$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa File: 60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json) Hash identifier: s3FrSS0VuGSiXcZbgTNMXAEBwTl+a6NbOIr8OoAG8QA= Subject key identifier: 85:26:26:43:58:9D:B8:DA:47:AE:66:D7:CC:31:63:19:E3:4B:D4:0D Certificate issuer: /CN=31663e0d-961a-43ac-8a01-d43efc01bea0 Certificate serial: 010D0C9F432858491D7180E53F4C2D53BFE5C980 Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 395555 IP address blocks: 170.10.64.0/22 maxlen: 24 170.10.72.0/24 maxlen: 24 170.10.84.0/22 maxlen: 24 209.206.64.0/19 maxlen: 24 2604:4c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:80:e5:3f:4c:2d:53:bf:e5:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3506584e-9cf2-4c84-9feb-a3441624ce71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:89:7c:bf:8a:a1:a2:12:7b:7d:a3:0d:c2: 52:3e:cd:ae:f6:0e:25:22:8e:f4:76:ed:3f:20:67: e9:18:16:0a:8f:99:78:e8:b6:20:22:e0:72:89:32: 81:16:40:04:a0:13:ba:39:7c:1b:1e:d9:da:b3:25: 1b:1b:46:2f:7e:91:91:2e:ba:8a:55:bf:20:f4:15: e5:e6:0e:1c:17:2b:70:ba:c1:4b:eb:90:6b:72:a2: 7b:a9:cb:09:94:65:fa:59:c2:15:d9:53:0a:54:62: 90:3f:c8:bb:84:17:af:23:e3:74:df:9a:85:06:62: 25:d0:b6:3a:f1:e3:c6:68:7a:d6:e9:45:19:c4:20: 35:17:47:a1:fc:91:9c:70:e5:4c:d7:56:29:a7:79: 2e:bc:c4:7e:5c:4b:7c:9f:1b:7e:1c:b3:b1:e1:bc: cd:7b:dc:35:e6:7f:b6:c6:59:ce:36:2b:90:e9:00: cb:e8:f4:e6:b7:e2:1c:be:1c:38:17:14:69:7b:35: 8e:05:88:b9:7f:ac:dc:e4:31:d3:e9:87:89:8d:53: 8d:67:23:bf:b7:38:ee:57:db:66:a1:ff:8f:73:5d: 2a:18:38:f4:5e:e0:db:ab:74:f6:c1:87:a4:fb:8e: 11:e0:7a:ad:1b:28:43:dc:f0:d6:3b:49:d0:18:e2: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:26:43:58:9D:B8:DA:47:AE:66:D7:CC:31:63:19:E3:4B:D4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl X509v3 Authority Key Identifier: keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer sbgp-ipAddrBlock: critical IPv4: 170.10.64.0/22 170.10.72.0/24 170.10.84.0/22 209.206.64.0/19 IPv6: 2604:4c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:22:d6:df:e9:4d:c4:f9:e8:ca:66:24:a4:28:50:d2:5a:34: 07:40:da:76:4c:01:b8:76:6d:ec:90:ed:5d:69:98:2c:4d:07: f6:31:7c:d5:d7:b7:cd:cb:55:8d:be:1d:7d:93:08:f9:06:69: 22:d7:80:46:1b:8d:9e:9d:26:c6:02:81:20:2a:2e:e5:9e:3f: f3:6d:14:9c:a6:b6:f5:fb:1d:58:6a:34:03:e0:11:09:50:19: 16:52:0c:d8:82:1d:fd:4c:a7:6b:a1:92:7c:81:79:66:53:c9: c2:8a:d8:82:de:79:30:a4:bf:cf:5b:e2:a6:11:95:8f:f6:b8: b4:ff:71:33:0b:d2:51:82:a3:97:d6:ec:40:c3:b8:60:eb:33: 32:5b:10:8f:22:22:63:da:4f:da:87:7b:3d:50:38:a8:99:03: f9:a5:40:9a:99:85:3d:18:fc:2c:e5:cd:77:28:24:9a:82:5d: f0:f0:83:05:06:9d:bd:21:6a:d8:12:c2:dd:55:45:76:4d:b4: 90:0c:78:9e:94:9e:27:ae:7b:44:cd:5e:33:c2:e6:9c:73:c9: 3a:a5:ad:9c:94:ae:64:e0:43:44:91:2b:bc:71:92:1e:2e:6b: 7a:a3:d5:ff:53:22:93:a3:aa:b7:ad:d2:87:e3:76:f4:94:ce: b4:ad:06:8a -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEkdcYDlP0wtU7/lyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE2NjNlMGQtOTYxYS00M2FjLThhMDEtZDQzZWZjMDFi ZWEwMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzUwNjU4NGUtOWNmMi00Yzg0LTlmZWItYTM0NDE2MjRjZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN2JfL+KoaISe32jDcJSPs2u9g4lIo70du0/ IGfpGBYKj5l46LYgIuByiTKBFkAEoBO6OXwbHtnasyUbG0YvfpGRLrqKVb8g9BXl 5g4cFytwusFL65BrcqJ7qcsJlGX6WcIV2VMKVGKQP8i7hBevI+N035qFBmIl0LY6 8ePGaHrW6UUZxCA1F0eh/JGccOVM11Ypp3kuvMR+XEt8nxt+HLOx4bzNe9w15n+2 xlnONiuQ6QDL6PTmt+Icvhw4FxRpezWOBYi5f6zc5DHT6YeJjVONZyO/tzjuV9tm of+Pc10qGDj0XuDbq3T2wYek+44R4HqtGyhD3PDWO0nQGOKJrQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFIUmJkNYnbjaR65m18wxYxnjS9QNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMTY2 M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNlZmMwMWJlYTAvNjBiMGVmY2EtMmZmMi0z NWQzLWJjY2QtMGNkMGViMWZhMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzE2NjNlMGQtOTYxYS00M2FjLThh MDEtZDQzZWZjMDFiZWEwLzMxNjYzZTBkLTk2MWEtNDNhYy04YTAxLWQ0M2VmYzAx YmVhMC5jcmwwHwYDVR0jBBgwFoAUe/NZmB18WfRxUO/yfLqnmBTaQIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zMTY2M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNl ZmMwMWJlYTAuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCqgpAAwQA qgpIAwQCqgpUAwQF0c5AMA0EAgACMAcDBQAmBExAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAoi1t/pTcT5 6MpmJKQoUNJaNAdA2nZMAbh2beyQ7V1pmCxNB/YxfNXXt83LVY2+HX2TCPkGaSLX gEYbjZ6dJsYCgSAqLuWeP/NtFJymtvX7HVhqNAPgEQlQGRZSDNiCHf1Mp2uhknyB eWZTycKK2ILeeTCkv89b4qYRlY/2uLT/cTML0lGCo5fW7EDDuGDrMzJbEI8iImPa T9qHez1QOKiZA/mlQJqZhT0Y/CzlzXcoJJqCXfDwgwUGnb0hatgSwt1VRXZNtJAM eJ6Unieue0TNXjPC5pxzyTqlrZyUrmTgQ0SRK7xxkh4ua3qj1f9TIpOjqret0ofj dvSUzrStBoo= -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:06 2025 by rpki-client