$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa File: 913ccad0-9f81-3143-b72c-4473dba1b1d3.roa (raw, json) Hash identifier: NaQmFtnDrAvx8/UUHk3xWuQzIzakaTQ5j8boSK/6meQ= Subject key identifier: 13:EF:EC:FA:52:90:2D:E8:CF:0A:BC:E8:24:71:A3:21:90:7F:5F:CE Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F43285848ADC60644FA10D2E504AA6F40 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 398446 IP address blocks: 72.251.128.0/19 maxlen: 24 158.62.224.0/19 maxlen: 24 209.25.224.0/21 maxlen: 24 2605:d2c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:06:44:fa:10:d2:e5:04:aa:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=55835488-8fd7-4fe3-8e84-039c42cbd28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:c0:6b:22:85:ba:44:9f:68:87:c7:70:f5: 26:dd:2b:39:0f:2a:9a:15:6b:d3:1f:58:32:70:59: 99:46:29:a3:3a:22:6b:dd:9d:7e:68:14:ac:8f:19: d9:29:a4:5f:e6:dd:37:08:36:59:1c:09:d6:ec:28: 7b:19:5a:72:75:82:e8:c6:10:d2:1d:f3:d0:b3:35: 03:4f:fb:95:b9:0a:54:90:e0:e4:83:5d:28:31:20: 89:d1:f3:ac:e6:98:3b:12:f8:66:3a:6a:eb:dd:cd: 26:c2:8c:09:bd:5c:b3:ff:fe:63:f8:8d:2e:fa:0f: 38:bd:f5:8d:1f:19:dc:8f:03:b6:4d:c0:3e:de:05: 9c:6c:b8:71:97:0f:44:10:c0:c3:52:6a:d0:75:ca: 07:34:68:59:41:a3:92:fe:c8:ef:e2:d3:80:50:f1: 44:88:45:21:57:9c:05:71:ed:a7:d8:de:b9:2d:f1: 42:9f:37:b1:46:33:85:fe:87:86:6f:65:21:03:38: ff:4f:c5:c8:ed:bd:61:0b:62:2f:9f:a1:91:06:42: 39:38:48:d7:34:8b:19:2d:1e:10:4a:2f:17:c5:71: 23:79:58:b8:fb:ce:2d:2b:b2:b2:fc:a8:d2:67:ce: dd:f6:c1:19:c2:8b:2f:64:0b:98:0d:9f:d3:8b:21: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:EC:FA:52:90:2D:E8:CF:0A:BC:E8:24:71:A3:21:90:7F:5F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 72.251.128.0/19 158.62.224.0/19 209.25.224.0/21 IPv6: 2605:d2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ba:0e:ef:5b:65:80:ec:44:8e:7f:14:58:5a:9f:3a:12:3f: a4:30:d0:a9:ae:c5:3c:f9:4c:71:a2:1c:ac:75:1c:a8:02:b0: 6a:41:00:0a:63:ae:a6:69:ad:6c:6b:a8:05:41:69:f7:bd:81: 3d:ec:6c:3f:c6:cc:8a:97:19:40:e8:71:e8:a5:ce:8b:ac:16: f8:19:7a:fd:e2:c7:d6:b0:83:db:bd:f7:e5:45:0f:aa:1e:8d: 4b:a7:24:32:c3:8e:86:25:74:45:ca:e0:7e:7b:c5:12:bf:3a: ce:e4:0d:45:4e:98:5f:e8:15:21:41:3b:17:5a:2e:bc:49:e3: 7b:8b:08:9e:59:b7:d4:33:11:85:e6:c9:a5:8c:bf:ff:dc:49: 9d:8d:c9:7d:40:0a:cc:62:38:4a:86:bf:b9:b2:89:35:17:ef: 03:72:ee:62:45:68:0d:12:df:86:6e:c8:ca:74:e3:9e:7b:a2: 02:82:33:de:06:93:fc:48:2f:a6:c8:79:18:a5:4a:d8:e1:2f: 7d:4e:bb:27:6c:ed:ad:1c:aa:89:ee:3d:8b:b2:03:21:21:5f: cf:c7:09:79:27:c3:bd:2a:f0:5b:54:0e:1a:e7:be:97:0c:05: 7e:04:be:c2:b0:a7:5f:ae:3f:15:e9:2c:91:43:a7:05:a5:c0: a4:ab:19:b7 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEitxgZE+hDS5QSqb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NTU4MzU0ODgtOGZkNy00ZmUzLThlODQtMDM5YzQyY2JkMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKHAayKFukSfaIfHcPUm3Ss5DyqaFWvTH1gy cFmZRimjOiJr3Z1+aBSsjxnZKaRf5t03CDZZHAnW7Ch7GVpydYLoxhDSHfPQszUD T/uVuQpUkODkg10oMSCJ0fOs5pg7EvhmOmrr3c0mwowJvVyz//5j+I0u+g84vfWN HxncjwO2TcA+3gWcbLhxlw9EEMDDUmrQdcoHNGhZQaOS/sjv4tOAUPFEiEUhV5wF ce2n2N65LfFCnzexRjOF/oeGb2UhAzj/T8XI7b1hC2Ivn6GRBkI5OEjXNIsZLR4Q Si8XxXEjeVi4+84tK7Ky/KjSZ87d9sEZwosvZAuYDZ/TiyHFuwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFBPv7PpSkC3ozwq86CRxoyGQf1/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvOTEzY2NhZDAtOWY4MS0z MTQzLWI3MmMtNDQ3M2RiYTFiMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFSPuAAwQF nj7gAwQD0RngMA0EAgACMAcDBQAmBdLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAO6Du9bZYDsRI5/FFha nzoSP6Qw0KmuxTz5THGiHKx1HKgCsGpBAApjrqZprWxrqAVBafe9gT3sbD/GzIqX GUDoceilzousFvgZev3ix9awg9u99+VFD6oejUunJDLDjoYldEXK4H57xRK/Os7k DUVOmF/oFSFBOxdaLrxJ43uLCJ5Zt9QzEYXmyaWMv//cSZ2NyX1ACsxiOEqGv7my iTUX7wNy7mJFaA0S34ZuyMp04557ogKCM94Gk/xIL6bIeRilStjhL31Ouyds7a0c qonuPYuyAyEhX8/HCXknw70q8FtUDhrnvpcMBX4EvsKwp1+uPxXpLJFDpwWlwKSr Gbc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:00 2025 by rpki-client