$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa File: 7f8ab63b-847b-34e6-a398-301d847ad7f0.roa (raw, json) Hash identifier: NkzbG6ySRgZcEWeUuKwacqFt5Eh43ZWc2PacTqQidZ0= Subject key identifier: 9E:A5:67:91:90:77:AC:07:A6:75:BA:8B:24:19:C7:72:7A:BA:A5:FF Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F43285849E7BA68649ED7E5D13EE43F00 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 19905 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:68:64:9e:d7:e5:d1:3e:e4:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=06f2d73d-8567-43f4-a083-7840bda1e232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:34:3b:df:0c:9d:72:84:56:29:08:f1:79: 73:22:e3:e5:cf:52:bb:04:67:79:59:b0:d6:42:fa: 19:3b:e6:61:75:6c:2d:31:f7:6c:11:a1:01:5a:11: 29:34:66:ea:4b:24:7c:90:2a:6c:1c:f2:07:17:6e: 73:dc:e9:ec:9c:2c:79:30:3b:02:3d:1a:82:25:99: 12:9c:96:f9:17:0d:73:27:ac:10:77:72:5f:28:17: 91:bf:db:e9:a4:bb:ed:3f:87:71:14:cf:d9:c0:2f: 86:61:e1:2c:e9:e9:e1:49:f7:48:e9:23:a2:0c:36: 00:78:6e:63:51:1d:2c:8d:a9:24:38:e6:06:ff:10: ee:92:12:d7:98:17:e2:17:e2:46:08:5c:60:c2:a9: 85:28:9f:18:88:26:a1:d1:49:5e:97:2d:84:d0:1b: 18:78:6a:35:b4:b2:c9:74:fb:18:e7:a9:77:a9:22: 11:b6:6e:3d:1c:23:6b:04:e2:b2:a5:31:9b:69:8e: 3e:92:e3:cc:98:a3:be:ac:e1:06:9b:5e:34:b0:ac: ce:e3:1d:df:ec:46:d9:11:92:d2:2f:d2:92:86:d7: f4:d1:bd:2e:47:d1:b2:1f:f0:b6:97:f3:ba:0d:26: d9:67:f5:f2:6a:63:4f:cc:77:c8:84:b9:25:6b:c4: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A5:67:91:90:77:AC:07:A6:75:BA:8B:24:19:C7:72:7A:BA:A5:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:68:f0:0d:72:49:cc:ec:6a:87:e9:ac:b5:bf:f9:e5:4a:4b: 19:7b:65:30:8e:5f:31:38:30:89:c6:e3:68:ff:6f:3c:62:54: 66:05:22:f5:40:d1:46:7a:15:af:a0:6c:3e:21:36:4a:5e:46: ce:ff:f8:49:e8:68:07:56:9c:f5:1c:28:f7:35:d2:2c:6b:0f: 6a:56:70:15:ad:90:92:bc:db:f4:e2:3b:84:44:cc:b0:35:07: 01:30:27:00:48:47:0f:8a:60:94:96:14:be:b6:67:dd:03:67: d6:4d:7d:1b:8a:ae:35:ff:84:68:8f:c3:2a:db:af:74:7d:81: ca:43:66:f2:55:3a:9b:7e:2b:c5:a5:88:0a:27:e9:8c:7a:50: 42:58:22:da:0c:af:f0:98:0a:75:47:f1:34:62:91:20:bf:ad: ad:4d:08:b8:0b:21:d5:c5:83:dc:89:be:f3:d2:c4:04:3f:70: 16:7d:02:18:0f:27:0e:10:be:21:63:92:2f:8f:f8:6a:e9:22: 37:17:4b:de:51:7c:e1:b0:3d:46:0e:a2:ae:25:aa:82:28:b1: 26:ab:ea:c5:59:0a:58:e9:4b:43:4d:c6:50:95:82:2b:27:d2: e2:e7:33:c8:71:46:65:9f:4b:a0:05:2c:aa:5c:2d:a9:3f:62: 37:74:5d:5e -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEnnumhkntfl0T7kPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MDZmMmQ3M2QtODU2Ny00M2Y0LWEwODMtNzg0MGJkYTFlMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2g0O98MnXKEVikI8XlzIuPlz1K7BGd5WbDW QvoZO+ZhdWwtMfdsEaEBWhEpNGbqSyR8kCpsHPIHF25z3OnsnCx5MDsCPRqCJZkS nJb5Fw1zJ6wQd3JfKBeRv9vppLvtP4dxFM/ZwC+GYeEs6enhSfdI6SOiDDYAeG5j UR0sjakkOOYG/xDukhLXmBfiF+JGCFxgwqmFKJ8YiCah0Ulely2E0BsYeGo1tLLJ dPsY56l3qSIRtm49HCNrBOKypTGbaY4+kuPMmKO+rOEGm140sKzO4x3f7EbZEZLS L9KShtf00b0uR9GyH/C2l/O6DSbZZ/XyamNPzHfIhLkla8RalQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFJ6lZ5GQd6wHpnW6iyQZx3J6uqX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvN2Y4YWI2M2ItODQ3Yi0z NGU2LWEzOTgtMzAxZDg0N2FkN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIRo8A1ySczsaofprLW/+eVKSxl7ZTCOXzE4 MInG42j/bzxiVGYFIvVA0UZ6Fa+gbD4hNkpeRs7/+EnoaAdWnPUcKPc10ixrD2pW cBWtkJK82/TiO4REzLA1BwEwJwBIRw+KYJSWFL62Z90DZ9ZNfRuKrjX/hGiPwyrb r3R9gcpDZvJVOpt+K8WliAon6Yx6UEJYItoMr/CYCnVH8TRikSC/ra1NCLgLIdXF g9yJvvPSxAQ/cBZ9AhgPJw4QviFjki+P+GrpIjcXS95RfOGwPUYOoq4lqoIosSar 6sVZCljpS0NNxlCVgisn0uLnM8hxRmWfS6AFLKpcLak/Yjd0XV4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:41 2025 by rpki-client