$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa File: 1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa (raw, json) Hash identifier: 999cesvOOmdDVQbcUDEz8rvCG+DLg/1E0JIwmZXKZzw= Subject key identifier: C3:FA:4E:2A:5D:7B:8B:05:A9:6C:1E:C4:8B:DE:B8:A9:C9:C5:A8:F2 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285848BA563F8E2614DC405A3DB700 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 53264 IP address blocks: 64.79.96.0/20 maxlen: 24 74.117.236.0/22 maxlen: 24 74.121.180.0/22 maxlen: 24 74.122.192.0/21 maxlen: 24 173.243.112.0/20 maxlen: 24 192.208.176.0/20 maxlen: 24 198.50.24.0/21 maxlen: 24 199.16.8.0/21 maxlen: 24 199.192.200.0/21 maxlen: 24 216.107.144.0/20 maxlen: 24 216.231.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3f:8e:26:14:dc:40:5a:3d:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=61a196e3-a152-4d8a-8ad6-130bab6f2a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:bd:5c:bb:6e:b4:54:c4:2c:67:8a:26:08: 72:87:ee:fe:67:cb:58:89:7d:6b:c3:95:a7:d5:24: d6:c8:0a:e9:60:6f:9c:34:9f:20:23:3b:2a:5a:88: cc:df:06:f3:7a:3c:c2:b2:39:68:b5:86:c3:87:20: b7:f4:b1:96:55:e2:40:cb:a3:57:00:46:f2:88:bb: 06:58:40:43:3e:d7:43:41:02:12:bd:99:a0:1a:13: 36:94:1b:68:b4:c2:95:a3:c8:89:cc:84:bb:cf:0f: 65:7d:2e:2a:16:4a:51:b9:4a:d9:9a:91:7a:84:65: b0:bc:88:9f:61:97:95:48:0d:7b:09:ac:c6:8c:6f: 11:a7:85:b9:49:89:54:c4:2c:21:18:fa:9e:a4:97: 5d:92:c2:24:58:bb:d8:5e:38:45:5b:1f:75:b9:af: fa:0c:f0:e8:29:04:9a:74:af:c0:1c:aa:34:1c:4c: 51:c5:42:d4:2b:52:4b:6c:da:34:72:e7:e6:34:f3: 1f:c4:84:89:75:37:75:17:cc:c3:2c:eb:51:bd:6e: 51:d9:6e:44:b6:64:5f:be:fd:08:71:82:bf:de:c9: bf:f5:06:e4:2e:c2:5b:ad:2b:17:bc:a9:86:1b:fb: ac:24:ac:24:0b:eb:3e:5d:e5:69:54:42:f6:97:1a: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:4E:2A:5D:7B:8B:05:A9:6C:1E:C4:8B:DE:B8:A9:C9:C5:A8:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 64.79.96.0/20 74.117.236.0/22 74.121.180.0/22 74.122.192.0/21 173.243.112.0/20 192.208.176.0/20 198.50.24.0/21 199.16.8.0/21 199.192.200.0/21 216.107.144.0/20 216.231.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:46:46:e3:6a:2d:70:a6:92:07:1a:1a:a8:e6:ad:74:ec:d5: 2d:12:de:f8:68:41:e7:91:93:e8:6f:7a:da:f7:9c:26:9f:56: c9:87:34:44:26:6b:a5:fb:f1:2b:a3:10:53:91:a2:e9:26:fb: ef:03:22:5e:47:4e:3f:86:c8:00:ed:a6:f6:d2:cc:4e:bb:b9: 32:b8:25:78:c1:5e:28:52:c0:00:e8:ea:7f:4f:0a:99:ee:07: 22:da:34:90:31:5f:bb:b2:e4:b7:8a:bc:1d:ca:f9:af:9c:ba: cb:38:49:38:90:61:55:10:fd:47:81:c7:88:2c:3a:65:88:40: f7:b6:e2:6b:b1:fa:b5:9d:86:d4:41:86:12:e4:83:74:cf:66: 69:f7:1c:dc:9c:7b:1f:3d:65:11:09:cf:62:1c:23:9b:46:b4: 2f:23:62:d4:57:ef:83:07:26:cd:ff:01:d7:73:04:d1:67:f7: 0f:b6:5c:0d:8c:84:42:89:53:8b:45:23:5c:2e:9c:4b:42:1d: 59:36:e4:3b:b7:15:89:d6:2d:d0:43:a4:8d:8f:39:e4:0d:b1: cd:0e:b7:1b:b6:b8:c6:70:80:2e:c6:87:ab:57:16:82:04:b1: 7e:ce:52:7f:03:fa:51:fa:48:49:52:2e:e8:c9:5b:21:a8:ed: 5e:60:6e:49 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEi6Vj+OJhTcQFo9twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk NjFhMTk2ZTMtYTE1Mi00ZDhhLThhZDYtMTMwYmFiNmYyYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxou9XLtutFTELGeKJghyh+7+Z8tYiX1rw5Wn 1STWyArpYG+cNJ8gIzsqWojM3wbzejzCsjlotYbDhyC39LGWVeJAy6NXAEbyiLsG WEBDPtdDQQISvZmgGhM2lBtotMKVo8iJzIS7zw9lfS4qFkpRuUrZmpF6hGWwvIif YZeVSA17CazGjG8Rp4W5SYlUxCwhGPqepJddksIkWLvYXjhFWx91ua/6DPDoKQSa dK/AHKo0HExRxULUK1JLbNo0cufmNPMfxISJdTd1F8zDLOtRvW5R2W5EtmRfvv0I cYK/3sm/9QbkLsJbrSsXvKmGG/usJKwkC+s+XeVpVEL2lxrCTwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFMP6Tipde4sFqWwexIveuKnJxajyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMWIzYWI4MTEtYWI4Zi0z M2IyLWIzNjctMjQzYjgwZTZjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQEQE9gAwQC SnXsAwQCSnm0AwQDSnrAAwQErfNwAwQEwNCwAwQDxjIYAwQDxxAIAwQDx8DIAwQE 2GuQAwQE2OeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFhGRuNqLXCmkgcaGqjmrXTs1S0S3vhoQeeRk+hv etr3nCafVsmHNEQma6X78SujEFORoukm++8DIl5HTj+GyADtpvbSzE67uTK4JXjB XihSwADo6n9PCpnuByLaNJAxX7uy5LeKvB3K+a+cuss4STiQYVUQ/UeBx4gsOmWI QPe24mux+rWdhtRBhhLkg3TPZmn3HNycex89ZREJz2IcI5tGtC8jYtRX74MHJs3/ AddzBNFn9w+2XA2MhEKJU4tFI1wunEtCHVk25Du3FYnWLdBDpI2POeQNsc0Otxu2 uMZwgC7Gh6tXFoIEsX7OUn8D+lH6SElSLujJWyGo7V5gbkk= -----END CERTIFICATE-----Generated at Sat Apr 12 13:54:32 2025 by rpki-client