$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa File: 38917362-89be-3070-88f1-aeb91e6b0dea.roa (raw, json) Hash identifier: 4wrzRvDrkUEkgRhC0VE+Ew55H7ps+ghZWvpk5XBgPbk= Subject key identifier: DB:53:F2:2E:6B:5C:46:D8:B0:7D:E1:B1:47:99:B6:8E:57:3D:77:0D Certificate issuer: /CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be Certificate serial: 010D0C9F43285848143A75C49BD5D266F32BD0A0 Authority key identifier: E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 47027 IP address blocks: 69.60.64.0/20 maxlen: 24 172.97.120.0/22 maxlen: 24 184.171.192.0/20 maxlen: 24 192.243.76.0/22 maxlen: 24 199.188.172.0/22 maxlen: 24 204.235.208.0/20 maxlen: 24 206.123.28.0/23 maxlen: 24 208.84.124.0/22 maxlen: 24 216.118.128.0/19 maxlen: 24 2607:fff8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:75:c4:9b:d5:d2:66:f3:2b:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=2961aea1-6314-4f24-9f88-8a51fdbbbeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:37:c3:20:99:37:d4:f1:6c:45:ae:3e:82: 99:81:ff:d5:bb:62:41:6f:8a:aa:98:6d:00:66:5d: 27:e6:40:ad:31:15:30:d8:a8:c1:7d:40:14:2f:f7: d0:bb:c5:93:bf:97:55:42:14:5f:ed:c0:a5:17:29: a6:84:e0:0b:fd:d9:73:51:cd:14:61:7d:0c:4d:e6: 18:19:f8:96:74:e8:ba:38:44:b2:10:80:82:03:c7: 75:c4:ac:03:ea:fd:d2:a5:15:32:bc:5a:e3:bc:67: 6d:dd:d6:35:36:61:82:35:14:21:21:bc:36:76:ac: a4:bd:da:d9:c4:e6:38:a5:3b:da:f1:85:37:67:68: 75:eb:ef:9a:cc:91:7a:1e:a7:0a:57:db:02:ed:23: d4:c6:77:48:9f:be:27:c9:0a:68:97:b6:38:21:8c: 3e:04:81:30:a8:f0:24:5e:16:d1:e1:29:60:54:9b: ac:50:ed:4b:84:ac:60:61:36:23:5c:e4:24:30:c6: d0:ef:7f:16:48:d6:9f:32:a9:0a:25:30:02:17:c6: 35:7d:54:9e:9d:72:64:67:19:f3:fe:65:b9:09:51: 88:73:63:98:19:cf:20:cd:cc:f6:5f:a4:00:24:0b: 48:e0:4c:29:c4:89:cd:6a:8e:b8:09:07:eb:3e:23: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:F2:2E:6B:5C:46:D8:B0:7D:E1:B1:47:99:B6:8E:57:3D:77:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl X509v3 Authority Key Identifier: keyid:E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer sbgp-ipAddrBlock: critical IPv4: 69.60.64.0/20 172.97.120.0/22 184.171.192.0/20 192.243.76.0/22 199.188.172.0/22 204.235.208.0/20 206.123.28.0/23 208.84.124.0/22 216.118.128.0/19 IPv6: 2607:fff8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fe:86:ed:6f:9e:dd:71:7c:24:1a:cf:ce:6f:0a:58:2d:68: df:36:52:bf:24:1b:cc:67:90:03:82:d6:13:57:66:01:ba:2a: c2:4c:52:e6:a8:9b:47:8b:b5:5d:51:40:9d:52:b0:b1:77:85: d2:24:d1:42:98:45:08:4b:12:ca:ee:2f:6e:e9:08:67:61:5d: 75:68:a3:50:bc:86:71:a3:0f:78:90:28:f4:8c:50:c4:68:ab: 91:b9:48:39:ce:3c:01:fb:df:29:f8:40:df:b8:84:9e:65:54: 8e:e2:b1:eb:2c:0c:9d:7f:1e:5c:d9:74:ec:57:87:35:2c:19: d2:3c:bf:21:a6:0b:f4:3c:79:3f:e6:db:66:05:25:17:4f:cf: e1:db:3a:d6:f8:d8:c4:58:59:5e:4b:f8:db:d7:80:0d:3a:2f: 7b:44:ce:18:3d:16:d1:d0:57:2f:a5:b1:59:68:df:25:1b:ce: 03:1a:c4:b9:27:1a:97:ef:e6:2d:87:8b:d3:17:2f:b4:b2:f6: 72:29:e7:7d:55:0f:42:99:11:de:58:bc:c2:bc:9f:7a:22:dc: 17:26:f0:ac:e0:e4:71:ae:26:73:37:f1:e0:d7:cf:7b:c8:3f: fb:a6:a0:93:ef:d8:a8:09:95:06:3f:53:c8:8e:97:8c:dc:d9: 5d:3d:38:ea -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEgUOnXEm9XSZvMr0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZjZDZjZWMtNGNkNi00ZmEwLWIzYWYtMzU0YTdiYzMy NWJlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk Mjk2MWFlYTEtNjMxNC00ZjI0LTlmODgtOGE1MWZkYmJiZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouU3wyCZN9TxbEWuPoKZgf/Vu2JBb4qqmG0A Zl0n5kCtMRUw2KjBfUAUL/fQu8WTv5dVQhRf7cClFymmhOAL/dlzUc0UYX0MTeYY GfiWdOi6OESyEICCA8d1xKwD6v3SpRUyvFrjvGdt3dY1NmGCNRQhIbw2dqykvdrZ xOY4pTva8YU3Z2h16++azJF6HqcKV9sC7SPUxndIn74nyQpol7Y4IYw+BIEwqPAk XhbR4SlgVJusUO1LhKxgYTYjXOQkMMbQ738WSNafMqkKJTACF8Y1fVSenXJkZxnz /mW5CVGIc2OYGc8gzcz2X6QAJAtI4EwpxInNao64CQfrPiOP7wIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFNtT8i5rXEbYsH3hsUeZto5XPXcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNmNk NmNlYy00Y2Q2LTRmYTAtYjNhZi0zNTRhN2JjMzI1YmUvMzg5MTczNjItODliZS0z MDcwLTg4ZjEtYWViOTFlNmIwZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzZjZDZjZWMtNGNkNi00ZmEwLWIz YWYtMzU0YTdiYzMyNWJlL2M2Y2Q2Y2VjLTRjZDYtNGZhMC1iM2FmLTM1NGE3YmMz MjViZS5jcmwwHwYDVR0jBBgwFoAU5s1XOWa5tW6rUljXW3FD2KdY2o0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNmNkNmNlYy00Y2Q2LTRmYTAtYjNhZi0zNTRh N2JjMzI1YmUuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQERTxAAwQC rGF4AwQEuKvAAwQCwPNMAwQCx7ysAwQEzOvQAwQBznscAwQC0FR8AwQF2HaAMA0E AgACMAcDBQAmB//4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAF3+hu1vnt1xfCQaz85vClgtaN82Ur8kG8xn kAOC1hNXZgG6KsJMUuaom0eLtV1RQJ1SsLF3hdIk0UKYRQhLEsruL27pCGdhXXVo o1C8hnGjD3iQKPSMUMRoq5G5SDnOPAH73yn4QN+4hJ5lVI7isessDJ1/HlzZdOxX hzUsGdI8vyGmC/Q8eT/m22YFJRdPz+HbOtb42MRYWV5L+NvXgA06L3tEzhg9FtHQ Vy+lsVlo3yUbzgMaxLknGpfv5i2Hi9MXL7Sy9nIp531VD0KZEd5YvMK8n3oi3Bcm 8Kzg5HGuJnM38eDXz3vIP/umoJPv2KgJlQY/U8iOl4zc2V09OOo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:40 2025 by rpki-client