$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa File: f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json) Hash identifier: G0/vsL2v3qKiX6IBpWphvJ3d/sGz6e9xAv8tH/RzSsg= Subject key identifier: 45:E3:44:19:86:5B:4D:C5:87:19:E8:CD:63:C0:EC:4B:DF:18:0D:C8 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584894A5EB3B0163695A3263CB80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 5650 IP address blocks: 104.251.80.0/24 maxlen: 24 104.251.85.0/24 maxlen: 24 104.251.89.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 158.115.224.0/24 maxlen: 24 158.115.225.0/24 maxlen: 24 158.115.226.0/24 maxlen: 24 158.115.227.0/24 maxlen: 24 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 158.115.250.0/24 maxlen: 24 158.115.251.0/24 maxlen: 24 172.98.185.0/24 maxlen: 24 206.127.218.0/24 maxlen: 24 207.230.96.0/23 maxlen: 23 207.230.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:eb:3b:01:63:69:5a:32:63:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=9e9ec7a9-17d9-4041-90f6-e58f22b4bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:83:0b:4d:d6:0e:6d:49:7e:03:c4:ac:09: df:46:19:d7:22:90:bf:38:28:a2:5b:64:55:af:e4: be:ee:5e:9d:7f:c8:7c:2d:11:ee:3e:63:52:c9:fd: 1f:e5:8d:14:bc:d2:6d:76:72:77:6f:46:57:ca:8b: 88:3a:23:8b:87:a6:64:16:28:61:e6:84:ae:1c:1c: a6:9a:f6:42:86:5e:ce:1a:d1:f2:7a:2a:9c:c3:ac: c6:9c:85:64:a7:ab:2f:16:a2:68:f2:c2:eb:68:82: da:e3:5f:9e:24:46:ac:fb:1c:90:49:0a:8e:97:e2: 21:d4:28:e0:9b:7a:d7:36:60:30:be:86:69:bf:15: fc:08:76:36:61:ea:2d:35:af:4d:b6:a8:e9:ac:36: a9:b7:76:c9:51:e2:bb:1b:da:d7:ea:3b:e4:4a:69: ec:0d:f3:d6:3f:b2:3a:37:d0:a2:6d:29:4d:f5:ec: 9d:37:84:a8:05:d4:5c:5e:09:c9:fa:dd:ac:42:80: 31:78:65:c9:41:88:fa:70:e8:9d:0e:2f:a4:51:30: 90:be:50:44:44:e2:7a:7e:65:28:c9:d3:ca:cc:96: d4:40:a7:88:41:15:6a:4f:09:cc:ff:95:c4:fc:b0: e8:87:a9:8f:42:ab:d6:14:01:27:03:a6:cc:70:9a: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E3:44:19:86:5B:4D:C5:87:19:E8:CD:63:C0:EC:4B:DF:18:0D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.80.0/24 104.251.85.0/24 104.251.89.0/24 104.251.91.0/24 158.115.224.0/22 158.115.248.0/22 172.98.185.0/24 206.127.218.0/24 207.230.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:99:d0:73:dd:02:bd:50:f4:c6:cc:49:4a:37:5c:cf:5e:64: 0a:fb:ce:3e:63:7c:8b:35:2d:34:35:ee:8d:2c:c2:0b:9c:3e: 4d:55:50:f5:a2:a8:61:e0:e0:d6:1c:1d:a5:b8:4e:82:b2:32: 53:42:3e:94:04:4c:ee:68:b6:2a:37:af:19:d9:e1:b8:d7:bc: 85:53:e3:c1:8a:4a:56:d5:f1:9c:45:92:f3:c2:70:73:d1:62: a2:5f:97:b2:54:45:70:71:0c:1f:a7:9b:ea:cf:34:74:cb:dc: 8d:d4:f6:e4:64:ca:54:aa:97:89:be:b8:9e:88:7c:9e:7f:81: 2c:50:eb:21:6c:15:de:f7:f6:e4:bf:76:f3:20:41:9e:b8:7f: f5:89:06:7d:25:2c:6f:ff:98:08:b8:aa:15:7d:5b:ad:54:5e: 5d:43:3d:8c:cd:85:24:fd:be:af:55:37:38:53:51:e3:1d:6b: db:b4:34:cc:94:22:94:f7:40:fc:90:48:47:34:5f:a3:08:63: 81:03:69:27:f6:bd:18:ed:4c:92:48:5d:90:c6:3b:ce:ee:97: 6f:ad:5d:af:56:5c:e5:a9:6f:41:be:cc:ff:ae:52:71:65:08: e6:cc:95:92:ba:05:24:8a:87:97:99:5f:bf:8a:b1:ee:8f:5a: 82:b8:4b:a9 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEiUpes7AWNpWjJjy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk OWU5ZWM3YTktMTdkOS00MDQxLTkwZjYtZTU4ZjIyYjRiYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroWDC03WDm1JfgPErAnfRhnXIpC/OCiiW2RV r+S+7l6df8h8LRHuPmNSyf0f5Y0UvNJtdnJ3b0ZXyouIOiOLh6ZkFihh5oSuHBym mvZChl7OGtHyeiqcw6zGnIVkp6svFqJo8sLraILa41+eJEas+xyQSQqOl+Ih1Cjg m3rXNmAwvoZpvxX8CHY2YeotNa9NtqjprDapt3bJUeK7G9rX6jvkSmnsDfPWP7I6 N9CibSlN9eydN4SoBdRcXgnJ+t2sQoAxeGXJQYj6cOidDi+kUTCQvlBEROJ6fmUo ydPKzJbUQKeIQRVqTwnM/5XE/LDoh6mPQqvWFAEnA6bMcJqGDQIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFEXjRBmGW03FhxnozWPA7EvfGA3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjE1OWQ5NDktOWMwOS0z M2NmLThkZjItYWI5M2MyMjVhNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAaPtQAwQA aPtVAwQAaPtZAwQAaPtbAwQCnnPgAwQCnnP4AwQArGK5AwQAzn/aAwQCz+ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaZ0HPdAr1Q9MbMSUo3XM9eZAr7zj5jfIs1LTQ17o0swgucPk1VUPWi qGHg4NYcHaW4ToKyMlNCPpQETO5otio3rxnZ4bjXvIVT48GKSlbV8ZxFkvPCcHPR YqJfl7JURXBxDB+nm+rPNHTL3I3U9uRkylSql4m+uJ6IfJ5/gSxQ6yFsFd739uS/ dvMgQZ64f/WJBn0lLG//mAi4qhV9W61UXl1DPYzNhST9vq9VNzhTUeMda9u0NMyU IpT3QPyQSEc0X6MIY4EDaSf2vRjtTJJIXZDGO87ul2+tXa9WXOWpb0G+zP+uUnFl CObMlZK6BSSKh5eZX7+Kse6PWoK4S6k= -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:11 2025 by rpki-client