$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/04d911aa-036c-302e-aec4-a9fdfb56ac50.roa File: 04d911aa-036c-302e-aec4-a9fdfb56ac50.roa (raw, json) Hash identifier: tJN7OCWY0Ux6mzrUfp2YIKy2fWCb9oE7InRnRkiHhYQ= Subject key identifier: CD:35:48:71:61:D4:0E:4F:7B:63:23:80:1F:92:5E:B7:E9:E0:96:02 Certificate issuer: /CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d Certificate serial: 010D0C9F4328584A74B5D72F976A763C85433DE0 Authority key identifier: 2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/04d911aa-036c-302e-aec4-a9fdfb56ac50.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 13994 IP address blocks: 144.86.192.0/22 maxlen: 22 144.86.192.0/24 maxlen: 24 144.86.193.0/24 maxlen: 24 144.86.194.0/24 maxlen: 24 144.86.195.0/24 maxlen: 24 161.115.192.0/20 maxlen: 20 161.115.192.0/21 maxlen: 21 161.115.192.0/22 maxlen: 22 161.115.192.0/23 maxlen: 23 161.115.192.0/24 maxlen: 24 161.115.193.0/24 maxlen: 24 161.115.194.0/23 maxlen: 23 161.115.194.0/24 maxlen: 24 161.115.195.0/24 maxlen: 24 161.115.196.0/22 maxlen: 22 161.115.196.0/23 maxlen: 23 161.115.196.0/24 maxlen: 24 161.115.197.0/24 maxlen: 24 161.115.198.0/23 maxlen: 23 161.115.198.0/24 maxlen: 24 161.115.199.0/24 maxlen: 24 161.115.200.0/21 maxlen: 21 161.115.200.0/22 maxlen: 22 161.115.200.0/23 maxlen: 23 161.115.200.0/24 maxlen: 24 161.115.201.0/24 maxlen: 24 161.115.202.0/23 maxlen: 23 161.115.202.0/24 maxlen: 24 161.115.203.0/24 maxlen: 24 161.115.204.0/22 maxlen: 22 161.115.204.0/23 maxlen: 23 161.115.204.0/24 maxlen: 24 161.115.205.0/24 maxlen: 24 161.115.206.0/23 maxlen: 23 161.115.206.0/24 maxlen: 24 161.115.207.0/24 maxlen: 24 207.188.20.0/22 maxlen: 22 207.188.20.0/24 maxlen: 24 207.188.21.0/24 maxlen: 24 207.188.22.0/24 maxlen: 24 207.188.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d7:2f:97:6a:76:3c:85:43:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=b3ead493-e184-4eec-b956-c7cbfb064f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:e1:48:9d:5a:b9:68:6a:66:59:e1:9e:71: 18:79:06:cd:51:62:e9:c6:f3:3d:d3:8b:09:c4:8c: ed:e0:5a:f7:ad:27:63:b5:07:49:a1:81:bf:b3:e0: 5e:52:2e:26:2e:92:ec:95:e8:2f:77:73:10:2d:2b: a5:e3:79:26:71:de:62:11:83:cc:54:f3:c8:1f:1f: 23:eb:1f:08:9f:25:5a:7e:3f:82:1e:3c:e8:f6:01: b6:c0:fc:85:a2:88:ec:78:bf:13:50:93:13:61:7b: 4d:9c:9e:39:fb:f3:76:db:f3:7d:3d:d2:90:7a:72: e3:4d:04:60:11:85:0d:b2:37:0b:de:d3:c0:ba:b1: ec:7a:00:27:1a:80:7a:d4:93:9d:c4:5e:b3:0d:1c: 1f:29:3a:06:09:99:22:97:b2:9d:f3:97:78:9d:0e: de:ca:6f:0f:2f:59:ac:95:ba:7d:8f:4a:95:93:ce: 34:c3:2b:3e:49:14:f0:8e:49:5c:51:f3:20:c7:1b: 26:2c:cd:86:db:6b:19:a8:53:07:55:e7:e6:dc:91: d0:52:53:e9:db:99:8e:1a:e3:3c:51:b4:91:c3:02: 81:7f:a7:7b:28:c3:5b:3d:06:d9:58:8a:06:e2:56: be:5b:95:1b:60:09:7e:56:9f:8c:ed:31:4f:25:c5: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:35:48:71:61:D4:0E:4F:7B:63:23:80:1F:92:5E:B7:E9:E0:96:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/04d911aa-036c-302e-aec4-a9fdfb56ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl X509v3 Authority Key Identifier: keyid:2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer sbgp-ipAddrBlock: critical IPv4: 144.86.192.0/22 161.115.192.0/20 207.188.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0e:c6:df:63:3b:48:e8:91:31:59:08:9b:3d:59:5c:3d:4b: 21:50:4d:f8:91:7c:51:37:0c:86:08:f8:d7:5d:8e:d2:28:b0: d7:a7:c8:0e:7b:5f:24:2a:b4:ca:fe:04:53:74:85:b5:db:05: 53:fa:56:50:c3:60:39:85:4b:72:1b:b1:e0:3c:37:03:bd:6f: 2a:10:1d:c5:df:93:ab:24:ca:c6:80:08:96:d0:c9:d6:68:28: 42:68:32:c6:db:e5:9a:51:bf:78:a3:53:48:34:13:eb:8b:27: c6:6a:a9:74:39:83:94:3c:9b:97:11:5c:13:c6:e4:01:9e:4d: 35:0a:e6:9b:4e:6e:20:fa:68:36:3f:30:b3:05:2f:89:44:48: 59:31:18:04:e8:d1:59:45:24:d6:42:c6:17:e3:e7:e7:90:2f: 27:3f:7b:14:e2:44:32:a2:a8:c0:a1:8c:78:ba:04:bb:6e:9e: 36:53:00:11:f4:1b:fa:40:6a:8e:ed:11:c7:51:52:62:ba:e9: a9:f3:4a:d5:fb:2c:ff:c7:cf:2f:04:98:44:b5:5d:fa:24:60: 1f:b0:38:1a:fe:a3:7f:d6:87:bb:b5:3e:9c:fc:b4:f3:45:e8: 80:c1:f8:48:a4:f5:d3:4c:59:db:0d:1a:dc:01:ed:37:45:70: 0b:8c:bb:06 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp0tdcvl2p2PIVDPeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNlYmY0YjMtZjIyMy00ZGNmLWI0NjYtNTc1N2RjOTFh MTBkMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk YjNlYWQ0OTMtZTE4NC00ZWVjLWI5NTYtYzdjYmZiMDY0ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5DhSJ1auWhqZlnhnnEYeQbNUWLpxvM904sJ xIzt4Fr3rSdjtQdJoYG/s+BeUi4mLpLslegvd3MQLSul43kmcd5iEYPMVPPIHx8j 6x8InyVafj+CHjzo9gG2wPyFoojseL8TUJMTYXtNnJ45+/N22/N9PdKQenLjTQRg EYUNsjcL3tPAurHsegAnGoB61JOdxF6zDRwfKToGCZkil7Kd85d4nQ7eym8PL1ms lbp9j0qVk840wys+SRTwjklcUfMgxxsmLM2G22sZqFMHVefm3JHQUlPp25mOGuM8 UbSRwwKBf6d7KMNbPQbZWIoG4la+W5UbYAl+Vp+M7TFPJcXoJwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFM01SHFh1A5Pe2MjgB+SXrfp4JYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2Vi ZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3ZGM5MWExMGQvMDRkOTExYWEtMDM2Yy0z MDJlLWFlYzQtYTlmZGZiNTZhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGNlYmY0YjMtZjIyMy00ZGNmLWI0 NjYtNTc1N2RjOTFhMTBkLzBjZWJmNGIzLWYyMjMtNGRjZi1iNDY2LTU3NTdkYzkx YTEwZC5jcmwwHwYDVR0jBBgwFoAULLHGbzB2Te28YC5I5jnAZiUJO/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2ViZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3 ZGM5MWExMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCkFbAAwQE oXPAAwQCz7wUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAAOxt9jO0jokTFZCJs9WVw9SyFQTfiRfFE3DIYI +NddjtIosNenyA57XyQqtMr+BFN0hbXbBVP6VlDDYDmFS3IbseA8NwO9byoQHcXf k6skysaACJbQydZoKEJoMsbb5ZpRv3ijU0g0E+uLJ8ZqqXQ5g5Q8m5cRXBPG5AGe TTUK5ptObiD6aDY/MLMFL4lESFkxGATo0VlFJNZCxhfj5+eQLyc/exTiRDKiqMCh jHi6BLtunjZTABH0G/pAao7tEcdRUmK66anzStX7LP/Hzy8EmES1XfokYB+wOBr+ o3/Wh7u1Ppz8tPNF6IDB+Eik9dNMWdsNGtwB7TdFcAuMuwY= -----END CERTIFICATE-----Generated at Wed Jul 9 20:45:28 2025 by rpki-client