$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa File: 5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa (raw, json) Hash identifier: 3M/DdUKvFarbVx22dtQpJ4rlLg62gN4hTZ7x7vEdF2k= Subject key identifier: 44:7A:64:A6:88:0A:2C:52:5E:D0:32:58:8B:A1:2A:B2:DA:7A:CA:3E Certificate issuer: /CN=d0125580-9deb-4d15-b1e7-1a6f7958b187 Certificate serial: 010D0C9F43285848F4F6A60314812D7B0F623990 Authority key identifier: 27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 396317 IP address blocks: 104.193.40.0/22 maxlen: 22 104.193.40.0/24 maxlen: 24 104.193.40.0/27 maxlen: 27 104.193.40.32/27 maxlen: 27 104.193.40.64/27 maxlen: 27 104.193.40.96/27 maxlen: 27 104.193.40.128/27 maxlen: 27 104.193.40.160/27 maxlen: 27 104.193.40.192/27 maxlen: 27 104.193.40.224/27 maxlen: 27 104.193.41.0/24 maxlen: 27 104.193.42.0/23 maxlen: 23 172.110.136.0/22 maxlen: 22 2605:3c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a6:03:14:81:2d:7b:0f:62:39:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0125580-9deb-4d15-b1e7-1a6f7958b187 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fa00f06b-fb2b-4f60-8b22-07837e084807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:87:80:d1:2f:2b:d4:81:1e:ce:bd:3e:2f: 42:f9:63:b1:22:71:71:9c:9d:33:0b:17:1c:45:46: 82:47:e4:60:57:e7:38:a5:f4:9c:5d:93:36:54:a4: f5:be:04:fd:20:53:49:2f:8c:86:e5:32:e0:2f:1b: 45:6d:b8:67:05:c4:75:85:8e:2c:7f:37:3c:8c:9c: b7:2b:35:a2:b9:fc:aa:1a:90:0d:06:d6:97:04:60: ea:1c:e9:f9:6e:2f:3c:ad:74:b3:2b:9c:8e:89:0b: d1:bb:c7:11:be:1b:95:cc:84:44:a0:80:f9:2e:1a: 05:dc:27:b0:73:59:0b:ca:49:6d:10:0f:8f:f2:1d: 39:b8:51:3d:8d:3d:7b:49:f8:e2:33:e6:89:56:4b: 78:78:fc:71:58:a6:d3:e6:a9:a5:0c:78:d2:42:89: f2:b0:3c:13:01:0b:d4:a7:de:45:da:ac:e4:c9:d8: 2c:91:d1:ae:c2:cd:ac:10:35:31:8d:b1:4d:dc:15: f5:15:78:b9:0d:2a:a3:8f:3d:49:23:04:55:97:48: 8a:15:cd:e4:38:59:e8:e5:7f:6a:9f:a6:98:11:27: 03:27:ac:95:6b:3c:7b:4b:14:ff:63:99:95:1b:f6: d4:8c:33:e8:d3:0a:99:84:79:87:99:46:23:a1:07: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7A:64:A6:88:0A:2C:52:5E:D0:32:58:8B:A1:2A:B2:DA:7A:CA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl X509v3 Authority Key Identifier: keyid:27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer sbgp-ipAddrBlock: critical IPv4: 104.193.40.0/22 172.110.136.0/22 IPv6: 2605:3c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a0:bf:8b:2e:5a:c4:f4:50:6c:38:19:90:6f:13:52:75:ee: 70:13:4c:4d:fc:da:ef:05:c9:ba:8a:c2:da:d6:2d:9d:87:06: ce:08:c5:ef:df:1b:7c:03:61:f5:6b:a0:d7:06:e1:d4:7b:15: 6f:05:84:b0:e4:fe:62:ef:55:68:6e:c4:2d:8c:3f:3c:d6:f5: 1e:41:42:88:72:fe:92:6e:81:b9:d8:bd:58:ec:44:cf:0e:63: 53:c9:2e:fc:07:5e:7e:2b:8f:39:e6:7f:c0:de:96:cd:18:5a: 17:35:8d:9f:f9:44:c2:44:30:fb:49:a6:53:eb:e4:33:7a:39: 76:ec:ce:27:84:2b:23:8e:41:1e:11:66:ae:77:1b:3b:4d:dc: 52:78:32:19:da:0b:95:ee:aa:79:95:3c:72:df:d5:1b:1d:75: 96:9f:9c:38:65:4a:12:ff:01:d0:98:3c:ab:e8:7d:97:b2:5f: d8:7f:42:0b:a2:7d:39:06:c3:e1:ac:1f:b0:fd:35:e8:56:67: 4c:f8:be:b0:12:c3:61:6f:38:02:d6:b3:83:a5:ea:77:69:d0: 3a:09:9b:a4:f8:af:46:1b:4e:82:93:a9:2a:f5:e9:0d:eb:5a: 87:8f:fd:8d:4e:c3:62:09:4e:e7:92:58:3d:9a:08:cc:b2:ea: da:35:b8:07 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEj09qYDFIEtew9iOZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAxMjU1ODAtOWRlYi00ZDE1LWIxZTctMWE2Zjc5NThi MTg3MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmEwMGYwNmItZmIyYi00ZjYwLThiMjItMDc4MzdlMDg0ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+eHgNEvK9SBHs69Pi9C+WOxInFxnJ0zCxcc RUaCR+RgV+c4pfScXZM2VKT1vgT9IFNJL4yG5TLgLxtFbbhnBcR1hY4sfzc8jJy3 KzWiufyqGpANBtaXBGDqHOn5bi88rXSzK5yOiQvRu8cRvhuVzIREoID5LhoF3Cew c1kLykltEA+P8h05uFE9jT17SfjiM+aJVkt4ePxxWKbT5qmlDHjSQonysDwTAQvU p95F2qzkydgskdGuws2sEDUxjbFN3BX1FXi5DSqjjz1JIwRVl0iKFc3kOFno5X9q n6aYEScDJ6yVazx7SxT/Y5mVG/bUjDPo0wqZhHmHmUYjoQe/FwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFER6ZKaICixSXtAyWIuhKrLaeso+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMDEy NTU4MC05ZGViLTRkMTUtYjFlNy0xYTZmNzk1OGIxODcvNWIzYzQ0MDktOTQyMC0z MWI5LTkzODItYTQwM2NhM2VjZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDAxMjU1ODAtOWRlYi00ZDE1LWIx ZTctMWE2Zjc5NThiMTg3L2QwMTI1NTgwLTlkZWItNGQxNS1iMWU3LTFhNmY3OTU4 YjE4Ny5jcmwwHwYDVR0jBBgwFoAUJx73rH5Oev5QSwlm08z0teZIqRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMDEyNTU4MC05ZGViLTRkMTUtYjFlNy0xYTZm Nzk1OGIxODcuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCaMEoAwQC rG6IMA0EAgACMAcDBQAmBTxAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIGgv4suWsT0UGw4GZBvE1J17nAT TE382u8FybqKwtrWLZ2HBs4Ixe/fG3wDYfVroNcG4dR7FW8FhLDk/mLvVWhuxC2M PzzW9R5BQohy/pJugbnYvVjsRM8OY1PJLvwHXn4rjznmf8Dels0YWhc1jZ/5RMJE MPtJplPr5DN6OXbszieEKyOOQR4RZq53GztN3FJ4MhnaC5XuqnmVPHLf1RsddZaf nDhlShL/AdCYPKvofZeyX9h/QguifTkGw+GsH7D9NehWZ0z4vrASw2FvOALWs4Ol 6ndp0DoJm6T4r0YbToKTqSr16Q3rWoeP/Y1Ow2IJTueSWD2aCMyy6to1uAc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:44 2025 by rpki-client