$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa File: b189127e-17d2-3a1b-8678-fb80dca44ec2.roa (raw, json) Hash identifier: sGHut0lWo8ppzqyr3IYzY0rwBiXgK5zu0ukQsP5OvPc= Subject key identifier: 74:55:2C:A1:E1:4D:09:15:24:72:D6:BA:C8:8B:D1:67:B0:1E:54:60 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858495C243FDC30DD0D07172CD200 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 5650 IP address blocks: 104.218.195.0/24 maxlen: 24 104.218.199.0/24 maxlen: 24 104.251.81.0/24 maxlen: 24 104.251.86.0/24 maxlen: 24 104.251.93.0/24 maxlen: 24 141.193.96.0/23 maxlen: 23 158.115.228.0/23 maxlen: 23 172.98.167.0/24 maxlen: 24 172.98.170.0/24 maxlen: 24 172.98.189.0/24 maxlen: 24 207.230.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3f:dc:30:dd:0d:07:17:2c:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=8c342a04-c953-4ab4-bc1d-58a472de922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:44:df:da:3d:ef:a0:08:7e:6f:b9:0a:b4: 5d:d5:a3:44:5f:23:c3:b1:67:79:10:0c:4b:2c:25: c3:95:cd:6c:be:7b:8a:50:7b:40:10:4e:4d:4e:25: 15:b0:fe:72:e3:56:4b:e3:92:6c:30:7e:55:8e:b6: 3b:35:cb:b1:74:4d:22:3e:34:12:4a:31:f2:60:82: 5f:b4:35:44:58:8f:8c:bb:bc:8f:6b:cf:07:a7:e2: 5c:39:52:ed:4f:e5:c1:54:20:89:b6:63:a3:fb:61: 71:46:e2:2b:2b:0a:90:c6:b2:ea:6a:dc:ac:f8:31: 9a:6d:74:c7:6d:0a:27:34:17:53:fa:fa:ce:2d:64: 73:95:90:24:bc:25:65:9e:14:0d:b0:11:73:c3:7f: d6:f7:61:f2:d6:30:6d:2f:24:e6:e8:41:67:c0:70: bf:0f:41:ff:05:71:01:87:a5:22:1f:c5:44:af:69: 89:af:11:8a:55:52:c3:38:8f:8d:3e:88:49:a0:c5: b5:54:8e:ad:41:82:54:10:60:27:f2:22:1d:5c:eb: c0:30:2d:c0:24:9a:64:50:af:e6:5f:09:db:7b:fa: 66:47:e8:7f:d6:e4:90:d7:76:cc:c4:81:55:7f:e4: 30:27:25:cf:f9:e4:b7:c0:65:22:23:22:02:42:ad: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:55:2C:A1:E1:4D:09:15:24:72:D6:BA:C8:8B:D1:67:B0:1E:54:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.195.0/24 104.218.199.0/24 104.251.81.0/24 104.251.86.0/24 104.251.93.0/24 141.193.96.0/23 158.115.228.0/23 172.98.167.0/24 172.98.170.0/24 172.98.189.0/24 207.230.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:80:c1:e2:1a:a4:f9:8c:50:89:0a:e6:2f:5e:f2:fd:f0:50: 97:d6:2e:85:e1:c1:2f:b4:8b:01:97:70:c4:21:3e:28:bd:7e: b4:e8:d4:87:fa:99:d6:e5:5e:ce:03:c0:e7:e8:bc:1e:f7:2e: 83:ba:de:27:1d:98:44:19:76:2a:72:92:3f:d2:7f:43:76:e0: e0:15:64:c0:e1:09:e9:f2:92:20:00:f3:bb:75:5a:b2:c9:7f: db:c2:6c:bc:aa:e3:bf:42:04:54:85:5b:c6:f6:e4:bc:39:34: 30:ef:06:e2:74:62:ec:88:79:8a:c2:80:39:5d:5b:2c:b7:6e: 68:fd:24:80:39:36:76:d4:db:ad:f6:a3:17:01:76:55:ce:51: a0:fb:ec:82:c0:dc:ee:6e:4f:55:42:84:51:f4:74:ee:84:96: d7:55:d2:94:0d:88:66:5c:fc:68:a7:20:a1:90:30:4f:aa:d2: 3f:c5:34:e3:8e:ac:c1:56:0b:54:d9:09:ab:25:63:bd:0b:f6: 2e:5a:f3:e1:c8:27:14:66:1d:91:15:04:a5:ce:db:0b:c5:16: 4f:0e:79:cd:d0:74:0d:1d:54:e3:cd:76:92:19:b2:c9:27:51: 04:82:4e:33:12:ec:9c:c4:dd:8a:9a:2d:1d:20:cf:c3:88:c7: f8:68:99:bb -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWElcJD/cMN0NBxcs0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OGMzNDJhMDQtYzk1My00YWI0LWJjMWQtNThhNDcyZGU5MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPNE39o976AIfm+5CrRd1aNEXyPDsWd5EAxL LCXDlc1svnuKUHtAEE5NTiUVsP5y41ZL45JsMH5VjrY7NcuxdE0iPjQSSjHyYIJf tDVEWI+Mu7yPa88Hp+JcOVLtT+XBVCCJtmOj+2FxRuIrKwqQxrLqatys+DGabXTH bQonNBdT+vrOLWRzlZAkvCVlnhQNsBFzw3/W92Hy1jBtLyTm6EFnwHC/D0H/BXEB h6UiH8VEr2mJrxGKVVLDOI+NPohJoMW1VI6tQYJUEGAn8iIdXOvAMC3AJJpkUK/m Xwnbe/pmR+h/1uSQ13bMxIFVf+QwJyXP+eS3wGUiIyICQq2AuQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFHRVLKHhTQkVJHLWusiL0WewHlRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYjE4OTEyN2UtMTdkMi0z YTFiLTg2NzgtZmI4MGRjYTQ0ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAaNrDAwQA aNrHAwQAaPtRAwQAaPtWAwQAaPtdAwQBjcFgAwQBnnPkAwQArGKnAwQArGKqAwQA rGK9AwQAz+ZyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACiAweIapPmMUIkK5i9e8v3wUJfWLoXhwS+0iwGX cMQhPii9frTo1If6mdblXs4DwOfovB73LoO63icdmEQZdipykj/Sf0N24OAVZMDh CenykiAA87t1WrLJf9vCbLyq479CBFSFW8b25Lw5NDDvBuJ0YuyIeYrCgDldWyy3 bmj9JIA5NnbU2632oxcBdlXOUaD77ILA3O5uT1VChFH0dO6EltdV0pQNiGZc/Gin IKGQME+q0j/FNOOOrMFWC1TZCaslY70L9i5a8+HIJxRmHZEVBKXO2wvFFk8Oec3Q dA0dVOPNdpIZssknUQSCTjMS7JzE3YqaLR0gz8OIx/hombs= -----END CERTIFICATE-----Generated at Thu Apr 17 12:27:04 2025 by rpki-client