$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa File: cea2d881-3d76-3a80-94b9-42e2473af64d.roa (raw, json) Hash identifier: dJf9u9xz2qUHOLeEhME+D8D8Z83W5HhNMs44/+A3Ai4= Subject key identifier: 87:AC:D3:4A:ED:63:2F:DD:D1:EE:13:99:22:59:7B:A4:96:23:17:58 Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Certificate serial: 010D0C9F43285848E16BE76D759518CE492E6680 Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33387 IP address blocks: 63.141.224.0/19 maxlen: 24 74.91.16.0/20 maxlen: 24 107.150.32.0/19 maxlen: 24 142.54.160.0/19 maxlen: 24 192.151.144.0/20 maxlen: 24 192.187.96.0/19 maxlen: 24 198.204.224.0/19 maxlen: 24 199.168.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e7:6d:75:95:18:ce:49:2e:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=005b3e19-9a81-4340-a5a1-4ddfdcedc980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:81:6a:14:8e:f6:04:c9:1d:3c:f0:ac:7c: c1:4b:f1:d7:cf:2e:7d:4e:0e:7e:e9:00:6e:aa:8a: c2:d4:d0:d5:e5:8a:6b:c7:0a:a2:d2:54:f3:ef:dc: 65:ae:6a:02:8e:00:3c:e9:5b:7f:9a:f8:1e:08:da: 20:9f:06:97:86:b0:3c:ee:3c:95:a7:99:97:5c:7f: 3d:23:e5:45:4e:3b:52:65:07:7a:6a:8c:34:d1:7f: d3:bf:ba:73:71:06:8e:e5:e1:1f:ec:ed:a5:7e:dc: 87:3d:b1:c7:4d:50:4e:b5:65:57:bc:6f:95:3d:34: 21:79:c7:8a:f4:46:3f:7f:89:6b:1f:cd:5b:5d:cf: 9d:2c:59:c0:76:32:10:0c:10:c1:33:bd:10:f5:a8: a5:34:a0:7c:45:d8:1b:1b:4c:bb:bd:d3:58:8a:68: 3d:f3:d6:f5:db:81:32:ca:0f:e2:02:0a:70:12:14: e9:7c:67:cd:48:7a:20:91:80:fa:90:ca:95:67:17: aa:45:28:6e:26:f3:9c:f2:0e:d6:95:25:67:3e:d8: d2:db:be:d5:15:ec:79:4d:e5:48:43:8f:74:fb:96: 67:f9:a7:48:59:b8:25:7b:53:c0:a7:98:70:4b:84: 22:53:57:14:76:1d:0f:a4:fa:45:28:17:88:b2:a0: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AC:D3:4A:ED:63:2F:DD:D1:EE:13:99:22:59:7B:A4:96:23:17:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl X509v3 Authority Key Identifier: keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer sbgp-ipAddrBlock: critical IPv4: 63.141.224.0/19 74.91.16.0/20 107.150.32.0/19 142.54.160.0/19 192.151.144.0/20 192.187.96.0/19 198.204.224.0/19 199.168.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:88:4a:48:e5:d6:a6:99:b2:7d:e4:b4:bc:8f:08:c7:4c:45: 94:43:24:67:b1:ba:fb:46:b7:59:1c:f1:9e:8b:df:82:5b:8b: 73:13:bc:1b:1a:71:12:e1:f8:c2:7c:e4:2e:68:51:99:0a:50: b4:2e:d9:2c:94:e4:80:6c:49:16:c8:39:19:c7:a1:e5:08:83: d4:cd:8e:7f:a8:24:e7:f0:7b:cf:c2:43:64:9a:d1:b3:70:d6: 5a:d9:01:36:bb:69:a3:77:00:44:1a:34:d2:fd:cb:47:49:ca: ba:89:11:0a:de:ca:ef:65:c5:22:9d:8f:ad:92:9c:b2:82:23: c3:83:1d:0c:cc:3f:8f:3d:b5:d0:8d:4f:f3:0b:fa:90:00:e6: 71:ae:e2:b7:0f:1c:57:f6:21:39:1f:a8:cd:d1:a5:9b:54:4a: 69:81:18:a4:38:aa:8c:5c:fa:5f:f5:1b:3c:48:4b:df:7a:2a: 94:ee:03:21:91:8e:1a:6d:a8:f1:df:7f:df:78:d2:19:5d:25: c6:d1:f3:aa:8e:e8:35:0d:86:ae:52:0e:30:19:38:e7:d1:a9: c3:a3:8e:5e:fc:97:15:24:86:02:e4:0f:e5:c2:dc:a8:1c:47: 1c:3b:69:40:21:cc:d7:1e:a4:ae:9a:54:fa:eb:09:f5:e1:9c: c1:1b:9a:fa -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEjha+dtdZUYzkkuZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhj YzU1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MDA1YjNlMTktOWE4MS00MzQwLWE1YTEtNGRkZmRjZWRjOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYqBahSO9gTJHTzwrHzBS/HXzy59Tg5+6QBu qorC1NDV5Yprxwqi0lTz79xlrmoCjgA86Vt/mvgeCNognwaXhrA87jyVp5mXXH89 I+VFTjtSZQd6aow00X/Tv7pzcQaO5eEf7O2lftyHPbHHTVBOtWVXvG+VPTQheceK 9EY/f4lrH81bXc+dLFnAdjIQDBDBM70Q9ailNKB8RdgbG0y7vdNYimg989b124Ey yg/iAgpwEhTpfGfNSHogkYD6kMqVZxeqRShuJvOc8g7WlSVnPtjS277VFex5TeVI Q490+5Zn+adIWbgle1PAp5hwS4QiU1cUdh0PpPpFKBeIsqCtsQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFIes00rtYy/d0e4TmSJZe6SWIxdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0 YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvY2VhMmQ4ODEtM2Q3Ni0z YTgwLTk0YjktNDJlMjQ3M2FmNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjBjNGFmNzktY2RjZi00NjQwLWFi NGUtZjBmMzM2NDhjYzU1LzIwYzRhZjc5LWNkY2YtNDY0MC1hYjRlLWYwZjMzNjQ4 Y2M1NS5jcmwwHwYDVR0jBBgwFoAUVJshF3K5Lew9XWKBCmzP96diQ00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYz MzY0OGNjNTUuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQFP43gAwQE SlsQAwQFa5YgAwQFjjagAwQEwJeQAwQFwLtgAwQFxszgAwQDx6hgMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ALGISkjl1qaZsn3ktLyPCMdMRZRDJGexuvtGt1kc8Z6L34Jbi3MTvBsacRLh+MJ8 5C5oUZkKULQu2SyU5IBsSRbIORnHoeUIg9TNjn+oJOfwe8/CQ2Sa0bNw1lrZATa7 aaN3AEQaNNL9y0dJyrqJEQreyu9lxSKdj62SnLKCI8ODHQzMP489tdCNT/ML+pAA 5nGu4rcPHFf2ITkfqM3RpZtUSmmBGKQ4qoxc+l/1GzxIS996KpTuAyGRjhptqPHf f9940hldJcbR86qO6DUNhq5SDjAZOOfRqcOjjl78lxUkhgLkD+XC3KgcRxw7aUAh zNcepK6aVPrrCfXhnMEbmvo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:00 2025 by rpki-client