$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa File: c655fc5a-2609-3240-abf3-7db143f47639.roa (raw, json) Hash identifier: KJXuHnfZ/YHAKFPVxjUhXr4fDTdhUyfn6ivU5Z9tDn0= Subject key identifier: B9:B7:90:C4:B5:E4:46:58:61:95:D0:4E:90:7E:4F:06:8C:CE:95:38 Certificate issuer: /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a Certificate serial: 010D0C9F43285848B6261A5479C4B83724FFD280 Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 3223 IP address blocks: 23.226.64.0/20 maxlen: 32 104.161.8.0/21 maxlen: 32 104.161.16.0/20 maxlen: 32 104.161.32.0/19 maxlen: 32 104.161.64.0/18 maxlen: 32 107.167.64.0/19 maxlen: 32 107.178.64.0/18 maxlen: 32 107.189.128.0/18 maxlen: 32 148.163.0.0/17 maxlen: 32 162.213.208.0/22 maxlen: 32 162.218.112.0/21 maxlen: 32 184.164.64.0/19 maxlen: 32 192.30.136.0/22 maxlen: 32 192.110.160.0/21 maxlen: 32 199.231.84.0/22 maxlen: 32 2604:6280::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1a:54:79:c4:b8:37:24:ff:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=165f141a-842f-4a15-81ca-a49e9a16a2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:99:d5:83:3b:a0:c8:d9:e2:c5:c2:55:f6: a1:74:8d:4f:a8:50:ac:67:d1:28:37:38:79:4e:d2: 41:1c:89:c2:2a:e4:c9:7b:a3:24:be:60:2a:18:a4: a6:f9:d7:32:ba:27:71:de:be:7c:9b:dd:71:11:f6: 8f:61:38:13:90:e4:a4:2f:a4:23:fa:81:97:8e:62: ca:f3:c3:8e:a6:e3:8d:27:a9:f9:73:6a:30:78:50: 0c:2b:0f:74:12:97:e6:17:cb:93:45:31:15:fe:e3: fb:08:ca:94:b0:51:f0:47:8e:9c:7c:c8:1d:92:eb: 18:cd:01:d0:76:00:dc:32:cd:a2:50:eb:f7:2b:06: 25:67:ba:bd:a0:3e:e0:82:9e:41:38:f4:19:a2:d6: d1:18:69:6f:64:2f:91:fb:47:66:c0:e0:ea:2e:a0: 9f:41:6d:e0:0c:af:94:9a:0f:a2:80:dc:06:f5:42: 6b:3b:4a:fb:39:a9:2a:ce:ff:df:aa:a2:a4:a1:5f: 48:14:77:07:2a:e2:fd:d4:28:d0:fd:fa:a8:6f:a3: 6e:c0:bc:c6:3e:39:48:68:90:c9:d4:3a:2f:7b:49: 21:9a:f2:97:67:41:77:7d:6e:6e:88:3d:b7:e3:e2: d9:cf:d6:3c:00:9c:a7:ab:b2:5d:d0:e8:e8:2c:11: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B7:90:C4:B5:E4:46:58:61:95:D0:4E:90:7E:4F:06:8C:CE:95:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl X509v3 Authority Key Identifier: keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer sbgp-ipAddrBlock: critical IPv4: 23.226.64.0/20 104.161.8.0-104.161.127.255 107.167.64.0/19 107.178.64.0/18 107.189.128.0/18 148.163.0.0/17 162.213.208.0/22 162.218.112.0/21 184.164.64.0/19 192.30.136.0/22 192.110.160.0/21 199.231.84.0/22 IPv6: 2604:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ab:a2:5d:13:d8:e9:e2:3d:9e:18:7c:f7:71:bc:59:4d:c8: ac:bb:3c:c2:96:23:1c:bd:ff:12:29:13:f8:44:6c:25:d6:a0: b4:28:39:4a:4b:2c:6a:3f:a3:26:17:6e:41:2d:93:bb:e5:c8: 83:2b:82:69:e7:73:bd:1f:9f:18:15:ab:a0:a8:96:0a:38:e8: 9f:70:61:32:dc:bb:bd:d2:ca:da:96:5d:83:74:54:43:e5:7c: 07:b2:a8:a3:25:25:55:d2:58:23:f9:3c:49:2f:2b:c6:69:ce: 05:7d:c0:3e:24:ec:51:73:9c:c0:08:fd:e3:f7:14:6a:a1:50: 5e:30:6a:b2:3d:3c:f0:31:bd:c1:22:8d:ad:7e:7d:61:6f:29: 10:7a:7f:9e:4c:eb:f6:37:26:a9:9b:31:55:23:ff:39:f9:32: d1:60:02:36:a6:12:44:68:bd:22:66:da:59:d0:31:35:ae:b2: 05:54:49:a7:45:d6:9d:78:3f:e9:bb:14:b2:f9:26:5b:15:37: f7:9d:b1:eb:1c:7b:d7:64:c8:f0:f8:d6:27:b5:11:f4:72:d1: 9d:4e:0d:c7:33:11:13:e6:07:11:b4:e0:b7:4f:57:28:4f:f8: 71:03:f4:2c:5e:87:f2:6c:9f:4e:1b:a5:bc:32:98:cb:c4:94: a9:ae:a2:20 -----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgIUAQ0Mn0MoWEi2JhpUecS4NyT/0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ1OTJkMTgtODlhMi00YjMxLWExNGItYjVlYTNlYWUy YzRhMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk MTY1ZjE0MWEtODQyZi00YTE1LTgxY2EtYTQ5ZTlhMTZhMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AaZ1YM7oMjZ4sXCVfahdI1PqFCsZ9EoNzh5 TtJBHInCKuTJe6MkvmAqGKSm+dcyuidx3r58m91xEfaPYTgTkOSkL6Qj+oGXjmLK 88OOpuONJ6n5c2oweFAMKw90EpfmF8uTRTEV/uP7CMqUsFHwR46cfMgdkusYzQHQ dgDcMs2iUOv3KwYlZ7q9oD7ggp5BOPQZotbRGGlvZC+R+0dmwODqLqCfQW3gDK+U mg+igNwG9UJrO0r7Oakqzv/fqqKkoV9IFHcHKuL91CjQ/fqob6NuwLzGPjlIaJDJ 1Dove0khmvKXZ0F3fW5uiD234+LZz9Y8AJynq7Jd0OjoLBEIZQIDAQABo4IDrjCC A6owHQYDVR0OBBYEFLm3kMS15EZYYZXQTpB+TwaMzpU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5 MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVhM2VhZTJjNGEvYzY1NWZjNWEtMjYwOS0z MjQwLWFiZjMtN2RiMTQzZjQ3NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQ1OTJkMTgtODlhMi00YjMxLWEx NGItYjVlYTNlYWUyYzRhL2U0NTkyZDE4LTg5YTItNGIzMS1hMTRiLWI1ZWEzZWFl MmM0YS5jcmwwHwYDVR0jBBgwFoAUh1+i/+WTO7UW3kS/uT6vv/39WYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVh M2VhZTJjNGEuY2VyMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQEF+JAMAwD BANooQgDBAdooQADBAVrp0ADBAZrskADBAZrvYADBAeUowADBAKi1dADBAOi2nAD BAW4pEADBALAHogDBAPAbqADBALH51QwDQQCAAIwBwMFACYEYoAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA QauiXRPY6eI9nhh893G8WU3IrLs8wpYjHL3/EikT+ERsJdagtCg5Skssaj+jJhdu QS2Tu+XIgyuCaedzvR+fGBWroKiWCjjon3BhMty7vdLK2pZdg3RUQ+V8B7KooyUl VdJYI/k8SS8rxmnOBX3APiTsUXOcwAj94/cUaqFQXjBqsj088DG9wSKNrX59YW8p EHp/nkzr9jcmqZsxVSP/Ofky0WACNqYSRGi9ImbaWdAxNa6yBVRJp0XWnXg/6bsU svkmWxU3952x6xx712TI8PjWJ7UR9HLRnU4NxzMRE+YHEbTgt09XKE/4cQP0LF6H 8myfThulvDKYy8SUqa6iIA== -----END CERTIFICATE-----Generated at Sat Apr 5 13:09:30 2025 by rpki-client