$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa File: 731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json) Hash identifier: BDVP7a8oGO5OMKRGdhYWl+kcl5XAf3YjGPHJxy0fK+A= Subject key identifier: 2B:11:CA:00:C3:B6:33:48:67:83:EC:E6:75:58:D4:66:C2:50:56:E3 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F43285849E7BA731D4D52C229ED01BAC0 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 11734 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:73:1d:4d:52:c2:29:ed:01:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=9b46294b-c690-4cf6-8ce8-b152533d7fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:b9:cb:53:3c:aa:8a:be:f1:21:a5:7c:d4: 97:42:f7:a7:6b:d8:f3:3b:eb:45:de:8e:e1:b9:1f: 4e:b5:da:92:d1:da:08:47:72:0d:ee:68:ea:79:c7: 43:5b:d7:a3:4d:5c:20:f7:4f:69:b9:8d:b4:7a:db: 96:b8:66:cd:c6:60:af:19:69:37:6c:47:55:f1:f5: e8:2d:e1:6d:31:11:64:5f:13:27:1f:b1:cf:14:bb: 04:5b:57:63:94:c0:de:02:76:54:bd:aa:08:3c:c0: 28:40:40:ac:6e:9a:09:1b:62:30:5d:9b:54:5c:ea: 57:23:f1:ca:2c:d3:ba:d8:ed:27:c6:89:b0:8d:ba: 1a:87:42:14:21:2d:ac:ea:95:a9:49:3e:ec:19:07: 8a:b4:f1:fc:f9:8f:17:34:e8:14:bb:eb:f9:f1:fb: bd:3b:e7:75:d3:29:dd:a2:3f:8a:af:d4:8e:6a:d9: 72:21:17:5c:df:a1:5e:96:7d:95:37:88:5b:ad:18: 81:f7:fe:6c:2e:ef:d0:65:27:cb:09:f5:8b:20:48: 67:53:52:ae:a7:5a:83:fc:86:38:88:1f:da:82:12: 0c:f0:09:36:6a:ec:f4:03:8b:d6:1e:ff:1a:82:e2: 10:a2:4d:f0:b6:58:10:b4:e9:c3:fe:da:90:56:27: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:CA:00:C3:B6:33:48:67:83:EC:E6:75:58:D4:66:C2:50:56:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b2:94:2e:76:f1:cf:12:4d:d1:36:c1:f6:c2:7d:30:b6:83: e7:43:98:c5:92:c9:15:27:bd:14:a6:51:25:d4:89:92:6a:54: 8a:8c:56:88:16:71:84:ff:f5:cd:35:2d:f3:0b:2f:b6:63:1d: 66:54:1d:c9:6f:57:4e:e4:93:f9:c3:32:5a:b6:68:78:ae:90: 65:05:6e:16:01:08:b9:b3:01:01:ce:48:34:30:7d:47:5e:b8: 0b:11:f8:f4:38:ce:0d:89:80:09:83:4c:39:18:30:19:7b:48: 14:2a:30:04:11:a8:20:e3:42:19:94:63:57:b7:18:8d:be:df: c6:42:86:7e:84:0f:4a:24:e6:03:4c:d6:63:bf:5f:e2:c1:23: 31:c2:71:48:1a:4e:b4:f1:21:59:7e:c2:8e:16:05:d5:88:4a: 07:42:a6:f9:3e:05:e7:cb:53:c2:6c:e8:28:63:ca:16:77:8b: c8:49:43:27:2e:8d:64:9b:be:33:bb:c1:36:6d:06:8d:d8:9c: e7:eb:b9:a6:41:9f:33:e7:f9:4a:54:79:74:bf:80:10:13:c8: 4a:4a:52:5c:f9:03:a8:02:14:56:2c:01:14:12:3d:7e:55:09: 6e:e8:2e:be:8f:48:19:9d:6a:05:7c:2b:aa:79:40:a6:3a:99: b4:18:45:1a -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEnnunMdTVLCKe0BusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OWI0NjI5NGItYzY5MC00Y2Y2LThjZTgtYjE1MjUzM2Q3ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorK5y1M8qoq+8SGlfNSXQvena9jzO+tF3o7h uR9OtdqS0doIR3IN7mjqecdDW9ejTVwg909puY20etuWuGbNxmCvGWk3bEdV8fXo LeFtMRFkXxMnH7HPFLsEW1djlMDeAnZUvaoIPMAoQECsbpoJG2IwXZtUXOpXI/HK LNO62O0nxomwjboah0IUIS2s6pWpST7sGQeKtPH8+Y8XNOgUu+v58fu9O+d10ynd oj+Kr9SOatlyIRdc36Feln2VN4hbrRiB9/5sLu/QZSfLCfWLIEhnU1Kup1qD/IY4 iB/aghIM8Ak2auz0A4vWHv8aguIQok3wtlgQtOnD/tqQVicwnQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFCsRygDDtjNIZ4Ps5nVY1GbCUFbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvNzMxZTY2YzEtYTcxZS0z ZDlmLWE4MzgtZTc4MjI4ZTlmZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJCylC528c8STdE2wfbCfTC2g+dDmMWSyRUn vRSmUSXUiZJqVIqMVogWcYT/9c01LfMLL7ZjHWZUHclvV07kk/nDMlq2aHiukGUF bhYBCLmzAQHOSDQwfUdeuAsR+PQ4zg2JgAmDTDkYMBl7SBQqMAQRqCDjQhmUY1e3 GI2+38ZChn6ED0ok5gNM1mO/X+LBIzHCcUgaTrTxIVl+wo4WBdWISgdCpvk+BefL U8Js6ChjyhZ3i8hJQycujWSbvjO7wTZtBo3YnOfruaZBnzPn+UpUeXS/gBATyEpK Ulz5A6gCFFYsARQSPX5VCW7oLr6PSBmdagV8K6p5QKY6mbQYRRo= -----END CERTIFICATE-----Generated at Sat Jun 7 22:13:25 2025 by rpki-client