$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa File: 8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json) Hash identifier: RwDF2OjIni+6ceTnmLZUlrLwK/HgksUoVCum0V+8bVE= Subject key identifier: 8F:C1:A6:B2:2E:92:B1:E8:CD:20:E2:5D:D4:AB:19:EE:0A:64:17:F3 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584930DE6292D23F5F1AD8551F80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 17378 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:62:92:d2:3f:5f:1a:d8:55:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=db3137dc-27c4-4490-95a9-d7d7981ca674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:3b:21:7e:6d:e6:d4:49:57:0a:89:3a:92: b4:6f:b4:64:b6:62:0a:72:23:6e:cc:62:3f:c6:dd: 31:f8:93:25:8f:4f:69:99:c8:47:a5:d0:33:e2:b7: 4c:b6:c8:0b:c2:f8:7d:93:2d:e7:b3:ba:98:f1:04: aa:67:62:85:f3:a9:c8:b0:06:97:ab:36:a9:8b:89: 3c:b4:cf:7e:fb:64:12:4f:56:8a:06:ea:3c:37:21: d6:bb:de:f1:1e:10:5c:6d:ac:ce:9a:1e:e6:1d:c4: 0d:e6:33:90:a0:4c:fd:3f:d9:84:0f:41:55:87:4b: e0:8b:56:50:8e:27:c5:59:5d:27:b3:89:31:11:ac: 58:af:92:69:55:97:95:00:f4:fc:24:c3:de:74:ff: 1e:4a:e9:cf:3b:9b:fa:00:7c:01:10:6a:07:e3:58: 86:80:39:2b:42:b6:4a:5d:1d:7e:50:28:5a:8d:1a: 82:b7:0b:22:c0:25:50:a3:8d:1d:18:4d:8e:b9:b3: 31:c5:7d:9c:ee:4f:46:65:49:54:b0:ab:39:85:e1: cf:3c:95:0d:e3:87:95:91:2e:2f:2a:db:96:ca:a2: c9:a8:6a:8e:95:02:fd:ed:f0:d7:ab:a7:21:2f:e1: 76:e4:ea:2b:fd:6c:fc:9d:fd:c7:94:a9:f6:0e:10: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:A6:B2:2E:92:B1:E8:CD:20:E2:5D:D4:AB:19:EE:0A:64:17:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:74:bd:d9:40:52:d2:6b:5e:c8:6b:43:49:66:39:95:a6:bf: d6:68:e8:76:29:dc:1c:6c:be:fb:4e:c9:3f:44:16:a9:94:0a: c2:34:ce:c4:77:42:00:40:6b:9e:fe:99:cf:f5:31:a2:8c:ca: 09:7c:7c:c3:d7:8c:21:42:10:d5:a2:0d:b8:22:83:28:68:f8: 5d:d3:a5:5b:b9:26:2d:03:a2:ed:5f:59:ff:0f:16:1e:e9:67: 59:af:a4:1b:64:c2:08:fc:18:e5:af:3b:57:34:66:dd:4a:a2: 44:1e:46:c0:35:4f:9d:15:84:b1:49:b3:91:f1:ae:2f:92:b1: b8:cb:95:b4:ca:c1:ed:9b:c8:1e:1c:60:af:9b:01:ce:4b:10: a1:d5:13:c6:34:c0:65:9a:d5:f6:d4:46:3c:3e:ba:d2:27:fd: 0e:e8:d7:67:10:11:e8:1e:21:36:76:13:47:33:db:53:77:b8: 4f:f1:b5:47:d1:b9:6c:2e:2b:83:4a:8b:59:73:1d:e0:18:94: 4e:62:f4:75:85:cd:ae:4c:12:3c:1f:0c:e2:10:40:03:c5:10: bb:90:63:f2:5d:d9:68:6b:59:0a:83:78:68:8b:d6:a0:1a:3b: 5f:3f:4e:fd:b6:36:5c:4a:05:8b:0e:09:75:ce:bf:1b:17:57: f8:4d:9a:7b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEkw3mKS0j9fGthVH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZGIzMTM3ZGMtMjdjNC00NDkwLTk1YTktZDdkNzk4MWNhNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q47IX5t5tRJVwqJOpK0b7RktmIKciNuzGI/ xt0x+JMlj09pmchHpdAz4rdMtsgLwvh9ky3ns7qY8QSqZ2KF86nIsAaXqzapi4k8 tM9++2QST1aKBuo8NyHWu97xHhBcbazOmh7mHcQN5jOQoEz9P9mED0FVh0vgi1ZQ jifFWV0ns4kxEaxYr5JpVZeVAPT8JMPedP8eSunPO5v6AHwBEGoH41iGgDkrQrZK XR1+UChajRqCtwsiwCVQo40dGE2OubMxxX2c7k9GZUlUsKs5heHPPJUN44eVkS4v KtuWyqLJqGqOlQL97fDXq6chL+F25Oor/Wz8nf3HlKn2DhCbcwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFI/BprIukrHozSDiXdSrGe4KZBfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASXS92UBS0mteyGtDSWY5laa/1mjo dincHGy++07JP0QWqZQKwjTOxHdCAEBrnv6Zz/UxoozKCXx8w9eMIUIQ1aINuCKD KGj4XdOlW7kmLQOi7V9Z/w8WHulnWa+kG2TCCPwY5a87VzRm3UqiRB5GwDVPnRWE sUmzkfGuL5KxuMuVtMrB7ZvIHhxgr5sBzksQodUTxjTAZZrV9tRGPD660if9DujX ZxAR6B4hNnYTRzPbU3e4T/G1R9G5bC4rg0qLWXMd4BiUTmL0dYXNrkwSPB8M4hBA A8UQu5Bj8l3ZaGtZCoN4aIvWoBo7Xz9O/bY2XEoFiw4Jdc6/GxdX+E2aew== -----END CERTIFICATE-----Generated at Sun Apr 6 09:40:05 2025 by rpki-client