$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: jY1vbYg97RQpzidFWTERmUAWGt4ikL9UIs/t2uqveAE= Subject key identifier: 54:10:BB:BA:9B:9D:42:F8:5B:4B:0D:58:F3:F8:D6:88:6A:67:F2:F2 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F432858492CB2141F551D52802EF3244C Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:14:1f:55:1d:52:80:2e:f3:24:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=836030fc-5719-42cc-9f17-2a6963ab1f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:87:a2:82:57:0d:07:7a:67:ac:33:b4:26: cc:d0:a3:a9:b0:51:56:91:77:79:18:36:3d:45:db: 5a:7d:a7:14:4a:4e:51:05:3d:f8:b2:5e:c1:51:58: 0a:3a:f6:11:6f:f4:0d:d4:9e:da:d3:8b:a3:f9:4f: 9c:77:b3:c7:fa:fa:65:17:ea:64:c2:9f:f0:e1:d6: 15:ec:cd:52:12:fa:4e:5b:99:ce:b0:e2:7a:8e:5b: 65:e9:8f:4a:22:b9:3b:4c:1b:3e:39:56:31:6c:fc: 96:f5:bf:60:f7:58:ed:bf:3f:c0:17:09:17:64:8b: 39:88:f7:bd:21:e5:68:95:51:f3:8b:fd:40:c8:04: c9:08:8f:5b:6f:6f:5d:08:f5:6e:f0:5f:f2:34:32: 2d:10:16:b3:f2:52:96:c8:76:b7:a3:53:09:89:26: 29:5d:c9:f0:0c:e5:47:fc:7e:f4:56:4f:79:0a:4e: 16:02:85:e6:88:65:5d:a5:e2:34:d0:33:6c:a5:0c: 0e:f1:86:28:71:a4:2f:b1:ef:43:05:a7:55:6a:f4: 77:d0:37:8c:91:ab:11:52:cb:d3:eb:1b:e9:0f:27: 7b:80:98:5d:b2:c7:1c:5d:04:d1:57:fa:d5:45:fa: 4d:c0:16:62:4e:d2:3d:37:f9:1b:24:12:d1:6e:ba: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:10:BB:BA:9B:9D:42:F8:5B:4B:0D:58:F3:F8:D6:88:6A:67:F2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:57:51:55:db:b4:47:5a:f6:f5:e3:93:9c:fc:48:bf:3a:70: 27:43:1c:94:20:cb:93:fd:0e:18:f7:20:25:ff:25:2a:a4:9a: ad:73:f4:32:3f:c6:aa:89:03:ca:5d:4b:8c:3b:e1:05:a3:9f: 5d:9e:35:98:f6:ba:79:15:6a:0a:67:86:f1:53:8c:db:7a:8d: 0a:df:36:d4:25:8a:b0:b9:ea:26:d5:83:fa:c4:da:0e:39:4f: 15:37:dc:a5:c8:0b:d8:c6:23:b8:ec:be:b3:b9:06:3b:47:b5: 48:64:1f:3b:af:fa:57:0c:3b:d8:b3:31:12:05:df:93:97:47: f7:09:3c:25:a8:b2:3f:2a:12:8e:a7:67:db:6a:bc:91:68:e9: 8f:9b:09:e1:fe:19:7c:61:2e:06:ff:5f:70:e8:76:f5:0b:a5: fc:5e:0d:76:ed:10:62:84:31:29:b8:27:17:77:56:3f:c0:3d: 21:52:e1:26:d3:b0:c5:38:a5:99:d1:2f:25:89:95:84:99:03: 45:8f:e9:e0:1c:ea:e6:43:6e:5e:ab:3b:f1:70:e5:eb:e3:d0: 06:a8:63:d6:e7:ec:29:fe:d3:5f:87:3b:bc:b3:8f:fa:38:da: f6:f1:2e:bc:e8:f3:e5:7a:24:04:29:db:dd:7a:3d:78:76:3e: e8:bb:86:8b -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEksshQfVR1SgC7zJEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODM2MDMwZmMtNTcxOS00MmNjLTlmMTctMmE2OTYzYWIxZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9aHooJXDQd6Z6wztCbM0KOpsFFWkXd5GDY9 RdtafacUSk5RBT34sl7BUVgKOvYRb/QN1J7a04uj+U+cd7PH+vplF+pkwp/w4dYV 7M1SEvpOW5nOsOJ6jltl6Y9KIrk7TBs+OVYxbPyW9b9g91jtvz/AFwkXZIs5iPe9 IeVolVHzi/1AyATJCI9bb29dCPVu8F/yNDItEBaz8lKWyHa3o1MJiSYpXcnwDOVH /H70Vk95Ck4WAoXmiGVdpeI00DNspQwO8YYocaQvse9DBadVavR30DeMkasRUsvT 6xvpDyd7gJhdssccXQTRV/rVRfpNwBZiTtI9N/kbJBLRbrqtqQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFFQQu7qbnUL4W0sNWPP41ohqZ/LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG5XUVXbtEda9vXjk5z8SL86 cCdDHJQgy5P9Dhj3ICX/JSqkmq1z9DI/xqqJA8pdS4w74QWjn12eNZj2unkVagpn hvFTjNt6jQrfNtQlirC56ibVg/rE2g45TxU33KXIC9jGI7jsvrO5BjtHtUhkHzuv +lcMO9izMRIF35OXR/cJPCWosj8qEo6nZ9tqvJFo6Y+bCeH+GXxhLgb/X3DodvUL pfxeDXbtEGKEMSm4Jxd3Vj/APSFS4SbTsMU4pZnRLyWJlYSZA0WP6eAc6uZDbl6r O/Fw5evj0AaoY9bn7Cn+01+HO7yzj/o42vbxLrzo8+V6JAQp2916PXh2Pui7hos= -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:19 2025 by rpki-client