$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa File: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (raw, json) Hash identifier: yiw8BJSUS04O5MtV/wbVB9vG8DzqbzVFPZD0NZZ/DkM= Subject key identifier: 67:66:79:5D:CD:63:EE:BD:D5:3E:9C:D1:17:17:A6:14:DA:34:E4:F9 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584A7944CF92ADFCA82378E76500 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa Signing time: Tue 06 May 2025 20:00:21 +0000 ROA not before: Tue 06 May 2025 20:00:21 +0000 ROA not after: Mon 04 Aug 2025 20:00:21 +0000 asID: 19684 IP address blocks: 23.174.152.0/24 maxlen: 24 23.174.153.0/24 maxlen: 24 69.67.164.0/22 maxlen: 22 69.67.164.0/23 maxlen: 23 69.67.166.0/23 maxlen: 23 162.254.224.0/21 maxlen: 21 207.29.192.0/21 maxlen: 21 207.29.192.0/23 maxlen: 23 207.29.194.0/23 maxlen: 23 207.29.196.0/23 maxlen: 23 207.29.198.0/23 maxlen: 23 2607:9540::/32 maxlen: 32 2607:9540::/44 maxlen: 44 2607:9540:10::/44 maxlen: 44 2607:9540:20::/44 maxlen: 44 2607:9540:30::/44 maxlen: 44 2607:9540:40::/44 maxlen: 44 2607:9540:50::/44 maxlen: 44 2607:9540:60::/44 maxlen: 44 2607:9540:70::/44 maxlen: 44 2607:9540:40f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:44:cf:92:ad:fc:a8:23:78:e7:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: May 6 20:00:21 2025 GMT Not After : Aug 4 20:00:21 2025 GMT Subject: CN=e82442ad-0afa-4a2d-9d48-cb066d04118a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:30:4b:00:4c:9e:77:ae:7f:19:84:cb:61: f0:77:a1:3c:67:b0:1b:17:f3:e1:c4:84:7e:17:e2: f8:5c:1e:83:a3:74:ad:ae:7b:8b:b5:fa:1a:ca:dc: a5:0a:59:93:be:98:4f:da:c4:87:95:82:0e:df:bf: 1a:05:cf:40:47:b4:4c:80:e2:6c:ac:6e:0c:a1:07: 8d:35:41:86:67:3f:21:78:8c:4f:53:99:93:98:ac: 52:4d:43:97:31:f6:0d:25:41:68:bb:33:4c:a0:1e: 55:80:42:9f:7f:7b:1e:a9:5b:7f:25:22:93:d4:21: c1:13:83:6a:cd:b9:ee:e6:fb:c3:6a:f6:5d:76:13: eb:77:23:c8:f4:c9:f1:7c:ad:fe:6e:c1:d4:55:27: 00:cb:fd:c4:49:05:08:c3:32:9a:68:75:2d:4d:3c: 8d:42:bf:ae:0b:c6:d0:ba:c7:8c:09:e7:91:e5:75: 53:70:dd:89:bf:b5:52:c1:4c:45:e7:e7:0a:67:9a: 28:33:60:97:1b:23:e5:ca:2d:30:f1:69:ea:4c:7e: 78:4b:89:8d:a3:02:ab:c4:a4:3d:70:20:33:17:7b: 21:da:7b:cf:8c:d0:17:56:78:89:ac:aa:f6:1b:5c: 7c:2b:41:22:89:16:cb:16:31:51:3c:92:84:05:da: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:66:79:5D:CD:63:EE:BD:D5:3E:9C:D1:17:17:A6:14:DA:34:E4:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: 23.174.152.0/23 69.67.164.0/22 162.254.224.0/21 207.29.192.0/21 IPv6: 2607:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fe:bd:16:46:f3:2e:15:91:24:5f:cc:8a:d4:b4:72:20:5a: 39:5e:95:02:71:c9:69:80:bb:3a:61:b4:c1:fa:09:a3:73:a6: 94:11:de:3f:9e:9d:38:0a:02:51:2b:e9:2b:a0:a2:ba:68:3d: e5:9d:c5:28:d2:b9:bb:54:6d:1f:85:44:c4:81:cf:b4:0d:14: 2f:22:55:23:47:7d:76:b5:0a:10:85:e7:8e:e6:ba:87:74:db: 06:dc:fa:1c:e4:48:60:40:60:0c:79:91:0a:07:a9:03:47:ee: b3:49:e0:d4:dc:0a:dd:30:fa:64:ca:92:12:b3:55:be:fe:1a: 2e:27:f8:59:2c:d3:35:c2:2c:d2:b2:ba:29:75:63:25:53:f8: 2f:72:25:ef:b2:0f:c3:a5:cc:18:c2:a8:a8:f4:03:44:ee:19: f6:77:88:6c:c9:8b:34:02:9d:26:b9:9e:2e:ea:c1:25:e1:4e: 6f:e4:9c:92:7c:7d:73:af:5a:d1:4a:35:94:61:9a:15:79:a2: 9d:46:c3:6e:a6:f5:ee:a8:c0:6b:f3:78:01:69:6c:bf:ef:78: 0e:2a:00:34:77:71:4d:da:df:7f:4f:7d:1a:89:2f:bf:ab:76: 33:b8:24:94:02:b0:8e:63:d6:ea:53:32:11:57:60:12:91:87: 44:e1:0b:b5 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEp5RM+SrfyoI3jnZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MDUwNjIwMDAyMVoXDTI1MDgwNDIwMDAyMVowLzEtMCsGA1UEAxMk ZTgyNDQyYWQtMGFmYS00YTJkLTlkNDgtY2IwNjZkMDQxMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBgwSwBMnneufxmEy2Hwd6E8Z7AbF/PhxIR+ F+L4XB6Do3StrnuLtfoaytylClmTvphP2sSHlYIO378aBc9AR7RMgOJsrG4MoQeN NUGGZz8heIxPU5mTmKxSTUOXMfYNJUFouzNMoB5VgEKff3seqVt/JSKT1CHBE4Nq zbnu5vvDavZddhPrdyPI9MnxfK3+bsHUVScAy/3ESQUIwzKaaHUtTTyNQr+uC8bQ useMCeeR5XVTcN2Jv7VSwUxF5+cKZ5ooM2CXGyPlyi0w8WnqTH54S4mNowKrxKQ9 cCAzF3sh2nvPjNAXVniJrKr2G1x8K0EiiRbLFjFRPJKEBdoeTQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFGdmeV3NY+691T6c0RcXphTaNOT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvMGMxZmVmYjEtNTZjZS0z NmVkLTk2NjAtN2Y2OTZlYWFkMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBF66YAwQC RUOkAwQDov7gAwQDzx3AMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABH+vRZG8y4V kSRfzIrUtHIgWjlelQJxyWmAuzphtMH6CaNzppQR3j+enTgKAlEr6SugorpoPeWd xSjSubtUbR+FRMSBz7QNFC8iVSNHfXa1ChCF547muod02wbc+hzkSGBAYAx5kQoH qQNH7rNJ4NTcCt0w+mTKkhKzVb7+Gi4n+Fks0zXCLNKyuil1YyVT+C9yJe+yD8Ol zBjCqKj0A0TuGfZ3iGzJizQCnSa5ni7qwSXhTm/knJJ8fXOvWtFKNZRhmhV5op1G w26m9e6owGvzeAFpbL/veA4qADR3cU3a339PfRqJL7+rdjO4JJQCsI5j1upTMhFX YBKRh0ThC7U= -----END CERTIFICATE-----Generated at Fri Jul 11 01:02:44 2025 by rpki-client