$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa File: 74d043bc-e479-3a7a-9a76-aacaabb89db4.roa (raw, json) Hash identifier: N1XIy7rysKKrbLAbGgwDPyo11PE0RydVAsL5vBDqupw= Subject key identifier: 4D:0A:8E:82:AB:F6:46:06:6D:23:F8:6F:A8:73:55:4F:43:81:04:A8 Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df Certificate serial: 010D0C9F432858485F9ADE76EA377C43B5F76400 Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 14445 IP address blocks: 23.136.184.0/24 maxlen: 24 23.170.241.0/24 maxlen: 24 23.170.242.0/24 maxlen: 24 23.170.244.0/24 maxlen: 24 23.170.248.0/24 maxlen: 24 23.170.250.0/24 maxlen: 24 23.170.251.0/24 maxlen: 24 23.170.252.0/24 maxlen: 24 23.170.253.0/24 maxlen: 24 23.170.255.0/24 maxlen: 24 45.42.178.0/24 maxlen: 24 45.42.179.0/24 maxlen: 24 216.73.148.0/24 maxlen: 24 216.73.151.0/24 maxlen: 24 2606:18c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:de:76:ea:37:7c:43:b5:f7:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=760938b9-26d9-48d5-9fb1-cc70692cd211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:0d:10:6c:f4:63:aa:ae:5d:ef:90:c7:9d: f0:37:eb:4b:01:0f:e0:0d:cb:84:d1:35:4c:54:32: cd:72:d3:f2:1e:fe:ce:05:f1:77:b2:f7:d4:7c:ff: be:96:e7:8d:c7:1d:56:ee:fb:1d:eb:c3:1d:16:ca: 17:0c:45:87:81:1e:7b:90:b1:54:c9:29:56:9d:99: 37:66:c4:07:ef:b4:c6:ed:d0:6d:86:8b:68:94:26: fe:23:72:61:57:74:52:a1:8c:04:df:c2:e1:d5:4f: 58:0b:0b:d0:97:e2:bf:4b:a3:2e:aa:c5:d5:ac:75: eb:0d:f6:63:e1:ab:66:61:a7:ae:34:41:84:53:af: d7:cc:c2:bd:fc:55:0b:2a:f3:03:46:d9:1b:cd:39: fe:74:4c:f5:f4:1c:c0:f5:90:a1:35:11:5c:03:3e: d6:fc:5d:54:c9:da:17:16:28:dc:f9:7d:48:a1:6e: 2e:02:08:32:e1:32:9a:d0:a3:c3:62:bd:b5:ee:bb: 3c:d8:0b:6d:1b:2f:31:d9:54:bb:b1:fa:b6:33:2a: 9d:62:27:43:5b:73:72:5c:c3:13:8e:fd:c5:d8:16: 40:61:8c:b2:3c:53:8b:c7:f9:68:df:cc:f4:af:f5: 49:70:68:e7:07:2c:6d:9b:f2:e1:82:cf:0b:f3:df: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:8E:82:AB:F6:46:06:6D:23:F8:6F:A8:73:55:4F:43:81:04:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl X509v3 Authority Key Identifier: keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer sbgp-ipAddrBlock: critical IPv4: 23.136.184.0/24 23.170.241.0-23.170.242.255 23.170.244.0/24 23.170.248.0/24 23.170.250.0-23.170.253.255 23.170.255.0/24 45.42.178.0/23 216.73.148.0/24 216.73.151.0/24 IPv6: 2606:18c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1a:e4:3b:58:c1:c9:5c:bb:4e:d0:aa:7b:61:cf:9d:ea:34: e9:76:fe:e7:82:c6:1a:50:93:87:3a:72:88:e8:5f:6d:8f:3b: f1:7d:c8:e6:21:da:87:75:f7:f9:ed:33:8b:6b:84:36:5e:da: 54:d0:82:d6:bb:b0:04:78:0d:78:b9:21:5c:4a:c6:73:0a:a7: 03:52:ca:ac:89:81:9b:6f:70:f6:61:0b:9c:fb:eb:3f:78:67: 6d:14:0b:d5:81:5b:de:cf:c6:5f:a8:7c:26:3b:73:9c:8b:ef: be:38:1f:c8:55:bf:58:eb:ae:8f:da:a5:ce:6d:2e:34:ff:26: 8b:71:1a:36:ab:ea:3b:29:24:8b:88:22:43:66:0e:d7:21:93: 42:b2:d4:ab:75:73:1c:67:e7:32:f5:e7:76:02:bc:40:e6:7e: a8:e3:26:8d:32:f4:83:be:c5:a5:6c:bf:4f:31:92:00:cc:d3: dc:c2:7a:72:05:d2:a4:88:28:03:c4:d6:db:cf:2f:04:a3:44: 5d:89:b6:f6:eb:f2:92:b1:45:cb:e0:82:78:6c:33:3a:52:29: 98:8f:17:b0:bc:e0:5f:ac:7b:f9:a0:75:dd:8c:c9:ab:9a:fe: fd:79:dc:f2:33:0e:fc:cd:08:b7:f5:1d:7b:b0:c1:ef:85:48: 1e:6e:e2:27 -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEhfmt526jd8Q7X3ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4 OGRmMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzYwOTM4YjktMjZkOS00OGQ1LTlmYjEtY2M3MDY5MmNkMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIQNEGz0Y6quXe+Qx53wN+tLAQ/gDcuE0TVM VDLNctPyHv7OBfF3svfUfP++lueNxx1W7vsd68MdFsoXDEWHgR57kLFUySlWnZk3 ZsQH77TG7dBthotolCb+I3JhV3RSoYwE38Lh1U9YCwvQl+K/S6MuqsXVrHXrDfZj 4atmYaeuNEGEU6/XzMK9/FULKvMDRtkbzTn+dEz19BzA9ZChNRFcAz7W/F1UydoX Fijc+X1IoW4uAggy4TKa0KPDYr217rs82AttGy8x2VS7sfq2MyqdYidDW3NyXMMT jv3F2BZAYYyyPFOLx/lo38z0r/VJcGjnByxtm/Lhgs8L89+WEQIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFE0KjoKr9kYGbSP4b6hzVU9DgQSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5 NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvNzRkMDQzYmMtZTQ3OS0z YTdhLTlhNzYtYWFjYWFiYjg5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4 OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2 YmJkZTg4ZGYuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQAF4i4MAwD BAAXqvEDBAAXqvIDBAAXqvQDBAAXqvgwDAMEAReq+gMEAReq/AMEABeq/wMEAS0q sgMEANhJlAMEANhJlzANBAIAAjAHAwUAJgYYwDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvGuQ7WMHJXLtO 0Kp7Yc+d6jTpdv7ngsYaUJOHOnKI6F9tjzvxfcjmIdqHdff57TOLa4Q2XtpU0ILW u7AEeA14uSFcSsZzCqcDUsqsiYGbb3D2YQuc++s/eGdtFAvVgVvez8ZfqHwmO3Oc i+++OB/IVb9Y666P2qXObS40/yaLcRo2q+o7KSSLiCJDZg7XIZNCstSrdXMcZ+cy 9ed2ArxA5n6o4yaNMvSDvsWlbL9PMZIAzNPcwnpyBdKkiCgDxNbbzy8Eo0Rdibb2 6/KSsUXL4IJ4bDM6UimYjxewvOBfrHv5oHXdjMmrmv79edzyMw78zQi39R17sMHv hUgebuIn -----END CERTIFICATE-----Generated at Tue Mar 18 21:00:47 2025 by rpki-client