$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa File: 0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa (raw, json) Hash identifier: ePuLGQI8w6ZscFOI72zgebShGYWPaGB0R7G71hMiKcA= Subject key identifier: 22:19:F6:2B:24:1F:31:10:45:DC:71:4E:C8:FF:02:B1:9D:7F:A7:D4 Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Certificate serial: 010D0C9F4328584858A05C929FE203628881AA40 Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 11904 IP address blocks: 209.25.240.0/20 maxlen: 20 209.25.240.0/21 maxlen: 21 209.25.240.0/22 maxlen: 22 209.25.244.0/22 maxlen: 22 209.25.248.0/21 maxlen: 21 209.25.248.0/22 maxlen: 22 209.25.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:5c:92:9f:e2:03:62:88:81:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=e22098ca-00d3-49af-bc2e-08a313944281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c9:06:7c:3d:97:a3:cd:f7:94:43:3a:78:a8: e8:73:b1:ff:c0:21:3d:b9:54:1f:7b:5b:de:c4:12: 7b:54:1d:96:e5:35:2c:e4:2b:14:94:a1:86:0e:1e: 1b:a0:68:f6:36:ce:ef:f0:bb:76:39:49:ad:83:ed: 01:f5:a1:d3:95:2a:0c:fb:e6:d0:10:7c:18:de:7c: 82:c9:6d:fc:3c:2f:5a:2d:f6:78:81:45:63:25:0d: 74:f7:0c:0a:e9:09:ca:55:fd:16:dd:23:a1:50:1f: dd:81:94:05:41:28:74:4a:ca:0b:ed:48:a9:00:97: e7:ff:76:62:1a:2a:ca:41:68:5a:bf:22:d6:0d:60: fe:ed:77:fa:e2:66:34:37:e2:c2:77:35:eb:cb:03: 93:6b:9e:5d:2d:dd:82:17:bd:65:58:7f:c3:cd:da: 09:c2:f5:3d:04:6d:9e:b5:eb:c5:c1:22:f5:f9:a0: 76:b2:b4:ab:56:23:0a:8c:8b:a3:b1:f5:a5:24:bd: a8:fb:a3:a7:8a:19:e7:00:4c:10:7d:95:8f:51:f9: ea:9c:37:62:06:5f:d7:5b:0b:da:8c:b9:62:d1:b4: c7:b9:67:be:95:30:3c:58:c1:b2:d4:8d:2e:73:bc: 83:94:a1:f7:94:ad:09:94:87:89:d2:28:b6:87:52: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:19:F6:2B:24:1F:31:10:45:DC:71:4E:C8:FF:02:B1:9D:7F:A7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl X509v3 Authority Key Identifier: keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer sbgp-ipAddrBlock: critical IPv4: 209.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ef:02:04:d0:13:4c:73:57:8a:c0:0d:f9:83:ed:58:0f:ab: f1:36:11:25:26:4e:a9:b2:de:32:f4:ec:96:8c:d7:05:2d:44: 1b:2e:20:c9:7a:6a:5d:cf:20:48:b0:9a:d5:7c:df:b3:bd:48: 0d:b9:67:b1:9c:a6:19:6d:f7:44:cb:cf:a4:89:06:57:14:f6: d0:33:d1:93:94:8f:37:9b:29:d0:ae:a5:c7:c3:32:90:fb:62: 55:86:c5:16:d9:ab:c0:80:55:48:c3:a4:21:5f:cf:76:1a:bd: 9c:e5:bc:a0:c6:71:97:17:51:2f:0b:bc:1c:86:3f:e1:40:37: ec:fc:da:01:49:75:60:74:be:c2:4e:05:c2:d0:70:1a:af:96: fd:41:e6:f6:26:87:c5:07:fb:08:33:17:1c:f7:17:7b:eb:16: ad:0e:3e:b8:f0:fb:82:fa:76:bc:d8:a5:b6:a3:50:6d:8f:3f: 64:d0:b7:8e:19:e8:aa:54:5b:27:30:e0:fb:ab:b4:47:f5:0c: 75:f4:cf:e9:5d:07:99:9e:12:82:d3:b1:81:42:58:2a:1a:96: 42:37:b8:5b:d1:ed:f0:d0:59:4f:4a:b0:3c:a7:2c:9b:8e:88: a8:fb:71:6a:9b:77:da:7e:da:c6:99:74:aa:87:25:4e:4f:10: d5:24:1b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFySn+IDYoiBqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3 ZmQwMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTIyMDk4Y2EtMDBkMy00OWFmLWJjMmUtMDhhMzEzOTQ0MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMkGfD2Xo833lEM6eKjoc7H/wCE9uVQfe1ve xBJ7VB2W5TUs5CsUlKGGDh4boGj2Ns7v8Lt2OUmtg+0B9aHTlSoM++bQEHwY3nyC yW38PC9aLfZ4gUVjJQ109wwK6QnKVf0W3SOhUB/dgZQFQSh0SsoL7UipAJfn/3Zi GirKQWhavyLWDWD+7Xf64mY0N+LCdzXrywOTa55dLd2CF71lWH/DzdoJwvU9BG2e tevFwSL1+aB2srSrViMKjIujsfWlJL2o+6OnihnnAEwQfZWPUfnqnDdiBl/XWwva jLli0bTHuWe+lTA8WMGy1I0uc7yDlKH3lK0JlIeJ0ii2h1JJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIZ9iskHzEQRdxxTsj/ArGdf6fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvMGY2NTdjNjYtZjM1Zi0z MGI5LWExZmUtYThkZDMzNzFiMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3 MmY1ZTdmZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0RnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLvAgTQE0xzV4rADfmD7VgPq/E2ESUmTqmy3jL07JaM1wUtRBsuIMl6 al3PIEiwmtV837O9SA25Z7Gcphlt90TLz6SJBlcU9tAz0ZOUjzebKdCupcfDMpD7 YlWGxRbZq8CAVUjDpCFfz3YavZzlvKDGcZcXUS8LvByGP+FAN+z82gFJdWB0vsJO BcLQcBqvlv1B5vYmh8UH+wgzFxz3F3vrFq0OPrjw+4L6drzYpbajUG2PP2TQt44Z 6KpUWycw4PurtEf1DHX0z+ldB5meEoLTsYFCWCoalkI3uFvR7fDQWU9KsDynLJuO iKj7cWqbd9p+2saZdKqHJU5PENUkG+A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:08 2025 by rpki-client