$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/5bdd85b7-f9fd-36fb-920e-eb886099e599.roa File: 5bdd85b7-f9fd-36fb-920e-eb886099e599.roa (raw, json) Hash identifier: g9qhvVX8DgMwLwQ+hK97L1Xtv/vVyQSiCw7RpSjlVkE= Subject key identifier: 5F:0B:05:85:50:89:D1:ED:CA:5C:C8:89:BF:A8:9E:3C:E9:DB:D4:F0 Certificate issuer: /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3 Certificate serial: 010D0C9F432858487A207254C4057E029B7DCA40 Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/5bdd85b7-f9fd-36fb-920e-eb886099e599.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 64.57.8.0/21 maxlen: 21 64.57.8.0/24 maxlen: 24 64.57.9.0/24 maxlen: 24 64.57.10.0/24 maxlen: 24 64.57.11.0/24 maxlen: 24 64.57.12.0/24 maxlen: 24 64.57.13.0/24 maxlen: 24 64.57.14.0/24 maxlen: 24 64.57.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:72:54:c4:05:7e:02:9b:7d:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=7b7b4558-b526-4d5e-9456-0d8048168b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:aa:36:ed:32:89:47:1d:15:01:e8:da:80: 29:ac:51:87:ef:c5:7e:4a:9e:68:71:dc:30:eb:ba: e6:61:30:30:5a:96:a2:0a:35:ab:18:c7:54:a0:b9: a7:e6:0b:8c:55:a8:cc:90:74:eb:6d:ce:a0:aa:74: f8:25:bf:78:42:5d:4e:9b:7e:72:19:02:3a:2a:4a: 16:61:22:52:e5:85:4e:f8:46:ff:ed:9d:60:cf:c0: 1c:99:72:e6:11:cc:e5:53:38:93:70:29:b3:9f:4f: 25:91:91:23:4e:c2:ac:a9:f3:7a:24:0f:71:5b:a9: 34:35:e1:d1:fd:ee:6a:b4:2a:41:ec:aa:6b:d5:5e: 78:ea:41:39:fa:69:3e:ef:0f:bb:ac:0d:54:6b:71: 98:5a:2b:a8:17:2b:6c:19:22:5c:f0:c4:92:8e:2a: 02:9b:f3:a1:d0:61:a0:34:30:55:f5:7b:d4:df:37: 53:0b:24:56:9d:bf:fe:61:97:54:d0:d8:a3:91:59: ff:d7:e5:fd:e8:78:80:c4:2d:00:8a:f5:04:2d:ff: dc:5a:ae:78:b2:e8:ab:00:f0:16:76:f0:07:1f:2a: df:88:50:1f:7f:28:9a:34:63:df:9d:21:5a:5c:47: c9:67:c4:8d:b5:e5:e0:b9:29:a6:f5:ca:c5:07:e2: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0B:05:85:50:89:D1:ED:CA:5C:C8:89:BF:A8:9E:3C:E9:DB:D4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/5bdd85b7-f9fd-36fb-920e-eb886099e599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl X509v3 Authority Key Identifier: keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:87:5f:74:1a:51:4d:00:4f:01:b6:48:43:45:70:5f:a6:b0: 35:47:06:aa:a6:89:46:4a:3f:96:f4:5e:8e:12:02:fc:f9:0f: f4:57:20:ec:08:d9:6d:f9:ba:12:aa:6a:58:f7:92:b9:e9:0e: cc:b5:e3:83:8c:a9:e3:55:fd:29:31:18:b2:eb:86:05:77:f3: dd:4a:a1:e8:15:6a:44:a3:81:c6:a5:e2:de:89:1a:ec:40:15: 27:63:2f:5e:0e:06:55:6e:e2:8b:57:59:c0:90:c3:e0:e2:a7: ef:d9:f5:b9:99:93:83:af:bb:bb:b6:11:3b:68:c0:db:d8:02: 88:a1:15:7c:e6:e6:72:a8:52:20:d1:18:80:41:3e:df:8b:9d: cd:d9:38:df:a2:97:dc:e6:fd:12:cc:d4:14:b2:f3:32:63:64: 64:6b:aa:80:b6:d0:c7:82:a0:af:15:c1:d5:2b:99:93:23:2e: de:39:85:76:77:0d:43:32:a6:d8:0d:2d:07:e0:57:0a:6d:ba: f1:30:3d:1f:6b:b1:97:c9:6e:8e:a4:5f:a2:de:2d:82:94:f1: 1c:e7:97:1c:72:3e:fa:ca:de:9c:f9:f7:77:8d:92:16:d9:64: 9a:62:28:0b:c2:9a:aa:bb:6c:73:4f:9a:8a:1e:02:35:9c:b5: be:50:69:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHJUxAV+Apt9ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzMzNlZDYtYjc0Zi00NjY1LWI3YTgtMmYwNGRmNmY4 N2YzMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk N2I3YjQ1NTgtYjUyNi00ZDVlLTk0NTYtMGQ4MDQ4MTY4YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjqqNu0yiUcdFQHo2oAprFGH78V+Sp5ocdww 67rmYTAwWpaiCjWrGMdUoLmn5guMVajMkHTrbc6gqnT4Jb94Ql1Om35yGQI6KkoW YSJS5YVO+Eb/7Z1gz8AcmXLmEczlUziTcCmzn08lkZEjTsKsqfN6JA9xW6k0NeHR /e5qtCpB7Kpr1V546kE5+mk+7w+7rA1Ua3GYWiuoFytsGSJc8MSSjioCm/Oh0GGg NDBV9XvU3zdTCyRWnb/+YZdU0NijkVn/1+X96HiAxC0AivUELf/cWq54suirAPAW dvAHHyrfiFAffyiaNGPfnSFaXEfJZ8SNteXguSmm9crFB+IhFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8LBYVQidHtylzIib+onjzp29TwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMz M2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0ZGY2Zjg3ZjMvNWJkZDg1YjctZjlmZC0z NmZiLTkyMGUtZWI4ODYwOTllNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjYzMzNlZDYtYjc0Zi00NjY1LWI3 YTgtMmYwNGRmNmY4N2YzL2Y2MzMzZWQ2LWI3NGYtNDY2NS1iN2E4LTJmMDRkZjZm ODdmMy5jcmwwHwYDVR0jBBgwFoAUSQK1tUOT0m/tMI1Qpa/gqEUI3Z0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMzM2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0 ZGY2Zjg3ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQDkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWHX3QaUU0ATwG2SENFcF+msDVHBqqmiUZKP5b0Xo4SAvz5D/RXIOwI 2W35uhKqalj3krnpDsy144OMqeNV/SkxGLLrhgV3891KoegVakSjgcal4t6JGuxA FSdjL14OBlVu4otXWcCQw+Dip+/Z9bmZk4Ovu7u2ETtowNvYAoihFXzm5nKoUiDR GIBBPt+Lnc3ZON+il9zm/RLM1BSy8zJjZGRrqoC20MeCoK8VwdUrmZMjLt45hXZ3 DUMyptgNLQfgVwptuvEwPR9rsZfJbo6kX6LeLYKU8RznlxxyPvrK3pz593eNkhbZ ZJpiKAvCmqq7bHNPmooeAjWctb5QacE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:00 2025 by rpki-client