$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa File: 4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa (raw, json) Hash identifier: sXvtd4tyQi209UTMpIcXxazdalRaOhlt4xoDHaagcA4= Subject key identifier: 0B:E1:88:C4:99:A0:D1:BB:33:FA:31:09:FE:2F:62:CD:5B:D2:72:BF Certificate issuer: /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Certificate serial: 010D0C9F4328584908816DA49EE6A71C127DA280 Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 46719 IP address blocks: 140.106.208.0/20 maxlen: 24 199.167.132.0/22 maxlen: 24 199.188.240.0/22 maxlen: 24 204.154.240.0/21 maxlen: 24 206.190.228.0/22 maxlen: 24 216.213.112.0/20 maxlen: 24 2600:d000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6d:a4:9e:e6:a7:1c:12:7d:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=4c8ccd47-4212-4166-aa5f-eb59be89b6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:cb:43:9e:4e:63:f4:07:15:fe:24:76:fe: 61:cc:b0:37:78:48:85:07:80:4d:27:65:54:e6:87: 40:77:21:dc:31:7e:4b:7a:25:3e:2c:88:43:6d:eb: a3:bc:89:3f:39:e4:bf:65:4c:4a:87:20:80:93:52: ec:cd:3d:b1:41:fa:e2:61:33:81:f1:f3:6e:92:9a: 2a:d2:9f:fb:3c:7b:6d:f2:b2:53:d1:3b:1b:18:35: 02:ed:62:e0:6e:3b:35:95:09:16:71:51:de:bf:5c: 00:13:dd:f0:8b:2a:6a:d7:51:a9:e9:1f:b6:51:b9: f6:de:5e:cd:1f:a3:c9:56:63:7e:27:d9:37:c6:29: 5d:f0:20:22:44:7b:fd:e7:3b:6b:2e:51:b1:36:aa: e1:5d:9e:0b:8f:4c:35:08:7e:ca:1a:7e:97:9f:5b: 28:42:ec:09:84:f8:f3:86:b8:0d:dc:1a:b0:1d:87: 1f:1b:0a:ae:b0:fb:2f:57:fe:4b:e0:f6:c8:75:d8: ec:0d:84:a2:00:40:43:fb:67:3f:95:f4:5e:7d:73: c2:e2:2f:43:0f:f3:68:44:c9:a9:43:a2:5b:33:15: c5:0c:63:13:d4:37:7a:75:86:64:8d:3b:e4:a0:bb: d4:bb:6e:0d:45:ec:65:20:9e:4f:8f:46:05:e3:82: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E1:88:C4:99:A0:D1:BB:33:FA:31:09:FE:2F:62:CD:5B:D2:72:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl X509v3 Authority Key Identifier: keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer sbgp-ipAddrBlock: critical IPv4: 140.106.208.0/20 199.167.132.0/22 199.188.240.0/22 204.154.240.0/21 206.190.228.0/22 216.213.112.0/20 IPv6: 2600:d000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:25:64:d2:a2:03:6e:e3:13:72:58:07:01:82:65:e6:c6:e3: 71:c3:bb:ed:8d:fd:55:9c:22:05:ad:46:d2:2f:fe:40:64:29: 66:e2:07:75:db:3c:43:e3:0e:b1:72:45:96:09:0a:59:11:bc: ba:b1:e5:d4:e2:2e:1e:a2:e1:30:6b:d3:40:33:10:47:bb:5d: a1:ff:bc:47:a4:7c:eb:78:e7:87:0b:de:52:d3:10:32:76:59: 9a:12:32:20:f8:f7:55:b6:a3:76:04:ca:69:ad:3f:46:30:79: fd:cf:50:88:d0:27:ad:f6:7b:0d:e7:8b:72:eb:2b:01:66:7b: 2f:e0:50:f0:81:6d:91:2e:63:af:a9:04:7a:17:be:44:9a:46: a2:43:6a:93:3c:10:b0:46:b3:64:5b:ca:7a:9f:77:f5:00:aa: e9:30:06:d9:26:58:bf:1d:78:3a:a9:17:ac:9b:1e:fc:3f:c7: e2:b4:4a:f5:19:18:8f:26:15:1a:fe:c4:5c:59:b9:24:d5:a9: a5:57:c0:2b:49:94:96:cd:e4:3d:b1:ab:ba:72:45:63:cf:c2: e0:1b:f0:d7:46:fb:33:73:3d:6f:12:ba:f1:1f:b8:a0:9c:21: 31:8b:c9:7e:1a:12:c2:93:81:7d:ae:aa:b2:5b:28:17:10:b0: 65:39:0b:8a -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEkIgW2knuanHBJ9ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY2YzZiNmYtMTI4Ny00ZGMwLTkwNzQtNmNlZjNjMjEx YzBlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NGM4Y2NkNDctNDIxMi00MTY2LWFhNWYtZWI1OWJlODliNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDHLQ55OY/QHFf4kdv5hzLA3eEiFB4BNJ2VU 5odAdyHcMX5LeiU+LIhDbeujvIk/OeS/ZUxKhyCAk1LszT2xQfriYTOB8fNukpoq 0p/7PHtt8rJT0TsbGDUC7WLgbjs1lQkWcVHev1wAE93wiypq11Gp6R+2Ubn23l7N H6PJVmN+J9k3xild8CAiRHv95ztrLlGxNqrhXZ4Lj0w1CH7KGn6Xn1soQuwJhPjz hrgN3BqwHYcfGwqusPsvV/5L4PbIddjsDYSiAEBD+2c/lfRefXPC4i9DD/NoRMmp Q6JbMxXFDGMT1Dd6dYZkjTvkoLvUu24NRexlIJ5Pj0YF44KyLwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFAvhiMSZoNG7M/oxCf4vYs1b0nK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZj NmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2VmM2MyMTFjMGUvNGY4OWQ5ZDQtZGJlOC0z ZDJmLWE1MjktYTk3N2UwZDU3MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDY2YzZiNmYtMTI4Ny00ZGMwLTkw NzQtNmNlZjNjMjExYzBlLzA2NmM2YjZmLTEyODctNGRjMC05MDc0LTZjZWYzYzIx MWMwZS5jcmwwHwYDVR0jBBgwFoAUuJDhNK6omS7bXp+BBkdv2555WnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZjNmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2Vm M2MyMTFjMGUuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEjGrQAwQC x6eEAwQCx7zwAwQDzJrwAwQCzr7kAwQE2NVwMA0EAgACMAcDBQQmANAAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHolZNKiA27jE3JYBwGCZebG43HDu+2N/VWcIgWtRtIv/kBkKWbiB3XbPEPj DrFyRZYJClkRvLqx5dTiLh6i4TBr00AzEEe7XaH/vEekfOt454cL3lLTEDJ2WZoS MiD491W2o3YEymmtP0Ywef3PUIjQJ632ew3ni3LrKwFmey/gUPCBbZEuY6+pBHoX vkSaRqJDapM8ELBGs2Rbynqfd/UAqukwBtkmWL8deDqpF6ybHvw/x+K0SvUZGI8m FRr+xFxZuSTVqaVXwCtJlJbN5D2xq7pyRWPPwuAb8NdG+zNzPW8SuvEfuKCcITGL yX4aEsKTgX2uqrJbKBcQsGU5C4o= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:23 2025 by rpki-client