4b:aa:ca:11:e9:18:ea:c0:c7:67:2b:3b:19: b0:c0:45:7c:68:9d:3c:c0:52:a0:ff:99:22:dd:ba: a2:9d:8b:49:53:93:2b:2b:ed:20:fc:bf:7b:59:33: b6:b2:49:7b:4d:19:a5:e3:67:69:ab:39:23:18:b3: 2d:8e:b9:fc:7a:94:16:65:42:81:16:8a:8b:5a:08: 5d:f9:94:3c:31:7f:9e:f4:ac:d4:80:bf:df:14:51: bd:ec:c4:59:a2:e1:36:20:bc:5c:e3:60:1e:52:9f: 47:87:10:bf:2d:63:28:dd:2c:8b:44:b3:ab:e8:6d: bd:ae:ae:63:38:c9:5b:cc:1b:99:ec:62:29:d3:3e: ae:53:dd:5a:ab:02:a8:60:b5:1b:c8:7a:ba:e3:9d: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AA:B3:5F:A5:89:98:08:61:B9:DD:6C:7C:DD:9B:D8:C9:51:F4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl X509v3 Authority Key Identifier: keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer sbgp-ipAddrBlock: critical IPv4: 64.45.64.0/18 65.18.0.0-65.18.111.255 141.114.0.0/16 204.197.0.0/17 207.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:44:72:c8:4c:55:dc:55:bf:ec:f4:34:9d:8d:c8:57:15:5f: a6:9b:ef:3b:d9:30:b1:ce:8a:5d:f9:f3:a9:37:75:c2:9c:b8: c8:73:b4:ae:8c:82:92:4c:d6:6d:ab:27:fa:d2:45:ce:ec:e5: a4:2e:31:07:de:64:d6:d2:5c:0a:b6:f4:d3:d5:1a:23:0a:ed: 77:e4:59:c7:c5:ba:fa:e6:fe:04:60:78:8a:c8:e9:90:42:cd: a6:8a:0d:42:48:8f:80:90:71:db:ac:d2:89:a9:3c:11:e6:d0: 63:f6:78:60:21:f7:cc:36:62:e9:69:d8:04:4d:4b:21:7a:b3: 50:05:3a:76:94:7d:a2:53:a4:14:36:25:9e:f1:1a:51:f8:2f: 28:a4:37:17:57:d9:dc:c3:e4:fc:a3:de:38:fb:89:c5:88:cb: 5a:64:81:f5:13:66:fa:6b:0c:fc:65:ce:26:28:31:f2:c7:09: cd:86:7d:68:2b:82:01:ff:fa:cb:a3:a5:16:2c:4c:12:2f:e9: 9d:89:d9:7a:50:4c:ce:1e:14:5d:2d:be:3b:88:2c:50:04:7b: c7:a9:03:69:8c:52:c2:04:8e:4a:5f:66:37:2e:12:8b:38:8d: a8:d5:64:f0:69:6d:4b:3c:b9:af:fd:cf:63:98:1e:8f:18:5c: 9f:7c:43:50 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEoUZX6dC9C/r9XclMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1 MzBkMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NmRiNjNiYWUtNjdjZi00MTQwLThhMjYtOGQxZWE1OTkyZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmPX47aa7bZwG2ds1sR3Ljqeys8O3pPMzhb6 WZsGonEJ8xNVqogkFeO7b0TRuXqZydoAOA/Y96lNwcGz6VCVPy9BwE5CLCMLTMk0 U+9LCMAdDGchPVsEAIWfGy5Uk6aiyL2tLD9A3tV870uqyhHpGOrAx2crOxmwwEV8 aJ08wFKg/5ki3bqinYtJU5MrK+0g/L97WTO2skl7TRml42dpqzkjGLMtjrn8epQW ZUKBFoqLWghd+ZQ8MX+e9KzUgL/fFFG97MRZouE2ILxc42AeUp9HhxC/LWMo3SyL RLOr6G29rq5jOMlbzBuZ7GIp0z6uU91aqwKoYLUbyHq6453GYwIDAQABo4IDczCC A28wHQYDVR0OBBYEFB2qs1+liZgIYbndbHzdm9jJUfQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdj ZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvMGQwMDM5MmQtMDZhZC0z OGYzLWI0NDktZDk4MTM5OWRkZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjE3Y2UyMmItNjFhMC00YWU5LTlj YzAtZjUwZjNiYjc1MzBkL2IxN2NlMjJiLTYxYTAtNGFlOS05Y2MwLWY1MGYzYmI3 NTMwZC5jcmwwHwYDVR0jBBgwFoAUt2tfGIphWyOCw/KpdRRVpSGxh+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBm M2JiNzUzMGQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGQC1AMAsD AwFBEgMEBEESYAMDAI1yAwQHzMUAAwQFz6bgMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE9EcshMVdxVv+z0 NJ2NyFcVX6ab7zvZMLHOil3586k3dcKcuMhztK6MgpJM1m2rJ/rSRc7s5aQuMQfe ZNbSXAq29NPVGiMK7XfkWcfFuvrm/gRgeIrI6ZBCzaaKDUJIj4CQcdus0ompPBHm 0GP2eGAh98w2Yulp2ARNSyF6s1AFOnaUfaJTpBQ2JZ7xGlH4LyikNxdX2dzD5Pyj 3jj7icWIy1pkgfUTZvprDPxlziYoMfLHCc2GfWgrggH/+sujpRYsTBIv6Z2J2XpQ TM4eFF0tvjuILFAEe8epA2mMUsIEjkpfZjcuEos4jajVZPBpbUs8ua/9z2OYHo8Y XJ98Q1A= -----END CERTIFICATE-----Generated at Mon Jun 16 12:20:55 2025 by rpki-client