$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa File: 1b852b6c-9aa4-3df4-a821-ac1748d70801.roa (raw, json) Hash identifier: pramE97ECthWeyGOTXFxzRymwptV+4R8Yl9+d8WSiOo= Subject key identifier: 52:BF:28:D0:32:5F:57:87:05:CD:24:E1:FA:48:98:E8:29:E3:07:77 Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Certificate serial: 010D0C9F4328584882808A99F69EE44A58E5DD00 Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 46595 IP address blocks: 64.35.144.0/20 maxlen: 24 104.37.76.0/23 maxlen: 24 104.37.78.0/24 maxlen: 24 174.137.64.0/20 maxlen: 24 216.255.192.0/19 maxlen: 24 2600:b000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:8a:99:f6:9e:e4:4a:58:e5:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=b527b1f2-6bc3-4617-a7b8-38f361977507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:a1:97:65:a5:25:00:16:2a:24:5b:49:31: aa:d4:e3:8d:fc:8d:a9:b6:41:e7:75:3c:ca:4e:40: 07:86:0e:35:e3:80:3d:82:16:66:50:db:b0:b0:66: be:76:ed:64:7a:57:16:63:f8:50:49:ff:12:b6:63: a9:02:94:3a:ea:1f:7b:58:96:7f:53:01:62:f9:54: d2:19:aa:23:8c:90:75:0d:e1:9b:a9:82:0e:d0:0e: dd:c2:b5:89:94:fe:7d:ac:38:18:4f:28:fc:e8:3f: e4:10:67:6b:01:1d:b9:f8:39:e6:d0:b9:d8:26:2c: 7e:ad:08:1e:07:42:05:05:05:ff:14:d7:2d:51:90: cc:8f:03:62:63:2c:35:5b:ee:d4:15:5c:83:c1:e2: 1d:d8:ee:3b:4b:6f:c5:23:4c:1f:dd:27:7c:63:fd: 7c:97:28:e1:f8:b6:ce:e0:53:98:52:a2:3f:0b:72: 15:6a:2b:c0:06:ff:5d:ce:36:ba:9c:4e:b6:42:76: fb:7d:44:22:79:a1:a5:7c:92:f5:56:98:12:d9:17: 93:85:7c:81:57:6c:fb:71:35:d8:85:1e:03:97:79: 1e:f9:62:fc:0e:1b:7b:ab:2e:53:17:6f:a0:16:9f: 68:7e:40:16:23:72:d9:b3:2d:11:3d:21:5b:0e:e4: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:28:D0:32:5F:57:87:05:CD:24:E1:FA:48:98:E8:29:E3:07:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl X509v3 Authority Key Identifier: keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer sbgp-ipAddrBlock: critical IPv4: 64.35.144.0/20 104.37.76.0-104.37.78.255 174.137.64.0/20 216.255.192.0/19 IPv6: 2600:b000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:36:77:0b:52:8d:cf:4f:53:cd:1d:6f:fa:f7:dd:87:cc:b5: 1c:b0:a1:cb:58:b6:e6:ca:e4:60:86:54:71:62:4e:bc:03:33: 2b:32:69:34:4d:15:e7:e1:88:a9:a6:32:a4:e1:39:46:5b:f5: f5:fa:70:df:56:66:b0:83:6b:a7:cb:d7:29:a5:de:a0:b4:42: 73:83:ed:46:d3:0f:f9:bf:3f:1d:f1:c6:bd:23:c6:df:95:25: 2b:f3:95:53:dd:2c:1e:bb:04:07:fa:97:15:d9:bb:43:e5:bb: 3c:95:18:40:a7:ec:d6:85:26:75:e5:6f:e7:01:5a:8d:30:76: ad:6b:3d:93:d5:9c:9b:ff:fa:c9:6c:86:43:91:aa:68:9a:a7: ea:7a:75:aa:15:1b:8e:4f:ec:ae:2e:55:55:db:4d:0b:33:08: 8b:40:c7:fe:39:72:5d:d7:53:77:8f:ec:38:12:42:3b:28:53: f1:b7:fe:9a:2e:8f:2f:46:5c:67:b3:94:ec:4d:a9:4b:47:a8: f1:48:c5:4f:66:1d:73:a2:49:4d:09:c6:52:47:bb:7f:16:9d: 24:b8:fb:f1:e6:e9:93:6e:d3:9e:1b:54:b1:4f:ce:a8:f2:87: d5:68:2c:37:79:78:6a:71:5f:fd:94:60:09:f0:87:a4:b2:a0: 1d:26:a1:a5 -----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWEiCgIqZ9p7kSljl3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZmZmMTItZjc0ZC00YTgwLTlhNWQtZjIyNTUzNGJj NTI3MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjUyN2IxZjItNmJjMy00NjE3LWE3YjgtMzhmMzYxOTc3NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2hl2WlJQAWKiRbSTGq1OON/I2ptkHndTzK TkAHhg4144A9ghZmUNuwsGa+du1kelcWY/hQSf8StmOpApQ66h97WJZ/UwFi+VTS GaojjJB1DeGbqYIO0A7dwrWJlP59rDgYTyj86D/kEGdrAR25+Dnm0LnYJix+rQge B0IFBQX/FNctUZDMjwNiYyw1W+7UFVyDweId2O47S2/FI0wf3Sd8Y/18lyjh+LbO 4FOYUqI/C3IVaivABv9dzja6nE62Qnb7fUQieaGlfJL1VpgS2ReThXyBV2z7cTXY hR4Dl3ke+WL8Dht7qy5TF2+gFp9ofkAWI3LZsy0RPSFbDuSYBwIDAQABo4IDfjCC A3owHQYDVR0OBBYEFFK/KNAyX1eHBc0k4fpImOgp4wd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFm ZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1NTM0YmM1MjcvMWI4NTJiNmMtOWFhNC0z ZGY0LWE4MjEtYWMxNzQ4ZDcwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkxZmZmMTItZjc0ZC00YTgwLTlh NWQtZjIyNTUzNGJjNTI3L2E5MWZmZjEyLWY3NGQtNGE4MC05YTVkLWYyMjU1MzRi YzUyNy5jcmwwHwYDVR0jBBgwFoAUArhCAeKkLoXp5IhjfTqSng/BxOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFmZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1 NTM0YmM1MjcuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQEQCOQMAwD BAJoJUwDBABoJU4DBASuiUADBAXY/8AwDQQCAAIwBwMFBCYAsAAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA XDZ3C1KNz09TzR1v+vfdh8y1HLChy1i25srkYIZUcWJOvAMzKzJpNE0V5+GIqaYy pOE5Rlv19fpw31ZmsINrp8vXKaXeoLRCc4PtRtMP+b8/HfHGvSPG35UlK/OVU90s HrsEB/qXFdm7Q+W7PJUYQKfs1oUmdeVv5wFajTB2rWs9k9Wcm//6yWyGQ5GqaJqn 6np1qhUbjk/sri5VVdtNCzMIi0DH/jlyXddTd4/sOBJCOyhT8bf+mi6PL0ZcZ7OU 7E2pS0eo8UjFT2Ydc6JJTQnGUke7fxadJLj78ebpk27TnhtUsU/OqPKH1WgsN3l4 anFf/ZRgCfCHpLKgHSahpQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:50 2025 by rpki-client