$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa File: fd669d54-47cf-37c7-8689-7511d01f5bb0.roa (raw, json) Hash identifier: nQcAwrrauV0X/k/Sb2mRQUgRTHBklEJ7OTVayIQh3Nw= Subject key identifier: 87:BB:A5:1F:F1:87:7A:5A:35:A4:D6:8B:0F:28:67:57:68:30:82:AB Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F432858484515951C82DD991FEB535100 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 400981 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:95:1c:82:dd:99:1f:eb:53:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=e542b728-6748-4992-ad8a-9817cda2b456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:16:2f:6c:d3:66:fc:c0:e4:23:20:6b:6f: dd:33:d2:d1:f5:f6:2d:01:11:99:a1:32:e5:54:23: e6:d1:dd:ba:f9:d4:15:ec:96:f2:e1:f1:1e:90:ab: 48:b1:a2:dd:92:98:58:a8:9f:0d:df:80:02:33:25: 3e:9e:6f:13:d7:c8:59:7c:31:25:73:3f:cb:24:1e: c9:ca:0e:a6:14:b6:b3:d1:08:e4:2d:1f:d3:88:7e: e2:4b:4c:99:d3:2d:cc:8b:61:be:8b:3c:9e:41:2d: 62:f0:ee:57:d1:14:6b:1e:5c:bc:71:f5:6c:91:59: 49:77:2a:f1:9e:24:97:b4:66:f5:ee:a3:0a:0e:2b: 47:6b:25:90:5b:e4:66:ed:56:9b:ca:6f:75:2b:ed: 17:75:a4:00:4a:eb:3c:bb:f7:ec:93:13:ae:8a:07: 0a:2e:c1:cd:44:5e:bd:b2:1a:a4:ce:d5:66:7a:19: af:9f:c3:af:2d:f6:01:56:04:ce:cd:7a:8c:50:42: 0b:4a:8b:23:5c:c5:7d:db:1a:da:db:c3:7d:1e:5e: 9d:04:31:6d:ff:f7:6a:35:f6:2e:89:01:2b:04:0a: b5:23:56:6a:0d:cd:2b:d7:23:2d:44:74:fb:ee:c3: cf:10:f8:1c:bd:b4:7a:89:14:ee:89:14:d2:17:a2: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:A5:1F:F1:87:7A:5A:35:A4:D6:8B:0F:28:67:57:68:30:82:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:55:df:2e:c8:2a:88:e7:16:34:9d:fb:69:d7:95:d7:66:db: 92:12:68:f5:38:d7:dd:fd:c1:09:25:92:91:1a:27:40:c6:8f: a4:91:bb:1d:71:86:00:5b:80:62:67:82:df:3c:57:a1:42:17: 91:29:07:b6:9e:0a:aa:fa:b3:46:19:7c:d8:91:b8:47:b1:da: aa:85:71:56:48:48:94:9e:a9:36:8d:86:b4:0c:1b:76:3d:25: a1:52:b7:0a:9e:ff:c5:e6:9d:d7:af:92:5a:3e:43:23:ba:af: a5:52:39:f0:13:6f:9d:87:e9:8e:4d:7f:5c:34:84:48:26:d4: 92:90:a0:3f:8d:fb:06:8e:13:87:d9:f5:d2:1f:d7:f6:40:0d: 73:6d:ea:4a:80:40:f0:0a:2b:25:6b:a2:47:d0:4b:ad:f0:35: 6f:84:9e:3b:c6:51:78:f5:10:2e:cf:16:63:9b:59:59:4b:d1: 7d:1c:5a:76:75:65:e6:b2:ee:62:13:06:b3:2e:e2:b6:eb:ef: a0:4c:7a:76:23:2d:8d:0d:f8:5c:bb:4b:a1:70:54:d8:60:2e: b6:30:2a:4c:eb:74:7d:47:ff:03:02:af:d2:51:70:c1:c2:15: b7:ad:17:cd:82:76:b9:79:ca:be:c1:c9:a8:e4:ef:c7:fe:b0: eb:a5:e5:cc -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEhFFZUcgt2ZH+tTUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZTU0MmI3MjgtNjc0OC00OTkyLWFkOGEtOTgxN2NkYTJiNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6cWL2zTZvzA5CMga2/dM9LR9fYtARGZoTLl VCPm0d26+dQV7Jby4fEekKtIsaLdkphYqJ8N34ACMyU+nm8T18hZfDElcz/LJB7J yg6mFLaz0QjkLR/TiH7iS0yZ0y3Mi2G+izyeQS1i8O5X0RRrHly8cfVskVlJdyrx niSXtGb17qMKDitHayWQW+Rm7Vabym91K+0XdaQASus8u/fskxOuigcKLsHNRF69 shqkztVmehmvn8OvLfYBVgTOzXqMUEILSosjXMV92xra28N9Hl6dBDFt//dqNfYu iQErBAq1I1ZqDc0r1yMtRHT77sPPEPgcvbR6iRTuiRTSF6KUwQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFIe7pR/xh3paNaTWiw8oZ1doMIKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvZmQ2NjlkNTQtNDdjZi0z N2M3LTg2ODktNzUxMWQwMWY1YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACFV3y7IKojnFjSd+2nXlddm25ISaPU41939wQklkpEaJ0DGj6SRux1xhgBbgGJn gt88V6FCF5EpB7aeCqr6s0YZfNiRuEex2qqFcVZISJSeqTaNhrQMG3Y9JaFStwqe /8Xmndevklo+QyO6r6VSOfATb52H6Y5Nf1w0hEgm1JKQoD+N+waOE4fZ9dIf1/ZA DXNt6kqAQPAKKyVrokfQS63wNW+EnjvGUXj1EC7PFmObWVlL0X0cWnZ1Zeay7mIT BrMu4rbr76BMenYjLY0N+Fy7S6FwVNhgLrYwKkzrdH1H/wMCr9JRcMHCFbetF82C drl5yr7Byajk78f+sOul5cw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:40 2025 by rpki-client