$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa File: 8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa (raw, json) Hash identifier: VrYzHkZp3ao2LK9H97+6MknEWI788LWuoADTlSWrFls= Subject key identifier: E3:7B:57:F3:DC:12:B5:33:EC:8E:69:8F:5C:FE:70:9B:5E:69:74:1D Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858496FAF0E412F00605DAF204300 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 6621 IP address blocks: 72.169.32.0/19 maxlen: 19 72.169.64.0/22 maxlen: 22 72.169.68.0/23 maxlen: 23 72.169.70.0/24 maxlen: 24 72.169.72.0/24 maxlen: 24 72.169.74.0/23 maxlen: 23 72.169.76.0/22 maxlen: 22 72.169.80.0/22 maxlen: 22 72.169.81.0/24 maxlen: 24 72.169.82.0/23 maxlen: 23 72.169.84.0/22 maxlen: 22 72.169.88.0/22 maxlen: 22 72.169.92.0/22 maxlen: 22 72.169.96.0/22 maxlen: 22 72.169.100.0/22 maxlen: 22 72.169.104.0/22 maxlen: 22 72.169.108.0/22 maxlen: 22 72.169.112.0/20 maxlen: 20 72.169.192.0/20 maxlen: 20 72.169.208.0/22 maxlen: 22 72.169.212.0/23 maxlen: 23 72.169.214.0/24 maxlen: 24 72.169.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0e:41:2f:00:60:5d:af:20:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=7d012135-eec9-4b55-9003-2ff660510f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:66:2a:bf:30:ae:67:19:bb:f1:42:b0:9c: 4c:5a:f9:d7:97:b7:87:af:ed:5d:37:ba:65:99:52: ef:9b:f5:08:7f:9d:f1:8b:dc:db:91:d5:5f:fa:7f: 11:29:fe:9f:43:42:a2:58:57:40:03:a5:2f:5b:67: 7c:9b:bc:62:de:31:fb:04:f1:6e:c7:c1:88:d6:bf: a7:5f:d2:d1:cb:72:3b:2a:0e:18:97:93:ab:1b:a0: 75:05:62:5e:72:b2:ad:fc:6b:9f:27:3f:1b:a9:6e: 8e:35:99:a4:99:ac:23:81:5f:9b:a2:a3:9e:ac:92: 95:6d:ef:eb:8f:e9:12:c2:13:fd:72:76:cf:4a:3b: 6d:99:51:3b:bd:dc:1b:95:7b:99:34:62:fe:95:54: 38:ce:1b:3c:d9:73:0c:75:ea:44:01:0a:f5:44:52: 63:87:fa:54:9a:5a:42:bd:32:aa:ef:f8:f6:b3:8e: ae:f7:06:41:96:17:fc:58:7a:11:44:f0:dd:1b:49: 96:c9:4c:0e:30:17:14:75:3e:14:b0:96:4f:8b:97: b6:f7:a8:e0:1c:fc:80:04:56:f8:71:ac:ae:11:4e: 52:49:ec:18:b7:26:3d:82:a3:ce:d2:4f:02:7f:43: fb:ea:f6:7a:56:af:a6:2a:e4:4e:16:ea:94:07:be: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:57:F3:DC:12:B5:33:EC:8E:69:8F:5C:FE:70:9B:5E:69:74:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.169.32.0-72.169.70.255 72.169.72.0/24 72.169.74.0-72.169.127.255 72.169.192.0-72.169.214.255 72.169.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a6:1d:19:b5:59:dd:3f:70:bd:76:9d:16:26:39:bd:b5:ea: 7f:f3:50:2b:11:29:27:8b:e4:91:7d:ee:23:fc:e2:59:27:48: 9c:bd:de:e6:e2:c8:d9:7e:ac:bd:c1:1f:2b:cd:73:6d:59:55: 5c:64:3c:cc:73:66:95:af:1e:77:3c:25:45:7f:1d:48:bd:9f: 7e:5a:71:b8:82:cd:3b:2c:9e:49:21:ca:cd:14:ac:a2:1e:de: 87:fb:f6:8c:0a:c8:f2:42:68:a3:7e:fd:4f:93:d3:86:b6:2e: 46:a6:da:33:aa:63:5f:c6:e4:60:d2:20:47:7c:25:78:12:b9: fe:b9:fd:93:eb:96:eb:97:21:9d:6f:5b:7e:d3:75:44:13:5d: fd:9b:9a:93:a6:28:88:7e:cd:d0:9b:f9:ac:ab:95:6f:1b:7b: 02:ca:f8:3c:93:45:6b:f0:1b:af:0e:4a:fb:18:c6:c9:c0:1d: 2e:9a:78:a1:ef:ff:21:94:07:e3:7d:ca:25:b6:de:04:6a:79: 95:cb:39:5c:c6:4f:cd:72:96:a0:7c:73:f5:5c:f1:e6:4e:db: 0a:b0:fb:82:a5:fc:10:36:95:29:44:9e:d9:89:50:ba:0b:c0: cc:68:75:ab:a8:f1:f0:f4:39:6a:38:28:c2:2d:8d:e4:6c:8c: bb:df:14:7b -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWElvrw5BLwBgXa8gQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk N2QwMTIxMzUtZWVjOS00YjU1LTkwMDMtMmZmNjYwNTEwZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcxmKr8wrmcZu/FCsJxMWvnXl7eHr+1dN7pl mVLvm/UIf53xi9zbkdVf+n8RKf6fQ0KiWFdAA6UvW2d8m7xi3jH7BPFux8GI1r+n X9LRy3I7Kg4Yl5OrG6B1BWJecrKt/GufJz8bqW6ONZmkmawjgV+boqOerJKVbe/r j+kSwhP9cnbPSjttmVE7vdwblXuZNGL+lVQ4zhs82XMMdepEAQr1RFJjh/pUmlpC vTKq7/j2s46u9wZBlhf8WHoRRPDdG0mWyUwOMBcUdT4UsJZPi5e296jgHPyABFb4 cayuEU5SSewYtyY9gqPO0k8Cf0P76vZ6Vq+mKuROFuqUB74oHwIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFON7V/PcErUz7I5pj1z+cJteaXQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvOGFmM2U0M2QtMWUxYS0z ZDY1LWFmY2MtZjA4OGI2MGE5NzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAVIqSAD BABIqUYDBABIqUgwDAMEAUipSgMEB0ipADAMAwQGSKnAAwQASKnWAwQDSKnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGumHRm1Wd0/cL12nRYmOb216n/zUCsRKSeL5JF97iP84lknSJy93ubi yNl+rL3BHyvNc21ZVVxkPMxzZpWvHnc8JUV/HUi9n35acbiCzTssnkkhys0UrKIe 3of79owKyPJCaKN+/U+T04a2Lkam2jOqY1/G5GDSIEd8JXgSuf65/ZPrluuXIZ1v W37TdUQTXf2bmpOmKIh+zdCb+ayrlW8bewLK+DyTRWvwG68OSvsYxsnAHS6aeKHv /yGUB+N9yiW23gRqeZXLOVzGT81ylqB8c/Vc8eZO2wqw+4Kl/BA2lSlEntmJULoL wMxodauo8fD0OWo4KMItjeRsjLvfFHs= -----END CERTIFICATE-----Generated at Mon Apr 7 13:08:17 2025 by rpki-client