$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e19da11-8790-34a5-a9ff-044bd8573d23.roa File: 6e19da11-8790-34a5-a9ff-044bd8573d23.roa (raw, json) Hash identifier: QgWxoosrXryBYWA6FnbDOb5MEraWQFIvLHhAsaVsYKA= Subject key identifier: A0:6B:65:3E:3C:CD:08:4D:FD:A8:91:DA:54:B2:A6:F6:0A:C4:F0:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CBCF91A600011023B31A5980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e19da11-8790-34a5-a9ff-044bd8573d23.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 32787 IP address blocks: 72.52.2.0/24 maxlen: 24 72.52.16.0/24 maxlen: 24 72.52.17.0/24 maxlen: 24 72.52.18.0/24 maxlen: 24 72.52.19.0/24 maxlen: 24 72.52.32.0/24 maxlen: 24 72.52.33.0/24 maxlen: 24 72.52.34.0/24 maxlen: 24 72.52.35.0/24 maxlen: 24 209.200.136.0/24 maxlen: 24 209.200.137.0/24 maxlen: 24 209.200.138.0/24 maxlen: 24 209.200.139.0/24 maxlen: 24 209.200.140.0/24 maxlen: 24 209.200.142.0/24 maxlen: 24 209.200.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:91:a6:00:01:10:23:b3:1a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=169c52ed-87a4-4a41-a7ac-26db16f735a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:45:08:9b:3c:ed:51:9f:44:b5:28:68:0a: f1:5c:50:c6:73:78:1c:a7:70:8c:90:d1:ad:e3:80: c8:36:78:c3:ec:87:44:3e:93:61:15:6a:a0:ef:54: 60:87:62:37:c5:ce:36:2c:81:e9:7b:82:e3:7b:99: aa:0f:6c:8f:d1:0a:6b:da:a7:6e:32:b7:73:81:44: 3c:c8:1e:ff:4a:26:f0:82:cf:ed:f7:ee:79:91:f5: b9:2f:24:60:74:85:5d:b5:6e:23:b2:d1:5b:15:27: 68:b1:05:3c:02:3c:50:75:c7:f2:33:f2:2b:a8:23: c8:ca:c4:d1:1e:ec:fb:54:83:c6:ac:f2:57:2f:e9: 9a:54:47:8b:86:63:35:a4:7a:06:7a:9e:9e:a3:e5: 98:04:2b:a9:15:07:cb:01:81:86:18:de:37:d3:e9: 6f:b6:42:7c:26:37:96:b1:e9:94:5b:ed:a4:56:09: c9:09:a9:90:90:ed:42:00:22:a5:52:23:16:d2:d6: 83:23:4c:aa:b8:d4:36:9e:6a:c4:33:16:97:7b:a2: 72:75:b2:63:c7:24:c3:36:9d:e9:6d:68:bb:72:ac: 49:bb:d2:3c:43:6e:31:bf:ca:8c:f1:a9:8c:a7:a2: f2:c1:aa:77:ca:d9:8b:7f:2f:68:a5:34:b4:42:16: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6B:65:3E:3C:CD:08:4D:FD:A8:91:DA:54:B2:A6:F6:0A:C4:F0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e19da11-8790-34a5-a9ff-044bd8573d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.2.0/24 72.52.16.0/22 72.52.32.0/22 209.200.136.0-209.200.140.255 209.200.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d7:14:71:e6:0d:bc:83:1e:a9:96:5c:15:1d:73:06:5e:a4: 25:cb:cd:37:b7:f5:af:3b:82:cf:21:48:be:59:35:97:0b:37: a3:0d:86:c3:78:89:d2:04:76:d4:d9:eb:69:45:be:38:d0:57: f9:e3:f8:43:b7:ab:af:c7:ea:a6:98:c0:a2:9d:34:50:b1:04: 69:62:ef:7b:29:19:25:2d:42:a5:26:21:89:88:4b:4a:b5:ec: ce:33:10:4a:5b:5c:45:d7:71:e5:7f:65:9f:26:05:8a:7a:95: e6:fb:ec:b4:fe:d7:16:bb:d6:8c:33:d8:89:e7:d9:74:7e:7a: 12:02:c9:24:eb:bc:b9:87:c3:03:b6:34:ad:5f:13:0d:db:af: 85:1e:1b:72:f0:3e:f2:85:f2:84:bb:ac:30:45:dc:1e:27:a1: 65:1d:d6:15:8c:33:6f:ef:a9:3a:43:cd:05:6d:b9:24:44:03: df:84:f0:38:88:b4:10:b5:e1:06:55:6e:a7:c8:ec:a1:bd:27: 5f:09:8c:4a:b2:f0:8a:5e:d1:c7:32:43:1b:f0:76:ca:24:b8: 97:bb:40:9e:06:03:6a:4e:da:85:10:3e:c4:7a:a1:b4:bf:98: 66:79:25:8a:de:f9:be:ee:62:ca:bb:7c:ba:fa:ec:36:21:78: 52:12:9d:e1 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEnLz5GmAAEQI7MaWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MTY5YzUyZWQtODdhNC00YTQxLWE3YWMtMjZkYjE2ZjczNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqRFCJs87VGfRLUoaArxXFDGc3gcp3CMkNGt 44DINnjD7IdEPpNhFWqg71Rgh2I3xc42LIHpe4Lje5mqD2yP0Qpr2qduMrdzgUQ8 yB7/Sibwgs/t9+55kfW5LyRgdIVdtW4jstFbFSdosQU8AjxQdcfyM/IrqCPIysTR Huz7VIPGrPJXL+maVEeLhmM1pHoGep6eo+WYBCupFQfLAYGGGN430+lvtkJ8JjeW semUW+2kVgnJCamQkO1CACKlUiMW0taDI0yquNQ2nmrEMxaXe6JydbJjxyTDNp3p bWi7cqxJu9I8Q24xv8qM8amMp6Lywap3ytmLfy9opTS0QhY0SQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFKBrZT48zQhN/aiR2lSypvYKxPAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmUxOWRhMTEtODc5MC0z NGE1LWE5ZmYtMDQ0YmQ4NTczZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQASDQCAwQC SDQQAwQCSDQgMAwDBAPRyIgDBADRyIwDBAHRyI4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk9cUceYNvIMe qZZcFR1zBl6kJcvNN7f1rzuCzyFIvlk1lws3ow2Gw3iJ0gR21NnraUW+ONBX+eP4 Q7err8fqppjAop00ULEEaWLveykZJS1CpSYhiYhLSrXszjMQSltcRddx5X9lnyYF inqV5vvstP7XFrvWjDPYiefZdH56EgLJJOu8uYfDA7Y0rV8TDduvhR4bcvA+8oXy hLusMEXcHiehZR3WFYwzb++pOkPNBW25JEQD34TwOIi0ELXhBlVup8jsob0nXwmM SrLwil7RxzJDG/B2yiS4l7tAngYDak7ahRA+xHqhtL+YZnklit75vu5iyrt8uvrs NiF4UhKd4Q== -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:29 2025 by rpki-client