$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa File: b189127e-17d2-3a1b-8678-fb80dca44ec2.roa (raw, json) Hash identifier: gQSSF3JEXGcUX0iAkahk/VLgEfnSmftZD5NDgOuvfvE= Subject key identifier: 7D:61:92:96:F1:52:59:48:F0:07:6E:49:A1:C5:C7:B3:AE:CE:23:E9 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858487CEB34E20C2ECD5465919500 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 5650 IP address blocks: 104.218.195.0/24 maxlen: 24 104.218.199.0/24 maxlen: 24 104.251.81.0/24 maxlen: 24 104.251.86.0/24 maxlen: 24 104.251.93.0/24 maxlen: 24 141.193.96.0/23 maxlen: 23 158.115.228.0/23 maxlen: 23 172.98.167.0/24 maxlen: 24 172.98.170.0/24 maxlen: 24 172.98.189.0/24 maxlen: 24 207.230.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:34:e2:0c:2e:cd:54:65:91:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=158f3ec3-46ed-4e74-8f6d-d39665d0440d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:70:e3:54:69:95:64:6b:33:6b:ee:d8:e1: f9:d5:0f:e0:ae:c8:62:c3:e2:bd:4e:91:5f:54:68: a1:24:f9:57:fb:12:da:45:08:dd:ef:4a:b9:3f:54: e7:d7:11:7e:39:77:4c:24:ad:9d:9a:5e:d4:bc:a1: 58:8f:98:2f:e8:29:f9:89:15:5b:65:8b:65:07:5a: 63:4b:30:39:86:73:25:04:48:19:b0:c5:ee:e1:46: f7:12:d8:51:d8:c7:7a:6d:27:55:5b:d8:99:2b:39: 97:60:55:65:76:d9:20:57:1d:b4:72:89:9e:ac:0d: f0:60:55:b9:9e:86:36:70:d8:97:96:7b:00:2e:42: 25:d0:ec:e4:2c:e7:46:d8:79:47:66:66:b6:a0:aa: 0c:e0:b0:f5:2c:3a:7b:ef:c3:a1:8c:1b:a0:c1:22: 80:e1:2f:21:21:29:da:6f:a2:27:79:c8:b8:8f:c2: 50:c9:78:ac:a9:2a:cd:d8:47:7e:82:f7:52:40:17: 5b:cd:90:c4:29:89:5c:f8:ab:83:f7:39:09:c3:bc: 2e:e2:da:71:4b:c2:a9:93:6e:59:fb:34:45:b6:c2: 1d:0a:74:1b:62:3b:1a:f2:a3:30:73:ef:3f:d6:ad: 5d:8d:45:7f:07:86:7b:6d:c9:77:20:45:43:c7:81: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:61:92:96:F1:52:59:48:F0:07:6E:49:A1:C5:C7:B3:AE:CE:23:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.195.0/24 104.218.199.0/24 104.251.81.0/24 104.251.86.0/24 104.251.93.0/24 141.193.96.0/23 158.115.228.0/23 172.98.167.0/24 172.98.170.0/24 172.98.189.0/24 207.230.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0b:c1:3d:9a:1c:2f:0f:2b:74:c5:7f:bf:68:ef:06:57:b3: 72:44:12:b1:0d:95:c9:9f:64:a2:53:df:7f:a7:d5:84:bc:b9: 88:1d:68:93:ed:9c:84:82:d0:ef:c1:32:12:7a:8b:95:2d:07: 59:f9:4b:43:c2:53:b6:eb:b0:af:b6:12:0d:b0:91:d3:da:cb: 01:0c:52:33:8c:30:0b:40:ae:d8:59:41:11:73:04:35:ae:af: a2:d4:48:2c:6a:05:51:5b:c3:88:5b:f8:57:2b:1d:1f:ce:77: df:db:0a:7d:8a:74:0f:50:86:47:32:0c:7b:d4:ee:e8:4d:b9: 30:66:06:e6:04:12:e7:d2:bc:f3:9c:6a:d3:15:8b:44:c3:ea: 22:b6:fb:16:00:39:8b:a6:49:2a:8f:48:e9:4c:a4:1f:92:e0: 65:00:92:75:b2:ed:ba:52:1d:87:ec:5a:00:00:55:9b:ab:39: ae:66:dc:f7:89:58:8c:d8:5e:7f:2f:56:1a:6d:b4:b1:1a:a6: d1:2e:4c:eb:39:a0:61:81:49:95:e8:82:e3:8f:9f:c9:6c:ab: e8:a2:22:0b:67:40:4b:0b:7a:e9:34:ff:fa:c8:41:9d:28:52: c3:c8:13:65:a4:db:c7:4e:bf:8a:1a:c5:ee:24:91:26:20:54: cc:ab:24:c5 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEh86zTiDC7NVGWRlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk MTU4ZjNlYzMtNDZlZC00ZTc0LThmNmQtZDM5NjY1ZDA0NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxdw41RplWRrM2vu2OH51Q/grshiw+K9TpFf VGihJPlX+xLaRQjd70q5P1Tn1xF+OXdMJK2dml7UvKFYj5gv6Cn5iRVbZYtlB1pj SzA5hnMlBEgZsMXu4Ub3EthR2Md6bSdVW9iZKzmXYFVldtkgVx20comerA3wYFW5 noY2cNiXlnsALkIl0OzkLOdG2HlHZma2oKoM4LD1LDp778OhjBugwSKA4S8hISna b6Ineci4j8JQyXisqSrN2Ed+gvdSQBdbzZDEKYlc+KuD9zkJw7wu4tpxS8Kpk25Z +zRFtsIdCnQbYjsa8qMwc+8/1q1djUV/B4Z7bcl3IEVDx4FR7QIDAQABo4IDkTCC A40wHQYDVR0OBBYEFH1hkpbxUllI8AduSaHFx7OuziPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYjE4OTEyN2UtMTdkMi0z YTFiLTg2NzgtZmI4MGRjYTQ0ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAaNrDAwQA aNrHAwQAaPtRAwQAaPtWAwQAaPtdAwQBjcFgAwQBnnPkAwQArGKnAwQArGKqAwQA rGK9AwQAz+ZyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAB8LwT2aHC8PK3TFf79o7wZXs3JEErENlcmfZKJT 33+n1YS8uYgdaJPtnISC0O/BMhJ6i5UtB1n5S0PCU7brsK+2Eg2wkdPaywEMUjOM MAtArthZQRFzBDWur6LUSCxqBVFbw4hb+FcrHR/Od9/bCn2KdA9QhkcyDHvU7uhN uTBmBuYEEufSvPOcatMVi0TD6iK2+xYAOYumSSqPSOlMpB+S4GUAknWy7bpSHYfs WgAAVZurOa5m3PeJWIzYXn8vVhpttLEaptEuTOs5oGGBSZXoguOPn8lsq+iiIgtn QEsLeuk0//rIQZ0oUsPIE2Wk28dOv4oaxe4kkSYgVMyrJMU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:57 2025 by rpki-client