$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa File: 3b3dd675-b170-3eee-bf6a-12af67835d86.roa (raw, json) Hash identifier: zdXvKPTJhhwPDST1GrP+GVOBeY34+oEuwJ04S8cr7D0= Subject key identifier: 80:D4:03:C5:EC:4C:ED:36:A0:AC:B1:A2:73:B2:D7:83:AD:5C:0A:BB Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848C81370D60B8A5EF2AB0ED800 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa Signing time: Wed 05 Feb 2025 12:07:44 +0000 ROA not before: Wed 05 Feb 2025 12:07:44 +0000 ROA not after: Tue 06 May 2025 11:07:44 +0000 asID: 134190 IP address blocks: 63.216.170.0/24 maxlen: 32 63.216.192.160/27 maxlen: 32 63.216.195.192/27 maxlen: 32 63.216.196.128/27 maxlen: 32 63.216.198.96/27 maxlen: 32 63.217.71.96/27 maxlen: 32 63.217.89.64/27 maxlen: 32 63.220.1.192/26 maxlen: 32 63.221.136.32/27 maxlen: 32 63.221.139.32/27 maxlen: 32 63.221.140.192/27 maxlen: 32 63.221.141.32/27 maxlen: 32 63.221.159.0/27 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:13:70:d6:0b:8a:5e:f2:ab:0e:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 5 12:07:44 2025 GMT Not After : May 6 11:07:44 2025 GMT Subject: CN=d9fbe2b1-951d-4e9c-a70d-8631d6d856f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:4f:7a:81:7a:90:87:03:68:ff:91:14:16: d4:b7:1a:af:9e:4a:28:55:14:65:e1:bc:f4:46:4c: 34:4f:8b:e4:b0:53:20:04:3a:d8:2b:cb:97:10:a5: 5d:71:f9:e3:d2:79:9e:ef:64:5d:b0:6d:d0:4f:ee: 56:33:24:50:7f:0a:49:13:39:54:77:63:e6:80:e8: ab:0d:8f:ff:85:19:e6:69:33:6e:ba:ef:7d:c9:54: bf:db:36:4a:1c:7f:bc:fc:7c:7f:2e:4b:05:10:e5: 3a:26:18:66:65:fa:8c:92:3d:10:1d:4b:e7:c5:9f: 7f:c2:6a:43:17:d0:54:34:cb:51:73:a8:f8:0c:16: 55:1d:c4:d5:88:c6:d5:23:44:55:aa:0e:92:1b:f6: 87:57:40:ea:b5:1e:e1:91:ec:e0:3f:d6:e9:92:59: 19:f7:df:23:a0:8e:91:2a:6f:90:d6:76:7b:c2:1b: 22:da:ab:5b:48:54:c7:9f:ea:aa:03:ae:53:be:ee: 75:5a:47:b9:7b:b5:93:14:a5:e5:56:31:d7:27:a5: 3e:f0:4d:7c:10:73:6e:95:ff:6b:20:4e:17:bd:26: 09:19:a1:81:b1:47:63:d3:60:8e:ea:cb:24:f4:6a: 12:59:30:de:a3:b0:13:66:9e:aa:5c:ba:d6:01:f3: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:03:C5:EC:4C:ED:36:A0:AC:B1:A2:73:B2:D7:83:AD:5C:0A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.216.170.0/24 63.216.192.160/27 63.216.195.192/27 63.216.196.128/27 63.216.198.96/27 63.217.71.96/27 63.217.89.64/27 63.220.1.192/26 63.221.136.32/27 63.221.139.32/27 63.221.140.192/27 63.221.141.32/27 63.221.159.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e8:14:27:57:ee:85:46:0e:e3:3d:a7:3f:56:90:c1:2e:8a: 0d:96:76:6a:43:48:b9:55:7a:74:ca:dc:3c:e7:75:ca:58:c8: a2:c2:a8:ee:7f:d1:98:98:8c:e4:dc:0f:10:82:af:3c:07:cc: 4a:98:a2:57:2b:25:e9:93:21:33:9c:bc:dc:b7:0b:9d:c0:1b: 82:42:5d:13:12:ae:79:d9:06:01:ab:c3:c5:6e:86:0d:51:ba: 0d:c3:5e:ba:68:c0:4d:22:56:d1:b3:7f:f1:99:cb:06:6f:81: 0c:36:51:87:d0:37:45:3c:8f:c4:a4:25:db:8e:c0:05:a0:98: 16:61:c1:88:77:3a:a4:cd:82:d3:f5:7c:e0:c2:54:83:bf:12: 87:fa:52:56:5f:27:a2:37:fb:7c:29:4e:17:bf:41:e0:82:92: 64:ee:20:be:fb:49:b7:1c:f2:bf:ec:fe:71:93:bb:b0:5b:69: f9:8c:28:4e:5b:84:a6:75:94:44:52:d5:57:fc:43:50:42:2a: ff:19:7b:6f:86:62:3d:dd:a9:0f:6d:03:8a:57:04:e7:87:3e: 7a:1f:a5:7a:9b:f6:b8:c7:14:b9:7d:55:01:73:53:02:70:c1: 66:8d:1d:99:48:66:35:36:b8:7a:b1:54:9c:f8:93:1e:ca:46: db:6b:08:df -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEjIE3DWC4pe8qsO2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIwNTEyMDc0NFoXDTI1MDUwNjExMDc0NFowLzEtMCsGA1UEAxMk ZDlmYmUyYjEtOTUxZC00ZTljLWE3MGQtODYzMWQ2ZDg1NmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qxPeoF6kIcDaP+RFBbUtxqvnkooVRRl4bz0 Rkw0T4vksFMgBDrYK8uXEKVdcfnj0nme72RdsG3QT+5WMyRQfwpJEzlUd2PmgOir DY//hRnmaTNuuu99yVS/2zZKHH+8/Hx/LksFEOU6JhhmZfqMkj0QHUvnxZ9/wmpD F9BUNMtRc6j4DBZVHcTViMbVI0RVqg6SG/aHV0DqtR7hkezgP9bpklkZ998joI6R Km+Q1nZ7whsi2qtbSFTHn+qqA65Tvu51Wke5e7WTFKXlVjHXJ6U+8E18EHNulf9r IE4XvSYJGaGBsUdj02CO6ssk9GoSWTDeo7ATZp6qXLrWAfNg1wIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFIDUA8XsTO02oKyxonOy14OtXAq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2IzZGQ2NzUtYjE3MC0z ZWVlLWJmNmEtMTJhZjY3ODM1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAP9iqAwUF P9jAoAMFBT/Yw8ADBQU/2MSAAwUFP9jGYAMFBT/ZR2ADBQU/2VlAAwUGP9wBwAMF BT/diCADBQU/3YsgAwUFP92MwAMFBT/djSADBQU/3Z8AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADzoFCdX 7oVGDuM9pz9WkMEuig2WdmpDSLlVenTK3DzndcpYyKLCqO5/0ZiYjOTcDxCCrzwH zEqYolcrJemTITOcvNy3C53AG4JCXRMSrnnZBgGrw8Vuhg1Rug3DXrpowE0iVtGz f/GZywZvgQw2UYfQN0U8j8SkJduOwAWgmBZhwYh3OqTNgtP1fODCVIO/Eof6UlZf J6I3+3wpThe/QeCCkmTuIL77Sbcc8r/s/nGTu7BbafmMKE5bhKZ1lERS1Vf8Q1BC Kv8Ze2+GYj3dqQ9tA4pXBOeHPnofpXqb9rjHFLl9VQFzUwJwwWaNHZlIZjU2uHqx VJz4kx7KRttrCN8= -----END CERTIFICATE-----Generated at Sat Apr 5 19:05:56 2025 by rpki-client