$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa File: cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa (raw, json) Hash identifier: XTr9mif/smU+Oia6nQvXaOE8iz4tN4N8Q1AF0u9n0Lg= Subject key identifier: F1:F6:18:53:CD:96:64:B4:D9:A0:E0:29:F9:89:08:39:1A:23:16:37 Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Certificate serial: 010D0C9F43285848FBF127277E88329A23F0BB80 Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 36105 IP address blocks: 65.65.128.0/20 maxlen: 24 65.65.152.0/21 maxlen: 24 75.41.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:27:27:7e:88:32:9a:23:f0:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=46df4cac-bceb-4142-8cac-189f044d56b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:c4:5b:79:57:56:4e:36:98:04:36:f3:cc: 2d:7d:df:6f:c6:18:2e:ae:17:32:9f:19:90:52:5e: 32:65:ce:a6:c2:76:79:93:81:a2:94:c8:ba:5a:6b: c2:31:a7:78:a5:78:3a:3a:86:46:ce:bd:8d:57:46: 39:f4:e2:e9:a5:e8:e9:61:5c:6b:ea:57:4e:ec:7d: 38:2f:10:cd:54:49:80:ca:97:33:d5:0f:ee:cd:49: de:2e:ce:ae:cf:9a:01:81:c2:14:15:22:cf:2c:ee: cb:3e:16:ae:bd:c0:07:d7:b8:14:63:71:1e:c2:b2: fd:ef:ca:5b:af:16:10:7b:57:35:9e:37:b9:c0:ca: df:ba:ac:f2:c4:e7:b9:42:78:7c:14:fa:f9:88:b3: 0f:b5:71:0a:a1:10:3c:a6:30:44:f3:82:14:cd:b4: e3:52:a8:6d:92:c6:97:74:9f:87:01:2d:7d:af:85: 3f:b8:2a:89:3a:a6:95:c9:0e:81:d1:8b:80:81:0c: 2e:26:e7:7d:fc:aa:92:bb:be:fb:64:4c:8c:67:49: 24:db:74:85:34:90:38:e2:15:e1:e3:13:6a:1a:8c: 9c:38:31:50:f9:ac:28:d1:ea:46:87:ca:b4:c3:1d: d4:b2:21:e0:37:55:37:aa:2b:99:09:9e:9b:cf:68: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F6:18:53:CD:96:64:B4:D9:A0:E0:29:F9:89:08:39:1A:23:16:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl X509v3 Authority Key Identifier: keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer sbgp-ipAddrBlock: critical IPv4: 65.65.128.0/20 65.65.152.0/21 75.41.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e5:96:cc:a5:9a:43:9b:b2:1b:98:90:eb:89:88:11:08:95: 2c:a1:70:c1:89:66:40:ef:f1:a4:3b:95:18:4a:8d:97:02:6f: 22:a8:bc:28:5a:59:7d:22:6d:f5:bc:98:18:02:ec:59:e0:f3: a5:c3:23:23:fa:d3:ee:b4:da:63:38:0a:be:9f:fc:68:6f:65: ab:ff:4e:d3:e9:a3:ee:76:b8:33:cf:1b:84:a6:9c:27:15:d0: 1d:b1:da:c2:89:10:fa:01:0e:43:28:7d:b3:7c:83:96:bb:59: 50:c7:e7:35:80:64:9e:ae:a4:82:9f:2a:91:3b:54:1e:61:d9: 47:89:4e:47:0b:cb:8e:f8:2e:e9:0d:5d:8b:92:b2:d7:e6:1e: 52:5a:b0:ba:52:31:0d:08:a7:57:9a:ec:7b:11:ed:3b:2a:3e: fc:3f:c0:5d:4d:81:29:f8:e6:a4:b7:4c:66:21:b1:af:de:5a: 6c:6f:08:6a:8c:6c:4f:0b:37:20:88:25:00:81:75:cf:e5:9a: 43:e5:b9:d9:8a:01:c4:0f:99:3a:ea:6e:01:4e:17:59:5f:3d: 66:6f:29:95:e7:ff:03:1e:43:91:d2:53:51:9a:c4:f7:11:40: eb:75:36:27:3b:98:62:01:74:d8:f8:37:b4:b2:60:bb:49:cc: 3a:b7:5d:cf -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEj78ScnfogymiPwu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw NGE4MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk NDZkZjRjYWMtYmNlYi00MTQyLThjYWMtMTg5ZjA0NGQ1NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZjEW3lXVk42mAQ288wtfd9vxhgurhcynxmQ Ul4yZc6mwnZ5k4GilMi6WmvCMad4pXg6OoZGzr2NV0Y59OLppejpYVxr6ldO7H04 LxDNVEmAypcz1Q/uzUneLs6uz5oBgcIUFSLPLO7LPhauvcAH17gUY3EewrL978pb rxYQe1c1nje5wMrfuqzyxOe5Qnh8FPr5iLMPtXEKoRA8pjBE84IUzbTjUqhtksaX dJ+HAS19r4U/uCqJOqaVyQ6B0YuAgQwuJud9/KqSu777ZEyMZ0kk23SFNJA44hXh 4xNqGoycODFQ+awo0epGh8q0wx3UsiHgN1U3qiuZCZ6bz2jGLQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPH2GFPNlmS02aDgKfmJCDkaIxY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvY2I5N2JkZGYtNjAwMC0z YWIxLWE1OGItYWM4YzNjMmE0YzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj MmJiZTA0YTguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQUGAAwQD QUGYAwQCSymQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADDllsylmkObshuYkOuJiBEIlSyhcMGJZkDv8aQ7 lRhKjZcCbyKovChaWX0ibfW8mBgC7Fng86XDIyP60+602mM4Cr6f/GhvZav/TtPp o+52uDPPG4SmnCcV0B2x2sKJEPoBDkMofbN8g5a7WVDH5zWAZJ6upIKfKpE7VB5h 2UeJTkcLy474LukNXYuSstfmHlJasLpSMQ0Ip1ea7HsR7TsqPvw/wF1NgSn45qS3 TGYhsa/eWmxvCGqMbE8LNyCIJQCBdc/lmkPludmKAcQPmTrqbgFOF1lfPWZvKZXn /wMeQ5HSU1GaxPcRQOt1Nic7mGIBdNj4N7SyYLtJzDq3Xc8= -----END CERTIFICATE-----Generated at Sun Apr 13 10:06:23 2025 by rpki-client