$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa File: 85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json) Hash identifier: bj6UHvtYo7sK1BhBP/2xyBNgd2OvEzHwDa8z7+XML3c= Subject key identifier: F0:9D:F4:45:51:C4:19:E3:78:C9:B5:2D:20:02:D1:C3:23:4C:A0:17 Certificate issuer: /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340 Certificate serial: 010D0C9F43285848D7A64BFF7C0DA40D19461040 Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 36001 IP address blocks: 134.195.20.0/22 maxlen: 22 162.210.60.0/22 maxlen: 22 172.98.220.0/22 maxlen: 22 173.242.80.0/20 maxlen: 20 192.200.136.0/21 maxlen: 21 199.167.212.0/22 maxlen: 22 206.126.208.0/20 maxlen: 20 209.103.224.0/19 maxlen: 19 216.127.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4b:ff:7c:0d:a4:0d:19:46:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=3ea4c75e-962d-4d89-8f73-42d6ece58e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:69:af:b1:02:b3:8a:fd:90:30:7c:51:5c: 91:e6:6b:57:a8:5d:95:ea:3a:76:92:87:12:d8:22: 31:7e:fa:57:6b:a1:b8:c5:57:05:c6:44:ee:45:98: 42:31:e7:32:df:bb:7a:4d:9d:3a:47:23:3b:71:cb: cf:bf:46:ac:22:22:dc:66:e0:93:e4:e0:37:0f:a9: a0:db:cf:e1:87:41:1c:fa:09:30:a6:1c:44:34:f5: c9:2a:7c:7f:c3:af:be:5a:66:55:84:6e:aa:69:a1: 89:d4:92:b1:31:eb:b8:f9:80:14:1a:40:73:be:4e: a3:06:4b:2d:08:5e:ff:ca:8d:6b:a9:de:b2:17:aa: 47:ac:51:03:c1:57:b7:ba:e1:6e:c3:1d:2e:0f:de: ce:fe:5e:7e:bd:25:83:44:22:30:9d:15:84:56:60: 48:0f:5d:1d:f3:5a:2b:c3:7f:46:02:99:10:ab:a7: 6c:23:d2:0b:6c:7e:57:ea:1b:7f:af:9e:7d:d0:f0: 8a:7e:ec:e4:6b:ef:a0:08:51:20:a7:76:ea:af:78: 97:ea:52:fd:05:f7:ef:40:09:21:00:87:58:2f:95: ee:21:9f:f4:4a:d4:c0:fc:fb:f0:99:dd:99:5a:21: f9:bc:56:a5:40:fc:92:60:21:84:1c:5f:56:a6:f8: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9D:F4:45:51:C4:19:E3:78:C9:B5:2D:20:02:D1:C3:23:4C:A0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl X509v3 Authority Key Identifier: keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer sbgp-ipAddrBlock: critical IPv4: 134.195.20.0/22 162.210.60.0/22 172.98.220.0/22 173.242.80.0/20 192.200.136.0/21 199.167.212.0/22 206.126.208.0/20 209.103.224.0/19 216.127.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:67:72:fd:78:6e:69:70:b9:52:82:7c:b9:b6:49:26:3a:02: 79:a1:47:19:af:b4:93:eb:07:91:4a:71:62:2d:03:2f:ca:ec: 1c:13:a9:44:73:e7:3d:15:af:0f:03:78:f4:10:6d:73:82:35: 09:b5:f9:4c:b8:52:60:e3:0e:c0:87:b5:48:bd:70:a1:02:45: b3:88:4d:c2:cc:de:8c:3e:99:90:ae:b1:27:48:cd:52:8c:9e: 30:c0:14:1c:ee:d0:fe:69:52:ab:5e:96:84:66:81:02:79:d4: 34:03:04:3a:75:48:27:bf:b5:f7:f1:7b:52:17:3b:5a:e3:14: 86:49:c0:d3:1a:9b:b5:2b:8a:6e:5e:b7:a6:08:57:dd:74:04: 49:29:78:85:77:21:1c:e1:94:a7:ce:eb:b5:b0:2e:d1:77:38: a5:a8:4e:e9:55:b9:25:2f:9b:bd:14:63:98:a5:48:17:e9:09: 89:03:66:82:b5:a6:ea:60:8c:4d:d7:f5:e9:6a:6d:e7:a2:b2: 04:ff:a6:88:93:fa:c4:ba:de:77:53:a1:43:5c:3c:b3:3d:60: 0e:61:3d:76:cd:89:db:13:e7:ff:96:dd:ae:f6:75:d2:6b:d1: db:55:75:74:12:9c:9d:3c:79:70:f0:df:7f:2d:df:d2:7d:ef: 2e:87:96:d9 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEjXpkv/fA2kDRlGEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdhMWJmZjMtY2ZmMi00MWY4LWExZDItOGExMGNhZDdl MzQwMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk M2VhNGM3NWUtOTYyZC00ZDg5LThmNzMtNDJkNmVjZTU4ZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwBpr7ECs4r9kDB8UVyR5mtXqF2V6jp2kocS 2CIxfvpXa6G4xVcFxkTuRZhCMecy37t6TZ06RyM7ccvPv0asIiLcZuCT5OA3D6mg 28/hh0Ec+gkwphxENPXJKnx/w6++WmZVhG6qaaGJ1JKxMeu4+YAUGkBzvk6jBkst CF7/yo1rqd6yF6pHrFEDwVe3uuFuwx0uD97O/l5+vSWDRCIwnRWEVmBID10d81or w39GApkQq6dsI9ILbH5X6ht/r5590PCKfuzka++gCFEgp3bqr3iX6lL9BffvQAkh AIdYL5XuIZ/0StTA/Pvwmd2ZWiH5vFalQPySYCGEHF9WpvjXoQIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFPCd9EVRxBnjeMm1LSAC0cMjTKAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2Ex YmZmMy1jZmYyLTQxZjgtYTFkMi04YTEwY2FkN2UzNDAvODUxNzYxMzItNDdjOS0z MmExLTllMDQtNmRhZGM0ZjZmYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzdhMWJmZjMtY2ZmMi00MWY4LWEx ZDItOGExMGNhZDdlMzQwLzM3YTFiZmYzLWNmZjItNDFmOC1hMWQyLThhMTBjYWQ3 ZTM0MC5jcmwwHwYDVR0jBBgwFoAUDIygQW4g0FWlM0V3sX5RNjMiEXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2ExYmZmMy1jZmYyLTQxZjgtYTFkMi04YTEw Y2FkN2UzNDAuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQChsMUAwQC otI8AwQCrGLcAwQErfJQAwQDwMiIAwQCx6fUAwQEzn7QAwQF0WfgAwQF2H/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdncv14bmlwuVKCfLm2SSY6AnmhRxmvtJPrB5FKcWItAy/K7BwTqURz 5z0Vrw8DePQQbXOCNQm1+Uy4UmDjDsCHtUi9cKECRbOITcLM3ow+mZCusSdIzVKM njDAFBzu0P5pUqteloRmgQJ51DQDBDp1SCe/tffxe1IXO1rjFIZJwNMam7Urim5e t6YIV910BEkpeIV3IRzhlKfO67WwLtF3OKWoTulVuSUvm70UY5ilSBfpCYkDZoK1 pupgjE3X9elqbeeisgT/poiT+sS63ndToUNcPLM9YA5hPXbNidsT5/+W3a72ddJr 0dtVdXQSnJ08eXDw338t39J97y6Hltk= -----END CERTIFICATE-----Generated at Sat Apr 12 02:00:01 2025 by rpki-client