$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa File: f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa (raw, json) Hash identifier: qV5MNN0K0avi/i2VPJZY4EoNMzabOM9KNt0+JoOfeig= Subject key identifier: 64:21:8C:12:B0:9B:3F:B9:EA:C6:32:4F:C3:AD:9B:5D:BF:BD:F3:FF Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Certificate serial: 010D0C9F432858491750C3D150C766D0184CF480 Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa Signing time: Wed 05 Mar 2025 21:20:09 +0000 ROA not before: Wed 05 Mar 2025 21:20:09 +0000 ROA not after: Tue 03 Jun 2025 20:20:09 +0000 asID: 1299 IP address blocks: 64.77.213.0/24 maxlen: 24 64.77.216.0/23 maxlen: 24 64.77.218.0/24 maxlen: 24 72.14.97.0/24 maxlen: 24 72.14.119.0/24 maxlen: 24 72.14.126.0/24 maxlen: 24 97.75.255.0/24 maxlen: 24 208.101.227.0/24 maxlen: 24 208.101.234.0/23 maxlen: 24 208.101.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:50:c3:d1:50:c7:66:d0:18:4c:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Validity Not Before: Mar 5 21:20:09 2025 GMT Not After : Jun 3 20:20:09 2025 GMT Subject: CN=9fd924e2-3fc2-4238-92a4-293c65db329f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:35:7f:21:27:b9:7b:64:8d:51:dc:44:0d: e1:c9:41:f1:32:7e:b4:d5:52:61:b8:55:5c:e1:dd: 24:ef:8d:0b:3b:26:8f:13:3b:df:2c:b7:f2:6d:20: b4:46:be:0b:97:39:56:83:64:56:23:fe:39:a0:8f: 9e:37:47:5a:f9:78:38:43:f2:81:26:9c:18:8f:96: 2f:5c:3b:eb:51:80:bd:48:e7:14:d5:c7:e5:75:55: 8d:65:2d:2c:99:8a:65:b1:d1:7d:d1:0c:65:6f:b9: 7c:96:9c:30:38:ea:c8:30:bf:08:2b:d1:92:23:d6: 6c:25:39:a0:8b:ad:21:3c:eb:9f:0e:41:35:76:67: 4e:8f:25:45:db:fc:2b:3e:d1:34:0e:ec:28:bf:2a: 6e:f2:cd:72:48:0f:b2:68:ad:3e:9e:14:37:27:6c: 25:dd:a4:fb:b2:32:45:4c:78:82:e3:68:53:fe:f4: ab:59:5b:a5:95:0d:04:93:52:35:16:de:0b:34:bf: 21:92:b6:96:46:8d:0b:23:53:38:23:63:0e:e4:c3: 92:40:d8:5f:91:c4:49:36:51:3c:f0:2d:b7:ab:ec: ca:8e:4d:5c:e4:f6:23:dc:85:37:6b:ed:3f:29:0f: e7:04:51:73:41:5f:eb:c2:da:20:3f:c8:0c:f6:7d: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:21:8C:12:B0:9B:3F:B9:EA:C6:32:4F:C3:AD:9B:5D:BF:BD:F3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl X509v3 Authority Key Identifier: keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer sbgp-ipAddrBlock: critical IPv4: 64.77.213.0/24 64.77.216.0-64.77.218.255 72.14.97.0/24 72.14.119.0/24 72.14.126.0/24 97.75.255.0/24 208.101.227.0/24 208.101.234.0-208.101.236.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:41:e0:f9:68:b4:ce:8b:e0:90:19:23:8e:f4:18:bd:2c:cd: 9a:2f:11:ee:42:d2:b3:76:f4:c9:3d:18:32:9e:a3:a9:d1:4c: 07:e4:ff:77:fc:d3:ae:11:ef:27:90:af:f2:6a:d2:82:63:0f: 1f:b4:c0:88:14:68:13:48:b2:2d:81:fb:47:10:63:f9:74:d7: e9:94:cb:25:4b:ec:68:3a:71:e9:a9:d5:e0:42:aa:66:1a:c2: b9:ef:ff:5f:c0:f0:c1:ca:af:1d:19:2e:b7:34:e1:12:d9:44: 88:8e:09:66:9b:99:87:1a:79:86:b2:f3:8d:36:e7:13:9e:57: a4:8c:57:54:7e:6b:8f:61:25:9e:0f:c6:28:a1:3a:bb:0f:73: 68:75:57:db:d4:fd:53:b5:a8:c0:58:a3:6f:ea:09:d5:4e:b3: f4:b0:3a:d8:cf:7d:65:3e:77:1c:57:01:f9:c6:38:eb:e4:ce: 6e:3b:cf:ca:5a:04:58:65:35:e8:7e:bf:ca:9c:98:cd:c0:4e: 41:63:ec:55:f9:86:80:9d:a3:92:dc:a6:a7:b6:0a:52:a0:4b: e7:af:18:05:1b:fa:91:07:ac:bb:5e:0e:28:a3:8e:a4:b9:81: 5a:26:da:ca:eb:1f:fc:47:1b:b1:1e:e0:5e:62:74:e1:1e:5e: 56:30:5b:75 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEkXUMPRUMdm0BhM9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MDc0YzItN2M4Zi00MWFjLTgzMDctNzRlY2U0NGE0 NjBjMB4XDTI1MDMwNTIxMjAwOVoXDTI1MDYwMzIwMjAwOVowLzEtMCsGA1UEAxMk OWZkOTI0ZTItM2ZjMi00MjM4LTkyYTQtMjkzYzY1ZGIzMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopA1fyEnuXtkjVHcRA3hyUHxMn601VJhuFVc 4d0k740LOyaPEzvfLLfybSC0Rr4LlzlWg2RWI/45oI+eN0da+Xg4Q/KBJpwYj5Yv XDvrUYC9SOcU1cfldVWNZS0smYplsdF90Qxlb7l8lpwwOOrIML8IK9GSI9ZsJTmg i60hPOufDkE1dmdOjyVF2/wrPtE0Duwovypu8s1ySA+yaK0+nhQ3J2wl3aT7sjJF THiC42hT/vSrWVullQ0Ek1I1Ft4LNL8hkraWRo0LI1M4I2MO5MOSQNhfkcRJNlE8 8C23q+zKjk1c5PYj3IU3a+0/KQ/nBFFzQV/rwtogP8gM9n0//QIDAQABo4IDjzCC A4swHQYDVR0OBBYEFGQhjBKwmz+56sYyT8Otm12/vfP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjcw NzRjMi03YzhmLTQxYWMtODMwNy03NGVjZTQ0YTQ2MGMvZjNkZmU5NTktMWE2Yy0z YTFmLTljOTMtNGYwMTEwOTI1MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3MDc0YzItN2M4Zi00MWFjLTgz MDctNzRlY2U0NGE0NjBjLzhiNzA3NGMyLTdjOGYtNDFhYy04MzA3LTc0ZWNlNDRh NDYwYy5jcmwwHwYDVR0jBBgwFoAUwcyIvErACddhSMPRw7JSQGnVnwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YjcwNzRjMi03YzhmLTQxYWMtODMwNy03NGVj ZTQ0YTQ2MGMuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAQE3VMAwD BANATdgDBABATdoDBABIDmEDBABIDncDBABIDn4DBABhS/8DBADQZeMwDAMEAdBl 6gMEANBl7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCGQeD5aLTOi+CQGSOO9Bi9LM2aLxHuQtKzdvTJPRgy nqOp0UwH5P93/NOuEe8nkK/yatKCYw8ftMCIFGgTSLItgftHEGP5dNfplMslS+xo OnHpqdXgQqpmGsK57/9fwPDByq8dGS63NOES2USIjglmm5mHGnmGsvONNucTnlek jFdUfmuPYSWeD8YooTq7D3NodVfb1P1TtajAWKNv6gnVTrP0sDrYz31lPnccVwH5 xjjr5M5uO8/KWgRYZTXofr/KnJjNwE5BY+xV+YaAnaOS3KantgpSoEvnrxgFG/qR B6y7Xg4oo46kuYFaJtrK6x/8RxuxHuBeYnThHl5WMFt1 -----END CERTIFICATE-----Generated at Sun Apr 6 11:43:06 2025 by rpki-client