$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: qGMUv2gLiLmI2J+aeyu+ccBGWZs1IQgTCMGIQhGnv7Q= Subject key identifier: BE:A5:29:F1:25:70:74:B4:0D:63:E0:30:E6:01:D3:20:26:8B:29:76 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584930DE62B2D620D5E4C82F3800 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:62:b2:d6:20:d5:e4:c8:2f:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=8db47bc1-5292-4aac-a7b8-fc7ab0b8b5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:08:8d:e9:54:74:8e:c1:19:5e:fa:24:dd: b0:39:e7:73:b6:6c:24:25:ed:d1:36:76:e2:a6:37: 4d:82:f1:aa:04:29:0b:5c:7c:f4:c0:5f:5d:71:d0: 25:9a:03:e9:7e:a2:f3:e7:b1:82:55:bb:7f:69:f7: c4:12:2e:76:ff:37:83:85:dd:af:e2:0f:2b:4c:80: a9:b0:80:df:37:2c:ca:31:10:92:64:61:e0:46:29: 17:c0:c9:52:1f:80:70:fe:6e:19:49:c5:ce:af:54: 25:3e:b5:7e:80:29:b4:d5:e0:72:94:e4:99:1d:9e: 1d:ee:b7:6a:56:ce:9a:44:2b:5e:17:a1:1e:3e:0e: 60:c7:9a:75:17:bf:7a:41:63:4e:02:28:9f:35:83: 2f:cf:5d:71:78:6d:f7:f3:d7:34:91:55:46:2f:e4: 8f:cf:ba:55:ab:4f:1f:b5:9c:22:1c:9c:dc:7e:66: 56:2e:7a:d1:95:2f:0f:d8:fd:99:8a:d9:57:95:ce: 56:ab:6d:76:77:5e:aa:c9:72:22:b1:63:21:09:a0: f1:35:e0:1f:50:41:a1:d1:4e:92:91:0e:cd:04:b2: 43:02:1d:2c:dd:b8:b7:d1:c3:19:69:8b:b6:60:71: 15:db:81:bd:9a:6a:b8:06:7c:d1:0b:e9:8d:e8:da: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A5:29:F1:25:70:74:B4:0D:63:E0:30:E6:01:D3:20:26:8B:29:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:34:c6:e4:23:0d:22:be:f4:b3:3e:bc:76:04:63:83:7e:90: 6b:e5:92:a9:38:d3:b2:bc:4e:88:a3:19:ce:86:56:95:2f:92: fc:64:59:5e:7a:cb:7e:8e:98:b9:06:86:e4:de:8b:f2:ad:25: 59:b4:75:6b:6c:ec:32:0b:e9:62:bf:97:c4:7a:46:f5:3b:6d: 6b:0f:c1:8c:fc:3b:a7:f1:15:67:20:ed:f1:cd:70:3c:d7:99: 37:47:74:22:a8:bc:31:50:c6:f5:a5:6a:e1:90:bf:90:e7:be: 54:63:0a:54:ef:4c:b6:c5:c0:a9:30:1b:dd:fd:dd:5f:8d:58: 57:55:63:d7:34:2a:e9:da:a0:7f:0f:4b:aa:2d:12:f3:98:87: 99:db:bd:0b:2d:98:33:b2:e1:94:fb:48:82:58:37:cb:f3:25: 24:ec:0d:a9:ab:11:a6:16:44:a1:e3:fb:d3:85:61:00:5e:66: 65:7a:45:c6:5b:e6:dd:05:78:83:58:1c:cc:2c:3a:b0:0b:0e: bc:57:81:3e:15:31:cc:15:bf:08:88:ca:33:6d:86:9e:f6:b4: 75:fe:c5:fb:a5:37:e6:ed:60:0f:f8:20:be:ec:35:11:26:2a: e7:bf:c9:ad:fb:cc:e6:21:39:65:49:d6:0c:d7:ca:99:cb:5b: b8:15:3c:b2 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEkw3mKy1iDV5MgvOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OGRiNDdiYzEtNTI5Mi00YWFjLWE3YjgtZmM3YWIwYjhiNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzYIjelUdI7BGV76JN2wOedztmwkJe3RNnbi pjdNgvGqBCkLXHz0wF9dcdAlmgPpfqLz57GCVbt/affEEi52/zeDhd2v4g8rTICp sIDfNyzKMRCSZGHgRikXwMlSH4Bw/m4ZScXOr1QlPrV+gCm01eBylOSZHZ4d7rdq Vs6aRCteF6EePg5gx5p1F796QWNOAiifNYMvz11xeG3389c0kVVGL+SPz7pVq08f tZwiHJzcfmZWLnrRlS8P2P2ZitlXlc5Wq212d16qyXIisWMhCaDxNeAfUEGh0U6S kQ7NBLJDAh0s3bi30cMZaYu2YHEV24G9mmq4BnzRC+mN6Np9xwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFL6lKfElcHS0DWPgMOYB0yAmiyl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKjTG5CMNIr70sz68dgRjg36Qa+WS qTjTsrxOiKMZzoZWlS+S/GRZXnrLfo6YuQaG5N6L8q0lWbR1a2zsMgvpYr+XxHpG 9Tttaw/BjPw7p/EVZyDt8c1wPNeZN0d0Iqi8MVDG9aVq4ZC/kOe+VGMKVO9MtsXA qTAb3f3dX41YV1Vj1zQq6dqgfw9Lqi0S85iHmdu9Cy2YM7LhlPtIglg3y/MlJOwN qasRphZEoeP704VhAF5mZXpFxlvm3QV4g1gczCw6sAsOvFeBPhUxzBW/CIjKM22G nva0df7F+6U35u1gD/ggvuw1ESYq57/JrfvM5iE5ZUnWDNfKmctbuBU8sg== -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:47 2025 by rpki-client