$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa File: 632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa (raw, json) Hash identifier: OElghfXlY1EuaCzk9+UbovxK9Nc9Mh+9lR1D2ILeYuk= Subject key identifier: 89:AB:FF:30:1F:BC:40:8D:53:0F:6C:32:3A:E2:DD:38:D4:4E:B6:EB Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e Certificate serial: 010D0C9F432858492E13BDAB0021974E227C3380 Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 19237 IP address blocks: 64.6.96.0/20 maxlen: 20 64.57.64.0/19 maxlen: 19 64.255.0.0/18 maxlen: 18 66.37.0.0/19 maxlen: 19 69.5.160.0/19 maxlen: 19 74.119.64.0/21 maxlen: 21 204.10.137.0/24 maxlen: 24 204.10.138.0/23 maxlen: 23 204.10.140.0/22 maxlen: 22 208.92.160.0/21 maxlen: 21 216.17.96.0/20 maxlen: 20 216.239.129.0/24 maxlen: 24 216.239.130.0/23 maxlen: 23 216.239.132.0/22 maxlen: 22 216.239.136.0/21 maxlen: 21 2607:fe90::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bd:ab:00:21:97:4e:22:7c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=e81841a1-72c8-46ba-aa20-80d93589b12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:23:31:26:f2:36:4c:92:a9:d9:72:a1:dc: e1:63:2a:eb:56:84:95:0c:85:ac:7b:33:fe:7d:ee: 1c:3c:a3:76:14:2b:42:af:e5:69:12:18:82:38:6d: e2:39:33:5c:cc:c2:fc:58:7d:f6:bc:ff:80:13:c0: 78:f5:26:7d:d2:2e:59:ad:68:30:5f:bc:95:6b:52: 15:2c:c9:97:09:3a:8d:a6:33:58:20:e1:fc:53:66: 9d:fb:c0:aa:41:a4:4f:19:1c:26:21:be:04:76:4b: 66:7f:a5:16:7a:50:86:bd:c2:9a:2b:66:2a:17:9c: e1:c5:cc:c9:80:47:1a:29:5b:54:ec:c2:13:cd:d0: f2:a2:a7:17:42:12:e6:ea:ee:db:fe:c0:cf:e9:e2: 34:34:ff:62:05:b7:69:fe:c0:eb:2e:e5:c0:94:85: 61:c5:37:8a:13:1b:7f:12:8d:04:93:e5:25:6e:a7: 11:ae:2a:68:2f:70:57:a9:dc:4b:ff:4c:7c:0d:7a: 4d:3e:dd:cb:39:82:8f:6a:30:20:70:f8:d9:57:f0: ac:f8:74:9c:85:51:4e:39:1c:c6:fa:fd:03:f2:b9: 8e:9f:6b:87:0f:7b:63:47:b2:5a:b5:ae:fe:8a:ca: be:d7:9e:55:f9:48:81:3a:44:15:92:12:e7:96:d5: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AB:FF:30:1F:BC:40:8D:53:0F:6C:32:3A:E2:DD:38:D4:4E:B6:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl X509v3 Authority Key Identifier: keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer sbgp-ipAddrBlock: critical IPv4: 64.6.96.0/20 64.57.64.0/19 64.255.0.0/18 66.37.0.0/19 69.5.160.0/19 74.119.64.0/21 204.10.137.0-204.10.143.255 208.92.160.0/21 216.17.96.0/20 216.239.129.0-216.239.143.255 IPv6: 2607:fe90::/33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:71:6c:d0:18:57:11:bc:04:7a:8e:11:42:59:93:a3:00:e7: f1:f6:7a:4b:fd:3b:b5:c3:43:36:ea:b5:d3:13:a1:5c:11:3b: 2a:4c:4d:3b:f2:2b:cf:2a:18:0a:75:c8:a0:61:88:3f:53:43: 58:4e:b1:fb:bc:a3:ae:b7:e0:70:07:15:ca:c0:d7:28:34:06: 74:5f:20:80:f9:50:a6:76:24:ee:2e:7d:f5:61:74:e9:41:be: b6:eb:d8:e2:fc:83:93:39:93:9d:06:a3:2e:c4:bd:d9:19:6f: b6:80:a3:71:9b:f5:d2:f3:9f:09:b1:c2:30:4f:b9:93:c1:6c: dd:0b:e0:79:da:e0:27:da:bb:03:7e:33:a7:26:e8:ec:70:ba: 78:9d:1d:81:b6:10:e7:bd:6b:20:77:59:77:6f:c0:9d:7e:d1: 2f:a5:db:9b:85:a7:83:f6:28:e9:84:07:cf:b8:17:23:4f:3a: 80:9a:91:f6:9c:82:9f:b3:e4:a3:47:27:e7:ee:af:d6:c3:9c: 43:a6:f3:4e:a1:0f:59:74:b0:bb:91:a2:1b:5b:35:38:86:5e: 22:f6:14:d6:bc:40:26:fe:ea:bb:8d:f3:fe:65:29:1e:22:55: f2:e5:e2:1a:65:42:93:be:9f:6b:d6:44:17:66:24:78:6d:49: 82:9d:09:ab -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUAQ0Mn0MoWEkuE72rACGXTiJ8M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj YjFlMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZTgxODQxYTEtNzJjOC00NmJhLWFhMjAtODBkOTM1ODliMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVsjMSbyNkySqdlyodzhYyrrVoSVDIWsezP+ fe4cPKN2FCtCr+VpEhiCOG3iOTNczML8WH32vP+AE8B49SZ90i5ZrWgwX7yVa1IV LMmXCTqNpjNYIOH8U2ad+8CqQaRPGRwmIb4Edktmf6UWelCGvcKaK2YqF5zhxczJ gEcaKVtU7MITzdDyoqcXQhLm6u7b/sDP6eI0NP9iBbdp/sDrLuXAlIVhxTeKExt/ Eo0Ek+UlbqcRripoL3BXqdxL/0x8DXpNPt3LOYKPajAgcPjZV/Cs+HSchVFOORzG +v0D8rmOn2uHD3tjR7Jata7+isq+155V+UiBOkQVkhLnltXLRwIDAQABo4IDqzCC A6cwHQYDVR0OBBYEFImr/zAfvECNUw9sMjri3TjUTrbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvNjMyZWYzYWQtNGFiNC0z Y2Q1LWFlNmUtMWM5YWFhNGUzNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk YTVmY2NiMWUuY2VyMHUGCCsGAQUFBwEHAQH/BGYwZDBSBAIAATBMAwQEQAZgAwQF QDlAAwQGQP8AAwQFQiUAAwQFRQWgAwQDSndAMAwDBADMCokDBATMCoADBAPQXKAD BATYEWAwDAMEANjvgQMEBNjvgDAOBAIAAjAIAwYHJgf+kAAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlnFs 0BhXEbwEeo4RQlmTowDn8fZ6S/07tcNDNuq10xOhXBE7KkxNO/IrzyoYCnXIoGGI P1NDWE6x+7yjrrfgcAcVysDXKDQGdF8ggPlQpnYk7i599WF06UG+tuvY4vyDkzmT nQajLsS92RlvtoCjcZv10vOfCbHCME+5k8Fs3QvgedrgJ9q7A34zpybo7HC6eJ0d gbYQ571rIHdZd2/AnX7RL6Xbm4Wng/Yo6YQHz7gXI086gJqR9pyCn7Pko0cn5+6v 1sOcQ6bzTqEPWXSwu5GiG1s1OIZeIvYU1rxAJv7qu43z/mUpHiJV8uXiGmVCk76f a9ZEF2YkeG1Jgp0Jqw== -----END CERTIFICATE-----Generated at Fri Apr 11 23:15:08 2025 by rpki-client