$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa File: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (raw, json) Hash identifier: E0zfLrgO8L/mE7WDww6FJfj81wueLKNU9l8ZufQF9VA= Subject key identifier: 87:FB:DE:73:71:7D:FB:26:EA:D9:20:42:6A:74:7E:15:C0:C6:87:67 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F43285849088167D1DB7AC66A34635200 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 3214 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:67:d1:db:7a:c6:6a:34:63:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=a0acf2d2-6812-4100-b088-50b8ddce2a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:84:c3:de:36:8e:8a:30:e0:da:3e:8b:be: e9:c5:a7:9f:44:ad:a9:d3:ed:7a:38:2f:8f:e4:96: 09:fb:85:d4:db:9a:97:33:60:96:07:67:6f:b3:9c: 75:cc:68:ae:96:64:f9:ed:99:79:fd:5f:03:42:25: 74:69:ea:a0:23:98:22:3f:25:e3:08:8b:4e:5f:8a: 3e:c5:c1:19:75:de:99:26:3a:b1:60:dd:ea:0c:20: c2:20:2f:78:85:76:3f:46:f2:17:f3:f8:7f:fb:b0: 6a:39:33:fb:fd:2c:55:15:cf:70:b2:a9:55:63:64: e5:78:8b:b4:5d:4d:e2:f7:dc:c3:90:96:9f:c5:d8: 3f:57:83:ff:41:5a:d9:5d:7e:fb:3e:21:47:dc:ee: 45:23:49:ae:24:5d:34:6c:81:b0:99:ab:43:aa:c3: 36:c2:b8:90:6b:e9:96:7b:19:9f:9c:eb:37:fa:03: e8:5b:fc:b7:20:ec:53:c5:5f:da:46:ed:c9:0a:f6: a6:a0:40:54:75:4c:f6:6c:0f:3e:19:a6:3c:1e:8c: 47:0c:8d:ae:69:f7:51:50:85:2e:1c:fc:c2:16:ab: db:6f:c3:15:93:3c:11:75:8e:dc:ad:7f:31:bb:b9: 27:d3:c8:5c:0b:10:26:9f:3c:60:40:60:48:d1:40: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:DE:73:71:7D:FB:26:EA:D9:20:42:6A:74:7E:15:C0:C6:87:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:eb:02:ac:c9:77:69:fb:5e:78:6a:0a:57:d9:95:51:f5:b0: c3:bd:55:d6:b3:0f:71:d1:78:0d:2d:05:86:8c:3d:87:4b:46: 82:56:a8:dc:f4:20:2d:59:52:d6:12:91:e6:c9:de:5a:e0:70: 7d:f6:fa:fb:62:cd:63:ca:e1:4b:b4:4c:e5:d9:d9:21:82:96: ed:f6:01:41:96:5e:8f:a8:90:b1:2e:7e:72:23:74:2a:ed:b0: 81:be:b9:96:19:af:f9:ca:d4:1a:de:a8:c7:59:d2:28:42:08: 5e:43:89:16:9b:5c:08:d6:02:5c:9b:e2:9c:ad:91:27:35:6f: eb:41:3b:7b:76:5b:21:60:0c:e2:1b:55:9f:dd:bf:cf:f1:90: 48:57:f5:fc:41:ae:6b:26:7c:85:8e:76:64:b3:70:7d:f8:2e: 28:2f:d8:70:13:ba:f5:a1:bf:ee:28:28:4e:d4:2b:89:83:b6: b7:14:6c:3d:9a:12:7f:fc:d3:82:ad:f6:4c:a6:4d:b1:a0:37: 2b:86:52:fc:d2:2b:2e:57:30:e7:0e:b8:4a:f5:55:fa:a4:e2: 56:0c:0a:96:de:39:95:31:87:80:8c:4b:fe:1d:ef:f2:bc:1e: cc:fd:1f:d7:bf:97:55:21:82:06:5f:4a:af:3d:83:44:9c:c4: f9:ee:f0:e7 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEkIgWfR23rGajRjUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YTBhY2YyZDItNjgxMi00MTAwLWIwODgtNTBiOGRkY2UyYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohqEw942joow4No+i77pxaefRK2p0+16OC+P 5JYJ+4XU25qXM2CWB2dvs5x1zGiulmT57Zl5/V8DQiV0aeqgI5giPyXjCItOX4o+ xcEZdd6ZJjqxYN3qDCDCIC94hXY/RvIX8/h/+7BqOTP7/SxVFc9wsqlVY2TleIu0 XU3i99zDkJafxdg/V4P/QVrZXX77PiFH3O5FI0muJF00bIGwmatDqsM2wriQa+mW exmfnOs3+gPoW/y3IOxTxV/aRu3JCvamoEBUdUz2bA8+GaY8HoxHDI2uafdRUIUu HPzCFqvbb8MVkzwRdY7crX8xu7kn08hcCxAmnzxgQGBI0UDonQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFIf73nNxffsm6tkgQmp0fhXAxodnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvYjYzZjBmZjctMTViMC0z ZTc0LWFmMGEtOWEwMDdmNTQ2ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGfrAqzJd2n7XnhqClfZlVH1sMO9VdazD3HReA0tBYaMPYdLRoJWqNz0IC1ZUtYS kebJ3lrgcH32+vtizWPK4Uu0TOXZ2SGClu32AUGWXo+okLEufnIjdCrtsIG+uZYZ r/nK1BreqMdZ0ihCCF5DiRabXAjWAlyb4pytkSc1b+tBO3t2WyFgDOIbVZ/dv8/x kEhX9fxBrmsmfIWOdmSzcH34Ligv2HATuvWhv+4oKE7UK4mDtrcUbD2aEn/804Kt 9kymTbGgNyuGUvzSKy5XMOcOuEr1Vfqk4lYMCpbeOZUxh4CMS/4d7/K8Hsz9H9e/ l1UhggZfSq89g0ScxPnu8Oc= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:23 2025 by rpki-client