$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa File: c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa (raw, json) Hash identifier: vFCotdZLKzjf6GP6cPXvqfVxtqtDE2GGVuO+qNX8sGw= Subject key identifier: 2C:8D:4C:C8:DF:B4:46:84:5D:DB:84:CC:2B:9C:4C:AE:B2:DE:8C:5F Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F43285848F22C65B8A0FE5DA08B9ABF80 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 21887 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:65:b8:a0:fe:5d:a0:8b:9a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=aed5a115-0e00-4ee5-81a0-df86b6a761cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:5d:8d:a6:cd:ef:0f:68:dc:c6:e7:68:57: dc:b5:8b:7a:5c:cf:10:59:8e:77:33:72:64:2d:a6: 81:b4:c6:04:85:60:5d:64:2c:a6:82:1c:44:5d:1c: cb:f5:dc:e6:54:3e:d9:be:f3:db:65:99:1f:c5:7a: 0b:a5:61:0b:6c:1c:a8:53:b5:5e:32:27:ad:95:33: e9:95:40:b7:08:8a:b0:f2:3f:81:ba:5d:df:77:57: 60:0f:0d:ff:b1:3e:7c:17:ed:43:77:4b:33:51:44: ee:1b:d0:2a:18:15:49:00:4b:ad:89:b5:c2:a6:1e: 0d:e3:63:9c:64:32:53:d8:e8:09:50:0d:e6:1e:70: bf:cf:10:08:bd:94:f7:78:31:50:e1:4f:3c:94:3e: 22:f7:2a:5f:c5:f7:db:ed:27:26:bf:58:c9:2d:c9: 96:0c:fd:bb:55:5a:15:1b:62:e8:a1:ce:28:01:23: 9d:c7:e2:3b:58:24:26:bc:4b:94:e4:98:81:45:5b: 43:1e:46:3c:41:e1:f5:ac:8d:54:70:84:90:a0:9f: 73:8a:de:fc:07:a8:6e:94:19:31:21:85:46:eb:99: 20:0b:c3:2b:5e:2b:42:ee:fd:f6:34:e6:82:6c:85: 99:25:25:a6:d7:90:38:a1:78:0f:ae:50:ae:4c:bd: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:4C:C8:DF:B4:46:84:5D:DB:84:CC:2B:9C:4C:AE:B2:DE:8C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f5:52:4d:ad:02:90:7e:09:cf:f1:62:f8:6a:d8:0a:c8:40: fa:f9:6b:a8:c5:df:07:58:31:6e:16:1f:32:7d:51:62:5e:e5: cc:62:23:80:7d:2e:d1:95:80:b8:06:f7:3c:57:a8:9c:90:ab: 18:4a:ec:41:c9:92:5d:cf:72:70:d7:5b:a7:1e:36:1c:b4:f7: ba:b9:9c:a5:a2:3d:7b:e5:32:d1:9a:a5:a2:f1:ae:b9:95:7b: 8f:3d:8c:fe:13:b3:6c:34:65:25:12:0e:b2:fb:8d:cb:3e:45: 29:66:c0:2f:27:53:45:5e:f2:6f:10:60:c0:26:0e:86:83:75: e8:19:9b:4c:13:66:ef:64:12:e5:15:1b:3f:44:5c:38:9e:3f: 0c:1f:e7:6c:cb:e4:4a:4f:08:db:b9:0a:95:f6:ac:0b:a4:6a: 06:f1:7a:12:d2:7c:75:0f:03:b5:77:a6:97:45:9b:ce:83:02: 41:f8:8c:55:59:ba:93:71:f2:d3:1d:3c:63:a5:69:dc:fe:41: eb:5e:3c:1e:d1:1e:cf:25:83:82:54:94:67:a9:f2:bd:f4:d5: 8c:5d:54:07:9f:e2:37:6b:a0:17:5f:34:4f:85:c0:81:4f:ff: 28:03:54:86:31:06:5a:13:a5:81:07:ab:a1:39:f8:55:e2:dc: 2b:eb:a4:3c -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEjyLGW4oP5doIuav4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YWVkNWExMTUtMGUwMC00ZWU1LTgxYTAtZGY4NmI2YTc2MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu99djabN7w9o3MbnaFfctYt6XM8QWY53M3Jk LaaBtMYEhWBdZCymghxEXRzL9dzmVD7ZvvPbZZkfxXoLpWELbByoU7VeMietlTPp lUC3CIqw8j+Bul3fd1dgDw3/sT58F+1Dd0szUUTuG9AqGBVJAEutibXCph4N42Oc ZDJT2OgJUA3mHnC/zxAIvZT3eDFQ4U88lD4i9ypfxffb7Scmv1jJLcmWDP27VVoV G2Looc4oASOdx+I7WCQmvEuU5JiBRVtDHkY8QeH1rI1UcISQoJ9zit78B6hulBkx IYVG65kgC8MrXitC7v32NOaCbIWZJSWm15A4oXgPrlCuTL2BSwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFCyNTMjftEaEXduEzCucTK6y3oxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvYzcyOWMzMTktYzNkNS0z NTFlLWFjZGMtNWM3YTIwZmY2YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AH31Uk2tApB+Cc/xYvhq2ArIQPr5a6jF3wdYMW4WHzJ9UWJe5cxiI4B9LtGVgLgG 9zxXqJyQqxhK7EHJkl3PcnDXW6ceNhy097q5nKWiPXvlMtGapaLxrrmVe489jP4T s2w0ZSUSDrL7jcs+RSlmwC8nU0Ve8m8QYMAmDoaDdegZm0wTZu9kEuUVGz9EXDie Pwwf52zL5EpPCNu5CpX2rAukagbxehLSfHUPA7V3ppdFm86DAkH4jFVZupNx8tMd PGOladz+QetePB7RHs8lg4JUlGep8r301YxdVAef4jdroBdfNE+FwIFP/ygDVIYx BloTpYEHq6E5+FXi3CvrpDw= -----END CERTIFICATE-----Generated at Mon Apr 7 20:03:07 2025 by rpki-client