$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa File: 3855a988-062b-3485-808c-4e1a37cecf3f.roa (raw, json) Hash identifier: XJcLdZ7rPXGukYhzpYz1WpGQKxP57BLJ3u9O9G884X0= Subject key identifier: 54:B6:96:D8:7B:8A:81:2A:B1:A4:0C:95:C1:DC:06:E8:AC:4A:4E:A5 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F432858494E2EAE7EC077BAC6B1E5AC40 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 11377 IP address blocks: 149.72.1.0/24 maxlen: 24 149.72.4.0/22 maxlen: 22 149.72.8.0/22 maxlen: 22 149.72.12.0/22 maxlen: 22 149.72.19.0/24 maxlen: 24 149.72.20.0/22 maxlen: 22 149.72.24.0/21 maxlen: 21 149.72.32.0/19 maxlen: 19 149.72.64.0/19 maxlen: 19 167.89.0.0/18 maxlen: 18 167.89.64.0/19 maxlen: 19 167.89.96.0/20 maxlen: 20 167.89.112.0/24 maxlen: 24 167.89.114.0/23 maxlen: 23 167.89.116.0/24 maxlen: 24 167.89.117.0/24 maxlen: 24 167.89.118.0/24 maxlen: 24 167.89.119.0/24 maxlen: 24 167.89.120.0/23 maxlen: 23 167.89.122.0/23 maxlen: 23 167.89.124.0/23 maxlen: 23 167.89.126.0/23 maxlen: 23 168.245.0.0/18 maxlen: 18 168.245.64.0/20 maxlen: 20 168.245.80.0/22 maxlen: 22 168.245.84.0/22 maxlen: 22 168.245.88.0/22 maxlen: 22 168.245.92.0/22 maxlen: 22 168.245.96.0/19 maxlen: 19 192.254.112.0/20 maxlen: 20 198.21.0.0/21 maxlen: 21 198.37.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ae:7e:c0:77:ba:c6:b1:e5:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=e1ebd418-3091-4752-b043-de3db3a770da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:9c:9e:15:db:53:6e:a2:37:e4:2f:f1:89: 2c:8b:25:ce:e5:12:73:e0:d3:95:c3:16:da:9a:bc: 25:ce:12:21:a5:c9:4e:06:b4:59:8a:7c:0d:ec:6b: 19:ac:30:73:62:85:e5:f3:d5:10:5f:0e:0f:7c:48: df:ef:33:f1:35:bf:72:43:d2:57:db:d2:6c:b7:e0: 32:2b:c2:2f:eb:65:9a:5b:39:52:ae:34:72:12:23: 38:22:9c:75:e4:63:d0:cb:8d:1e:e6:22:9c:93:8d: 6a:3b:53:18:86:b3:db:ef:cb:e8:0a:47:66:5f:11: db:16:e6:0c:c1:cf:4d:7d:1c:c7:85:3f:31:4d:b3: ec:c6:7f:fb:39:57:45:cb:b8:b8:30:13:06:f7:cd: b1:ed:0e:94:0a:c3:7a:41:7f:d9:dc:20:d1:13:88: d3:1a:39:31:91:ab:96:38:25:b3:af:48:c7:c9:3c: 9d:30:b9:9e:60:98:a7:c4:08:95:2b:08:92:2b:28: 34:5f:8b:58:43:ae:b2:7c:a9:70:47:86:ef:b7:39: e1:86:1c:36:20:ff:17:da:e0:d6:76:f3:d0:1a:e4: 59:10:d8:bc:9f:50:5b:53:96:59:74:a6:ea:18:4f: f1:39:fb:4c:8f:29:23:19:69:9d:07:17:d0:35:76: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B6:96:D8:7B:8A:81:2A:B1:A4:0C:95:C1:DC:06:E8:AC:4A:4E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.1.0/24 149.72.4.0-149.72.15.255 149.72.19.0-149.72.95.255 167.89.0.0-167.89.112.255 167.89.114.0-167.89.127.255 168.245.0.0/17 192.254.112.0/20 198.21.0.0/21 198.37.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:71:4d:f0:5d:e5:42:23:1e:ae:09:b6:b2:63:6a:ac:44:1a: bf:54:42:c8:41:28:3b:65:f8:da:6d:3c:37:30:08:b3:83:b3: 2e:be:17:1b:91:19:b5:51:25:c1:29:d1:6a:35:cf:79:96:4d: 1c:20:4f:ef:2c:19:9f:e6:89:3a:10:4e:6a:2f:09:8d:a6:a0: ab:15:49:dc:93:e4:9d:9b:a4:01:e1:fb:cd:6d:99:d2:85:f1: e9:9e:33:6f:4e:ee:a7:da:d1:3e:93:5e:ab:62:b7:44:56:d3: 36:27:14:65:46:24:a7:4f:4f:56:ed:2a:7b:79:bd:53:bb:ed: 4b:8b:cd:e2:85:cd:1c:43:ec:ec:c2:06:e2:d2:cf:5a:6c:42: 60:3e:bb:05:f0:e7:b3:76:9d:36:6e:b4:a4:b6:65:a5:fc:92: cd:a2:e6:32:c4:9b:c9:bc:47:ff:d9:66:0e:8f:68:fb:96:38: 1e:94:7b:33:69:2e:6f:9c:fc:f0:77:33:17:b6:de:c9:16:6e: 3b:6d:d8:be:bc:7e:e1:4a:bb:6a:fd:9e:34:60:9f:ef:35:a5: 42:95:fb:ef:63:b8:7a:3f:46:8b:83:86:ad:c1:b1:eb:06:ae: 37:0d:c1:a6:92:d6:10:d6:a0:1e:71:0f:af:26:4f:b9:3e:7f: 1a:84:5a:9c -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWElOLq5+wHe6xrHlrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTFlYmQ0MTgtMzA5MS00NzUyLWIwNDMtZGUzZGIzYTc3MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgqcnhXbU26iN+Qv8YksiyXO5RJz4NOVwxba mrwlzhIhpclOBrRZinwN7GsZrDBzYoXl89UQXw4PfEjf7zPxNb9yQ9JX29Jst+Ay K8Iv62WaWzlSrjRyEiM4Ipx15GPQy40e5iKck41qO1MYhrPb78voCkdmXxHbFuYM wc9NfRzHhT8xTbPsxn/7OVdFy7i4MBMG982x7Q6UCsN6QX/Z3CDRE4jTGjkxkauW OCWzr0jHyTydMLmeYJinxAiVKwiSKyg0X4tYQ66yfKlwR4bvtznhhhw2IP8X2uDW dvPQGuRZENi8n1BbU5ZZdKbqGE/xOftMjykjGWmdBxfQNXZcBwIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFFS2lth7ioEqsaQMlcHcBuisSk6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMzg1NWE5ODgtMDYyYi0z NDg1LTgwOGMtNGUxYTM3Y2VjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQAlUgBMAwD BAKVSAQDBASVSAAwDAMEAJVIEwMEBZVIQDALAwMAp1kDBACnWXAwDAMEAadZcgME B6dZAAMEB6j1AAMEBMD+cAMEA8YVAAMEBMYlkDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEcU3wXeVCIx6u CbayY2qsRBq/VELIQSg7ZfjabTw3MAizg7MuvhcbkRm1USXBKdFqNc95lk0cIE/v LBmf5ok6EE5qLwmNpqCrFUnck+Sdm6QB4fvNbZnShfHpnjNvTu6n2tE+k16rYrdE VtM2JxRlRiSnT09W7Sp7eb1Tu+1Li83ihc0cQ+zswgbi0s9abEJgPrsF8Oezdp02 brSktmWl/JLNouYyxJvJvEf/2WYOj2j7ljgelHszaS5vnPzwdzMXtt7JFm47bdi+ vH7hSrtq/Z40YJ/vNaVClfvvY7h6P0aLg4atwbHrBq43DcGmktYQ1qAecQ+vJk+5 Pn8ahFqc -----END CERTIFICATE-----Generated at Thu Apr 17 09:52:30 2025 by rpki-client