$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa File: e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa (raw, json) Hash identifier: sSUjsO2rNtoFIucR5jrxXHjJJioIhyQMzwxZk6Gl4Yk= Subject key identifier: C1:1B:4B:CD:3A:B4:C8:49:40:77:2E:24:D7:DC:02:64:85:35:77:A8 Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Certificate serial: 010D0C9F432858490021526CDB47469DF39CC180 Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 46401 IP address blocks: 66.54.132.0/22 maxlen: 24 67.200.52.0/24 maxlen: 24 67.200.53.0/24 maxlen: 24 67.200.56.0/23 maxlen: 24 67.200.116.0/23 maxlen: 24 74.199.198.0/23 maxlen: 24 208.97.205.0/24 maxlen: 24 209.213.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:52:6c:db:47:46:9d:f3:9c:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=2cd11c47-b0b8-4e11-9330-55b0d164a56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:62:b0:81:9d:5f:c1:2b:39:ca:d6:33:b6: 87:9a:db:cf:70:20:9e:7f:d8:27:fd:86:d2:fc:19: ed:87:14:55:fb:81:8f:57:2e:f4:97:8d:6f:24:6b: fd:48:94:b3:15:8a:18:18:ba:6b:95:e7:ca:23:c6: 59:91:44:de:43:7a:cb:8a:1f:5c:33:95:5c:09:8e: 86:f3:15:5b:a1:8c:5a:44:99:a0:ee:ef:eb:2e:ca: bf:23:54:41:23:79:85:31:4a:c7:13:7c:ea:71:57: 27:f0:a4:99:7d:75:f2:63:a2:89:d4:3b:ec:34:87: b4:a6:0a:5a:97:d9:bc:a7:ec:7f:7f:e4:82:70:34: 1e:1a:59:f5:77:79:dd:8a:10:22:9e:ab:a0:5b:49: d5:bf:db:98:6a:55:98:f5:1d:2f:92:c3:c5:74:60: a5:1c:cb:a1:74:b2:db:4f:79:03:f0:74:58:e0:a1: 89:71:2f:ff:2f:7c:5a:a8:ee:09:f8:34:0d:20:e5: 59:3a:d3:8b:4d:e9:33:aa:f8:78:2c:82:cf:17:fe: d1:2a:6e:98:e1:a2:33:2e:0e:be:1e:41:1a:e6:75: 87:60:7c:71:8d:fd:b3:db:e1:ac:6d:b7:a3:39:ba: 94:e9:a3:91:cd:1c:4a:f7:bc:5d:a4:21:f3:ad:dc: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:4B:CD:3A:B4:C8:49:40:77:2E:24:D7:DC:02:64:85:35:77:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/e7ff64c8-fe66-3ddf-8af1-9e16b68019dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl X509v3 Authority Key Identifier: keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer sbgp-ipAddrBlock: critical IPv4: 66.54.132.0/22 67.200.52.0/23 67.200.56.0/23 67.200.116.0/23 74.199.198.0/23 208.97.205.0/24 209.213.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c6:2f:51:89:fa:6b:eb:f1:0d:b4:5d:8f:e7:2b:7c:5c:0b: 75:a7:02:a7:ad:2f:8e:a8:bf:0b:b0:22:cb:d7:e3:2b:9c:4e: 09:e4:11:2a:6e:4e:94:35:a2:95:92:e6:22:59:78:b9:4e:8f: e8:76:21:fa:34:33:ba:bf:be:ff:2a:a4:83:d6:15:6f:29:eb: 77:d3:2e:3c:00:7a:c2:ba:f1:5c:14:cc:72:00:17:40:2b:50: 2b:46:e6:13:c1:cf:96:f0:b6:64:28:08:c7:db:ea:70:6d:fe: 9f:38:c1:ee:6b:56:b1:11:eb:d2:72:41:2e:a5:c7:b1:df:26: 09:78:a1:89:de:51:f7:57:5a:04:ca:16:0a:89:c1:d9:6d:05: cc:cf:dd:34:a1:63:ec:6d:55:ee:62:ed:00:ab:82:07:86:fe: 36:66:3f:92:2d:57:20:ab:5d:bb:dd:ca:a8:e5:90:2c:47:4d: 29:f3:b4:34:4a:a7:99:3e:1b:ef:c8:f2:b8:7d:71:94:58:13: 55:5a:e4:51:ce:eb:7d:be:21:20:41:7f:09:2c:2b:72:42:ab: a8:99:39:13:31:96:66:4b:47:58:fc:dc:7e:71:f8:08:a4:a1: 7b:f2:7e:48:d1:4c:9e:ea:7c:de:5a:cd:92:18:72:b7:ce:d1: 12:5f:47:05 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEkAIVJs20dGnfOcwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1 Zjk1MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MmNkMTFjNDctYjBiOC00ZTExLTkzMzAtNTViMGQxNjRhNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBisIGdX8ErOcrWM7aHmtvPcCCef9gn/YbS /BnthxRV+4GPVy70l41vJGv9SJSzFYoYGLprlefKI8ZZkUTeQ3rLih9cM5VcCY6G 8xVboYxaRJmg7u/rLsq/I1RBI3mFMUrHE3zqcVcn8KSZfXXyY6KJ1DvsNIe0pgpa l9m8p+x/f+SCcDQeGln1d3ndihAinqugW0nVv9uYalWY9R0vksPFdGClHMuhdLLb T3kD8HRY4KGJcS//L3xaqO4J+DQNIOVZOtOLTekzqvh4LILPF/7RKm6Y4aIzLg6+ HkEa5nWHYHxxjf2z2+GsbbejObqU6aORzRxK97xdpCHzrdxirwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFMEbS806tMhJQHcuJNfcAmSFNXeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvZTdmZjY0YzgtZmU2Ni0z ZGRmLThhZjEtOWUxNmI2ODAxOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk YzRiMjVmOTUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCQjaEAwQB Q8g0AwQBQ8g4AwQBQ8h0AwQBSsfGAwQA0GHNAwQA0dXXMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFnGL1GJ +mvr8Q20XY/nK3xcC3WnAqetL46ovwuwIsvX4yucTgnkESpuTpQ1opWS5iJZeLlO j+h2Ifo0M7q/vv8qpIPWFW8p63fTLjwAesK68VwUzHIAF0ArUCtG5hPBz5bwtmQo CMfb6nBt/p84we5rVrER69JyQS6lx7HfJgl4oYneUfdXWgTKFgqJwdltBczP3TSh Y+xtVe5i7QCrggeG/jZmP5ItVyCrXbvdyqjlkCxHTSnztDRKp5k+G+/I8rh9cZRY E1Va5FHO632+ISBBfwksK3JCq6iZORMxlmZLR1j83H5x+AikoXvyfkjRTJ7qfN5a zZIYcrfO0RJfRwU= -----END CERTIFICATE-----Generated at Tue Apr 8 17:07:04 2025 by rpki-client