$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa File: 094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa (raw, json) Hash identifier: /H5CVg+vKo+xXr1E/SjXc8S3UpCHWv8/HIhTp50JXTY= Subject key identifier: 0D:F2:F3:D9:5C:DE:F0:8E:F2:32:59:5D:80:CD:7D:39:F2:D5:4D:A9 Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F432858492184048BFACE5EC37B5D7700 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 20283 IP address blocks: 64.90.64.0/19 maxlen: 24 68.170.112.0/20 maxlen: 20 69.168.240.0/20 maxlen: 24 161.199.130.0/24 maxlen: 24 167.94.42.0/23 maxlen: 23 167.94.52.0/23 maxlen: 23 167.94.62.0/23 maxlen: 23 167.94.76.0/23 maxlen: 23 172.87.0.0/20 maxlen: 21 199.59.116.0/22 maxlen: 22 205.214.160.0/20 maxlen: 20 209.212.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:04:8b:fa:ce:5e:c3:7b:5d:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=659e28cd-747a-4fed-a291-61984d78d15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:7e:f1:45:57:ef:2c:fa:7a:b3:9b:3b:3b: 10:15:2d:33:7a:36:ae:bb:8c:3c:fc:77:31:f8:e3: b6:c7:59:5c:67:7d:35:c2:60:35:9b:96:63:a7:85: d9:3b:9e:6c:2a:e4:5f:e9:41:79:de:73:05:fd:85: ba:3a:2d:50:aa:26:3a:3b:f6:1f:28:73:a9:93:e6: 16:d7:0b:9a:4d:7f:50:90:03:69:ee:23:57:be:e1: 73:fd:1f:e7:2f:b4:34:61:a4:ca:20:8c:2a:69:65: bc:7f:f7:bc:93:d1:66:ea:5b:87:8a:af:03:07:12: 66:1f:f7:82:52:da:ce:64:65:3a:4d:42:4d:9b:6a: e7:d9:b0:76:0c:e8:45:e0:c7:e5:b4:6b:94:80:11: 33:be:d6:27:af:d9:19:e8:53:9e:0b:61:7f:c1:22: 70:0b:28:a4:5c:64:23:d5:b6:27:4f:7c:4f:b4:87: c4:89:d4:90:59:de:ff:76:27:c4:d3:75:7d:95:ae: d9:61:a1:d8:e7:60:30:8e:e0:0a:bd:ce:e8:be:bb: 35:ef:ec:da:05:be:7a:00:68:10:14:a8:4f:51:6e: 87:fe:1f:58:0a:65:2a:7f:1d:55:b9:a2:2b:15:fb: 95:96:51:91:89:47:d8:32:0e:1c:e8:26:a4:7c:b4: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F2:F3:D9:5C:DE:F0:8E:F2:32:59:5D:80:CD:7D:39:F2:D5:4D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.212.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e3:a6:ae:d2:b0:3c:e6:04:1a:e0:ed:52:72:37:23:29:97: 94:3e:ac:23:9c:ed:34:ed:ef:ca:23:bb:7d:14:ca:63:37:8b: 34:c8:50:05:0e:00:2e:99:50:1a:2a:63:55:05:4a:6c:01:1c: e5:ff:24:8d:c7:ef:a3:41:3a:bb:37:ad:1c:44:84:91:bb:c5: aa:45:e8:e1:55:0d:c4:e4:b7:d2:f7:05:dc:0c:a1:d1:26:16: 44:ca:69:9a:c8:4a:2d:58:79:4a:65:f7:63:07:e6:df:1b:e2: da:fd:a7:72:9f:49:22:94:47:d1:33:2b:30:0d:12:0c:d3:c9: 3e:0f:c8:85:0b:b4:8a:8d:3a:7f:9a:9f:c5:3f:58:f6:53:9a: 1c:c5:a8:d2:94:94:9b:33:90:00:bf:9b:b6:73:46:59:69:a8: 39:62:de:bc:8f:04:c6:64:78:ea:86:31:29:64:6b:61:1b:e9: b9:e7:d2:2c:df:ec:6d:a4:99:b6:cb:1a:b6:86:3e:2c:aa:c5: 46:fb:38:ab:81:04:e4:e9:51:8c:82:52:02:f4:f3:99:a0:32: 8d:8d:b2:6f:c0:13:9a:4b:15:b9:af:63:63:a9:47:24:d4:45: c1:69:c6:4d:94:02:db:0b:3a:20:f2:7b:fd:9c:31:29:e4:5b: 75:b8:3f:67 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEkhhASL+s5ew3tddwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NjU5ZTI4Y2QtNzQ3YS00ZmVkLWEyOTEtNjE5ODRkNzhkMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsZ+8UVX7yz6erObOzsQFS0zejauu4w8/Hcx +OO2x1lcZ301wmA1m5Zjp4XZO55sKuRf6UF53nMF/YW6Oi1QqiY6O/YfKHOpk+YW 1wuaTX9QkANp7iNXvuFz/R/nL7Q0YaTKIIwqaWW8f/e8k9Fm6luHiq8DBxJmH/eC UtrOZGU6TUJNm2rn2bB2DOhF4MfltGuUgBEzvtYnr9kZ6FOeC2F/wSJwCyikXGQj 1bYnT3xPtIfEidSQWd7/difE03V9la7ZYaHY52AwjuAKvc7ovrs17+zaBb56AGgQ FKhPUW6H/h9YCmUqfx1VuaIrFfuVllGRiUfYMg4c6CakfLQolwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFA3y89lc3vCO8jJZXYDNfTny1U2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMDk0ZGIzZjQtZmE3ZC0z NmQ2LWE3Y2YtNmVlOGY3YWMwY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQFQFpAAwQE RKpwAwQERajwAwQAoceCAwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQC xzt0AwQEzdagAwQE0dQgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAHjpq7SsDzmBBrg7VJyNyMpl5Q+rCOc 7TTt78oju30UymM3izTIUAUOAC6ZUBoqY1UFSmwBHOX/JI3H76NBOrs3rRxEhJG7 xapF6OFVDcTkt9L3BdwModEmFkTKaZrISi1YeUpl92MH5t8b4tr9p3KfSSKUR9Ez KzANEgzTyT4PyIULtIqNOn+an8U/WPZTmhzFqNKUlJszkAC/m7ZzRllpqDli3ryP BMZkeOqGMSlka2Eb6bnn0izf7G2kmbbLGraGPiyqxUb7OKuBBOTpUYyCUgL085mg Mo2Nsm/AE5pLFbmvY2OpRyTURcFpxk2UAtsLOiDye/2cMSnkW3W4P2c= -----END CERTIFICATE-----Generated at Fri Apr 11 22:39:58 2025 by rpki-client