$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa File: bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa (raw, json) Hash identifier: E+993u8UtK65wA5Gh2VVB2W/bj2/ddzrSNUvk+rfIZQ= Subject key identifier: 37:A5:59:3C:D4:BF:A0:8B:FB:81:C9:4D:70:67:5E:0A:4F:50:F3:77 Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Certificate serial: 010D0C9F432858481B6B661E4CF51B1A62310280 Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa Signing time: Thu 05 Dec 2024 15:50:06 +0000 ROA not before: Thu 05 Dec 2024 15:50:06 +0000 ROA not after: Wed 05 Mar 2025 15:50:06 +0000 asID: 7018 IP address blocks: 23.112.0.0/12 maxlen: 12 45.16.0.0/12 maxlen: 12 99.0.0.0/13 maxlen: 13 99.32.0.0/12 maxlen: 12 99.96.0.0/13 maxlen: 13 99.112.0.0/12 maxlen: 12 104.0.0.0/12 maxlen: 12 104.48.0.0/12 maxlen: 12 104.176.0.0/12 maxlen: 12 107.128.0.0/12 maxlen: 12 107.192.0.0/12 maxlen: 12 107.208.0.0/12 maxlen: 12 162.224.0.0/12 maxlen: 12 172.0.0.0/12 maxlen: 12 2600:1700::/28 maxlen: 28 2602:300::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1b:6b:66:1e:4c:f5:1b:1a:62:31:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Validity Not Before: Dec 5 15:50:06 2024 GMT Not After : Mar 5 15:50:06 2025 GMT Subject: CN=aeffd072-8fdf-4b4e-9c9e-6f9d58788391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:77:66:c0:fe:0b:82:55:e6:1f:74:4f:e8: 79:93:08:93:e4:c6:75:2e:13:4e:8a:23:55:0e:a2: 3e:ea:a6:30:76:ae:2c:3f:15:37:60:2b:a3:cb:c7: 76:b4:05:21:65:7c:fc:2c:83:c5:54:17:e0:a4:6a: a1:15:f6:37:a8:a3:ae:de:c0:ce:85:59:0f:0c:0e: 03:5d:fd:04:58:3c:1e:66:b0:4f:ed:07:ea:bd:a0: 48:64:a8:9f:a7:2d:b0:98:6e:c9:c2:1d:20:2b:a6: 29:4b:46:07:aa:c5:2c:8d:e2:14:5d:9e:d7:a6:ef: 2d:37:7d:86:67:23:a0:33:81:2c:f2:ec:7a:63:81: f7:58:e9:8e:6c:ce:4d:35:51:9f:1c:0d:44:00:56: 50:e7:e8:94:c2:f7:16:24:b8:cd:99:dc:b9:70:3f: a4:a5:98:46:92:79:c5:5c:59:6d:e7:31:b7:5f:60: 04:fe:af:df:5a:7b:bd:3f:21:23:8f:41:a3:9b:8d: 96:eb:03:c2:82:8b:e8:65:e8:d3:60:9b:15:50:b1: 03:8a:c8:89:d9:98:03:92:67:ab:e1:2c:66:a8:91: 9e:e0:a0:18:15:10:b3:57:ae:0d:e8:28:5f:c0:b2: 73:d2:ab:01:fe:da:be:51:39:21:99:49:72:5e:63: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A5:59:3C:D4:BF:A0:8B:FB:81:C9:4D:70:67:5E:0A:4F:50:F3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl X509v3 Authority Key Identifier: keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer sbgp-ipAddrBlock: critical IPv4: 23.112.0.0/12 45.16.0.0/12 99.0.0.0/13 99.32.0.0/12 99.96.0.0/13 99.112.0.0/12 104.0.0.0/12 104.48.0.0/12 104.176.0.0/12 107.128.0.0/12 107.192.0.0/11 162.224.0.0/12 172.0.0.0/12 IPv6: 2600:1700::/28 2602:300::/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1f:5b:e6:da:d2:79:ef:1a:7b:d2:a7:19:5a:26:5a:2a:4f: 0b:29:a8:dd:79:74:1f:d3:a8:54:89:a9:75:62:65:d1:2d:60: cc:4e:ea:28:2f:f4:6f:bf:8f:fa:16:43:c8:72:b8:d3:cb:e4: c5:23:a3:de:45:fe:f4:1e:85:ab:95:a8:5d:7d:6b:8a:64:7b: b7:52:05:6b:0e:79:d3:0f:66:a5:93:1c:99:c0:c0:77:9c:b5: 23:7b:36:be:41:23:7d:a2:79:3f:40:d3:45:fb:dc:10:d4:20: 8b:05:58:41:e6:c8:fb:2e:b4:a4:26:e0:cb:b0:72:ab:ce:a5: f9:ab:46:8b:24:ec:51:ec:fb:0b:a5:18:ad:bd:e6:9c:11:da: 25:14:54:2e:d7:03:e7:ab:e0:8d:94:58:e9:2f:70:06:0e:bc: 44:4d:5f:1b:30:c1:ae:17:a4:53:f1:79:e0:75:a4:9b:f2:78: 12:2d:66:19:bb:c8:99:51:c1:70:c4:52:4b:f1:ff:af:aa:21: c7:5a:c9:ff:79:55:81:55:68:e3:5b:4d:2c:e2:12:3f:95:bf: cf:24:3a:ea:a4:73:bf:ce:5f:ef:25:ca:af:a3:9a:d0:b1:a9: 2c:b2:fe:2f:4d:59:f0:40:9e:fa:f0:12:00:ec:55:4c:b4:12: ce:a1:23:37 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEgba2YeTPUbGmIxAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw NGE4MB4XDTI0MTIwNTE1NTAwNloXDTI1MDMwNTE1NTAwNlowLzEtMCsGA1UEAxMk YWVmZmQwNzItOGZkZi00YjRlLTljOWUtNmY5ZDU4Nzg4MzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXl3ZsD+C4JV5h90T+h5kwiT5MZ1LhNOiiNV DqI+6qYwdq4sPxU3YCujy8d2tAUhZXz8LIPFVBfgpGqhFfY3qKOu3sDOhVkPDA4D Xf0EWDweZrBP7QfqvaBIZKifpy2wmG7Jwh0gK6YpS0YHqsUsjeIUXZ7Xpu8tN32G ZyOgM4Es8ux6Y4H3WOmObM5NNVGfHA1EAFZQ5+iUwvcWJLjNmdy5cD+kpZhGknnF XFlt5zG3X2AE/q/fWnu9PyEjj0Gjm42W6wPCgovoZejTYJsVULEDisiJ2ZgDkmer 4SxmqJGe4KAYFRCzV64N6ChfwLJz0qsB/tq+UTkhmUlyXmOPWQIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFDelWTzUv6CL+4HJTXBnXgpPUPN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvYmIxMmUwNjgtOTc0ZC0z ZjlkLWFmZDItOWJlZWQ5MmU3ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj MmJiZTA0YTguY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjBHBAIAATBBAwMEF3ADAwQt EAMDA2MAAwMEYyADAwNjYAMDBGNwAwMEaAADAwRoMAMDBGiwAwMEa4ADAwVrwAMD BKLgAwMErAAwEwQCAAIwDQMFBCYAFwADBAAmAgMwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALx9b5trSee8a e9KnGVomWipPCymo3Xl0H9OoVImpdWJl0S1gzE7qKC/0b7+P+hZDyHK408vkxSOj 3kX+9B6Fq5WoXX1rimR7t1IFaw550w9mpZMcmcDAd5y1I3s2vkEjfaJ5P0DTRfvc ENQgiwVYQebI+y60pCbgy7Byq86l+atGiyTsUez7C6UYrb3mnBHaJRRULtcD56vg jZRY6S9wBg68RE1fGzDBrhekU/F54HWkm/J4Ei1mGbvImVHBcMRSS/H/r6ohx1rJ /3lVgVVo41tNLOISP5W/zyQ66qRzv85f7yXKr6Oa0LGpLLL+L01Z8ECe+vASAOxV TLQSzqEjNw== -----END CERTIFICATE-----Generated at Thu Feb 6 00:00:00 2025 by rpki-client