$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa File: aefb5437-6034-3391-9329-ca5ca351ea5d.roa (raw, json) Hash identifier: gydFVUDQ7/ga5PB5rTqpR9Ti4ePYL3eo5L9Ljayr3mI= Subject key identifier: 38:0D:11:99:DC:A8:66:1D:F1:04:BB:66:7E:34:44:FA:F4:9B:9D:6A Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F43285848F926A4976F84C9F8806B4A00 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 3737 IP address blocks: 66.152.128.0/19 maxlen: 24 207.44.0.0/17 maxlen: 24 216.144.160.0/19 maxlen: 24 2606:9400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a4:97:6f:84:c9:f8:80:6b:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4bf3ed8e-f774-4b29-9ed5-719f95dac39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:ca:64:eb:d8:7c:be:da:b7:10:87:4a:7d: dc:ec:51:c7:7f:64:93:4e:8b:4e:e2:53:0c:80:c8: 26:83:53:63:1e:07:13:51:21:fc:96:69:c9:65:78: 0a:22:83:af:b3:a3:e0:24:89:aa:38:35:6c:35:c2: 8f:33:1c:58:99:01:76:5c:45:b6:36:75:52:b7:c8: b8:5f:29:e7:75:8e:18:45:da:91:52:6c:da:30:ad: 7f:71:51:52:54:4b:aa:61:48:fc:2f:08:00:d9:3e: a7:2f:28:ea:6d:4a:41:1e:5d:06:1d:33:93:b2:ba: de:30:20:54:3e:2a:58:40:e2:9f:a9:b2:7d:27:60: 03:0b:03:f8:5b:85:dc:43:bf:96:ce:14:2b:3a:92: ad:45:d4:a8:50:de:3e:55:70:11:cd:a0:3e:b9:bd: 12:0b:8a:53:a8:90:7e:f1:f2:0a:fd:86:5d:87:57: 96:86:b6:91:bb:9f:a8:f2:18:7b:3b:0f:b2:05:56: f6:a8:b8:51:8d:c9:10:21:18:96:c9:ab:1d:37:72: 6e:ba:08:53:43:ad:76:86:9b:1e:0b:ab:67:83:8f: 9f:12:77:0f:02:2d:50:91:7a:04:6f:6b:3a:5f:e4: 12:fa:47:b8:2e:59:04:1f:32:93:77:d6:54:08:97: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:11:99:DC:A8:66:1D:F1:04:BB:66:7E:34:44:FA:F4:9B:9D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: 66.152.128.0/19 207.44.0.0/17 216.144.160.0/19 IPv6: 2606:9400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:27:0b:bd:dd:fd:89:75:e9:86:da:4e:d8:d6:af:c4:d5:fc: d0:65:d0:d1:42:3c:a8:df:1e:b2:07:3b:30:aa:b4:c5:53:ad: 74:9e:97:e3:cf:d6:59:29:c6:44:7d:39:66:29:fa:f4:ba:17: 95:39:a9:6b:a6:29:59:1d:54:3c:a0:71:db:99:2d:81:db:ec: 86:17:94:03:b5:c0:fb:f6:b6:e9:a7:20:97:a8:35:7c:8f:48: 54:53:25:3b:5e:61:3b:cf:b5:16:bd:5c:42:7e:c2:3b:c6:5f: ab:c7:89:bc:58:5a:95:53:d6:63:91:61:33:f2:bf:71:cf:53: 8b:02:49:48:97:f7:a3:37:2c:36:fa:6b:fb:49:7e:99:26:26: 28:d6:96:d0:dc:5f:f0:f2:b9:88:ae:be:4e:24:93:f2:14:6a: 3e:6e:97:3e:82:db:2c:fe:0f:83:a9:6a:35:10:52:ab:ae:70: a6:ba:45:0b:7a:bd:c8:1f:a7:c2:47:5d:05:0a:e9:8d:63:eb: 0a:3c:a4:92:1a:3f:2e:fd:03:20:eb:9b:19:82:8c:72:8c:cd: 29:a6:6a:e4:e8:24:e6:c7:6f:6a:d0:29:63:ee:bb:3c:2d:e2: 04:4a:80:48:cc:cb:af:c0:c6:38:97:32:6d:b1:88:24:38:c1: b6:40:b7:38 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEj5JqSXb4TJ+IBrSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGJmM2VkOGUtZjc3NC00YjI5LTllZDUtNzE5Zjk1ZGFjMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDHKZOvYfL7atxCHSn3c7FHHf2STTotO4lMM gMgmg1NjHgcTUSH8lmnJZXgKIoOvs6PgJImqODVsNcKPMxxYmQF2XEW2NnVSt8i4 XynndY4YRdqRUmzaMK1/cVFSVEuqYUj8LwgA2T6nLyjqbUpBHl0GHTOTsrreMCBU PipYQOKfqbJ9J2ADCwP4W4XcQ7+WzhQrOpKtRdSoUN4+VXARzaA+ub0SC4pTqJB+ 8fIK/YZdh1eWhraRu5+o8hh7Ow+yBVb2qLhRjckQIRiWyasdN3JuughTQ612hpse C6tng4+fEncPAi1QkXoEb2s6X+QS+ke4LlkEHzKTd9ZUCJcdbQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFDgNEZncqGYd8QS7Zn40RPr0m51qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvYWVmYjU0MzctNjAzNC0z MzkxLTkzMjktY2E1Y2EzNTFlYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFQpiAAwQH zywAAwQF2JCgMA0EAgACMAcDBQAmBpQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHEnC73d/Yl16YbaTtjW r8TV/NBl0NFCPKjfHrIHOzCqtMVTrXSel+PP1lkpxkR9OWYp+vS6F5U5qWumKVkd VDygcduZLYHb7IYXlAO1wPv2tumnIJeoNXyPSFRTJTteYTvPtRa9XEJ+wjvGX6vH ibxYWpVT1mORYTPyv3HPU4sCSUiX96M3LDb6a/tJfpkmJijWltDcX/DyuYiuvk4k k/IUaj5ulz6C2yz+D4OpajUQUquucKa6RQt6vcgfp8JHXQUK6Y1j6wo8pJIaPy79 AyDrmxmCjHKMzSmmauToJObHb2rQKWPuuzwt4gRKgEjMy6/AxjiXMm2xiCQ4wbZA tzg= -----END CERTIFICATE-----Generated at Sat Apr 12 15:36:57 2025 by rpki-client