$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52d40be1-f53c-396d-9804-f78ac25c7d57.roa File: 52d40be1-f53c-396d-9804-f78ac25c7d57.roa (raw, json) Hash identifier: fOCTMyu4Z+GrGmlHEUkhf9a4DjesyJZl5e68J41y8BM= Subject key identifier: 4F:88:C0:59:E8:25:99:4C:86:A8:96:ED:D0:8C:FB:13:2C:25:64:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A7780A7EBD8688BA5F8FD58C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52d40be1-f53c-396d-9804-f78ac25c7d57.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 33653 IP address blocks: 24.11.144.0/20 maxlen: 20 24.23.64.0/20 maxlen: 20 50.145.144.0/22 maxlen: 22 50.197.226.0/23 maxlen: 23 50.208.236.0/24 maxlen: 24 50.208.238.0/23 maxlen: 23 50.248.112.0/23 maxlen: 23 50.252.182.0/23 maxlen: 23 64.139.76.0/24 maxlen: 24 64.139.88.0/23 maxlen: 23 66.208.204.0/23 maxlen: 23 66.208.218.0/23 maxlen: 23 66.208.223.0/24 maxlen: 24 68.84.192.0/20 maxlen: 20 68.86.201.0/24 maxlen: 24 68.87.172.0/24 maxlen: 24 69.136.112.0/20 maxlen: 20 69.137.176.0/20 maxlen: 20 69.242.224.0/20 maxlen: 20 69.244.0.0/19 maxlen: 19 69.244.32.0/19 maxlen: 19 69.254.192.0/20 maxlen: 20 70.88.172.0/24 maxlen: 24 70.88.173.0/24 maxlen: 24 70.89.75.0/24 maxlen: 24 71.226.32.0/19 maxlen: 19 71.226.112.0/20 maxlen: 20 71.228.144.0/20 maxlen: 20 73.24.128.0/17 maxlen: 17 73.127.64.0/19 maxlen: 19 74.93.39.0/24 maxlen: 24 74.94.94.0/24 maxlen: 24 74.95.131.0/24 maxlen: 24 75.146.134.0/24 maxlen: 24 76.18.96.0/19 maxlen: 19 76.29.208.0/20 maxlen: 20 76.134.160.0/19 maxlen: 19 76.159.128.0/17 maxlen: 17 96.73.40.0/23 maxlen: 23 96.75.4.0/23 maxlen: 23 96.81.4.0/22 maxlen: 22 96.91.74.0/23 maxlen: 23 96.97.46.0/23 maxlen: 23 96.124.176.0/22 maxlen: 22 96.216.23.128/25 maxlen: 25 98.48.192.0/19 maxlen: 19 98.225.64.0/18 maxlen: 18 107.2.0.0/18 maxlen: 18 162.151.153.128/25 maxlen: 25 173.10.236.0/23 maxlen: 23 2001:558:50::/44 maxlen: 44 2001:558:fe2c::/48 maxlen: 48 2601:500::/26 maxlen: 26 2603:2500::/26 maxlen: 26 2603:301e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a7:eb:d8:68:8b:a5:f8:fd:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=bdf417ba-b6db-460e-bc54-ad6a0128af59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7a:b9:e9:b2:e0:a9:3d:26:fb:48:f2:b9:93: a4:3f:11:d5:06:3b:05:f6:5d:3d:1f:d3:36:61:38: de:94:30:db:a1:b7:82:15:35:f1:03:ee:cb:1d:b3: 99:01:ff:17:ee:5c:9b:bc:88:d2:62:0b:9b:0a:84: 35:74:60:b2:12:b7:f0:00:2d:c5:c6:91:9b:e2:d8: 64:81:61:33:98:8f:71:3e:fd:04:24:f2:9d:af:2b: a1:ba:ec:7d:f3:f4:50:84:71:f7:a5:ed:47:aa:08: dc:3c:6b:d6:18:12:a4:fb:75:d7:cc:31:27:17:cd: a5:a5:01:45:f5:4c:d0:b8:1c:6a:f1:e4:55:66:62: b1:f2:26:52:e5:15:3c:60:4b:2d:bf:3c:ae:76:27: f4:bf:d7:4d:49:5b:1e:56:63:33:be:7d:bf:af:ec: 0f:75:76:0d:16:e5:3c:ce:0e:5a:96:22:46:48:75: af:b2:42:15:60:6a:df:ab:b4:24:e9:82:aa:17:26: 6c:ca:b1:8f:3c:37:28:0d:46:d1:97:2a:86:21:2a: 0b:3b:a9:30:68:ff:aa:b9:a7:42:ee:3a:c1:cf:65: d9:f3:f9:b3:4d:15:28:7a:a9:3e:25:af:26:73:bc: e0:ae:34:79:ae:02:38:11:bc:80:94:b9:08:aa:80: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:C0:59:E8:25:99:4C:86:A8:96:ED:D0:8C:FB:13:2C:25:64:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52d40be1-f53c-396d-9804-f78ac25c7d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.144.0/20 24.23.64.0/20 50.145.144.0/22 50.197.226.0/23 50.208.236.0/24 50.208.238.0/23 50.248.112.0/23 50.252.182.0/23 64.139.76.0/24 64.139.88.0/23 66.208.204.0/23 66.208.218.0/23 66.208.223.0/24 68.84.192.0/20 68.86.201.0/24 68.87.172.0/24 69.136.112.0/20 69.137.176.0/20 69.242.224.0/20 69.244.0.0/18 69.254.192.0/20 70.88.172.0/23 70.89.75.0/24 71.226.32.0/19 71.226.112.0/20 71.228.144.0/20 73.24.128.0/17 73.127.64.0/19 74.93.39.0/24 74.94.94.0/24 74.95.131.0/24 75.146.134.0/24 76.18.96.0/19 76.29.208.0/20 76.134.160.0/19 76.159.128.0/17 96.73.40.0/23 96.75.4.0/23 96.81.4.0/22 96.91.74.0/23 96.97.46.0/23 96.124.176.0/22 96.216.23.128/25 98.48.192.0/19 98.225.64.0/18 107.2.0.0/18 162.151.153.128/25 173.10.236.0/23 IPv6: 2001:558:50::/44 2001:558:fe2c::/48 2601:500::/26 2603:2500::/26 2603:301e::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:96:fb:a1:0f:e0:f4:be:bd:b4:6b:d8:8e:58:d1:d1:8a:ac: d4:bb:a1:fe:ac:cb:46:81:06:60:4b:64:30:27:0f:a6:7d:76: c7:86:bd:e9:7b:ca:3a:c9:7a:12:fe:ed:e0:8d:cc:1f:a9:d6: 4a:a0:67:bc:47:54:5c:58:c0:64:41:8b:65:92:e6:5c:2b:39: 90:ef:b6:ea:ff:1e:1e:e2:89:68:dc:2e:0b:ea:41:9b:9e:15: 91:0e:bd:59:62:87:43:63:f2:1c:2f:8d:70:83:1a:a9:93:eb: 8d:34:c8:6d:b5:97:3c:07:ed:20:8c:e8:c6:53:9f:20:d9:d5: 77:4b:2f:ea:04:03:96:0f:1e:54:52:5d:2b:bb:4d:33:e9:63: cc:11:f9:d9:31:f6:9f:00:0d:dc:21:7f:28:16:71:41:c3:9d: af:74:50:a8:5a:97:07:c2:17:b2:28:1a:68:9a:78:d9:13:ab: 26:71:2b:5f:ec:8b:03:f0:d0:79:c7:f0:74:e9:f6:43:c0:00: be:5b:e1:d6:9f:9a:1a:33:70:4f:c1:d7:36:de:bf:48:4e:50: 77:c1:8c:6f:99:4e:89:68:db:ab:85:cd:f5:b2:1e:47:94:77: 8d:aa:3a:d1:1b:e1:bc:1c:f0:5f:54:89:97:ea:6d:3f:56:e4: 36:8a:a0:17 -----BEGIN CERTIFICATE----- MIIHmDCCBoCgAwIBAgIUAQ0Mn0MoWEp3gKfr2GiLpfj9WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YmRmNDE3YmEtYjZkYi00NjBlLWJjNTQtYWQ2YTAxMjhhZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3q56bLgqT0m+0jyuZOkPxHVBjsF9l09H9M2 YTjelDDbobeCFTXxA+7LHbOZAf8X7lybvIjSYgubCoQ1dGCyErfwAC3FxpGb4thk gWEzmI9xPv0EJPKdryuhuux98/RQhHH3pe1HqgjcPGvWGBKk+3XXzDEnF82lpQFF 9UzQuBxq8eRVZmKx8iZS5RU8YEstvzyudif0v9dNSVseVmMzvn2/r+wPdXYNFuU8 zg5aliJGSHWvskIVYGrfq7Qk6YKqFyZsyrGPPDcoDUbRlyqGISoLO6kwaP+quadC 7jrBz2XZ8/mzTRUoeqk+Ja8mc7zgrjR5rgI4EbyAlLkIqoAlHQIDAQABo4IEqjCC BKYwHQYDVR0OBBYEFE+IwFnoJZlMhqiW7dCM+xMsJWRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJkNDBiZTEtZjUzYy0z OTZkLTk4MDQtZjc4YWMyNWM3ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMIIBcgYIKwYBBQUHAQcBAf8EggFhMIIBXTCCASoEAgABMIIB IgMEBBgLkAMEBBgXQAMEAjKRkAMEATLF4gMEADLQ7AMEATLQ7gMEATL4cAMEATL8 tgMEAECLTAMEAUCLWAMEAULQzAMEAULQ2gMEAELQ3wMEBERUwAMEAERWyQMEAERX rAMEBEWIcAMEBEWJsAMEBEXy4AMEBkX0AAMEBEX+wAMEAUZYrAMEAEZZSwMEBUfi IAMEBEficAMEBEfkkAMEB0kYgAMEBUl/QAMEAEpdJwMEAEpeXgMEAEpfgwMEAEuS hgMEBUwSYAMEBEwd0AMEBUyGoAMEB0yfgAMEAWBJKAMEAWBLBAMEAmBRBAMEAWBb SgMEAWBhLgMEAmB8sAMFB2DYF4ADBAViMMADBAZi4UADBAZrAgADBQeil5mAAwQB rQrsMC0EAgACMCcDBwQgAQVYAFADBwAgAQVY/iwDBQYmAQUAAwUGJgMlAAMFACYD MB4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAgpb7oQ/g9L69tGvYjljR0Yqs1Luh/qzLRoEGYEtkMCcPpn12 x4a96XvKOsl6Ev7t4I3MH6nWSqBnvEdUXFjAZEGLZZLmXCs5kO+26v8eHuKJaNwu C+pBm54VkQ69WWKHQ2PyHC+NcIMaqZPrjTTIbbWXPAftIIzoxlOfINnVd0sv6gQD lg8eVFJdK7tNM+ljzBH52TH2nwAN3CF/KBZxQcOdr3RQqFqXB8IXsigaaJp42ROr JnErX+yLA/DQecfwdOn2Q8AAvlvh1p+aGjNwT8HXNt6/SE5Qd8GMb5lOiWjbq4XN 9bIeR5R3jao60RvhvBzwX1SJl+ptP1bkNoqgFw== -----END CERTIFICATE-----Generated at Sun Jul 20 17:20:59 2025 by rpki-client