$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa File: cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa (raw, json) Hash identifier: 4mQlosaoh/jz47shlPWrM5FNsVQXqI+qECj1eJ8Zf9c= Subject key identifier: C2:EF:7E:00:00:81:EA:E6:3F:AC:0E:E8:49:E4:C1:98:70:03:A1:1B Certificate issuer: /CN=0c18872e-4e90-4862-8069-3a53159075c1 Certificate serial: 010D0C9F4328584902EC100965E22FDC98B26380 Authority key identifier: B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 31875 IP address blocks: 64.112.232.0/21 maxlen: 24 66.33.40.0/21 maxlen: 24 169.136.192.0/19 maxlen: 24 174.137.16.0/20 maxlen: 24 2606:2140::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:10:09:65:e2:2f:dc:98:b2:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c18872e-4e90-4862-8069-3a53159075c1 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=571c9a70-bbc8-4273-b512-326b7c04abfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:28:9c:a7:0e:53:b3:63:58:81:43:fa:ec: 09:51:1e:57:f3:43:99:c4:ec:90:e6:71:6a:f5:43: 31:f4:9b:28:f7:17:36:b5:33:31:b7:46:28:35:63: 4a:1b:58:72:3c:c6:14:f5:ab:5f:d6:87:cf:b7:9c: 93:ab:42:fe:bc:ae:bf:8d:84:54:47:b1:12:af:18: ab:7c:80:72:9f:6a:2f:ec:1c:dd:76:2d:01:a7:2c: 0b:21:4e:8c:cc:b7:cc:2f:1c:0c:25:d9:cf:01:e5: c4:ac:b5:92:6a:b2:f1:95:17:2d:40:a2:ca:29:cd: ab:e7:37:59:9b:f4:18:3f:dd:2a:98:5c:b5:b0:a5: 22:9f:bc:f9:32:f2:9d:3d:40:44:26:e0:3c:5d:28: 7f:a9:b7:b6:ad:33:6d:b7:e5:5c:58:56:b3:d6:07: 3a:46:4d:87:89:bb:fa:4e:27:fb:91:13:c9:e9:af: fb:a0:8f:25:3c:a9:34:73:52:6c:83:2d:9b:27:7d: f8:a5:f1:b2:4b:d3:12:fe:f7:90:11:52:ad:f7:15: 6f:01:7a:e2:4b:60:d4:41:00:76:6b:d2:23:17:58: ab:fe:b3:4a:cc:dd:4b:72:c5:5f:18:9f:04:8c:b2: c5:b8:73:b1:2e:bb:ca:c1:2e:02:35:d9:98:bf:51: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EF:7E:00:00:81:EA:E6:3F:AC:0E:E8:49:E4:C1:98:70:03:A1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.crl X509v3 Authority Key Identifier: keyid:B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer sbgp-ipAddrBlock: critical IPv4: 64.112.232.0/21 66.33.40.0/21 169.136.192.0/19 174.137.16.0/20 IPv6: 2606:2140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f4:77:59:01:e9:e0:3b:7b:ed:f6:73:8c:b5:fb:3a:97:c4: ec:86:1e:cd:81:a3:64:d8:17:ab:12:41:c8:ae:f2:d3:a5:ca: 9d:34:63:7d:e3:10:e7:22:55:fb:57:f1:49:fc:f9:42:da:ed: 30:e2:3e:3f:02:07:b4:37:60:26:4e:9b:8e:1b:21:8d:09:b9: eb:a3:05:fe:3d:a0:ca:ff:02:f9:8e:03:cd:30:48:55:a2:6b: 13:69:a6:9f:80:c1:0b:38:be:31:4f:1d:9b:34:07:98:b8:72: 36:5f:d4:d8:b1:49:a8:4b:32:56:e1:16:a5:22:33:17:43:af: b6:ab:5d:61:d5:f0:a0:93:c3:a4:d5:6c:fd:5c:fd:81:cf:41: 4c:25:6c:87:c7:a9:12:49:20:d3:8c:8e:bf:d9:48:2e:7f:f7: dd:8b:3c:26:aa:ac:28:f7:d2:b7:9a:72:8e:e0:f5:f8:a0:75: 31:09:3d:d0:1f:30:b4:d6:84:c2:d9:f0:f7:62:a9:33:3c:08: e8:cc:6b:f5:01:a7:60:b3:6e:53:4e:0f:01:71:3f:59:42:e2: 1f:27:21:35:d8:c3:29:ea:1b:37:7b:d0:39:f9:33:a0:e5:4a: 67:d1:d5:ec:ad:d3:ea:c8:54:c1:e7:5c:f2:ff:ba:a6:79:dd: a4:55:26:b9 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEkC7BAJZeIv3JiyY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMxODg3MmUtNGU5MC00ODYyLTgwNjktM2E1MzE1OTA3 NWMxMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NTcxYzlhNzAtYmJjOC00MjczLWI1MTItMzI2YjdjMDRhYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1oonKcOU7NjWIFD+uwJUR5X80OZxOyQ5nFq 9UMx9Jso9xc2tTMxt0YoNWNKG1hyPMYU9atf1ofPt5yTq0L+vK6/jYRUR7ESrxir fIByn2ov7Bzddi0BpywLIU6MzLfMLxwMJdnPAeXErLWSarLxlRctQKLKKc2r5zdZ m/QYP90qmFy1sKUin7z5MvKdPUBEJuA8XSh/qbe2rTNtt+VcWFaz1gc6Rk2Hibv6 Tif7kRPJ6a/7oI8lPKk0c1Jsgy2bJ334pfGyS9MS/veQEVKt9xVvAXriS2DUQQB2 a9IjF1ir/rNKzN1LcsVfGJ8EjLLFuHOxLrvKwS4CNdmYv1GReQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFMLvfgAAgermP6wO6EnkwZhwA6EbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzE4 ODcyZS00ZTkwLTQ4NjItODA2OS0zYTUzMTU5MDc1YzEvY2ZjYjgwOGUtYzY5Zi0z Y2IwLWJhNjctYTA4MGNmOTRhNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGMxODg3MmUtNGU5MC00ODYyLTgw NjktM2E1MzE1OTA3NWMxLzBjMTg4NzJlLTRlOTAtNDg2Mi04MDY5LTNhNTMxNTkw NzVjMS5jcmwwHwYDVR0jBBgwFoAUtRst6VQJ2Nt75E1ca7l6j7UqFs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzE4ODcyZS00ZTkwLTQ4NjItODA2OS0zYTUz MTU5MDc1YzEuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDQHDoAwQD QiEoAwQFqYjAAwQErokQMA0EAgACMAcDBQAmBiFAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB70d1kB6eA7 e+32c4y1+zqXxOyGHs2Bo2TYF6sSQciu8tOlyp00Y33jEOciVftX8Un8+ULa7TDi Pj8CB7Q3YCZOm44bIY0JueujBf49oMr/AvmOA80wSFWiaxNppp+AwQs4vjFPHZs0 B5i4cjZf1NixSahLMlbhFqUiMxdDr7arXWHV8KCTw6TVbP1c/YHPQUwlbIfHqRJJ INOMjr/ZSC5/992LPCaqrCj30reaco7g9figdTEJPdAfMLTWhMLZ8PdiqTM8COjM a/UBp2CzblNODwFxP1lC4h8nITXYwynqGzd70Dn5M6DlSmfR1eyt0+rIVMHnXPL/ uqZ53aRVJrk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:11:01 2025 by rpki-client