$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa File: 6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa (raw, json) Hash identifier: /rUVaU3vviJ1EpCVmd9salSCPiXrnkY8NGtLrHsrH54= Subject key identifier: 8C:8E:E7:53:DF:36:C3:3D:4A:C7:DC:D6:C5:A8:5A:F3:13:6E:16:03 Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F43285848B8F0D23A68269DB32FB09D80 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 3842 IP address blocks: 23.226.224.0/21 maxlen: 21 107.161.16.0/22 maxlen: 24 107.161.24.0/22 maxlen: 22 107.191.104.0/22 maxlen: 22 107.191.116.0/22 maxlen: 22 167.88.112.0/22 maxlen: 22 167.88.124.0/23 maxlen: 23 168.235.112.0/24 maxlen: 24 2604:180:1::/48 maxlen: 48 2604:180:f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d2:3a:68:26:9d:b3:2f:b0:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=350b674e-0c5d-4002-b289-a29e5a2a2810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:d2:97:a2:be:71:a8:97:30:f5:3d:ff:94: a6:f9:60:76:45:98:d1:b5:19:c6:f1:56:8c:38:50: 44:2a:07:5c:ea:9d:d8:b4:31:6a:7e:99:52:52:85: e3:a5:0c:87:8d:ea:8e:aa:f5:49:47:63:de:b2:03: 83:af:fb:35:5e:d5:f1:c8:22:0f:42:51:ce:2a:07: 21:f6:69:c5:0e:b1:6d:83:0e:34:3e:88:ce:bb:7b: 9a:6d:5c:a2:69:82:ad:63:d7:89:6e:a3:6c:02:be: 87:8b:eb:45:00:dc:7e:5c:4f:ba:db:26:e7:61:97: 82:08:24:07:3f:df:dd:f6:65:de:d9:3e:77:dc:ca: b3:1f:1e:6c:50:95:33:39:b5:00:29:60:c8:52:1d: a7:57:35:40:be:8b:15:a3:47:40:70:47:b4:7d:3f: ee:92:cf:cd:a7:2e:c8:3a:02:03:f0:02:88:b7:33: 9b:cb:8a:a6:04:0b:20:d2:5d:04:57:0e:42:ab:a7: ba:59:37:1a:4e:3d:0a:f4:f3:82:6a:1c:7e:dc:5a: 2f:c4:d0:0a:94:0d:c0:4e:af:c1:86:bd:fa:5c:14: d2:64:18:b1:4a:a1:f6:f7:58:99:ba:89:8a:3f:04: 63:e2:e8:7b:54:d1:4a:ba:0b:21:a5:b6:79:e1:10: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:E7:53:DF:36:C3:3D:4A:C7:DC:D6:C5:A8:5A:F3:13:6E:16:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 23.226.224.0/21 107.161.16.0/22 107.161.24.0/22 107.191.104.0/22 107.191.116.0/22 167.88.112.0/22 167.88.124.0/23 168.235.112.0/24 IPv6: 2604:180:1::/48 2604:180:f2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ac:e6:62:52:93:c8:a0:c3:0f:5d:a5:71:5e:50:6d:4f:6d: 05:51:ac:3b:22:14:10:ce:96:df:be:a5:e2:e9:af:6e:9d:75: eb:e5:07:bc:3f:31:4a:b2:98:27:64:89:4f:23:c0:fe:bf:65: d3:dc:a7:b4:59:c0:09:40:1f:30:41:ac:f8:d9:d6:4c:92:4b: d4:3a:ff:a1:dc:a4:24:8a:23:62:07:6a:c0:3c:e6:3e:19:c9: 53:12:2e:2b:46:e4:82:6c:8b:6b:c8:b2:e2:cc:2d:16:e6:db: 09:48:89:b5:c8:1a:14:2f:ca:de:74:5b:20:3d:35:1b:40:60: c1:c3:7f:fa:4d:d7:c6:4b:08:84:ca:c6:8a:ee:5e:a2:b9:8a: 61:fa:b5:22:29:91:16:13:61:69:26:ad:b3:ad:95:f2:7f:82: e2:24:05:ae:fe:9f:3d:d7:cd:f3:72:1c:83:c0:02:ea:17:b3: 7d:e7:3d:25:da:cf:df:41:a9:2e:43:03:27:49:91:8f:4d:30: 77:7a:6b:5b:ac:4e:3e:b4:c9:f0:f6:29:7b:23:7b:e5:6b:d2: ef:eb:b0:54:3f:f4:f6:80:1d:75:98:da:fb:da:6e:73:eb:1a: 7a:d5:d9:fb:70:28:2d:81:d9:27:bd:be:4a:2a:4b:a4:bb:a0: ed:7c:66:b4 -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWEi48NI6aCadsy+wnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MzUwYjY3NGUtMGM1ZC00MDAyLWIyODktYTI5ZTVhMmEyODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/3Sl6K+caiXMPU9/5Sm+WB2RZjRtRnG8VaM OFBEKgdc6p3YtDFqfplSUoXjpQyHjeqOqvVJR2PesgODr/s1XtXxyCIPQlHOKgch 9mnFDrFtgw40PojOu3uabVyiaYKtY9eJbqNsAr6Hi+tFANx+XE+62ybnYZeCCCQH P9/d9mXe2T533MqzHx5sUJUzObUAKWDIUh2nVzVAvosVo0dAcEe0fT/uks/Npy7I OgID8AKItzOby4qmBAsg0l0EVw5Cq6e6WTcaTj0K9POCahx+3FovxNAKlA3ATq/B hr36XBTSZBixSqH291iZuomKPwRj4uh7VNFKugshpbZ54RDF+wIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFIyO51PfNsM9Ssfc1sWoWvMTbhYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvNmVjZDllYjYtMmNjZi0z YjU4LThmMTktOTQyYmE1MGM5MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjA2BAIAATAwAwQDF+LgAwQC a6EQAwQCa6EYAwQCa79oAwQCa790AwQCp1hwAwQBp1h8AwQAqOtwMBgEAgACMBID BwAmBAGAAAEDBwAmBAGAAPIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeqzmYlKTyKDDD12lcV5QbU9tBVGs OyIUEM6W376l4umvbp116+UHvD8xSrKYJ2SJTyPA/r9l09yntFnACUAfMEGs+NnW TJJL1Dr/odykJIojYgdqwDzmPhnJUxIuK0bkgmyLa8iy4swtFubbCUiJtcgaFC/K 3nRbID01G0BgwcN/+k3XxksIhMrGiu5eormKYfq1IimRFhNhaSats62V8n+C4iQF rv6fPdfN83Icg8AC6hezfec9JdrP30GpLkMDJ0mRj00wd3prW6xOPrTJ8PYpeyN7 5WvS7+uwVD/09oAddZja+9puc+saetXZ+3AoLYHZJ72+SipLpLug7XxmtA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:10 2025 by rpki-client