$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa File: 5ccc738a-4d60-307a-b635-bbfa03724c5e.roa (raw, json) Hash identifier: wWYxfQWFiUstfKS/8ZFW1VVnX3DPHwg8rgcCx9B43H8= Subject key identifier: 6B:E9:2C:D0:9E:AD:62:29:63:26:95:93:00:16:B7:92:E6:1C:08:5D Certificate issuer: /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Certificate serial: 010D0C9F43285849674EEF2EC688B478CDB40680 Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 19504 IP address blocks: 64.6.112.0/20 maxlen: 24 66.109.112.0/21 maxlen: 24 68.171.176.0/20 maxlen: 24 104.200.208.0/21 maxlen: 24 206.168.16.0/20 maxlen: 24 216.122.152.0/21 maxlen: 24 216.147.224.0/20 maxlen: 24 2604:1c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:ef:2e:c6:88:b4:78:cd:b4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=e816d5b2-e3bf-4225-96c2-e1af8974a873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:f6:a2:e4:82:eb:d5:9d:24:07:35:04:a9: 25:4a:69:a3:0e:3f:ff:ef:c9:7f:85:50:53:d1:36: cd:6c:fc:68:ad:5b:fe:6b:f5:06:ae:cd:c3:64:83: 54:6b:29:22:1b:60:2f:2d:9d:d6:67:a1:89:08:50: 6b:4a:8c:4d:e3:eb:b8:dd:6c:f1:27:2d:2d:07:c1: e6:08:b4:d9:6e:d2:1f:3f:6c:e8:c5:a5:0d:11:67: a1:98:0a:e8:d3:30:7e:7f:e3:3f:01:0b:1e:3d:5d: 9c:f9:96:5b:d1:0b:88:ab:0a:14:8d:dc:f5:08:54: e7:37:f8:08:e9:5f:a2:ff:47:80:bf:6b:07:e7:ef: 26:a0:15:b0:9a:55:f9:4c:f6:3d:86:b2:6f:21:46: 79:92:26:1d:2c:34:d6:49:6a:a6:a5:f3:ef:1e:eb: ad:f9:08:fc:24:32:83:70:bb:a4:e0:bf:c0:5c:c9: 0f:94:26:99:e2:80:f9:e4:0e:aa:29:9b:43:3d:d5: b2:b5:34:85:52:6f:a5:c8:19:2a:b9:94:aa:22:53: 74:05:42:94:8a:92:d8:32:70:48:e3:39:18:83:94: a8:ff:41:35:fb:2d:12:65:2b:d3:e4:e0:eb:82:77: 3e:49:e5:d2:53:fe:76:70:70:59:88:8e:ea:27:86: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E9:2C:D0:9E:AD:62:29:63:26:95:93:00:16:B7:92:E6:1C:08:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl X509v3 Authority Key Identifier: keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer sbgp-ipAddrBlock: critical IPv4: 64.6.112.0/20 66.109.112.0/21 68.171.176.0/20 104.200.208.0/21 206.168.16.0/20 216.122.152.0/21 216.147.224.0/20 IPv6: 2604:1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:07:58:75:52:51:06:fa:13:6c:c6:e0:1b:80:74:a7:2b:a7: a8:0c:85:96:5f:31:1e:32:09:d0:53:ae:c2:75:a7:76:3b:5c: 2f:39:5e:fc:4c:e4:94:67:88:6c:54:11:75:00:9b:31:ab:3b: a4:81:9a:32:7c:68:26:99:51:e1:15:42:b5:27:24:55:8c:12: 7c:fc:7e:a0:cb:06:ea:4b:39:66:2b:25:23:22:11:56:79:e7: d0:86:54:ee:71:35:33:e2:58:83:2a:5c:ad:61:8e:a2:cc:ea: d0:dd:1b:bf:36:51:6a:00:9b:37:59:44:38:0d:d0:28:c5:fa: f0:43:27:fe:5e:e1:e0:c5:03:4e:e3:55:0b:e6:62:e7:82:62: 0f:1c:aa:cf:6b:e2:46:32:d9:4f:cd:c2:4f:0f:f0:50:b4:c2: 67:6c:c1:be:58:4a:3b:e7:83:79:89:ab:21:72:2a:a7:06:63: 96:c4:c1:74:8a:74:6e:fb:34:17:5f:64:99:a9:75:89:f3:1a: a6:2a:83:b6:24:be:c0:03:42:91:9f:55:2a:9d:60:64:48:0e: 47:48:b6:48:ee:ad:c5:0b:80:c7:02:42:e4:66:45:a1:aa:15: 22:eb:0b:1e:e8:2e:cf:82:ac:8d:b9:c5:c8:9d:58:23:a9:4d: 44:63:35:f9 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWElnTu8uxoi0eM20BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0 Y2QzMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTgxNmQ1YjItZTNiZi00MjI1LTk2YzItZTFhZjg5NzRhODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0/2ouSC69WdJAc1BKklSmmjDj//78l/hVBT 0TbNbPxorVv+a/UGrs3DZINUaykiG2AvLZ3WZ6GJCFBrSoxN4+u43WzxJy0tB8Hm CLTZbtIfP2zoxaUNEWehmAro0zB+f+M/AQsePV2c+ZZb0QuIqwoUjdz1CFTnN/gI 6V+i/0eAv2sH5+8moBWwmlX5TPY9hrJvIUZ5kiYdLDTWSWqmpfPvHuut+Qj8JDKD cLuk4L/AXMkPlCaZ4oD55A6qKZtDPdWytTSFUm+lyBkquZSqIlN0BUKUipLYMnBI 4zkYg5So/0E1+y0SZSvT5ODrgnc+SeXSU/52cHBZiI7qJ4Y42wIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFGvpLNCerWIpYyaVkwAWt5LmHAhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3 ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvNWNjYzczOGEtNGQ2MC0z MDdhLWI2MzUtYmJmYTAzNzI0YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ3N2UzYTQtYWIxYi00MGMzLWFl NTQtOWU1MGEyMTM0Y2QzLzhkNzdlM2E0LWFiMWItNDBjMy1hZTU0LTllNTBhMjEz NGNkMy5jcmwwHwYDVR0jBBgwFoAUM0hN1/MchQ8ZXVElt3kQwdqv8KYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUw YTIxMzRjZDMuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQAZwAwQD Qm1wAwQERKuwAwQDaMjQAwQEzqgQAwQD2HqYAwQE2JPgMA0EAgACMAcDBQAmBAHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEHWHVSUQb6E2zG4BuAdKcrp6gMhZZfMR4yCdBTrsJ1p3Y7XC85 XvxM5JRniGxUEXUAmzGrO6SBmjJ8aCaZUeEVQrUnJFWMEnz8fqDLBupLOWYrJSMi EVZ559CGVO5xNTPiWIMqXK1hjqLM6tDdG782UWoAmzdZRDgN0CjF+vBDJ/5e4eDF A07jVQvmYueCYg8cqs9r4kYy2U/Nwk8P8FC0wmdswb5YSjvng3mJqyFyKqcGY5bE wXSKdG77NBdfZJmpdYnzGqYqg7YkvsADQpGfVSqdYGRIDkdItkjurcULgMcCQuRm RaGqFSLrCx7oLs+CrI25xcidWCOpTURjNfk= -----END CERTIFICATE-----Generated at Sat Apr 12 15:29:28 2025 by rpki-client