$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa File: d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa (raw, json) Hash identifier: ExeleXynTAJKArZ0MqnJL6OkOvw4fE0uAzmcZK9cxWg= Subject key identifier: 58:8A:7A:09:E9:7D:59:30:FE:B8:22:3F:26:D1:F5:AB:44:78:0C:16 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584979743CA7EF84FE455681956F Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 396949 IP address blocks: 43.231.235.0/24 maxlen: 24 78.138.46.0/24 maxlen: 24 78.138.51.0/24 maxlen: 24 83.229.5.0/24 maxlen: 24 83.229.35.0/24 maxlen: 24 104.129.130.0/24 maxlen: 24 104.129.131.0/24 maxlen: 24 104.225.140.0/24 maxlen: 24 104.225.141.0/24 maxlen: 24 138.128.242.0/24 maxlen: 24 138.128.243.0/24 maxlen: 24 138.128.244.0/24 maxlen: 24 162.251.146.0/24 maxlen: 24 162.251.147.0/24 maxlen: 24 199.19.74.0/24 maxlen: 24 213.255.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:3c:a7:ef:84:fe:45:56:81:95:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=4141c6d2-ad3f-49f1-82e9-83b05cf92073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f2:c9:66:e4:78:47:cd:31:cc:b3:dc:d4:1f: 5d:da:db:f8:08:f0:e2:3f:8b:f5:c5:c6:47:ce:15: 22:90:d3:2b:86:62:13:ff:1b:89:48:c2:f6:06:58: 05:5c:54:14:f0:a2:87:a5:3c:f2:a7:27:5b:eb:33: 23:d8:d7:e1:c5:4a:4e:79:f1:c7:7a:24:06:1c:63: 3f:b0:eb:21:16:79:8b:1a:95:aa:3e:ad:ef:de:d2: 86:db:31:7b:96:ca:1c:c3:27:3b:40:84:07:53:ac: 5a:7a:be:cf:6f:90:59:91:1d:2f:35:1a:05:3d:9f: a7:c4:2d:f0:d5:e4:9a:0a:e9:2b:53:5c:f0:c4:57: 3c:c6:ad:2d:7f:51:69:d4:c7:18:12:4b:f5:ce:6f: 32:38:a0:54:ad:8f:87:20:1a:f1:ab:ac:2c:7e:f7: e6:5b:d7:ec:83:93:2f:98:6f:20:ba:19:12:47:fe: 2d:fd:9a:cf:09:e6:71:78:67:5a:c0:50:8e:3e:85: 61:55:ac:b0:1f:3b:1f:6e:24:f4:88:74:ee:74:62: 07:96:8d:68:a6:45:53:97:33:c2:9b:7f:90:55:db: 73:50:3c:96:a6:0d:c5:35:bf:9b:e4:79:bf:b1:78: 7b:00:39:5a:25:6a:5f:04:e7:80:73:53:a9:27:82: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8A:7A:09:E9:7D:59:30:FE:B8:22:3F:26:D1:F5:AB:44:78:0C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 43.231.235.0/24 78.138.46.0/24 78.138.51.0/24 83.229.5.0/24 83.229.35.0/24 104.129.130.0/23 104.225.140.0/23 138.128.242.0-138.128.244.255 162.251.146.0/23 199.19.74.0/24 213.255.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:88:66:81:fc:8e:ed:7b:d0:20:76:76:53:73:3f:6b:61:ae: c3:76:bf:f9:70:d4:17:b2:fe:5f:5e:25:22:6a:1d:5c:f2:c8: 48:f3:69:3e:bd:cb:ef:02:f0:9e:d9:42:8b:02:06:44:a5:5b: 43:ae:35:97:86:d1:b4:26:f3:ca:71:80:1b:df:5f:7d:65:9c: 90:3d:d9:df:39:57:52:1b:5c:dc:04:58:c3:95:ee:34:91:d8: bf:a4:d6:24:45:e1:3c:dd:a5:03:7e:25:06:b5:dc:cc:94:af: d8:3d:c0:67:28:18:92:a2:ef:8c:e9:26:ca:16:0b:0f:3e:6e: 15:79:7e:22:ed:34:d7:be:e9:81:09:1b:55:09:c4:d4:bb:6b: dd:4b:5f:88:67:af:23:73:34:5f:fa:d4:12:bc:1c:b3:b4:82: 68:ec:c2:2a:bd:d1:0f:96:b0:18:c6:f6:40:bf:7e:02:87:47: 44:f0:df:a8:c1:5f:7e:2b:24:af:2f:55:43:55:bb:01:85:09: 06:c2:9b:bd:52:7c:d9:1e:f6:a8:fb:14:af:f5:0f:57:37:93: bc:dd:f3:42:ee:b9:23:f1:85:1c:ef:b5:86:37:2c:10:66:ae: fa:37:17:b2:28:02:8b:b8:88:59:aa:2e:2a:73:90:08:fc:bc: c5:72:42:63 -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWEl5dDyn74T+RVaBlW8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk NDE0MWM2ZDItYWQzZi00OWYxLTgyZTktODNiMDVjZjkyMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvLJZuR4R80xzLPc1B9d2tv4CPDiP4v1xcZH zhUikNMrhmIT/xuJSML2BlgFXFQU8KKHpTzypydb6zMj2NfhxUpOefHHeiQGHGM/ sOshFnmLGpWqPq3v3tKG2zF7lsocwyc7QIQHU6xaer7Pb5BZkR0vNRoFPZ+nxC3w 1eSaCukrU1zwxFc8xq0tf1Fp1McYEkv1zm8yOKBUrY+HIBrxq6wsfvfmW9fsg5Mv mG8guhkSR/4t/ZrPCeZxeGdawFCOPoVhVaywHzsfbiT0iHTudGIHlo1opkVTlzPC m3+QVdtzUDyWpg3FNb+b5Hm/sXh7ADlaJWpfBOeAc1OpJ4KUiQIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFFiKegnpfVkw/rgiPybR9atEeAwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvZDNmYmRjZDgtNzJiMC0z MjRkLWFkMWItMWIwNDk2ZTdjZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAK+frAwQA ToouAwQAToozAwQAU+UFAwQAU+UjAwQBaIGCAwQBaOGMMAwDBAGKgPIDBACKgPQD BAGi+5IDBADHE0oDBADV/+MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAtIhmgfyO7XvQIHZ2U3M/a2Guw3a/ +XDUF7L+X14lImodXPLISPNpPr3L7wLwntlCiwIGRKVbQ641l4bRtCbzynGAG99f fWWckD3Z3zlXUhtc3ARYw5XuNJHYv6TWJEXhPN2lA34lBrXczJSv2D3AZygYkqLv jOkmyhYLDz5uFXl+Iu00177pgQkbVQnE1Ltr3UtfiGevI3M0X/rUErwcs7SCaOzC Kr3RD5awGMb2QL9+AodHRPDfqMFffiskry9VQ1W7AYUJBsKbvVJ82R72qPsUr/UP VzeTvN3zQu65I/GFHO+1hjcsEGau+jcXsigCi7iIWaouKnOQCPy8xXJCYw== -----END CERTIFICATE-----Generated at Wed Apr 16 16:52:20 2025 by rpki-client