$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa File: 9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa (raw, json) Hash identifier: MW2ISwyJRvnL9ifkW6jZ9rogoBpNasUD+LJ6LpIW28Y= Subject key identifier: 72:05:11:78:DC:4B:76:7E:31:78:5B:51:C7:A4:36:F6:A1:63:7E:36 Certificate issuer: /CN=55452ee1-697d-484d-b971-7a8c75820ecc Certificate serial: 010D0C9F43285849244E87BF2A491CA7A9630FD0 Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 32391 IP address blocks: 69.49.208.0/20 maxlen: 24 74.120.128.0/21 maxlen: 24 130.51.0.0/22 maxlen: 24 2604:7100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:87:bf:2a:49:1c:a7:a9:63:0f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=38f69c4f-f7e5-4f20-a4f2-254274534e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:5c:33:8b:e4:df:97:b9:50:3e:8c:af:1c: 2d:07:0f:8d:e0:b0:bf:2f:e4:ea:42:cb:f5:27:87: 95:9c:1b:34:c7:07:8f:7f:c6:2c:ad:87:20:59:b2: 25:b9:82:a9:d3:b7:86:f8:40:20:d7:88:66:94:dc: 20:94:ea:0b:29:f8:c6:b1:93:08:de:6e:1e:5b:74: 71:52:9a:5d:e4:19:48:dd:ce:1d:2c:97:aa:d6:f4: 47:94:d1:b5:8a:03:07:7b:69:4e:f5:26:04:9b:ac: de:d0:50:82:8b:cd:49:3d:a7:0e:b1:e4:de:05:08: a6:f8:72:c0:70:0e:6d:1f:6d:22:16:21:40:c7:20: a1:79:79:8e:3e:d7:75:a3:f2:ce:d5:6a:70:13:b6: 0c:21:99:86:99:5c:e6:3e:56:0c:e4:ea:56:a6:b1: 9a:21:d9:3a:c8:96:19:c1:08:3b:9d:e3:2d:01:6a: d7:e3:6a:94:9b:9a:d1:93:f6:c4:b1:81:1e:29:5c: be:c9:28:ed:33:bb:2c:0f:10:7c:1d:9d:56:61:e2: 64:7f:b8:f1:78:99:e8:fb:54:c3:bd:19:81:6f:52: 53:e4:08:30:0e:35:d9:e6:e4:cd:e9:ad:64:3c:40: 42:e1:d4:95:90:6e:06:4f:c4:40:7c:d2:b1:7a:f1: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:05:11:78:DC:4B:76:7E:31:78:5B:51:C7:A4:36:F6:A1:63:7E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl X509v3 Authority Key Identifier: keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer sbgp-ipAddrBlock: critical IPv4: 69.49.208.0/20 74.120.128.0/21 130.51.0.0/22 IPv6: 2604:7100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5b:23:d1:39:0f:ea:87:01:50:b9:ff:ca:e0:e3:f8:92:8e: 35:62:b6:c5:f0:0e:d3:2d:ef:c9:56:b8:b7:e4:34:9e:29:a9: 8a:dd:5e:22:be:a0:e4:90:7e:aa:b2:2a:62:6a:8c:09:13:74: cc:6f:b3:47:56:e6:a4:18:b8:a9:c2:a4:ee:b8:4d:99:23:af: 29:f1:29:5a:ce:54:7c:a6:1f:79:93:80:09:0e:5a:62:5d:ea: 68:36:b6:2e:64:dc:ee:38:15:91:a5:60:f2:be:68:cd:55:72: 3e:a3:83:cc:f3:18:e8:6f:86:bc:2e:ff:ae:e9:b0:82:4a:0f: 65:4d:4f:f5:b7:10:8c:1c:a3:db:97:e3:f5:70:fb:55:8b:0a: 5d:e7:05:37:dd:74:6b:4a:95:e2:6a:e3:d2:8a:af:21:ef:e4: d6:14:f4:98:f9:32:77:90:67:57:46:34:f0:98:da:7d:d8:2f: 74:83:39:d3:fe:82:89:9f:c1:40:4c:28:c5:83:ae:ca:98:de: 5b:85:41:f7:cc:d7:12:6d:d1:b8:8b:49:8f:0e:57:2d:cf:e1: 14:f6:63:cc:06:be:44:97:11:fb:01:95:b7:12:8a:3d:87:5f: 14:8d:49:03:85:34:20:46:39:b2:67:a0:fb:ec:da:b8:7f:65: af:2a:1f:f1 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEkkToe/Kkkcp6ljD9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU0NTJlZTEtNjk3ZC00ODRkLWI5NzEtN2E4Yzc1ODIw ZWNjMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzhmNjljNGYtZjdlNS00ZjIwLWE0ZjItMjU0Mjc0NTM0ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtNcM4vk35e5UD6MrxwtBw+N4LC/L+TqQsv1 J4eVnBs0xwePf8YsrYcgWbIluYKp07eG+EAg14hmlNwglOoLKfjGsZMI3m4eW3Rx Uppd5BlI3c4dLJeq1vRHlNG1igMHe2lO9SYEm6ze0FCCi81JPacOseTeBQim+HLA cA5tH20iFiFAxyCheXmOPtd1o/LO1WpwE7YMIZmGmVzmPlYM5OpWprGaIdk6yJYZ wQg7neMtAWrX42qUm5rRk/bEsYEeKVy+ySjtM7ssDxB8HZ1WYeJkf7jxeJno+1TD vRmBb1JT5AgwDjXZ5uTN6a1kPEBC4dSVkG4GT8RAfNKxevEfbQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFHIFEXjcS3Z+MXhbUcekNvahY342MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTQ1 MmVlMS02OTdkLTQ4NGQtYjk3MS03YThjNzU4MjBlY2MvOWJhNTJlMmItMTYyYy0z MGI3LTg1ZTMtZDNlMjU3MThlOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTU0NTJlZTEtNjk3ZC00ODRkLWI5 NzEtN2E4Yzc1ODIwZWNjLzU1NDUyZWUxLTY5N2QtNDg0ZC1iOTcxLTdhOGM3NTgy MGVjYy5jcmwwHwYDVR0jBBgwFoAUtoagB3laaolvWFWSCVO3Vn3TfJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTQ1MmVlMS02OTdkLTQ4NGQtYjk3MS03YThj NzU4MjBlY2MuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQERTHQAwQD SniAAwQCgjMAMA0EAgACMAcDBQAmBHEAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGZbI9E5D+qHAVC5/8rg 4/iSjjVitsXwDtMt78lWuLfkNJ4pqYrdXiK+oOSQfqqyKmJqjAkTdMxvs0dW5qQY uKnCpO64TZkjrynxKVrOVHymH3mTgAkOWmJd6mg2ti5k3O44FZGlYPK+aM1Vcj6j g8zzGOhvhrwu/67psIJKD2VNT/W3EIwco9uX4/Vw+1WLCl3nBTfddGtKleJq49KK ryHv5NYU9Jj5MneQZ1dGNPCY2n3YL3SDOdP+gomfwUBMKMWDrsqY3luFQffM1xJt 0biLSY8OVy3P4RT2Y8wGvkSXEfsBlbcSij2HXxSNSQOFNCBGObJnoPvs2rh/Za8q H/E= -----END CERTIFICATE-----Generated at Sat Apr 12 15:22:59 2025 by rpki-client