$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa File: fa603d7b-627f-38af-83f9-1ffef126c099.roa (raw, json) Hash identifier: MOIAFjIeC3snKHzS0IRc7rlOtqhbRrMFn7ZaIiErbUQ= Subject key identifier: 4E:C7:68:06:E9:12:97:85:E3:2A:CB:1B:29:74:C7:C2:E0:3D:57:BB Certificate issuer: /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e Certificate serial: 010D0C9F432858491AA6C69C586816708AC6A580 Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 19201 IP address blocks: 64.127.160.0/19 maxlen: 24 66.171.0.0/20 maxlen: 24 170.62.0.0/19 maxlen: 24 198.183.172.0/24 maxlen: 24 199.30.120.0/21 maxlen: 24 199.127.220.0/22 maxlen: 24 199.187.248.0/21 maxlen: 24 199.201.76.0/22 maxlen: 24 208.54.160.0/20 maxlen: 24 2605:27c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c6:9c:58:68:16:70:8a:c6:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=d7ef2dac-564c-437f-b5e7-a65633e276bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:d5:3a:03:93:3f:be:68:c2:19:10:5f:fd: df:6f:3b:b3:9e:21:be:0b:75:76:e4:59:9c:36:e7: b8:a8:ec:a5:b7:5b:ec:9b:af:d7:d8:b8:6a:b6:f5: 9c:8f:e4:d6:d7:4c:7e:ee:70:1b:65:4a:38:ab:59: 5d:69:24:9d:28:0f:b7:9e:4d:06:1f:fb:5b:b1:61: 32:fc:bf:1a:49:be:bc:41:02:d0:54:af:6f:33:c3: 73:3d:93:a9:d2:30:aa:f4:13:b4:e7:a2:3b:67:93: 7c:eb:f7:c1:f2:56:a5:b7:81:82:03:aa:96:3e:11: 1a:35:6f:28:6b:aa:29:4c:29:c8:36:a6:02:67:61: 9f:f6:46:f0:d7:fa:d6:09:62:be:65:b7:76:49:a2: 5b:e3:59:4c:bc:98:cd:8f:fc:c5:fc:f3:23:b5:50: 42:31:2b:4d:78:8c:ce:ac:39:44:f8:31:3a:d7:f8: cd:47:c1:31:28:95:9c:97:8e:56:7d:5d:8e:02:fe: 44:bd:0d:40:ae:c8:d2:27:91:6d:2b:35:0f:96:9d: eb:42:aa:51:1d:59:62:ae:8d:6c:09:b6:85:c4:3c: 03:76:10:db:61:7b:91:b0:52:6f:a7:13:22:ae:d6: 10:d0:25:57:23:77:b1:69:9b:a3:0a:f8:05:b4:99: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C7:68:06:E9:12:97:85:E3:2A:CB:1B:29:74:C7:C2:E0:3D:57:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl X509v3 Authority Key Identifier: keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer sbgp-ipAddrBlock: critical IPv4: 64.127.160.0/19 66.171.0.0/20 170.62.0.0/19 198.183.172.0/24 199.30.120.0/21 199.127.220.0/22 199.187.248.0/21 199.201.76.0/22 208.54.160.0/20 IPv6: 2605:27c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a8:4d:e2:e2:5b:ba:33:e9:61:19:dd:43:d6:38:f7:5e:24: af:4f:f3:53:43:4b:cb:8b:a1:bd:53:71:e5:d8:08:c6:ba:ab: d5:cb:fc:30:02:06:53:6d:19:ea:42:ee:6a:e3:65:4e:41:ae: b3:36:3d:e5:0e:e7:45:65:d1:a0:f9:0c:ea:d4:37:62:0b:e1: 38:a3:b2:64:8d:d5:b4:be:1d:2e:ba:5f:b4:b2:7e:6f:bb:96: a1:08:d5:09:e5:54:1b:25:bc:c8:98:e8:86:70:e4:d8:9c:43: 22:4a:90:9c:ef:19:02:ba:1e:47:48:f3:6d:c5:00:86:3a:8d: f9:2b:81:4b:6b:ba:10:ae:66:b9:d5:3a:2f:1b:6f:21:09:a0: e3:2c:23:a0:87:ac:db:0d:d4:f3:2a:a9:f7:14:6c:3f:72:4e: 79:db:8e:af:49:74:b4:02:e2:b5:b4:75:f4:f4:60:10:d1:8f: 67:65:2c:96:5c:4b:63:a7:b6:fa:b7:a1:57:db:10:cd:31:19: cd:57:36:71:14:94:b1:8e:5a:4c:48:bb:85:af:6f:af:0c:a6: 29:76:46:9d:87:a4:d9:fe:65:85:09:e4:df:73:6a:65:fe:c4: aa:5c:c2:57:0b:5b:92:2d:41:54:6d:e2:9d:6c:be:09:5a:94: 62:02:14:a9 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEkapsacWGgWcIrGpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JmYmYwYTgtNDMzYy00N2NhLWI1NzktYjZjMTI4ODMw ODhlMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDdlZjJkYWMtNTY0Yy00MzdmLWI1ZTctYTY1NjMzZTI3NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH3VOgOTP75owhkQX/3fbzuzniG+C3V25Fmc Nue4qOylt1vsm6/X2LhqtvWcj+TW10x+7nAbZUo4q1ldaSSdKA+3nk0GH/tbsWEy /L8aSb68QQLQVK9vM8NzPZOp0jCq9BO056I7Z5N86/fB8lalt4GCA6qWPhEaNW8o a6opTCnINqYCZ2Gf9kbw1/rWCWK+Zbd2SaJb41lMvJjNj/zF/PMjtVBCMStNeIzO rDlE+DE61/jNR8ExKJWcl45WfV2OAv5EvQ1ArsjSJ5FtKzUPlp3rQqpRHVliro1s CbaFxDwDdhDbYXuRsFJvpxMirtYQ0CVXI3exaZujCvgFtJkSRQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFE7HaAbpEpeF4yrLGyl0x8LgPVe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmZi ZjBhOC00MzNjLTQ3Y2EtYjU3OS1iNmMxMjg4MzA4OGUvZmE2MDNkN2ItNjI3Zi0z OGFmLTgzZjktMWZmZWYxMjZjMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JmYmYwYTgtNDMzYy00N2NhLWI1 NzktYjZjMTI4ODMwODhlLzdiZmJmMGE4LTQzM2MtNDdjYS1iNTc5LWI2YzEyODgz MDg4ZS5jcmwwHwYDVR0jBBgwFoAU0FAxwQopiDrJvC4XThv4FQODM4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmZiZjBhOC00MzNjLTQ3Y2EtYjU3OS1iNmMx Mjg4MzA4OGUuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQFQH+gAwQE QqsAAwQFqj4AAwQAxresAwQDxx54AwQCx3/cAwQDx7v4AwQCx8lMAwQE0DagMA0E AgACMAcDBQAmBSfAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGGoTeLiW7oz6WEZ3UPWOPdeJK9P81NDS8uL ob1TceXYCMa6q9XL/DACBlNtGepC7mrjZU5BrrM2PeUO50Vl0aD5DOrUN2IL4Tij smSN1bS+HS66X7Syfm+7lqEI1QnlVBslvMiY6IZw5NicQyJKkJzvGQK6HkdI823F AIY6jfkrgUtruhCuZrnVOi8bbyEJoOMsI6CHrNsN1PMqqfcUbD9yTnnbjq9JdLQC 4rW0dfT0YBDRj2dlLJZcS2Ontvq3oVfbEM0xGc1XNnEUlLGOWkxIu4Wvb68Mpil2 Rp2HpNn+ZYUJ5N9zamX+xKpcwlcLW5ItQVRt4p1svglalGICFKk= -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:59 2025 by rpki-client