$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa File: 49950327-e458-3c3a-8593-2cea9f0380f0.roa (raw, json) Hash identifier: K2DMt7iyFB7xGha8+ClwxCSn4rYIsMPsNgt7nraGO7c= Subject key identifier: D3:F0:1A:F1:54:A0:A8:6B:82:63:CF:7C:68:3A:1A:AF:05:5F:AB:F5 Certificate issuer: /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a Certificate serial: 010D0C9F43285848F926A4AC8B65718778DF15E0 Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 3737 IP address blocks: 24.55.128.0/19 maxlen: 24 24.102.128.0/17 maxlen: 24 24.115.0.0/16 maxlen: 24 24.152.192.0/18 maxlen: 24 24.229.0.0/16 maxlen: 24 24.238.32.0/19 maxlen: 24 24.238.64.0/19 maxlen: 24 24.246.224.0/19 maxlen: 24 50.29.128.0/17 maxlen: 24 64.67.0.0/16 maxlen: 24 69.12.12.0/22 maxlen: 24 70.15.0.0/16 maxlen: 24 70.44.0.0/16 maxlen: 24 75.97.0.0/16 maxlen: 24 104.36.124.0/22 maxlen: 24 216.49.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a4:ac:8b:65:71:87:78:df:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=34448f1b-26aa-4de9-bfc0-89f57ce3a8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:9f:76:32:33:7c:11:b5:33:4a:5e:88:59: 90:97:89:f5:fc:58:f0:03:a4:d4:f6:0f:f0:c3:86: 44:bf:5f:c6:17:35:b8:78:29:86:51:57:96:a8:b3: 5c:f9:48:d4:40:66:a1:c1:a0:89:50:91:a2:3d:5a: a8:c3:06:ad:39:34:59:2a:8d:82:9c:5b:43:d6:72: 5b:9f:c4:ba:a8:c3:da:5c:57:85:d4:13:63:45:87: 75:a2:d4:be:5c:86:c6:c1:f0:58:61:d2:74:da:89: e2:4b:85:f6:d2:75:33:5d:36:d8:22:1a:d9:f0:e0: 46:18:fb:b1:0b:2f:8a:79:eb:ff:d8:ec:17:0b:44: dd:e2:40:f9:e5:bb:37:35:7d:e1:f0:31:2d:25:e1: 3b:2b:f6:48:20:64:e8:ed:e9:dc:bd:7d:cf:61:18: 23:c5:80:a3:73:da:cc:a9:62:d0:77:df:04:92:46: 20:5b:6d:cd:9c:fc:77:6f:66:ad:35:cb:2d:3d:95: be:61:45:9b:66:24:aa:5a:d1:db:d8:9d:d8:a5:a1: 7a:08:e4:f3:8e:0d:8a:56:6b:5a:bf:9a:fc:3d:67: 01:2a:26:3d:c5:e6:17:29:ed:b4:29:e1:9a:a0:a5: c4:63:fb:06:de:63:fe:2d:1a:51:26:a2:c5:10:d2: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F0:1A:F1:54:A0:A8:6B:82:63:CF:7C:68:3A:1A:AF:05:5F:AB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl X509v3 Authority Key Identifier: keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer sbgp-ipAddrBlock: critical IPv4: 24.55.128.0/19 24.102.128.0/17 24.115.0.0/16 24.152.192.0/18 24.229.0.0/16 24.238.32.0-24.238.95.255 24.246.224.0/19 50.29.128.0/17 64.67.0.0/16 69.12.12.0/22 70.15.0.0/16 70.44.0.0/16 75.97.0.0/16 104.36.124.0/22 216.49.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:12:83:cc:5c:f5:9c:36:32:d0:76:f1:a5:a8:35:a0:80:ae: 4c:fb:62:6c:a3:73:e4:f1:23:e4:9b:a6:87:d2:78:8e:4f:3e: 9f:4c:41:d6:1a:e3:17:a4:b2:76:64:79:01:e7:d9:b6:b5:65: 28:34:01:5a:a1:22:ec:a7:a8:5a:49:99:a0:dd:dc:c3:90:91: e3:2b:3e:57:52:80:bc:71:cf:18:03:24:06:24:f9:b5:2c:08: 72:86:b7:27:15:d9:e0:ce:e7:79:18:62:fb:ea:e2:06:42:4f: 1a:b8:9f:f2:2a:d6:55:00:f8:8a:ce:5c:ee:66:95:2e:7d:d6: 44:92:ce:71:80:99:14:ec:b8:9f:4a:d6:ea:df:5d:5f:f1:a6: 1c:36:46:07:4e:3e:16:34:f4:20:8c:91:0b:6b:00:e4:86:74: fb:46:19:49:b5:ef:46:f1:fb:95:ae:58:fd:ae:db:06:34:ba: 09:f5:5d:ad:5c:ad:4c:5f:8a:c1:8d:fa:df:7f:12:f8:39:25: b3:c1:da:d0:5d:52:6c:1d:38:01:00:f6:cb:93:81:cf:fa:f6: a8:e9:3e:58:73:e6:ef:f8:2b:21:6c:a6:71:48:65:d7:d1:07: 9c:b5:30:0d:dc:38:ad:48:c5:c3:2f:25:ec:fd:71:7f:f8:c8: 35:b5:2c:26 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUAQ0Mn0MoWEj5JqSsi2Vxh3jfFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjNDY1Y2EtMGE0NC00M2VhLWEyM2YtZTBkMmRlMjIw ZTFhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MzQ0NDhmMWItMjZhYS00ZGU5LWJmYzAtODlmNTdjZTNhOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWWfdjIzfBG1M0peiFmQl4n1/FjwA6TU9g/w w4ZEv1/GFzW4eCmGUVeWqLNc+UjUQGahwaCJUJGiPVqowwatOTRZKo2CnFtD1nJb n8S6qMPaXFeF1BNjRYd1otS+XIbGwfBYYdJ02oniS4X20nUzXTbYIhrZ8OBGGPux Cy+Keev/2OwXC0Td4kD55bs3NX3h8DEtJeE7K/ZIIGTo7encvX3PYRgjxYCjc9rM qWLQd98EkkYgW23NnPx3b2atNcstPZW+YUWbZiSqWtHb2J3YpaF6COTzjg2KVmta v5r8PWcBKiY9xeYXKe20KeGaoKXEY/sG3mP+LRpRJqLFENLruQIDAQABo4IDqzCC A6cwHQYDVR0OBBYEFNPwGvFUoKhrgmPPfGg6Gq8FX6v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNWM0 NjVjYS0wYTQ0LTQzZWEtYTIzZi1lMGQyZGUyMjBlMWEvNDk5NTAzMjctZTQ1OC0z YzNhLTg1OTMtMmNlYTlmMDM4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzVjNDY1Y2EtMGE0NC00M2VhLWEy M2YtZTBkMmRlMjIwZTFhLzM1YzQ2NWNhLTBhNDQtNDNlYS1hMjNmLWUwZDJkZTIy MGUxYS5jcmwwHwYDVR0jBBgwFoAUtzcwHiCDy8kUQ5t8bkNKt3pCQi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNWM0NjVjYS0wYTQ0LTQzZWEtYTIzZi1lMGQy ZGUyMjBlMWEuY2VyMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQFGDeAAwQH GGaAAwMAGHMDBAYYmMADAwAY5TAMAwQFGO4gAwQFGO5AAwQFGPbgAwQHMh2AAwMA QEMDBAJFDAwDAwBGDwMDAEYsAwMAS2EDBAJoJHwDBAbYMQAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARRKD zFz1nDYy0Hbxpag1oICuTPtibKNz5PEj5Jumh9J4jk8+n0xB1hrjF6SydmR5AefZ trVlKDQBWqEi7KeoWkmZoN3cw5CR4ys+V1KAvHHPGAMkBiT5tSwIcoa3JxXZ4M7n eRhi++riBkJPGrif8irWVQD4is5c7maVLn3WRJLOcYCZFOy4n0rW6t9dX/GmHDZG B04+FjT0IIyRC2sA5IZ0+0YZSbXvRvH7la5Y/a7bBjS6CfVdrVytTF+KwY36338S +Dkls8Ha0F1SbB04AQD2y5OBz/r2qOk+WHPm7/grIWymcUhl19EHnLUwDdw4rUjF wy8l7P1xf/jINbUsJg== -----END CERTIFICATE-----Generated at Sat Apr 12 14:05:14 2025 by rpki-client