$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa File: 7172e1bb-e029-3c30-be5b-34e5b3610c59.roa (raw, json) Hash identifier: mecIvfxYrXoQMtFYyBC5lI65s2fDGrOmDGX1AaLt4fc= Subject key identifier: CA:97:18:F7:31:4F:05:DC:1C:EA:25:53:EF:B8:18:79:0A:36:E4:4C Certificate issuer: /CN=576b0633-e844-4e36-85eb-6148d6321883 Certificate serial: 010D0C9F432858498769B6519FD2B2AD3866331C Authority key identifier: 2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 36012 IP address blocks: 66.178.160.0/20 maxlen: 24 69.9.128.0/19 maxlen: 24 74.51.16.0/20 maxlen: 24 139.60.24.0/21 maxlen: 24 162.244.36.0/22 maxlen: 24 162.247.40.0/21 maxlen: 24 216.115.0.0/20 maxlen: 24 2606:c800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b6:51:9f:d2:b2:ad:38:66:33:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576b0633-e844-4e36-85eb-6148d6321883 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=1c8310b6-4250-467f-95a8-5e58bf59013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:d4:24:e7:23:dd:89:6a:14:39:c6:f3:9e: 98:af:2f:b9:2e:5d:fc:86:60:61:07:c4:d4:65:4c: 4f:6a:35:cc:49:42:2f:d4:6a:76:66:29:0d:38:85: 1b:d6:b5:83:2d:9e:8a:89:06:45:60:0a:94:9f:22: 11:32:e5:17:a4:47:8e:06:6f:61:f0:bf:78:55:8e: a9:67:d8:90:b2:d0:62:8b:31:2f:b1:10:0b:56:f8: b8:26:24:9a:b7:12:b0:84:ae:0e:71:4a:bd:ea:44: 2f:2d:f0:f1:e0:04:ed:9a:9a:db:aa:9e:a2:86:d0: c0:89:91:c4:38:ef:17:0d:2b:ab:2b:b0:00:07:9d: 3f:fa:73:71:aa:b1:4c:ba:97:ad:9a:7a:d2:a6:61: a8:18:b4:f8:fc:be:2d:e5:c2:90:d6:c0:82:3c:e5: ed:58:e5:02:cb:72:1d:a6:f1:05:66:e7:54:32:67: 31:4f:5b:30:93:0d:30:50:ed:3a:34:7a:b6:8b:80: 9e:df:36:16:47:eb:85:71:19:97:86:4f:c1:4c:b4: ac:35:9f:59:6b:25:f5:4c:6e:6c:27:8e:b7:e0:0a: 0f:a7:4d:c5:86:6d:d0:7f:df:de:c7:4d:66:80:6b: 49:65:06:e3:a4:20:f8:23:0b:3a:ae:54:c5:18:c4: 43:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:97:18:F7:31:4F:05:DC:1C:EA:25:53:EF:B8:18:79:0A:36:E4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl X509v3 Authority Key Identifier: keyid:2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer sbgp-ipAddrBlock: critical IPv4: 66.178.160.0/20 69.9.128.0/19 74.51.16.0/20 139.60.24.0/21 162.244.36.0/22 162.247.40.0/21 216.115.0.0/20 IPv6: 2606:c800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:94:4f:5c:11:db:e5:b6:48:55:b9:fd:35:a4:c8:c7:be:8d: cd:6f:9f:54:8d:95:08:45:fa:d4:ba:64:c9:52:fb:4c:84:80: 24:c1:72:93:ef:c7:da:0e:ab:84:f3:19:20:6d:05:27:18:ce: 0e:c3:7c:67:c8:06:45:c4:ed:c4:09:6e:de:dc:eb:2b:6e:39: 91:64:16:60:e7:cc:ed:aa:a3:ec:4d:89:4a:a3:7d:e1:03:7e: 4a:23:30:5b:a6:7d:70:f2:d5:9c:03:8a:30:4a:5e:a9:d0:46: 35:9a:1c:fa:fa:c5:f3:74:9a:c3:99:84:eb:ff:2e:4a:6a:60: 6d:87:8e:56:e2:9b:10:00:bd:71:47:e8:50:6f:3e:58:31:34: 94:4e:1c:22:9f:33:7c:f9:41:15:d8:4d:cc:bf:02:31:01:d9: 09:58:b7:8e:1b:ed:11:ae:09:e5:a3:93:cd:fb:b9:2a:25:f6: 89:20:98:a3:16:43:27:96:60:eb:99:11:0f:b0:13:a4:20:b1: 4b:d8:b2:54:76:2d:88:9a:e2:b4:f9:60:79:cd:6d:b5:5a:5f: d4:12:be:30:04:52:85:35:9a:9e:c2:ed:6a:34:e5:cb:eb:e5: e9:0e:a6:01:9a:6a:02:94:5f:59:24:19:b9:a0:ba:80:62:94: 56:79:12:02 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEmHabZRn9KyrThmMxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YjA2MzMtZTg0NC00ZTM2LTg1ZWItNjE0OGQ2MzIx ODgzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MWM4MzEwYjYtNDI1MC00NjdmLTk1YTgtNWU1OGJmNTkwMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn3UJOcj3YlqFDnG856Yry+5Ll38hmBhB8TU ZUxPajXMSUIv1Gp2ZikNOIUb1rWDLZ6KiQZFYAqUnyIRMuUXpEeOBm9h8L94VY6p Z9iQstBiizEvsRALVvi4JiSatxKwhK4OcUq96kQvLfDx4ATtmprbqp6ihtDAiZHE OO8XDSurK7AAB50/+nNxqrFMupetmnrSpmGoGLT4/L4t5cKQ1sCCPOXtWOUCy3Id pvEFZudUMmcxT1swkw0wUO06NHq2i4Ce3zYWR+uFcRmXhk/BTLSsNZ9ZayX1TG5s J4634AoPp03Fhm3Qf9/ex01mgGtJZQbjpCD4Iws6rlTFGMRDmwIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFMqXGPcxTwXcHOolU++4GHkKNuRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NzZi MDYzMy1lODQ0LTRlMzYtODVlYi02MTQ4ZDYzMjE4ODMvNzE3MmUxYmItZTAyOS0z YzMwLWJlNWItMzRlNWIzNjEwYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTc2YjA2MzMtZTg0NC00ZTM2LTg1 ZWItNjE0OGQ2MzIxODgzLzU3NmIwNjMzLWU4NDQtNGUzNi04NWViLTYxNDhkNjMy MTg4My5jcmwwHwYDVR0jBBgwFoAULLXcVTZXq8SBeDNGYEmF2b1xG3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NzZiMDYzMy1lODQ0LTRlMzYtODVlYi02MTQ4 ZDYzMjE4ODMuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQrKgAwQF RQmAAwQESjMQAwQDizwYAwQCovQkAwQDovcoAwQE2HMAMA0EAgACMAcDBQAmBsgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqUT1wR2+W2SFW5/TWkyMe+jc1vn1SNlQhF+tS6ZMlS+0yEgCTB cpPvx9oOq4TzGSBtBScYzg7DfGfIBkXE7cQJbt7c6ytuOZFkFmDnzO2qo+xNiUqj feEDfkojMFumfXDy1ZwDijBKXqnQRjWaHPr6xfN0msOZhOv/LkpqYG2HjlbimxAA vXFH6FBvPlgxNJROHCKfM3z5QRXYTcy/AjEB2QlYt44b7RGuCeWjk837uSol9okg mKMWQyeWYOuZEQ+wE6QgsUvYslR2LYia4rT5YHnNbbVaX9QSvjAEUoU1mp7C7Wo0 5cvr5ekOpgGaagKUX1kkGbmguoBilFZ5EgI= -----END CERTIFICATE-----Generated at Mon Apr 21 04:05:03 2025 by rpki-client