$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/2ef2c836-21f9-32b9-8322-176c344929e8.roa File: 2ef2c836-21f9-32b9-8322-176c344929e8.roa (raw, json) Hash identifier: gHak8MeZDWMJMY4Q9qTPEvK5mr4Dh930VyGJi0w/TOg= Subject key identifier: C7:66:2C:1A:7F:6A:66:5E:3A:58:74:31:A9:20:6F:3B:95:A2:E0:F3 Certificate issuer: /CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Certificate serial: 010D0C9F43285848DEA133F1C1D6A8A72434B9A0 Authority key identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/2ef2c836-21f9-32b9-8322-176c344929e8.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 6128 IP address blocks: 24.89.128.0/18 maxlen: 25 75.99.0.0/16 maxlen: 25 75.127.128.0/17 maxlen: 25 96.56.0.0/15 maxlen: 25 108.58.0.0/16 maxlen: 25 108.162.0.0/18 maxlen: 25 108.170.64.0/18 maxlen: 25 142.54.64.0/18 maxlen: 25 173.220.0.0/16 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:33:f1:c1:d6:a8:a7:24:34:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=51379f7d-2397-43d7-876b-51add5aed0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:37:b8:47:79:44:f8:15:af:5b:f5:19:a9: dc:c9:80:d2:63:54:d7:6b:8d:02:fb:48:66:59:04: 5c:ba:0d:6b:7d:61:4d:e4:5a:1e:1a:1a:d8:6f:71: 74:1b:0e:bc:9d:53:d9:5e:6d:f5:91:3c:72:b6:db: 1d:29:43:f6:78:3c:da:4a:37:f2:e3:0e:cb:28:b4: c2:ec:da:27:9f:7f:72:fd:8e:2d:77:29:47:24:ed: f5:08:54:eb:f9:74:75:2e:ac:38:78:66:7d:70:67: 19:60:b6:de:e3:53:7c:29:56:f4:ad:b5:9d:f2:21: 1e:8c:94:e4:36:ca:2e:b4:f2:0a:19:7b:3a:f5:67: fe:b4:f2:63:3c:24:1c:a6:75:0c:8b:06:55:09:5a: f7:77:54:fb:b0:a2:f1:8e:67:92:ae:0b:d9:48:fc: 03:45:48:ed:0e:db:b4:ca:b0:e6:dc:e9:ad:2c:31: fd:9e:41:e4:a8:74:d2:4c:c0:ad:3a:63:c2:03:b8: b5:9b:55:15:95:71:2d:b0:43:3e:53:9a:3c:1a:fe: 17:6f:45:c4:e1:62:19:e3:6c:ac:a0:48:7b:b9:74: 59:05:76:94:de:6d:73:ae:4f:68:91:56:78:6f:85: 7b:33:50:3e:e8:e9:2b:44:94:94:91:ad:3f:16:66: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:66:2C:1A:7F:6A:66:5E:3A:58:74:31:A9:20:6F:3B:95:A2:E0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/2ef2c836-21f9-32b9-8322-176c344929e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.crl X509v3 Authority Key Identifier: keyid:A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer sbgp-ipAddrBlock: critical IPv4: 24.89.128.0/18 75.99.0.0/16 75.127.128.0/17 96.56.0.0/15 108.58.0.0/16 108.162.0.0/18 108.170.64.0/18 142.54.64.0/18 173.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:12:9e:77:f7:bf:fa:98:38:75:6b:21:04:f4:ee:27:4f:24: 11:89:fa:66:b5:3a:90:bb:46:91:8f:a2:05:59:08:38:b5:11: 0b:31:55:c6:b9:2d:84:9e:94:d1:ec:79:3d:6b:c7:24:77:33: 29:60:20:93:bc:87:76:4d:99:33:b9:51:38:47:c6:00:8c:d5: 9f:e4:8e:12:04:35:50:1d:80:bb:e7:1f:0d:07:67:35:fb:3f: 88:63:1c:c5:59:6e:c5:4e:7e:51:96:97:13:6b:a6:4e:16:df: 0e:d8:d6:db:ec:aa:6e:35:b8:d4:f9:b1:6d:5d:57:36:bc:24: 22:40:58:19:94:46:87:cc:37:74:ff:e5:b9:23:87:5f:23:78: 4e:78:b0:83:82:7d:6d:33:ed:4a:51:64:a6:7a:88:0f:cb:33: 06:e6:07:5a:29:91:92:81:86:26:e0:39:c8:53:78:f8:95:11: 16:33:a8:d4:91:c9:c5:28:b4:51:ba:c6:51:f5:6c:e8:19:b9: 76:1c:c7:5d:dd:6d:53:b8:98:b1:b3:29:b4:6b:c3:1b:7a:db: 43:c5:90:89:2f:06:89:91:ce:aa:08:7b:82:97:00:4c:06:2e: e7:11:57:4e:be:f9:93:1d:ad:cd:9d:21:12:e4:26:89:1b:ed: ef:8c:52:0e -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEjeoTPxwdaopyQ0uaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y5NWE4YWItZjliMi00MzJjLWExZmQtZDkzNjgzYmMy ZmE4MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NTEzNzlmN2QtMjM5Ny00M2Q3LTg3NmItNTFhZGQ1YWVkMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQ3uEd5RPgVr1v1GancyYDSY1TXa40C+0hm WQRcug1rfWFN5FoeGhrYb3F0Gw68nVPZXm31kTxyttsdKUP2eDzaSjfy4w7LKLTC 7Nonn39y/Y4tdylHJO31CFTr+XR1Lqw4eGZ9cGcZYLbe41N8KVb0rbWd8iEejJTk NsoutPIKGXs69Wf+tPJjPCQcpnUMiwZVCVr3d1T7sKLxjmeSrgvZSPwDRUjtDtu0 yrDm3OmtLDH9nkHkqHTSTMCtOmPCA7i1m1UVlXEtsEM+U5o8Gv4Xb0XE4WIZ42ys oEh7uXRZBXaU3m1zrk9okVZ4b4V7M1A+6OkrRJSUka0/FmYJQQIDAQABo4IDgTCC A30wHQYDVR0OBBYEFMdmLBp/amZeOlh0MakgbzuVouDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjk1 YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNiYzJmYTgvMmVmMmM4MzYtMjFmOS0z MmI5LTgzMjItMTc2YzM0NDkyOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Y5NWE4YWItZjliMi00MzJjLWEx ZmQtZDkzNjgzYmMyZmE4LzNmOTVhOGFiLWY5YjItNDMyYy1hMWZkLWQ5MzY4M2Jj MmZhOC5jcmwwHwYDVR0jBBgwFoAUpcsIdBIqhUU/aIf9xNjFTamHAAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2 ODNiYzJmYTguY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQGGFmAAwMA S2MDBAdLf4ADAwFgOAMDAGw6AwQGbKIAAwQGbKpAAwQGjjZAAwMArdwwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAJxKed/e/+pg4dWshBPTuJ08kEYn6ZrU6kLtGkY+iBVkIOLURCzFVxrkthJ6U 0ex5PWvHJHczKWAgk7yHdk2ZM7lROEfGAIzVn+SOEgQ1UB2Au+cfDQdnNfs/iGMc xVluxU5+UZaXE2umThbfDtjW2+yqbjW41PmxbV1XNrwkIkBYGZRGh8w3dP/luSOH XyN4Tniwg4J9bTPtSlFkpnqID8szBuYHWimRkoGGJuA5yFN4+JURFjOo1JHJxSi0 UbrGUfVs6Bm5dhzHXd1tU7iYsbMptGvDG3rbQ8WQiS8GiZHOqgh7gpcATAYu5xFX Tr75kx2tzZ0hEuQmiRvt74xSDg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:53 2025 by rpki-client