$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa File: 131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa (raw, json) Hash identifier: IYMUX0HbjBflJtZ7at5nLIJZ3Dyoys8XWKFlqWwF544= Subject key identifier: 38:5B:32:D5:7B:EB:79:BA:53:F4:7C:53:70:95:EB:94:AD:A5:FD:2A Certificate issuer: /CN=040ac077-a6b6-4194-a06e-6c9593332536 Certificate serial: 010D0C9F432858496A1999CF56F1B26CF81E5EB8 Authority key identifier: E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 14828 IP address blocks: 23.235.0.0/20 maxlen: 24 104.218.220.0/22 maxlen: 24 140.190.0.0/18 maxlen: 24 173.224.172.0/22 maxlen: 24 192.145.240.0/20 maxlen: 24 192.151.160.0/20 maxlen: 24 2605:9b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:99:cf:56:f1:b2:6c:f8:1e:5e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040ac077-a6b6-4194-a06e-6c9593332536 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=4d16e705-ec34-4828-8ff8-12ce9187f6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:23:d5:fe:d0:a5:35:32:7a:fd:29:22:8c: e6:b4:4e:0a:c1:4b:67:3d:29:21:bb:df:ce:2c:01: 18:af:74:c5:3f:c8:1c:b9:22:7b:e8:d4:3a:57:c5: a8:42:f4:61:2f:c6:69:ee:92:f3:d8:c9:a2:87:22: b9:4c:cf:1a:65:11:2c:2f:f7:9b:bb:3e:da:57:d4: 96:bc:e1:f0:02:b5:26:89:bc:e0:1d:9e:7c:f9:e9: 66:eb:29:09:5c:53:df:a1:2c:55:61:c3:c2:51:54: ee:7b:0e:3c:62:84:d2:53:0e:c6:bb:ee:e5:4d:67: 38:54:f4:1a:0b:2b:54:01:71:25:27:d4:5d:33:52: 9d:4f:3c:5b:4c:75:2c:36:72:60:e6:e9:b7:fa:51: 6f:11:27:e9:04:b6:8e:24:a9:6f:b1:59:44:d5:82: 90:0f:0b:20:2b:37:97:84:4c:79:78:cd:2b:c7:ec: 6e:76:2c:2b:c9:fa:68:08:d5:d2:98:60:74:c7:23: 96:cc:bb:28:c8:64:6b:9d:a4:25:9c:e2:d4:7b:31: 11:9f:d9:7f:38:52:3f:40:cd:6b:a7:29:59:6e:e7: aa:01:7d:a1:e1:19:ab:28:fb:65:47:69:2b:11:0d: 40:53:4c:35:b6:00:e6:b7:8d:6c:25:d6:8b:11:ce: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5B:32:D5:7B:EB:79:BA:53:F4:7C:53:70:95:EB:94:AD:A5:FD:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl X509v3 Authority Key Identifier: keyid:E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer sbgp-ipAddrBlock: critical IPv4: 23.235.0.0/20 104.218.220.0/22 140.190.0.0/18 173.224.172.0/22 192.145.240.0/20 192.151.160.0/20 IPv6: 2605:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:77:ae:c5:ca:f4:f2:ff:95:ef:5a:6d:b1:92:57:ee:bf:35: dd:53:7f:ae:03:9d:33:26:d9:61:e4:75:9e:a8:a2:54:ca:9a: 4c:95:5a:cc:d4:78:b9:b7:1e:76:b9:f1:1f:e8:50:fa:f9:96: 47:7d:f1:fa:cc:84:5e:5d:2b:b0:68:06:8f:e3:42:72:d4:f5: 87:6c:e9:ef:0d:e6:0e:a3:d2:42:74:f7:92:ee:d6:44:bb:cb: e0:f4:5f:b2:cd:ea:e0:ca:46:e4:3d:39:af:89:bf:f1:47:45: 1b:c9:e6:1b:b6:f4:a2:5f:8d:b4:b4:fc:58:e7:f8:98:57:a2: b7:34:40:fa:b8:25:e2:c8:9e:04:11:09:e9:9f:1a:af:70:e5: 85:27:e4:55:50:de:fa:05:26:bd:8c:1d:f7:00:b6:6a:66:bd: f8:b0:fb:d4:67:0e:0d:dc:bb:d3:50:14:b1:fb:3a:1c:8e:f6: 4c:f6:7a:2d:d1:7d:d0:44:d5:50:e6:0d:76:73:7a:2d:61:69: 33:7b:9c:2d:69:18:81:78:23:7e:df:80:77:59:0d:92:99:7e: 9e:d9:ac:f7:9e:35:7f:58:bf:ef:33:b3:3d:16:5f:1a:27:d8: 34:e2:5d:ad:c1:87:3e:51:e6:7b:e8:2e:b1:ca:28:b8:75:b6: 17:18:6a:d1 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWElqGZnPVvGybPgeXrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYWMwNzctYTZiNi00MTk0LWEwNmUtNmM5NTkzMzMy NTM2MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NGQxNmU3MDUtZWMzNC00ODI4LThmZjgtMTJjZTkxODdmNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLsj1f7QpTUyev0pIozmtE4KwUtnPSkhu9/O LAEYr3TFP8gcuSJ76NQ6V8WoQvRhL8Zp7pLz2MmihyK5TM8aZREsL/ebuz7aV9SW vOHwArUmibzgHZ58+elm6ykJXFPfoSxVYcPCUVTuew48YoTSUw7Gu+7lTWc4VPQa CytUAXElJ9RdM1KdTzxbTHUsNnJg5um3+lFvESfpBLaOJKlvsVlE1YKQDwsgKzeX hEx5eM0rx+xudiwryfpoCNXSmGB0xyOWzLsoyGRrnaQlnOLUezERn9l/OFI/QM1r pylZbueqAX2h4RmrKPtlR2krEQ1AU0w1tgDmt41sJdaLEc6bUQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFDhbMtV763m6U/R8U3CV65Stpf0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNDBh YzA3Ny1hNmI2LTQxOTQtYTA2ZS02Yzk1OTMzMzI1MzYvMTMxZmVkOGUtODQ3OC0z YmFhLWEzNGMtY2JiOGIyNGJiYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDQwYWMwNzctYTZiNi00MTk0LWEw NmUtNmM5NTkzMzMyNTM2LzA0MGFjMDc3LWE2YjYtNDE5NC1hMDZlLTZjOTU5MzMz MjUzNi5jcmwwHwYDVR0jBBgwFoAU5D1XWCvWqvxTSda/bg0Rht4NgfkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNDBhYzA3Ny1hNmI2LTQxOTQtYTA2ZS02Yzk1 OTMzMzI1MzYuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEF+sAAwQC aNrcAwQGjL4AAwQCreCsAwQEwJHwAwQEwJegMA0EAgACMAcDBQAmBZuAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFZ3rsXK9PL/le9abbGSV+6/Nd1Tf64DnTMm2WHkdZ6oolTKmkyVWszUeLm3 Hna58R/oUPr5lkd98frMhF5dK7BoBo/jQnLU9Yds6e8N5g6j0kJ095Lu1kS7y+D0 X7LN6uDKRuQ9Oa+Jv/FHRRvJ5hu29KJfjbS0/Fjn+JhXorc0QPq4JeLIngQRCemf Gq9w5YUn5FVQ3voFJr2MHfcAtmpmvfiw+9RnDg3cu9NQFLH7OhyO9kz2ei3RfdBE 1VDmDXZzei1haTN7nC1pGIF4I37fgHdZDZKZfp7ZrPeeNX9Yv+8zsz0WXxon2DTi Xa3Bhz5R5nvoLrHKKLh1thcYatE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:00:34 2025 by rpki-client