$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa File: a545cb6a-d67e-3908-a597-d3e26364ede7.roa (raw, json) Hash identifier: Xt8z+LZHcG5/Kq7LmCpFUN8Gpnhxf/mNb2iI8LA9Bxk= Subject key identifier: 01:D7:87:4F:D0:90:C9:DE:FB:A9:ED:AB:BB:A8:CD:9E:2A:60:8F:8D Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584A73C8B18BB1740B13CBBEE140 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa Signing time: Tue 08 Jul 2025 17:03:06 +0000 ROA not before: Tue 08 Jul 2025 17:03:06 +0000 ROA not after: Mon 06 Oct 2025 17:03:06 +0000 asID: 3842 IP address blocks: 23.226.232.0/21 maxlen: 24 107.161.20.0/22 maxlen: 24 107.161.28.0/22 maxlen: 24 107.191.100.0/22 maxlen: 24 107.191.114.0/23 maxlen: 24 107.191.120.0/22 maxlen: 24 107.191.124.0/22 maxlen: 24 167.88.116.0/22 maxlen: 24 167.88.120.0/22 maxlen: 24 192.30.32.0/22 maxlen: 24 192.73.232.0/21 maxlen: 24 192.184.80.0/21 maxlen: 24 192.249.56.0/22 maxlen: 24 199.241.28.0/22 maxlen: 24 2604:180::/48 maxlen: 48 2604:180:a::/48 maxlen: 48 2604:180:b::/48 maxlen: 48 2604:180:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:c8:b1:8b:b1:74:0b:13:cb:be:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Jul 8 17:03:06 2025 GMT Not After : Oct 6 17:03:06 2025 GMT Subject: CN=6a5a0ef7-fed6-419e-a3ec-3b7963e331f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:ec:48:bd:ff:4c:3b:a3:00:6f:dc:44:0c: e5:35:2f:df:59:ff:f7:29:84:e0:7c:2c:8a:dd:71: 94:9d:15:d2:31:97:76:f3:37:f4:4f:ac:64:c2:31: 83:cb:f7:b1:c5:d7:b0:41:2b:9c:0c:a9:86:58:c7: c1:74:ef:6d:40:7b:61:57:98:68:49:67:97:7b:37: a5:df:77:76:21:98:97:d2:54:77:97:49:28:28:a1: fa:cc:39:b1:7a:c9:91:bb:71:1b:07:a5:02:10:89: b6:e8:7d:47:fa:a6:46:0a:bc:0b:19:6f:b6:76:02: f0:66:33:eb:2c:25:fb:55:59:b6:e1:11:61:df:37: 5e:97:1b:91:39:3f:91:8e:0e:1e:60:8c:b1:87:08: bf:8a:51:34:61:a5:68:49:4a:78:0a:c3:63:aa:09: fb:5d:ce:e4:e7:9a:e9:76:f1:5b:1a:9b:0d:4f:ea: 97:94:90:c4:51:e4:07:c6:6f:a9:69:53:02:02:be: 2d:59:d9:73:0d:fc:0d:a5:7c:5b:7b:56:22:07:96: 85:0d:e2:34:99:9a:b3:07:b0:9f:29:8f:5d:c1:5d: 52:14:6e:01:6d:c0:bc:66:58:e1:66:85:f4:91:8d: b1:d8:b3:d6:18:a7:6e:9c:54:60:9f:b6:45:5f:d1: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D7:87:4F:D0:90:C9:DE:FB:A9:ED:AB:BB:A8:CD:9E:2A:60:8F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 23.226.232.0/21 107.161.20.0/22 107.161.28.0/22 107.191.100.0/22 107.191.114.0/23 107.191.120.0/21 167.88.116.0-167.88.123.255 192.30.32.0/22 192.73.232.0/21 192.184.80.0/21 192.249.56.0/22 199.241.28.0/22 IPv6: 2604:180::/48 2604:180:a::/47 2604:180:f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b0:21:4b:73:8c:08:54:5e:5c:62:39:9c:0d:96:d5:73:ac: e6:b9:ff:2c:b9:fa:14:7e:48:87:bb:68:f9:4b:ab:8e:ed:ed: fb:3a:b9:82:85:fc:7f:a7:ee:95:6f:3c:6c:0f:44:13:37:62: d7:b4:9d:1a:2d:79:3c:5d:16:f0:e5:53:5e:6d:54:2e:5c:35: 51:c6:5f:00:62:f4:44:1d:67:6c:3e:c6:70:14:ae:6f:63:b5: 8a:a9:f8:00:a7:d9:c5:49:f7:86:61:01:25:f0:4b:55:8b:1a: 98:b6:ef:6c:54:c2:85:16:7e:de:6d:6a:4b:7f:96:e7:26:1d: f7:4a:2d:4c:da:80:61:29:72:a0:67:d0:9f:a8:74:c5:d4:7a: 64:a6:37:1e:b9:c9:b1:a4:cb:53:5d:ee:0c:8f:ab:94:85:21: cf:28:d2:08:a1:d2:65:88:5a:81:a2:ce:29:7c:d6:ca:34:31: 7b:3e:ae:06:27:12:94:75:1e:13:aa:ba:b6:f1:b8:bd:a2:ef: 29:96:07:f3:bb:79:0f:6e:ec:bb:83:b5:85:e0:1a:1d:8b:1e: e8:51:a3:70:49:39:ae:dd:86:49:8e:8b:78:ac:c0:26:47:25: ef:37:f1:4f:aa:13:73:b6:2b:8b:94:ab:9c:91:5b:0e:8b:7d: c1:ab:a6:92 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUAQ0Mn0MoWEpzyLGLsXQLE8u+4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI1MDcwODE3MDMwNloXDTI1MTAwNjE3MDMwNlowLzEtMCsGA1UEAxMk NmE1YTBlZjctZmVkNi00MTllLWEzZWMtM2I3OTYzZTMzMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX3sSL3/TDujAG/cRAzlNS/fWf/3KYTgfCyK 3XGUnRXSMZd28zf0T6xkwjGDy/exxdewQSucDKmGWMfBdO9tQHthV5hoSWeXezel 33d2IZiX0lR3l0koKKH6zDmxesmRu3EbB6UCEIm26H1H+qZGCrwLGW+2dgLwZjPr LCX7VVm24RFh3zdelxuROT+Rjg4eYIyxhwi/ilE0YaVoSUp4CsNjqgn7Xc7k55rp dvFbGpsNT+qXlJDEUeQHxm+paVMCAr4tWdlzDfwNpXxbe1YiB5aFDeI0mZqzB7Cf KY9dwV1SFG4BbcC8ZljhZoX0kY2x2LPWGKdunFRgn7ZFX9FxMQIDAQABo4IDwzCC A78wHQYDVR0OBBYEFAHXh0/QkMne+6ntq7uozZ4qYI+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvYTU0NWNiNmEtZDY3ZS0z OTA4LWE1OTctZDNlMjYzNjRlZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMIGMBggrBgEFBQcBBwEB/wR9MHswVgQCAAEwUAMEAxfi6AME AmuhFAMEAmuhHAMEAmu/ZAMEAWu/cgMEA2u/eDAMAwQCp1h0AwQCp1h4AwQCwB4g AwQDwEnoAwQDwLhQAwQCwPk4AwQCx/EcMCEEAgACMBsDBwAmBAGAAAADBwEmBAGA AAoDBwAmBAGAAPEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAj7AhS3OMCFReXGI5nA2W1XOs5rn/LLn6FH5I h7to+Uurju3t+zq5goX8f6fulW88bA9EEzdi17SdGi15PF0W8OVTXm1ULlw1UcZf AGL0RB1nbD7GcBSub2O1iqn4AKfZxUn3hmEBJfBLVYsamLbvbFTChRZ+3m1qS3+W 5yYd90otTNqAYSlyoGfQn6h0xdR6ZKY3HrnJsaTLU13uDI+rlIUhzyjSCKHSZYha gaLOKXzWyjQxez6uBicSlHUeE6q6tvG4vaLvKZYH87t5D27su4O1heAaHYse6FGj cEk5rt2GSY6LeKzAJkcl7zfxT6oTc7Yri5SrnJFbDot9waumkg== -----END CERTIFICATE-----Generated at Thu Jul 10 11:07:27 2025 by rpki-client