$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa File: 012553be-cadc-391f-be02-761ff5c3fe9c.roa (raw, json) Hash identifier: 3OTohfCdxxIGg92l/25h9diGyM4s1NNzc6fdWIiDHTs= Subject key identifier: A3:EF:DE:FA:CD:B4:5A:25:50:F4:16:6F:E0:2E:AD:FB:61:19:69:FC Certificate issuer: /CN=e4877b41-a7e3-491a-a87e-56a8cf46d169 Certificate serial: 010D0C9F4328584A1B5FFE3FFB4E91431CD597C0 Authority key identifier: 79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 26269 IP address blocks: 160.223.176.0/22 maxlen: 24 162.216.232.0/22 maxlen: 24 173.45.176.0/20 maxlen: 24 198.135.144.0/21 maxlen: 24 199.58.144.0/22 maxlen: 24 199.241.220.0/22 maxlen: 24 2602:ff89::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fe:3f:fb:4e:91:43:1c:d5:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=8678cc32-260b-46bb-b20a-3b78b23f0ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:2e:c0:a4:c5:ae:64:36:30:9e:65:c4:15: 82:fc:fe:2d:21:13:df:3a:5b:60:c7:e8:8f:2f:32: 90:0d:28:9c:47:f0:42:5b:00:45:3b:18:93:4b:cd: 6f:7c:b7:be:e8:1d:9a:52:19:37:e7:b1:93:9d:36: 88:ca:22:50:be:03:de:2d:fb:94:a2:5b:2f:cf:3a: 35:fb:5a:0e:1b:69:24:69:ee:62:d8:1c:f5:d8:4b: e9:3b:8e:f6:9d:4c:f1:3a:84:2a:b0:da:b6:ea:75: 78:a3:40:5b:e3:61:e7:e3:14:6c:2c:91:9d:06:c6: 73:fc:b5:fb:7c:c3:62:7e:df:d9:06:a0:73:29:2c: 48:0f:d7:42:6f:e6:74:d6:56:85:4d:47:a9:b9:27: 97:dc:5c:6f:2b:7b:7d:2d:36:34:10:94:4b:5d:4f: 7e:4e:34:80:16:a0:6d:b2:9e:2b:10:27:3c:1f:b1: c5:e2:88:3e:10:9d:65:1d:71:33:3d:3a:dc:8c:8b: 1c:a7:0a:2b:6e:cb:64:af:ea:da:96:2f:f6:24:21: 38:bc:4a:e2:97:0e:ad:ee:9e:fb:aa:ee:8f:50:ce: bb:49:64:0f:54:68:fa:10:8a:c6:61:f0:ef:e1:46: 63:3e:66:c4:97:91:58:3f:6b:5f:66:db:1a:e5:27: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EF:DE:FA:CD:B4:5A:25:50:F4:16:6F:E0:2E:AD:FB:61:19:69:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl X509v3 Authority Key Identifier: keyid:79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer sbgp-ipAddrBlock: critical IPv4: 160.223.176.0/22 162.216.232.0/22 173.45.176.0/20 198.135.144.0/21 199.58.144.0/22 199.241.220.0/22 IPv6: 2602:ff89::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:af:d8:6a:9b:b3:5c:ab:39:2c:2f:f6:a8:dd:eb:fa:fc:cf: 23:25:e5:d3:ec:05:0f:03:ac:1a:23:43:51:25:72:43:36:61: 2d:f1:ca:b8:52:2f:10:7a:d0:c8:85:9d:2c:12:53:be:46:e9: 1b:2c:a5:87:fe:af:81:4f:1d:ab:c7:89:ec:b4:61:f1:e3:ae: d4:dd:77:17:93:75:52:ec:c2:7c:5e:e5:5d:20:27:b5:39:fa: 57:59:d6:a0:ef:80:c9:61:02:d5:5d:1b:90:d8:e9:72:34:48: 09:36:80:1a:8b:18:b6:1b:69:60:44:e0:03:06:57:d5:8a:c5: ff:1c:75:36:41:ca:98:d5:f8:26:65:39:2d:76:59:0f:bb:17: 67:81:67:ae:51:71:4e:a4:f3:bd:72:66:bf:3a:a3:90:8e:b6: 41:9a:17:94:f5:a8:d5:77:2f:7b:e4:4f:db:73:e1:a4:c6:45: b2:aa:e5:50:96:64:08:e4:3b:b3:d3:a3:e0:6b:dd:8b:29:c2: 30:07:dd:bb:af:7b:d0:2b:40:8a:25:20:e0:71:ae:62:6c:51: bb:3a:43:59:36:53:1d:42:2b:f0:3d:e9:ad:ed:73:92:bf:15: ba:68:12:c8:3f:9d:eb:05:0a:36:3f:ff:33:22:1f:0f:47:74: eb:9d:78:57 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEobX/4/+06RQxzVl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ4NzdiNDEtYTdlMy00OTFhLWE4N2UtNTZhOGNmNDZk MTY5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ODY3OGNjMzItMjYwYi00NmJiLWIyMGEtM2I3OGIyM2YwYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ0uwKTFrmQ2MJ5lxBWC/P4tIRPfOltgx+iP LzKQDSicR/BCWwBFOxiTS81vfLe+6B2aUhk357GTnTaIyiJQvgPeLfuUolsvzzo1 +1oOG2kkae5i2Bz12EvpO472nUzxOoQqsNq26nV4o0Bb42Hn4xRsLJGdBsZz/LX7 fMNift/ZBqBzKSxID9dCb+Z01laFTUepuSeX3FxvK3t9LTY0EJRLXU9+TjSAFqBt sp4rECc8H7HF4og+EJ1lHXEzPTrcjIscpworbstkr+rali/2JCE4vErilw6t7p77 qu6PUM67SWQPVGj6EIrGYfDv4UZjPmbEl5FYP2tfZtsa5SfHAwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFKPv3vrNtFolUPQWb+AurfthGWn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNDg3 N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4Y2Y0NmQxNjkvMDEyNTUzYmUtY2FkYy0z OTFmLWJlMDItNzYxZmY1YzNmZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQ4NzdiNDEtYTdlMy00OTFhLWE4 N2UtNTZhOGNmNDZkMTY5L2U0ODc3YjQxLWE3ZTMtNDkxYS1hODdlLTU2YThjZjQ2 ZDE2OS5jcmwwHwYDVR0jBBgwFoAUeU/s9F/sLc89/I7kYL/QlEbVJuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNDg3N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4 Y2Y0NmQxNjkuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDAqBAIAATAkAwQCoN+wAwQC otjoAwQErS2wAwQDxoeQAwQCxzqQAwQCx/HcMA4EAgACMAgDBgQmAv+JADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQC3r9hqm7NcqzksL/ao3ev6/M8jJeXT7AUPA6waI0NRJXJDNmEt8cq4Ui8Q etDIhZ0sElO+RukbLKWH/q+BTx2rx4nstGHx467U3XcXk3VS7MJ8XuVdICe1OfpX Wdag74DJYQLVXRuQ2OlyNEgJNoAaixi2G2lgROADBlfVisX/HHU2QcqY1fgmZTkt dlkPuxdngWeuUXFOpPO9cma/OqOQjrZBmheU9ajVdy975E/bc+GkxkWyquVQlmQI 5Duz06Pga92LKcIwB927r3vQK0CKJSDgca5ibFG7OkNZNlMdQivwPemt7XOSvxW6 aBLIP53rBQo2P/8zIh8PR3TrnXhX -----END CERTIFICATE-----Generated at Sun Jun 15 13:57:24 2025 by rpki-client