$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/0cb718e2-533c-3e77-9812-b048b002d8ae.roa File: 0cb718e2-533c-3e77-9812-b048b002d8ae.roa (raw, json) Hash identifier: 0Wjv1AqqhHmb7N9Omha5jrc1IePx5AUPLPaPzhLb21A= Subject key identifier: 80:0A:BD:80:1B:50:AA:42:0B:20:97:15:EF:5B:FC:52:6D:43:3B:33 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F43285848EC9685390B7D97EB20EC8EE0 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/0cb718e2-533c-3e77-9812-b048b002d8ae.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 4181 IP address blocks: 64.35.192.0/20 maxlen: 24 64.50.224.0/19 maxlen: 24 64.83.160.0/19 maxlen: 24 66.173.0.0/17 maxlen: 24 66.222.0.0/17 maxlen: 24 69.11.128.0/17 maxlen: 24 69.21.0.0/16 maxlen: 24 69.128.0.0/14 maxlen: 24 75.100.0.0/16 maxlen: 24 96.60.0.0/15 maxlen: 24 184.60.0.0/15 maxlen: 24 216.165.128.0/18 maxlen: 24 216.170.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:85:39:0b:7d:97:eb:20:ec:8e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=a21fc38e-2309-42c5-8b79-2eb3800430c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:31:83:97:c7:21:ae:ad:ed:3d:34:a8:34: 1f:78:d7:99:f3:db:74:da:af:1a:27:30:db:cb:d7: ef:9d:75:da:3a:ee:5f:35:89:7c:13:27:12:6b:e2: 09:55:fb:90:68:c3:0d:c3:da:33:47:da:b7:24:b0: 8a:45:c3:4e:23:46:19:49:6a:10:92:65:af:54:4c: 4a:3b:c8:21:db:3e:32:80:1e:35:23:6f:89:a1:2c: 14:95:e5:29:43:b6:eb:29:11:80:6b:8e:36:4c:24: 4f:e7:d9:12:54:02:2c:86:36:b6:56:a9:56:90:02: 30:27:49:4c:5d:be:8b:1a:f0:ac:df:54:8c:3e:33: 6e:10:a8:9b:1c:6d:10:aa:bd:b8:6e:a0:7a:0d:20: 81:a9:a7:98:a3:99:7f:37:e5:0b:80:cc:38:c9:db: 75:61:81:99:85:23:5c:e1:5c:0a:02:36:2f:08:65: d8:48:69:c5:dc:7f:c7:a1:4b:b8:52:1e:94:a5:6e: ff:46:a7:61:70:60:63:7d:77:f0:41:11:91:79:39: b2:df:67:0d:bc:4a:74:89:86:2f:89:20:0f:6e:8f: 65:de:6f:81:30:7f:d8:93:49:80:f0:78:e1:57:9b: 82:3b:2a:7c:09:f7:b4:77:a1:78:5f:57:e7:e4:17: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0A:BD:80:1B:50:AA:42:0B:20:97:15:EF:5B:FC:52:6D:43:3B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/0cb718e2-533c-3e77-9812-b048b002d8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 64.35.192.0/20 64.50.224.0/19 64.83.160.0/19 66.173.0.0/17 66.222.0.0/17 69.11.128.0/17 69.21.0.0/16 69.128.0.0/14 75.100.0.0/16 96.60.0.0/15 184.60.0.0/15 216.165.128.0/18 216.170.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:84:9c:33:93:b1:bb:a7:a7:f0:aa:ff:ab:35:21:ae:db:55: 0d:38:46:66:c4:7d:bc:db:bf:de:d4:d2:03:29:18:e0:c8:bb: 00:24:26:d6:34:d8:8b:74:a4:8d:97:32:7f:b2:a2:d5:73:92: 32:de:a3:f4:63:3a:63:c4:0f:9a:fc:88:0f:19:62:a5:0a:86: 8b:29:6d:66:fe:a8:52:1c:7b:6c:62:18:c8:7e:25:74:e0:1f: 62:a4:e5:9e:e3:d0:a8:18:f0:a3:43:2b:7a:df:00:cb:39:e2: b2:31:3c:7d:9b:21:d4:13:35:44:dd:98:8f:eb:f7:60:bf:93: 53:dc:14:32:da:2d:c7:94:df:6e:61:b7:ff:eb:19:64:12:4a: 71:dd:70:38:5e:72:c9:63:09:9c:c2:f8:2a:f9:7a:40:50:94: ed:37:c0:17:02:09:ee:23:36:9a:6a:2b:a4:6e:71:8e:63:48: 0c:db:e2:fd:a9:3e:01:94:88:5e:76:a6:71:a1:fa:5d:d0:eb: f6:f8:eb:1c:52:f8:e0:12:4f:e3:81:56:c6:58:05:2a:ae:85: a8:32:88:e8:f5:5e:bd:fe:b1:f6:83:59:b1:31:fb:63:b9:db: 48:08:81:f4:e9:8f:44:f5:89:4e:f6:14:11:06:94:a9:45:cd: ca:57:c9:c4 -----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgIUAQ0Mn0MoWEjsloU5C32X6yDsjuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YTIxZmMzOGUtMjMwOS00MmM1LThiNzktMmViMzgwMDQzMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5cxg5fHIa6t7T00qDQfeNeZ89t02q8aJzDb y9fvnXXaOu5fNYl8EycSa+IJVfuQaMMNw9ozR9q3JLCKRcNOI0YZSWoQkmWvVExK O8gh2z4ygB41I2+JoSwUleUpQ7brKRGAa442TCRP59kSVAIshja2VqlWkAIwJ0lM Xb6LGvCs31SMPjNuEKibHG0Qqr24bqB6DSCBqaeYo5l/N+ULgMw4ydt1YYGZhSNc 4VwKAjYvCGXYSGnF3H/HoUu4Uh6UpW7/RqdhcGBjfXfwQRGReTmy32cNvEp0iYYv iSAPbo9l3m+BMH/Yk0mA8HjhV5uCOyp8Cfe0d6F4X1fn5BfFOwIDAQABo4IDmDCC A5QwHQYDVR0OBBYEFIAKvYAbUKpCCyCXFe9b/FJtQzszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvMGNiNzE4ZTItNTMzYy0z ZTc3LTk4MTItYjA0OGIwMDJkOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMGIGCCsGAQUFBwEHAQH/BFMwUTBPBAIAATBJAwQEQCPAAwQF QDLgAwQFQFOgAwQHQq0AAwQHQt4AAwQHRQuAAwMARRUDAwJFgAMDAEtkAwMBYDwD AwG4PAMEBtilgAMEB9iqgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDShJwzk7G7p6fwqv+rNSGu21UNOEZm xH2827/e1NIDKRjgyLsAJCbWNNiLdKSNlzJ/sqLVc5Iy3qP0YzpjxA+a/IgPGWKl CoaLKW1m/qhSHHtsYhjIfiV04B9ipOWe49CoGPCjQyt63wDLOeKyMTx9myHUEzVE 3ZiP6/dgv5NT3BQy2i3HlN9uYbf/6xlkEkpx3XA4XnLJYwmcwvgq+XpAUJTtN8AX AgnuIzaaaiukbnGOY0gM2+L9qT4BlIhedqZxofpd0Ov2+OscUvjgEk/jgVbGWAUq roWoMojo9V69/rH2g1mxMftjudtICIH06Y9E9YlO9hQRBpSpRc3KV8nE -----END CERTIFICATE-----Generated at Fri Apr 11 23:32:40 2025 by rpki-client