$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa File: aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa (raw, json) Hash identifier: EDFjcm73rPbM+z68iHrEAloyb1Sq7NUHT1BtArm3lws= Subject key identifier: 23:E2:77:71:76:A4:B2:E6:9C:74:7B:F3:A7:26:5A:1B:75:F3:EE:08 Certificate issuer: /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c Certificate serial: 010D0C9F43285848D0ABAAAA1A1E9D466500F900 Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 17185 IP address blocks: 74.115.168.0/21 maxlen: 24 173.195.144.0/20 maxlen: 24 199.16.48.0/21 maxlen: 24 208.72.236.0/22 maxlen: 24 208.82.128.0/22 maxlen: 24 208.88.48.0/21 maxlen: 24 2604:bf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:aa:aa:1a:1e:9d:46:65:00:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=06997b3f-68bf-45e2-803e-1b9ef8c80d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:06:27:83:73:7e:40:dc:82:21:ef:fe:57: 06:1e:98:ff:43:87:aa:70:09:7b:39:ab:c8:67:8f: 10:e8:89:c0:bf:ed:5a:50:78:e0:52:27:a8:80:21: 21:d6:ab:b7:d2:97:4d:3d:b7:e1:d5:2c:73:22:55: b8:dc:a9:ca:0c:e1:b4:86:87:d1:61:25:e8:36:ea: 83:bf:4d:af:95:ed:72:1e:e4:7a:9d:9c:e9:58:db: 8a:89:68:6a:aa:8d:49:f5:df:53:11:5e:e6:6e:b1: 8e:79:86:86:36:85:3c:5f:51:41:db:cb:0c:80:a8: f4:46:47:c1:c1:a2:35:52:a7:b1:5d:37:f5:b2:70: d1:1a:f1:4a:af:0d:1c:f5:e7:f4:d9:3c:12:41:99: e8:93:e8:5b:44:ef:8d:d1:04:3f:66:7e:78:e2:16: 34:43:83:96:bf:91:83:42:2c:28:63:aa:f0:e3:97: 83:c8:d5:6d:cb:72:9e:d5:46:c1:aa:e2:7a:fa:2b: 20:8b:92:e0:a2:49:dd:2a:52:9e:8d:33:6d:36:7e: 50:8b:5e:44:d4:ac:1d:86:6b:6d:4f:d0:b0:a7:67: c3:d0:91:05:78:0f:5d:c9:88:fe:11:c2:a7:de:ba: 51:13:ab:52:9c:61:ce:73:15:4c:21:fb:dc:9f:2e: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:77:71:76:A4:B2:E6:9C:74:7B:F3:A7:26:5A:1B:75:F3:EE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl X509v3 Authority Key Identifier: keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer sbgp-ipAddrBlock: critical IPv4: 74.115.168.0/21 173.195.144.0/20 199.16.48.0/21 208.72.236.0/22 208.82.128.0/22 208.88.48.0/21 IPv6: 2604:bf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:73:8f:da:2e:7e:85:cf:b6:0e:69:f7:42:1a:d1:9d:a1:5a: e6:0c:3f:73:82:01:71:2c:2d:30:b9:7c:6e:2b:95:76:bf:e3: c8:3e:32:97:c2:c5:e6:4d:1a:06:61:56:b7:81:f8:6f:e1:2b: cd:03:e3:82:e7:94:76:ae:70:36:57:dc:2a:d4:d0:a5:02:dd: bb:a1:52:52:19:2a:52:40:83:43:bc:f6:d9:6b:3e:4f:6f:6e: b7:a6:4c:db:22:dd:cd:7d:42:d8:4c:59:9b:fd:fd:e4:0f:af: 92:a0:82:9e:5e:59:dc:e4:f0:03:52:d4:08:5c:82:9d:2b:e3: 64:b0:df:e0:81:60:59:83:91:e3:34:be:35:b4:41:8a:64:d9: 43:04:c8:51:78:1d:a3:6d:1c:d5:b1:5b:fa:ba:0a:a1:50:40: 94:e8:fe:d0:c5:c7:d2:ef:ce:50:85:70:cb:ab:aa:45:b2:30: 13:ef:7d:0e:a9:f7:4b:50:a1:39:8d:18:49:09:62:12:41:b9: 69:d2:25:38:3c:5b:ce:d3:83:86:62:de:f5:51:7f:c2:e7:4f: c6:69:fb:44:da:45:d3:8d:82:be:0a:29:2c:a0:fd:b9:95:e0: b7:c1:e4:6d:50:4d:a7:6e:a3:bd:24:13:95:29:9a:63:73:29: cb:2c:f8:c8 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEjQq6qqGh6dRmUA+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZlOGNhMGItMGY1ZS00MDY3LWFjZDctMmJiYjQwMDhl ZDFjMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MDY5OTdiM2YtNjhiZi00NWUyLTgwM2UtMWI5ZWY4YzgwZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz88GJ4NzfkDcgiHv/lcGHpj/Q4eqcAl7OavI Z48Q6InAv+1aUHjgUieogCEh1qu30pdNPbfh1SxzIlW43KnKDOG0hofRYSXoNuqD v02vle1yHuR6nZzpWNuKiWhqqo1J9d9TEV7mbrGOeYaGNoU8X1FB28sMgKj0RkfB waI1UqexXTf1snDRGvFKrw0c9ef02TwSQZnok+hbRO+N0QQ/Zn544hY0Q4OWv5GD QiwoY6rw45eDyNVty3Ke1UbBquJ6+isgi5LgokndKlKejTNtNn5Qi15E1Kwdhmtt T9Cwp2fD0JEFeA9dyYj+EcKn3rpRE6tSnGHOcxVMIfvcny6lxQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFCPid3F2pLLmnHR786cmWht18+4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4 Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAwOGVkMWMvYWFjZmIwYTUtZWZjZC0z YzhmLWI5YzMtYjEzNzg4MmU5YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTZlOGNhMGItMGY1ZS00MDY3LWFj ZDctMmJiYjQwMDhlZDFjLzE2ZThjYTBiLTBmNWUtNDA2Ny1hY2Q3LTJiYmI0MDA4 ZWQxYy5jcmwwHwYDVR0jBBgwFoAUT6kz7dxBnGP6bwm5Ex/lf45BiBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJi NDAwOGVkMWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDSnOoAwQE rcOQAwQDxxAwAwQC0EjsAwQC0FKAAwQD0FgwMA0EAgACMAcDBQAmBL8AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAJxzj9oufoXPtg5p90Ia0Z2hWuYMP3OCAXEsLTC5fG4rlXa/48g+MpfCxeZN GgZhVreB+G/hK80D44LnlHaucDZX3CrU0KUC3buhUlIZKlJAg0O89tlrPk9vbrem TNsi3c19QthMWZv9/eQPr5Kggp5eWdzk8ANS1Ahcgp0r42Sw3+CBYFmDkeM0vjW0 QYpk2UMEyFF4HaNtHNWxW/q6CqFQQJTo/tDFx9LvzlCFcMurqkWyMBPvfQ6p90tQ oTmNGEkJYhJBuWnSJTg8W87Tg4Zi3vVRf8LnT8Zp+0TaRdONgr4KKSyg/bmV4LfB 5G1QTaduo70kE5UpmmNzKcss+Mg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:46 2025 by rpki-client