$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa File: 8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (raw, json) Hash identifier: HfToRdPo78zRq5vGHWjPdYoQy+iU2u4e6PMFZpUbok0= Subject key identifier: 43:DC:85:FB:D5:48:FA:C2:16:3E:20:17:42:C0:4C:8C:65:85:5A:57 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F4328584900214E66D5885167CDA75A60 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 1239 IP address blocks: 104.171.160.0/20 maxlen: 24 162.250.96.0/21 maxlen: 24 162.254.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4e:66:d5:88:51:67:cd:a7:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=4a7ff8e0-a5c1-4f62-8772-52f9c3cebf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0d:8e:3f:1f:e5:8a:24:16:cb:ab:b8:04:0d: 1c:05:d2:2d:d9:ec:33:11:02:b1:77:fa:87:96:cb: f4:d1:d2:d4:1c:9c:29:d1:6d:63:1f:30:83:da:d8: 75:a4:5f:ca:6a:f6:24:1a:93:e4:d6:b8:26:ce:67: ca:b5:75:93:b7:6a:1b:20:b5:7d:71:f1:9f:9d:4d: 5d:aa:e8:53:13:fe:88:b6:34:7a:fc:97:7c:5e:9b: be:af:26:60:c7:77:c7:ae:b4:5b:3f:38:59:13:80: 3d:ae:25:a7:d0:68:f9:de:71:81:6d:97:3f:b5:bd: 58:8d:30:de:be:1a:87:6b:d1:cb:c2:40:73:3b:a6: 9e:be:14:fb:42:d3:28:9a:42:18:2d:13:fa:c2:ad: ad:d7:42:3a:a0:5d:db:6b:09:dc:76:f2:b5:11:ab: ef:64:19:13:7c:d6:21:4d:be:b0:f4:77:18:fb:f4: 11:32:8f:60:5c:3a:39:b8:54:ef:40:e7:8b:1e:2c: 47:47:3b:79:51:f7:59:0a:cf:19:70:cf:ce:87:c8: 51:42:da:5d:1c:18:82:b5:cc:f0:b0:f5:bf:56:81: 23:d9:63:3e:c1:f9:4e:d9:91:47:59:a4:4f:b1:2b: 90:0e:91:96:70:1b:5d:7d:30:ef:26:33:ce:f6:c0: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DC:85:FB:D5:48:FA:C2:16:3E:20:17:42:C0:4C:8C:65:85:5A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 104.171.160.0/20 162.250.96.0/21 162.254.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3c:23:d9:d6:ce:11:43:20:09:eb:62:ae:2d:dc:d8:72:9e: 5f:63:83:e1:19:f6:38:ad:17:eb:df:87:40:7b:c5:91:38:f7: 7b:2c:1a:c9:de:51:5e:09:7c:1f:f9:a5:ba:4f:59:9b:9a:29: 41:5f:d7:1d:3a:a9:3c:34:92:b0:91:4c:74:17:f9:08:5b:de: 14:15:f6:dc:6b:1f:43:10:e5:82:07:5f:53:a4:f9:60:c9:9c: d0:4d:03:17:80:28:4a:a5:41:31:8e:aa:4c:4f:61:43:22:0c: 78:9f:8d:7a:87:db:7a:30:04:70:22:b2:46:5f:41:3a:37:92: 49:bd:6f:41:37:66:47:6c:34:9b:a9:c9:f4:11:dc:c6:48:e9: e7:3e:5f:ef:6b:84:85:a3:64:91:7b:96:72:44:e8:67:99:a0: cc:31:79:cc:7d:06:44:35:e0:f6:69:be:d8:84:eb:57:c1:d2: 4f:db:be:36:c4:aa:e7:d7:56:cd:f9:50:24:54:eb:9a:42:6d: e2:e8:88:96:82:cd:f9:37:53:53:5c:83:1c:84:3b:e9:36:72: a5:ae:06:9b:20:dc:54:d4:bd:43:2e:ae:f4:b9:b0:3f:4a:dc: 04:60:fd:e0:e8:f6:5e:81:7e:19:53:66:36:de:f2:4e:6e:34: 79:f3:7c:31 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkAIU5m1YhRZ82nWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NGE3ZmY4ZTAtYTVjMS00ZjYyLTg3NzItNTJmOWMzY2ViZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw2OPx/liiQWy6u4BA0cBdIt2ewzEQKxd/qH lsv00dLUHJwp0W1jHzCD2th1pF/KavYkGpPk1rgmzmfKtXWTt2obILV9cfGfnU1d quhTE/6ItjR6/Jd8Xpu+ryZgx3fHrrRbPzhZE4A9riWn0Gj53nGBbZc/tb1YjTDe vhqHa9HLwkBzO6aevhT7QtMomkIYLRP6wq2t10I6oF3bawncdvK1EavvZBkTfNYh Tb6w9HcY+/QRMo9gXDo5uFTvQOeLHixHRzt5UfdZCs8ZcM/Oh8hRQtpdHBiCtczw sPW/VoEj2WM+wflO2ZFHWaRPsSuQDpGWcBtdfTDvJjPO9sCnSQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEPchfvVSPrCFj4gF0LATIxlhVpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvOGE5MzBkNWMtMTdmZi0z YTdlLWJjNmEtMDA4MWVhYTU1NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEaKugAwQD ovpgAwQDov4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGE8I9nWzhFDIAnrYq4t3Nhynl9jg+EZ9jitF+vf h0B7xZE493ssGsneUV4JfB/5pbpPWZuaKUFf1x06qTw0krCRTHQX+Qhb3hQV9txr H0MQ5YIHX1Ok+WDJnNBNAxeAKEqlQTGOqkxPYUMiDHifjXqH23owBHAiskZfQTo3 kkm9b0E3ZkdsNJupyfQR3MZI6ec+X+9rhIWjZJF7lnJE6GeZoMwxecx9BkQ14PZp vtiE61fB0k/bvjbEqufXVs35UCRU65pCbeLoiJaCzfk3U1NcgxyEO+k2cqWuBpsg 3FTUvUMurvS5sD9K3ARg/eDo9l6BfhlTZjbe8k5uNHnzfDE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:28 2025 by rpki-client