$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa File: a3325f5a-465e-3622-a353-ec026e3ae096.roa (raw, json) Hash identifier: TSHnNbJfzic4QOQiGLsqeHs0DyhGruDcvv2+PKCwjQ8= Subject key identifier: 00:0E:4D:D0:61:C5:29:5E:4C:1E:7E:F3:6C:0B:39:F4:55:3E:64:73 Certificate issuer: /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Certificate serial: 010D0C9F43285848F9269DA07919DFEAC9E23700 Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 7065 IP address blocks: 23.93.0.0/16 maxlen: 24 50.0.0.0/15 maxlen: 24 64.142.0.0/17 maxlen: 24 69.12.128.0/17 maxlen: 24 70.36.128.0/17 maxlen: 24 75.101.0.0/17 maxlen: 24 76.191.128.0/17 maxlen: 24 107.156.0.0/15 maxlen: 24 108.169.0.0/17 maxlen: 24 135.180.0.0/16 maxlen: 24 142.254.0.0/17 maxlen: 24 157.131.0.0/16 maxlen: 24 173.228.0.0/17 maxlen: 24 184.23.0.0/16 maxlen: 24 192.184.128.0/17 maxlen: 24 198.27.128.0/17 maxlen: 24 199.245.68.0/24 maxlen: 24 208.106.0.0/17 maxlen: 24 209.148.96.0/19 maxlen: 24 209.204.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9d:a0:79:19:df:ea:c9:e2:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=bf671098-0bb2-48fc-a60e-7c9da2fc1778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e0:60:12:8a:f2:b5:ec:1f:19:8a:46:6d:98: 9f:a1:ba:2b:b9:b8:90:82:d7:3b:3f:29:88:7a:4e: e1:76:8c:26:5b:77:d4:03:dc:79:4d:94:62:3b:31: cc:d0:08:53:76:23:d7:05:33:8c:8a:a2:e9:75:87: d3:20:84:70:7a:88:7d:a3:92:fe:f9:51:38:73:0f: 2d:bc:a4:ea:96:e4:0f:96:28:53:9c:7c:60:2b:40: 2a:b4:e3:06:65:fa:29:7d:ad:a9:7c:0c:6e:ed:1b: d2:34:ea:32:33:7e:7c:3b:47:dd:67:ec:f3:1e:a6: 36:72:83:4b:13:4d:3b:b5:ba:4f:bc:d8:64:37:0d: 78:be:2c:85:a4:a7:47:11:1d:fb:39:ed:76:18:46: ff:5a:e4:eb:0e:c5:33:9e:e7:65:ec:7f:8a:68:42: 9d:9b:40:b0:01:f9:e9:e0:3c:c0:be:41:48:3e:9a: c2:0f:bb:a1:b4:06:5c:35:2f:bc:e6:26:cb:44:a7: 16:cb:7b:f6:d3:64:01:07:f8:ed:2b:ca:d3:e7:f2: 87:cc:fb:b8:46:70:1f:2e:ef:21:d8:41:b2:8f:0c: 3e:92:87:a1:7f:73:34:df:a6:5a:83:0c:bb:09:ab: ff:27:64:ad:e7:a3:c3:5c:d9:f5:05:23:b1:4e:83: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:4D:D0:61:C5:29:5E:4C:1E:7E:F3:6C:0B:39:F4:55:3E:64:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl X509v3 Authority Key Identifier: keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer sbgp-ipAddrBlock: critical IPv4: 23.93.0.0/16 50.0.0.0/15 64.142.0.0/17 69.12.128.0/17 70.36.128.0/17 75.101.0.0/17 76.191.128.0/17 107.156.0.0/15 108.169.0.0/17 135.180.0.0/16 142.254.0.0/17 157.131.0.0/16 173.228.0.0/17 184.23.0.0/16 192.184.128.0/17 198.27.128.0/17 199.245.68.0/24 208.106.0.0/17 209.148.96.0/19 209.204.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:79:dd:1e:9a:0a:e5:1a:51:26:c9:ef:ac:ae:22:a0:94:8a: 15:27:ba:22:44:e1:eb:bc:4a:78:1b:61:f4:64:6d:b7:d9:98: 71:81:bc:2e:d9:79:21:f8:de:61:f7:09:97:28:14:8d:fe:dd: 80:0e:0e:80:59:78:d8:18:3f:ff:e8:e7:6d:51:5e:aa:4a:54: 30:40:ff:42:47:56:fd:99:ed:01:dd:22:8f:e1:f3:53:84:8e: 6e:6a:e2:d6:55:d8:ae:4d:b1:4f:a7:3a:5e:d0:5f:46:3b:95: b7:1c:2f:5d:3f:a1:68:bf:8c:81:90:1c:13:b1:3d:5e:5a:f8: d3:3b:9b:a9:8d:7b:ee:0a:77:66:8a:1f:7a:c6:17:78:aa:8f: 13:a8:b7:ce:7f:7c:de:a5:52:d7:08:1d:7f:79:f0:d6:28:44: 3f:16:35:a0:6e:00:88:63:8b:c6:82:a3:11:d7:f5:a9:a7:62: e5:a4:ca:eb:6a:b8:ed:7a:ef:e2:a9:32:87:13:cb:1f:4a:cf: 4f:69:94:90:52:dc:8f:a0:58:d4:92:49:ee:dd:14:72:eb:24: 5f:b8:78:cc:13:e5:6d:86:4e:89:9b:d7:ee:5d:cc:b6:09:69: 72:e9:b0:cf:82:1d:b5:84:4d:af:23:b3:d6:dd:e6:09:50:80: 36:b1:fc:55 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEj5Jp2geRnf6sniNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi MDg3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YmY2NzEwOTgtMGJiMi00OGZjLWE2MGUtN2M5ZGEyZmMxNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieBgEorytewfGYpGbZifoborubiQgtc7PymI ek7hdowmW3fUA9x5TZRiOzHM0AhTdiPXBTOMiqLpdYfTIIRweoh9o5L++VE4cw8t vKTqluQPlihTnHxgK0AqtOMGZfopfa2pfAxu7RvSNOoyM358O0fdZ+zzHqY2coNL E007tbpPvNhkNw14viyFpKdHER37Oe12GEb/WuTrDsUznudl7H+KaEKdm0CwAfnp 4DzAvkFIPprCD7uhtAZcNS+85ibLRKcWy3v202QBB/jtK8rT5/KHzPu4RnAfLu8h 2EGyjww+koehf3M036Zagwy7Cav/J2St56PDXNn1BSOxToO15QIDAQABo4IDwjCC A74wHQYDVR0OBBYEFAAOTdBhxSleTB5+82wLOfRVPmRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYTMzMjVmNWEtNDY1ZS0z NjIyLWEzNTMtZWMwMjZlM2FlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0 AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRed0emgrlGlEmye+sriKglIoVJ7oiROHrvEp4 G2H0ZG232Zhxgbwu2Xkh+N5h9wmXKBSN/t2ADg6AWXjYGD//6OdtUV6qSlQwQP9C R1b9me0B3SKP4fNThI5uauLWVdiuTbFPpzpe0F9GO5W3HC9dP6Fov4yBkBwTsT1e WvjTO5upjXvuCndmih96xhd4qo8TqLfOf3zepVLXCB1/efDWKEQ/FjWgbgCIY4vG gqMR1/Wpp2LlpMrrarjteu/iqTKHE8sfSs9PaZSQUtyPoFjUkknu3RRy6yRfuHjM E+Vthk6Jm9fuXcy2CWly6bDPgh21hE2vI7PW3eYJUIA2sfxV -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:02 2025 by rpki-client