$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa File: 91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa (raw, json) Hash identifier: WVN9DuT+NO2y+z1GVwILtw1kbzSgyfmBQSGvmmwUaiw= Subject key identifier: D2:93:35:C3:BB:B5:E1:AB:11:D6:2A:1B:05:45:BC:3F:F7:3A:9C:32 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584957F4048194C236149EF05E00 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 33362 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:04:81:94:c2:36:14:9e:f0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c8899a93-f700-454a-b753-4a9317d01de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:c6:03:ad:83:f9:54:51:a3:9e:08:98:a2: e0:97:af:85:17:00:73:d4:40:35:4d:44:20:ec:92: 69:b9:66:fb:c5:ed:df:a3:73:fd:22:33:68:60:46: 3f:11:1d:08:ad:41:07:e2:37:4e:b9:b5:fc:82:f1: a5:85:32:1e:a7:03:a9:83:db:8b:66:9b:b5:03:86: 8d:15:47:34:69:50:a0:c2:99:72:4a:40:d4:bc:e8: 3b:9e:2a:b4:05:b6:cd:06:0a:d8:66:05:d0:63:ae: 0d:13:81:e4:1d:0e:ae:ef:35:b3:cf:28:ba:82:27: 14:af:42:8b:0b:fe:02:11:c8:29:f4:9a:fe:dc:c2: 80:41:a1:8b:d7:86:f0:cd:40:1d:52:68:99:07:72: b8:af:36:d1:22:c0:ce:fb:b5:53:3f:fc:85:62:39: 09:68:c2:e1:32:bb:9d:91:6b:96:a5:a2:83:80:de: 19:23:b8:90:4d:40:1c:d9:1e:0c:e1:ee:12:6a:cc: 3a:58:02:6f:47:2e:d4:2d:67:3d:fc:c0:f4:0a:e2: 9f:23:93:dd:11:e7:42:72:a1:5e:b3:bc:00:79:f2: f3:63:ba:0d:fa:40:3b:95:23:42:d0:90:79:21:2f: 57:81:17:f2:24:a6:38:20:19:8a:1d:a2:c3:d4:cd: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:93:35:C3:BB:B5:E1:AB:11:D6:2A:1B:05:45:BC:3F:F7:3A:9C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:12:80:08:72:15:14:60:43:35:76:5b:07:e8:a0:2e:ea:49: 03:4a:bf:9f:77:d5:e1:f4:e5:88:f9:c3:20:44:82:7a:1e:59: 45:3b:45:a1:ed:7d:4b:12:75:f3:a7:98:02:5f:69:ce:00:be: 5d:4c:69:d7:8c:27:0a:17:a0:e5:58:79:fd:1c:3d:e5:15:97: cd:52:5c:4a:a9:17:ea:a9:f1:e7:6e:2d:b1:fa:5a:9b:19:0b: 98:a8:88:b7:e9:4a:69:d6:ce:df:7f:62:34:f0:29:8e:d4:29: 43:93:64:8f:c2:03:ec:63:9d:65:38:dd:91:4c:f4:21:b8:fd: a0:f8:63:1f:d7:fc:b8:2e:fa:bc:ae:92:6a:ac:55:6b:b5:bf: 1c:8e:1a:1e:09:9e:c7:2b:30:9a:82:c7:7e:ae:cc:d5:07:62: b4:b8:2f:0f:de:54:3d:6c:e2:85:c9:d1:62:a7:81:5a:82:ff: 86:7e:a6:70:59:30:d6:74:8d:48:3c:e7:39:14:04:20:88:9c: 61:31:a5:31:4d:2f:43:06:ed:79:0e:88:7d:96:71:7e:8f:70: 1c:5f:35:18:3f:63:aa:cf:46:c9:78:b6:d9:a1:a2:c3:25:60: bd:88:40:16:f7:93:75:78:d1:ae:72:3d:34:90:68:5b:f3:f5: d0:bc:6e:2f -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWElX9ASBlMI2FJ7wXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk Yzg4OTlhOTMtZjcwMC00NTRhLWI3NTMtNGE5MzE3ZDAxZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgzGA62D+VRRo54ImKLgl6+FFwBz1EA1TUQg 7JJpuWb7xe3fo3P9IjNoYEY/ER0IrUEH4jdOubX8gvGlhTIepwOpg9uLZpu1A4aN FUc0aVCgwplySkDUvOg7niq0BbbNBgrYZgXQY64NE4HkHQ6u7zWzzyi6gicUr0KL C/4CEcgp9Jr+3MKAQaGL14bwzUAdUmiZB3K4rzbRIsDO+7VTP/yFYjkJaMLhMrud kWuWpaKDgN4ZI7iQTUAc2R4M4e4Sasw6WAJvRy7ULWc9/MD0CuKfI5PdEedCcqFe s7wAefLzY7oN+kA7lSNC0JB5IS9XgRfyJKY4IBmKHaLD1M2Y+QIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFNKTNcO7teGrEdYqGwVFvD/3OpwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvOTFmYTNmN2YtOWYyOC0z ODM1LWEyYTctNDVkZjUyMjE3Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAeBKACHIVFGBDNXZbB+igLupJA0q/n3fV4fTliPnDIESC eh5ZRTtFoe19SxJ186eYAl9pzgC+XUxp14wnCheg5Vh5/Rw95RWXzVJcSqkX6qnx 524tsfpamxkLmKiIt+lKadbO339iNPApjtQpQ5Nkj8ID7GOdZTjdkUz0Ibj9oPhj H9f8uC76vK6SaqxVa7W/HI4aHgmexyswmoLHfq7M1QditLgvD95UPWzihcnRYqeB WoL/hn6mcFkw1nSNSDznORQEIIicYTGlMU0vQwbteQ6IfZZxfo9wHF81GD9jqs9G yXi22aGiwyVgvYhAFveTdXjRrnI9NJBoW/P10LxuLw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:00 2025 by rpki-client