$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa File: b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa (raw, json) Hash identifier: 921V783ayr3SVht7uAe6XIe+i2AFz1twnSs2Pg3D8cI= Subject key identifier: 10:19:8D:09:56:B5:53:66:C4:E3:27:2B:D3:37:8B:F4:72:DF:1D:1A Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F432858491246C5D650E3B2F4FF728340 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 21887 IP address blocks: 23.105.192.0/19 maxlen: 24 23.106.128.0/19 maxlen: 24 23.252.96.0/20 maxlen: 24 45.62.96.0/19 maxlen: 24 45.78.0.0/18 maxlen: 24 66.112.208.0/20 maxlen: 24 67.209.176.0/20 maxlen: 24 74.121.148.0/22 maxlen: 24 104.128.80.0/20 maxlen: 24 104.160.32.0/20 maxlen: 24 104.194.64.0/19 maxlen: 24 104.224.128.0/18 maxlen: 24 107.182.176.0/20 maxlen: 24 138.128.192.0/19 maxlen: 24 144.168.56.0/21 maxlen: 24 162.211.224.0/21 maxlen: 24 192.243.112.0/20 maxlen: 24 198.35.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c5:d6:50:e3:b2:f4:ff:72:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=01c5b504-3fff-4f3b-a6e5-2f80866bf07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5f:6f:4c:44:b4:49:24:eb:09:39:83:50:a3: f1:ec:64:ef:cd:64:07:73:0c:bf:69:50:91:15:0d: 18:8b:d0:ff:7d:98:f2:e3:65:9b:35:1e:8e:4f:aa: 5a:20:f6:9d:b2:ce:7f:f6:71:35:a6:ad:ac:ad:09: fd:0f:e5:2c:fb:aa:1e:f9:77:d9:fa:53:8d:6c:d1: 32:11:f4:40:2d:86:c8:03:6d:12:a5:ba:3f:8f:4d: a2:20:c9:42:26:5a:72:64:20:36:f1:43:0a:02:9c: 76:f6:b8:5c:db:72:38:5d:40:4a:fc:37:4a:24:fa: 4b:10:e3:d9:ae:37:7f:da:07:b5:cc:2c:43:6a:1a: 86:cd:ff:9f:0e:1a:50:39:8e:48:8e:5a:4c:47:3b: bd:d1:7a:19:3b:0d:89:57:e2:64:64:20:f8:cc:c0: 56:59:94:21:ef:32:5d:48:11:a3:33:23:13:d3:1a: a3:8e:ce:60:04:53:85:c6:6b:5a:8d:a6:8c:7f:a9: 17:3f:e9:92:ec:a6:21:e1:5d:15:42:8f:85:44:6f: 7f:08:e1:75:ef:cc:d5:60:5d:3c:4f:2a:cc:ad:09: d0:b8:b9:e2:62:54:fe:8f:94:90:94:da:64:d6:7f: b3:5f:d2:a2:28:01:29:dc:37:85:dc:20:72:98:82: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:8D:09:56:B5:53:66:C4:E3:27:2B:D3:37:8B:F4:72:DF:1D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv4: 23.105.192.0/19 23.106.128.0/19 23.252.96.0/20 45.62.96.0/19 45.78.0.0/18 66.112.208.0/20 67.209.176.0/20 74.121.148.0/22 104.128.80.0/20 104.160.32.0/20 104.194.64.0/19 104.224.128.0/18 107.182.176.0/20 138.128.192.0/19 144.168.56.0/21 162.211.224.0/21 192.243.112.0/20 198.35.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f8:4e:29:c4:13:67:0f:5b:67:3c:da:b3:e1:41:74:8c:de: 97:a2:5c:63:f0:7e:df:5c:7d:e6:44:3b:0f:a3:d6:59:da:e2: 71:49:20:9a:a3:b6:f0:49:79:f0:1d:1a:a7:77:b1:43:7d:0a: d1:c2:f2:3e:2b:7f:6d:73:4e:eb:85:58:19:96:4e:1c:03:25: 8d:9b:a8:45:bc:20:2a:7c:35:44:ad:4a:81:80:02:0d:3f:8c: 74:20:07:00:1a:02:d8:34:7c:83:7a:fb:a3:bd:3f:1c:5c:48: 6b:c5:ac:57:89:13:88:84:7e:e4:45:b5:5c:c6:26:1b:c5:41: e6:ca:2a:8e:0a:0b:d2:64:1b:43:04:ac:f3:08:d2:8a:b2:32: 18:ca:5f:8e:11:80:87:75:54:21:45:53:04:ee:1b:a5:86:55: c6:ab:79:a6:83:1f:be:d0:92:c4:94:59:47:1d:b2:ba:ed:88: 1e:d6:11:17:d2:ba:33:74:60:fc:e6:5d:a7:22:b3:6e:d2:1f: 4d:d5:0e:92:c2:c2:9f:fb:f4:e4:52:cf:f2:55:c2:a8:ee:6d: 46:19:6e:0b:1b:46:8c:fe:57:9e:fa:c5:c3:57:a8:f0:1a:a2: 80:0a:32:f2:4c:99:76:70:2a:01:ec:13:ca:74:0f:de:c6:10: 44:50:8e:3b -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEkSRsXWUOOy9P9yg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDFjNWI1MDQtM2ZmZi00ZjNiLWE2ZTUtMmY4MDg2NmJmMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg19vTES0SSTrCTmDUKPx7GTvzWQHcwy/aVCR FQ0Yi9D/fZjy42WbNR6OT6paIPadss5/9nE1pq2srQn9D+Us+6oe+XfZ+lONbNEy EfRALYbIA20Spbo/j02iIMlCJlpyZCA28UMKApx29rhc23I4XUBK/DdKJPpLEOPZ rjd/2ge1zCxDahqGzf+fDhpQOY5IjlpMRzu90XoZOw2JV+JkZCD4zMBWWZQh7zJd SBGjMyMT0xqjjs5gBFOFxmtajaaMf6kXP+mS7KYh4V0VQo+FRG9/COF178zVYF08 TyrMrQnQuLniYlT+j5SQlNpk1n+zX9KiKAEp3DeF3CBymILaiQIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFBAZjQlWtVNmxOMnK9M3i/Ry3x0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYjBhYzIzYjAtNWYzYS0z NjVkLTlhZjYtMjcwMjFhOTE1NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAo+E4pxBNnD1tnPNqz4UF0jN6Xolxj8H7fXH3mRDsPo9ZZ 2uJxSSCao7bwSXnwHRqnd7FDfQrRwvI+K39tc07rhVgZlk4cAyWNm6hFvCAqfDVE rUqBgAINP4x0IAcAGgLYNHyDevujvT8cXEhrxaxXiROIhH7kRbVcxiYbxUHmyiqO CgvSZBtDBKzzCNKKsjIYyl+OEYCHdVQhRVME7hulhlXGq3mmgx++0JLElFlHHbK6 7Yge1hEX0rozdGD85l2nIrNu0h9N1Q6SwsKf+/TkUs/yVcKo7m1GGW4LG0aM/lee +sXDV6jwGqKACjLyTJl2cCoB7BPKdA/exhBEUI47 -----END CERTIFICATE-----Generated at Mon Apr 7 20:00:28 2025 by rpki-client