$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa File: 2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json) Hash identifier: y6tmt5c7VNn4UeVXAmSOWA5ywybQViI44EFqvz43F8U= Subject key identifier: 00:67:DD:23:8E:8E:DF:46:BA:61:D3:36:D1:F1:7D:EE:14:7F:C3:10 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584949FE83D3E1CEA7B81C37BE40 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 803 IP address blocks: 104.152.28.0/22 maxlen: 22 104.219.8.0/22 maxlen: 22 104.255.48.0/22 maxlen: 22 108.60.160.0/19 maxlen: 19 108.160.16.0/20 maxlen: 20 108.174.160.0/20 maxlen: 20 162.253.8.0/22 maxlen: 22 192.34.224.0/21 maxlen: 21 198.245.112.0/20 maxlen: 20 199.26.190.0/23 maxlen: 23 199.189.88.0/21 maxlen: 21 206.163.224.0/19 maxlen: 19 207.47.128.0/17 maxlen: 17 216.126.200.0/22 maxlen: 22 216.174.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:83:d3:e1:ce:a7:b8:1c:37:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=9d5e0ac3-6945-4f6f-b390-653fd8d0ff5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:3d:4e:72:c1:55:f0:74:2d:4b:7b:29:5b: b5:c5:59:3c:be:1c:60:b3:07:d6:b5:6c:2a:c4:63: b2:77:c8:f1:d3:10:89:dd:0d:45:50:02:0d:07:bd: 38:84:83:23:4c:f6:80:24:1e:f0:ae:1b:52:41:61: d9:ea:96:36:02:43:71:0a:38:a6:c9:16:a3:8a:78: df:53:1d:e8:81:df:a3:fb:e5:b5:dc:71:d6:c9:34: df:0d:50:2f:60:a9:06:21:c5:91:dd:99:c9:64:8e: 2b:cb:ae:2b:44:be:86:d0:2f:e5:72:62:9d:46:53: 6f:43:d5:90:1c:05:0e:06:a9:37:a9:aa:b4:94:90: 5d:32:a7:fe:c9:6b:9a:eb:71:71:7b:5a:f9:f4:03: bb:be:ad:29:b2:27:ce:83:b0:c9:2b:15:3f:7e:d0: c8:8f:4d:70:1b:de:37:fe:d9:00:88:5c:81:00:c8: eb:ea:fd:1f:41:28:cd:51:16:0c:8c:b4:1e:2e:64: aa:b3:f2:b9:38:a8:3f:aa:a3:41:30:64:6e:25:c5: 6e:4b:7a:49:a3:6d:3d:30:9f:86:d9:1a:e5:04:07: e3:26:d2:bc:ef:f4:47:bc:14:29:8c:86:a7:08:db: 3d:ea:41:10:68:49:bb:be:0b:53:9f:9b:04:f5:ab: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:DD:23:8E:8E:DF:46:BA:61:D3:36:D1:F1:7D:EE:14:7F:C3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 162.253.8.0/22 192.34.224.0/21 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:19:37:96:3d:f7:d2:84:35:41:93:a4:0c:71:0a:7b:4c:e7: 4a:50:55:fc:f5:6c:8c:16:24:aa:ab:a0:c7:78:68:f8:1e:61: ad:e9:a7:13:2c:33:e8:43:90:01:03:a7:62:b5:c4:22:67:1b: ef:3d:12:bc:07:42:e9:71:25:11:93:06:04:75:01:94:49:52: 91:e4:a7:ed:6f:c7:27:99:db:ad:cb:d7:de:d7:f2:e4:0b:43: 73:bc:e6:0a:99:6c:68:2f:79:2b:39:86:51:d7:e0:49:c7:af: 80:ed:17:f8:3c:e6:fc:90:09:23:f9:44:3a:26:e4:2a:d7:7d: c9:f7:1c:6a:b5:6a:22:b8:2b:a0:d1:e5:98:0d:51:c2:01:11: e6:dd:6c:df:39:6e:e8:21:3b:f2:4b:bb:18:aa:6c:4b:42:73: 41:ed:ac:b0:88:ef:16:fb:33:49:af:b0:4f:da:0d:95:25:92: 67:09:40:6c:40:c6:b1:5e:43:04:6d:72:c4:ca:b4:9e:36:78: 4e:cf:96:e0:ee:7d:3b:b4:d2:55:94:e6:b0:1d:76:4f:bb:dd: 76:24:2d:fb:12:6d:a2:c8:5b:a9:67:0b:a4:c6:cb:47:93:7e: c6:f9:44:f4:e4:77:05:74:27:1f:7c:51:4c:e6:94:17:a3:ed: 23:89:6e:27 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWElJ/oPT4c6nuBw3vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk OWQ1ZTBhYzMtNjk0NS00ZjZmLWIzOTAtNjUzZmQ4ZDBmZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYQ9TnLBVfB0LUt7KVu1xVk8vhxgswfWtWwq xGOyd8jx0xCJ3Q1FUAINB704hIMjTPaAJB7wrhtSQWHZ6pY2AkNxCjimyRajinjf Ux3ogd+j++W13HHWyTTfDVAvYKkGIcWR3ZnJZI4ry64rRL6G0C/lcmKdRlNvQ9WQ HAUOBqk3qaq0lJBdMqf+yWua63Fxe1r59AO7vq0psifOg7DJKxU/ftDIj01wG943 /tkAiFyBAMjr6v0fQSjNURYMjLQeLmSqs/K5OKg/qqNBMGRuJcVuS3pJo209MJ+G 2RrlBAfjJtK87/RHvBQpjIanCNs96kEQaEm7vgtTn5sE9asDJwIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFABn3SOOjt9GumHTNtHxfe4Uf8MQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMmRlMTNmNmUtYmE1My0z MDI5LTlkYmMtY2M2NzI4OTUxNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCaJgcAwQC aNsIAwQCaP8wAwQFbDygAwQEbKAQAwQEbK6gAwQCov0IAwQDwCLgAwQExvVwAwQB xxq+AwQDx71YAwQFzqPgAwQHzy+AAwQC2H7IAwQF2K6AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJMZN5Y9 99KENUGTpAxxCntM50pQVfz1bIwWJKqroMd4aPgeYa3ppxMsM+hDkAEDp2K1xCJn G+89ErwHQulxJRGTBgR1AZRJUpHkp+1vxyeZ263L197X8uQLQ3O85gqZbGgveSs5 hlHX4EnHr4DtF/g85vyQCSP5RDom5CrXfcn3HGq1aiK4K6DR5ZgNUcIBEebdbN85 bughO/JLuxiqbEtCc0HtrLCI7xb7M0mvsE/aDZUlkmcJQGxAxrFeQwRtcsTKtJ42 eE7PluDufTu00lWU5rAddk+73XYkLfsSbaLIW6lnC6TGy0eTfsb5RPTkdwV0Jx98 UUzmlBej7SOJbic= -----END CERTIFICATE-----Generated at Sun Apr 13 03:07:30 2025 by rpki-client