$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa File: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (raw, json) Hash identifier: 0YoptsNCA3oudm20sY3MQEyI+7nQuvaLkZYvWua8E40= Subject key identifier: 8F:4A:96:A0:79:82:01:13:AC:41:CA:1F:1F:BF:65:3D:65:6C:BB:12 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584827C53FE6E7A335A908BE1C40 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 3214 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:3f:e6:e7:a3:35:a9:08:be:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=31dcd479-56e0-4b27-ab6b-a2c58d781b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:aa:bc:49:9a:bf:c0:76:19:f1:f3:7f:91: 7e:db:b8:da:63:1b:ed:3f:aa:f0:91:e8:6f:e9:65: 9e:d4:05:6e:ff:e1:5d:78:aa:6f:48:00:34:19:88: f9:d9:45:e2:56:9e:20:b3:b8:b0:75:eb:30:c4:f2: ac:b0:73:df:f0:48:7b:34:d8:5b:42:60:8f:ca:0a: 1b:28:cf:11:74:dc:48:2a:e3:ac:a1:43:20:54:74: 15:fa:d1:94:6f:2a:3f:e8:aa:73:f5:9b:4d:47:ee: e8:d6:ac:93:0d:70:c6:8b:45:ab:1c:eb:6a:d1:c0: ee:ab:57:1c:06:3c:00:80:ac:a2:1b:3c:fc:a5:17: 2b:e9:8f:fd:79:7d:a5:07:90:b9:5b:58:8f:27:4c: fc:c9:80:21:1a:e5:f8:83:12:c1:29:7e:8c:b9:44: 3f:a9:b9:c7:08:de:bd:9d:7f:2a:ee:78:0c:c0:17: 49:f6:98:ce:35:5b:bc:2b:9c:4b:fe:17:1d:fe:3f: 36:05:fc:ce:27:81:a4:7d:32:79:ad:4e:8f:d3:ac: 5c:03:a4:fd:7d:f5:07:f9:1d:62:78:d4:01:1f:1b: 74:cd:9b:53:89:c8:eb:32:29:b8:1d:17:74:08:75: 92:67:d6:7e:04:e7:07:fd:57:47:51:fb:70:f1:12: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:96:A0:79:82:01:13:AC:41:CA:1F:1F:BF:65:3D:65:6C:BB:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:98:de:5a:41:52:85:77:57:ac:60:d6:b9:76:14:77:0f:ec: c7:63:63:58:86:a6:c4:46:02:1b:28:10:0d:a7:b8:9a:7f:ab: e8:e6:4d:4d:f9:42:ad:df:bd:a1:31:f1:5e:03:f7:b1:c2:6d: ec:ec:5d:b7:74:9c:cf:17:f6:86:0b:5e:82:5b:52:2d:ee:9f: 60:6f:7d:02:31:50:5a:1d:e5:56:c5:d5:0e:53:a8:5d:3c:b1: 90:9a:01:c4:72:9a:a0:0a:e7:2d:42:04:59:18:21:14:ac:5b: 1c:97:a7:e6:e6:73:5c:7b:60:2f:17:2d:99:01:6f:d7:fd:f3: bb:d8:84:54:38:9d:45:48:1f:dc:d6:07:46:ee:48:e1:fb:c3: 53:4d:ea:6e:e3:42:c0:3f:d4:0f:f3:c8:9f:fb:4b:00:ed:2b: 8a:17:4d:38:2c:b4:9f:b3:70:93:ec:16:e0:37:19:28:1d:ac: 3b:62:f9:0c:2b:da:d6:ec:d5:74:7b:55:37:92:95:2f:9f:ab: 3d:55:f9:bf:78:2a:6f:a1:06:ec:18:0f:31:ff:a8:26:f9:7e: e6:fe:4d:a7:01:8b:33:3a:ab:50:9e:4d:81:48:ea:9b:a9:81: 83:22:b2:35:a0:d1:d8:cd:97:10:0e:59:eb:46:5c:15:17:9b: 20:47:4b:cb -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEgnxT/m56M1qQi+HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk MzFkY2Q0NzktNTZlMC00YjI3LWFiNmItYTJjNThkNzgxYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs6qvEmav8B2GfHzf5F+27jaYxvtP6rwkehv 6WWe1AVu/+FdeKpvSAA0GYj52UXiVp4gs7iwdeswxPKssHPf8Eh7NNhbQmCPygob KM8RdNxIKuOsoUMgVHQV+tGUbyo/6Kpz9ZtNR+7o1qyTDXDGi0WrHOtq0cDuq1cc BjwAgKyiGzz8pRcr6Y/9eX2lB5C5W1iPJ0z8yYAhGuX4gxLBKX6MuUQ/qbnHCN69 nX8q7ngMwBdJ9pjONVu8K5xL/hcd/j82BfzOJ4GkfTJ5rU6P06xcA6T9ffUH+R1i eNQBHxt0zZtTicjrMim4HRd0CHWSZ9Z+BOcH/VdHUftw8RL28wIDAQABo4IDfzCC A3swHQYDVR0OBBYEFI9KlqB5ggETrEHKHx+/ZT1lbLsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvYjYzZjBmZjctMTViMC0z ZTc0LWFmMGEtOWEwMDdmNTQ2ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKmY3lpBUoV3V6xg1rl2FHcP7MdjY1iGpsRGAhsoEA2nuJp/q+jmTU35Qq3fvaEx 8V4D97HCbezsXbd0nM8X9oYLXoJbUi3un2BvfQIxUFod5VbF1Q5TqF08sZCaAcRy mqAK5y1CBFkYIRSsWxyXp+bmc1x7YC8XLZkBb9f987vYhFQ4nUVIH9zWB0buSOH7 w1NN6m7jQsA/1A/zyJ/7SwDtK4oXTTgstJ+zcJPsFuA3GSgdrDti+Qwr2tbs1XR7 VTeSlS+fqz1V+b94Km+hBuwYDzH/qCb5fub+TacBizM6q1CeTYFI6pupgYMisjWg 0djNlxAOWetGXBUXmyBHS8s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:48 2025 by rpki-client