$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa File: cda65907-ce3f-342f-b106-fe8256cae008.roa (raw, json) Hash identifier: 1XphfVC1j/nN71o2VPHBgmiifFIyKPhQBDwn/MbVf6w= Subject key identifier: BB:5B:3F:CF:9E:DE:87:AA:B5:C8:F7:5A:FB:43:73:5B:EF:4C:DE:7B Certificate issuer: /CN=25283898-2dc3-4477-af3c-b64dd3c800ab Certificate serial: 010D0C9F4328584944693DF6AC8608837AF26C40 Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 13692 IP address blocks: 67.219.224.0/20 maxlen: 20 100.42.160.0/20 maxlen: 20 108.174.176.0/20 maxlen: 20 192.86.0.0/24 maxlen: 24 192.175.50.0/23 maxlen: 23 198.100.136.0/21 maxlen: 21 208.77.176.0/21 maxlen: 21 2607:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3d:f6:ac:86:08:83:7a:f2:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=e103bc52-9cb2-4d0f-9155-eb2d77950b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:82:c8:c2:04:8f:5d:1a:f7:7f:8e:94:14: 6a:1d:19:46:6f:ce:08:19:07:96:2a:d3:10:79:b8: 6a:2f:30:a9:31:3c:2b:b2:b5:5e:ba:7b:33:7e:57: cc:68:63:8c:f8:52:1b:5a:06:cd:47:cf:46:d3:38: 70:1c:a4:8a:d0:c2:99:a8:df:e8:4f:4b:35:8c:4e: 51:3d:20:23:29:ba:e2:f5:30:72:e9:d4:3a:3f:82: d3:11:18:ef:17:70:8b:28:af:df:07:e2:f2:3e:86: a6:1f:7d:70:2e:82:95:55:2f:13:82:c5:5e:70:b4: 45:f9:e2:be:76:6b:d3:5a:6d:f4:d6:30:a7:14:8a: 03:86:d4:45:70:16:47:2f:16:6a:f2:93:aa:bf:92: 18:5c:5f:52:50:b9:a7:ce:92:c6:e4:1e:5f:b6:01: 11:92:1e:65:32:fa:7d:72:bd:ad:bc:a0:d5:ef:42: ce:ba:e0:e2:b1:29:2b:05:73:17:a2:08:6d:c1:ac: 9c:8d:7c:da:21:8f:f9:dd:f7:a0:e0:e9:b3:d7:40: 84:82:09:04:1b:ff:5f:da:04:13:e9:ed:c8:72:58: d6:98:b7:9e:eb:8e:50:df:91:82:ac:7e:55:86:5c: e6:99:a0:7b:9d:95:14:90:4e:5e:09:6b:97:ed:26: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:3F:CF:9E:DE:87:AA:B5:C8:F7:5A:FB:43:73:5B:EF:4C:DE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl X509v3 Authority Key Identifier: keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer sbgp-ipAddrBlock: critical IPv4: 67.219.224.0/20 100.42.160.0/20 108.174.176.0/20 192.86.0.0/24 192.175.50.0/23 198.100.136.0/21 208.77.176.0/21 IPv6: 2607:8600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f5:11:c4:2e:13:8c:03:ea:e8:95:5e:6c:91:60:c1:20:ad: 4b:41:db:f3:7b:ef:ad:9e:02:d9:c7:95:f3:4c:f3:77:3b:33: 8a:aa:60:8a:34:f2:57:47:82:72:f8:20:19:3a:92:b9:29:00: 67:53:be:a4:79:0d:82:f5:79:47:07:0e:51:4d:5d:56:f3:93: 0d:cf:70:f1:ec:2d:8c:2d:ba:a0:f8:d5:2d:7d:fb:cb:41:b1: 0e:14:e1:f4:59:16:ca:26:c4:60:ca:f7:a2:ef:25:95:d2:25: f4:54:87:38:c8:82:6b:31:44:a0:64:52:5b:89:cf:66:e3:a4: d1:16:56:fd:b2:e6:5d:6b:9a:9e:dc:82:d8:2a:14:7b:b0:86: 7b:52:6f:e1:e8:56:fa:9f:5e:ae:a3:23:5f:9b:18:f8:86:07: 5c:37:69:4e:24:24:be:c5:97:42:8d:7a:2d:4b:d2:64:29:10: c8:bd:03:56:49:4e:ad:94:07:15:93:b9:2c:73:36:a9:2a:5f: 38:33:24:cc:70:48:d1:76:2e:f8:ed:bc:d9:14:a9:29:5f:fd: e1:48:d9:85:6f:16:19:61:47:18:52:e0:10:db:5a:c8:36:0e: 57:ee:6f:0b:b9:52:f8:b7:f1:ab:7e:68:32:c2:a7:f4:f1:4c: f9:49:e9:60 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWElEaT32rIYIg3rybEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgw MGFiMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZTEwM2JjNTItOWNiMi00ZDBmLTkxNTUtZWIyZDc3OTUwYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPiCyMIEj10a93+OlBRqHRlGb84IGQeWKtMQ ebhqLzCpMTwrsrVeunszflfMaGOM+FIbWgbNR89G0zhwHKSK0MKZqN/oT0s1jE5R PSAjKbri9TBy6dQ6P4LTERjvF3CLKK/fB+LyPoamH31wLoKVVS8TgsVecLRF+eK+ dmvTWm301jCnFIoDhtRFcBZHLxZq8pOqv5IYXF9SULmnzpLG5B5ftgERkh5lMvp9 cr2tvKDV70LOuuDisSkrBXMXoghtwaycjXzaIY/53feg4Omz10CEggkEG/9f2gQT 6e3IcljWmLee645Q35GCrH5VhlzmmaB7nZUUkE5eCWuX7SY8+QIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFLtbP8+e3oeqtcj3WvtDc1vvTN57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4 Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvY2RhNjU5MDctY2UzZi0z NDJmLWIxMDYtZmU4MjU2Y2FlMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjUyODM4OTgtMmRjMy00NDc3LWFm M2MtYjY0ZGQzYzgwMGFiLzI1MjgzODk4LTJkYzMtNDQ3Ny1hZjNjLWI2NGRkM2M4 MDBhYi5jcmwwHwYDVR0jBBgwFoAUHX6NmYvAQseU6/FQOTSqDFBgE98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRk ZDNjODAwYWIuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQ9vgAwQE ZCqgAwQEbK6wAwQAwFYAAwQBwK8yAwQDxmSIAwQD0E2wMA0EAgACMAcDBQAmB4YA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH31EcQuE4wD6uiVXmyRYMEgrUtB2/N7762eAtnHlfNM83c7M4qq YIo08ldHgnL4IBk6krkpAGdTvqR5DYL1eUcHDlFNXVbzkw3PcPHsLYwtuqD41S19 +8tBsQ4U4fRZFsomxGDK96LvJZXSJfRUhzjIgmsxRKBkUluJz2bjpNEWVv2y5l1r mp7cgtgqFHuwhntSb+HoVvqfXq6jI1+bGPiGB1w3aU4kJL7Fl0KNei1L0mQpEMi9 A1ZJTq2UBxWTuSxzNqkqXzgzJMxwSNF2LvjtvNkUqSlf/eFI2YVvFhlhRxhS4BDb Wsg2Dlfubwu5Uvi38at+aDLCp/TxTPlJ6WA= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:47 2025 by rpki-client