$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7456d80d-f753-349f-8809-36637ffe1b44.roa File: 7456d80d-f753-349f-8809-36637ffe1b44.roa (raw, json) Hash identifier: 8+VjPs8vCthW6qlTxYRuIUi5TvQYqD/0qWkRyyeXlmA= Subject key identifier: D6:C2:C9:A9:38:F7:54:1B:38:A6:42:D3:E3:B4:26:29:89:EC:90:2A Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858496FAF0DFC4A9B7AFA62424BFE Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7456d80d-f753-349f-8809-36637ffe1b44.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 6621 IP address blocks: 67.45.0.0/20 maxlen: 20 67.45.0.0/21 maxlen: 21 67.45.8.0/21 maxlen: 21 67.45.32.0/22 maxlen: 22 67.45.36.0/22 maxlen: 22 67.45.40.0/22 maxlen: 22 67.45.44.0/22 maxlen: 22 67.45.48.0/20 maxlen: 20 67.45.64.0/20 maxlen: 20 67.45.96.0/22 maxlen: 22 67.45.100.0/22 maxlen: 22 67.45.104.0/22 maxlen: 22 67.45.108.0/22 maxlen: 22 67.45.112.0/22 maxlen: 22 67.45.116.0/22 maxlen: 22 67.45.120.0/22 maxlen: 22 67.45.124.0/22 maxlen: 22 67.45.160.0/19 maxlen: 19 67.45.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0d:fc:4a:9b:7a:fa:62:42:4b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=66ab2f2a-a71e-41ad-8874-54e4a48d3f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:42:e8:22:17:42:ed:47:4f:1b:60:32:f8: 4b:a6:3d:65:97:48:40:b7:6b:dd:79:5a:15:3b:6a: f1:48:17:94:ce:67:17:c2:25:ba:61:22:90:b1:38: a0:a6:9a:ae:1f:9d:af:c0:1c:c5:96:d5:c7:45:15: a1:2f:54:c5:31:b6:e3:43:89:a4:92:ca:05:30:cf: 85:ff:1c:d7:f3:ae:35:78:3b:28:e3:29:fa:34:99: 0f:38:21:f7:c8:22:fb:50:2b:56:4a:ce:4b:d8:26: 41:e8:41:a3:4b:a7:a7:cf:9a:05:62:1d:6b:65:17: f6:66:87:9b:9c:c0:fd:5c:da:2e:5d:06:5c:23:38: 7d:41:31:83:d6:a0:c9:84:00:d1:93:17:2d:b5:ae: 99:80:81:f0:06:64:52:7e:8a:e7:c2:8e:ed:e0:8f: 1b:5e:cc:e0:7b:d3:54:73:f8:b9:98:c4:20:fd:67: cd:7b:ba:6f:b1:29:f2:01:c6:cc:88:39:17:91:77: 59:d1:88:e4:69:e9:02:20:23:fc:a9:37:a1:14:6d: 25:95:00:67:f3:72:70:39:6d:90:48:a7:12:37:ec: 86:ea:97:16:c9:50:55:5c:0f:2f:d9:09:60:19:26: d0:48:e9:dd:e0:f3:04:24:51:c8:05:5d:1d:a3:b9: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C2:C9:A9:38:F7:54:1B:38:A6:42:D3:E3:B4:26:29:89:EC:90:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7456d80d-f753-349f-8809-36637ffe1b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.45.0.0/20 67.45.32.0-67.45.79.255 67.45.96.0/19 67.45.160.0-67.45.207.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1f:e6:a8:bb:d9:55:ad:25:67:30:3c:26:a4:55:76:2d:4c: 3a:6c:59:d4:ef:21:ee:a7:77:1f:3e:32:15:18:a2:e2:cf:1e: 43:1c:9c:5a:0d:2e:16:93:d4:98:36:70:34:9a:6e:aa:24:00: c0:6f:35:62:ed:4c:40:34:e7:32:73:cf:10:26:00:49:46:80: a2:8e:5b:49:2f:78:0d:38:96:f3:96:19:17:2e:39:62:01:c4: 92:3f:a7:58:0b:ad:77:37:42:42:45:81:14:7e:52:75:62:7c: a3:87:40:55:3d:b9:a0:35:13:9b:27:f9:43:0f:52:cc:9f:7e: b4:61:23:fb:6b:9e:54:f5:fa:27:32:55:da:a2:0a:c3:81:44: 16:29:15:fa:f3:8e:e3:03:df:a5:ae:94:bd:44:0c:57:e2:a8: 87:6c:97:b0:46:0e:51:97:87:b8:50:8e:e9:ae:7f:81:2d:fc: bc:da:7e:2f:34:47:13:81:54:2f:a6:27:db:e4:46:c1:b6:56: 65:e2:d0:e3:66:b7:0b:de:a6:b7:b9:11:a0:98:a4:04:3f:5a: c1:89:c4:a2:aa:34:ab:36:b0:05:f6:2e:45:49:18:5b:df:69: 5c:4e:93:5e:12:31:50:ac:bf:63:84:dd:60:9b:dd:c5:7d:a6: 56:9b:91:d5 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWElvrw38Spt6+mJCS/4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NjZhYjJmMmEtYTcxZS00MWFkLTg4NzQtNTRlNGE0OGQzZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7BC6CIXQu1HTxtgMvhLpj1ll0hAt2vdeVoV O2rxSBeUzmcXwiW6YSKQsTigppquH52vwBzFltXHRRWhL1TFMbbjQ4mkksoFMM+F /xzX8641eDso4yn6NJkPOCH3yCL7UCtWSs5L2CZB6EGjS6enz5oFYh1rZRf2Zoeb nMD9XNouXQZcIzh9QTGD1qDJhADRkxctta6ZgIHwBmRSfornwo7t4I8bXszge9NU c/i5mMQg/WfNe7pvsSnyAcbMiDkXkXdZ0YjkaekCICP8qTehFG0llQBn83JwOW2Q SKcSN+yG6pcWyVBVXA8v2QlgGSbQSOnd4PMEJFHIBV0do7k3jwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFNbCyak491QbOKZC0+O0JimJ7JAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNzQ1NmQ4MGQtZjc1My0z NDlmLTg4MDktMzY2MzdmZmUxYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQEQy0AMAwD BAVDLSADBARDLUADBAVDLWAwDAMEBUMtoAMEBEMtwDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiH+aou9lV rSVnMDwmpFV2LUw6bFnU7yHup3cfPjIVGKLizx5DHJxaDS4Wk9SYNnA0mm6qJADA bzVi7UxANOcyc88QJgBJRoCijltJL3gNOJbzlhkXLjliAcSSP6dYC613N0JCRYEU flJ1Ynyjh0BVPbmgNRObJ/lDD1LMn360YSP7a55U9fonMlXaogrDgUQWKRX6847j A9+lrpS9RAxX4qiHbJewRg5Rl4e4UI7prn+BLfy82n4vNEcTgVQvpifb5EbBtlZl 4tDjZrcL3qa3uRGgmKQEP1rBicSiqjSrNrAF9i5FSRhb32lcTpNeEjFQrL9jhN1g m93FfaZWm5HV -----END CERTIFICATE-----Generated at Mon Apr 7 17:05:42 2025 by rpki-client