$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/56d01446-96cd-35a9-83df-8181fd06dc38.roa File: 56d01446-96cd-35a9-83df-8181fd06dc38.roa (raw, json) Hash identifier: 1HUj8EsvKXHbXHSV+UbyGbqj1C6TcR48LVh9HfySCSg= Subject key identifier: D1:49:B7:C3:00:F9:B4:5E:20:70:28:A3:5C:94:BA:84:EE:49:77:EC Certificate issuer: /CN=ab23a37f-2663-4683-a4bb-fd721130fe8e Certificate serial: 010D0C9F43285848A565F9C2A0EA464A1C45E7C0 Authority key identifier: 64:EA:88:5D:49:D2:42:7A:C8:60:08:B5:66:10:AE:82:AF:68:C8:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/56d01446-96cd-35a9-83df-8181fd06dc38.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 53282 IP address blocks: 64.49.40.0/22 maxlen: 24 104.37.136.0/21 maxlen: 24 162.221.48.0/21 maxlen: 24 2602:ff59::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/ab23a37f-2663-4683-a4bb-fd721130fe8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/ab23a37f-2663-4683-a4bb-fd721130fe8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f9:c2:a0:ea:46:4a:1c:45:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab23a37f-2663-4683-a4bb-fd721130fe8e Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=3df680dd-bafe-4c1f-a79a-3990a6e7e3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:1b:18:13:6e:23:17:10:3d:80:0a:88:20: 76:d9:59:ed:5f:e9:d5:af:08:6f:f8:61:3c:d0:33: 3e:9a:d8:37:04:c9:f5:5c:e2:97:d0:1f:96:4f:45: 76:a4:19:8e:00:59:6b:af:62:e2:1e:66:18:f4:0b: 82:be:6c:95:d2:ee:8f:f9:7a:4e:4c:e9:91:1d:d9: 5b:93:d4:d4:2e:4c:ea:ad:e8:11:b3:b0:07:d5:62: ce:58:ce:59:30:89:62:d4:b2:fe:68:a5:50:31:5d: fb:b6:c1:99:b5:f0:35:f6:02:e3:cf:fb:78:a0:a1: bc:c4:3d:75:11:82:12:3e:9b:7f:64:e7:f8:e6:21: 4f:72:3f:08:6a:6f:5d:ac:3f:fe:6f:c8:ab:b1:60: e4:8f:2e:ec:44:23:2e:f9:9c:77:09:bf:28:50:04: ce:54:2c:2f:31:83:29:06:69:3f:2e:db:71:3e:7d: 06:54:81:60:21:4b:1a:56:08:50:12:6c:53:ae:38: e0:c4:bb:d9:36:23:3e:5a:73:44:c5:31:d5:d0:1f: 56:aa:04:a9:2d:19:ae:a4:d8:dc:1c:e6:55:60:ce: 92:6d:40:9c:b2:82:4d:54:b8:4c:1a:89:9c:83:48: 07:eb:c9:13:ca:86:5c:58:a0:84:ac:ce:e6:4d:22: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:B7:C3:00:F9:B4:5E:20:70:28:A3:5C:94:BA:84:EE:49:77:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/56d01446-96cd-35a9-83df-8181fd06dc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/ab23a37f-2663-4683-a4bb-fd721130fe8e.crl X509v3 Authority Key Identifier: keyid:64:EA:88:5D:49:D2:42:7A:C8:60:08:B5:66:10:AE:82:AF:68:C8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e.cer sbgp-ipAddrBlock: critical IPv4: 64.49.40.0/22 104.37.136.0/21 162.221.48.0/21 IPv6: 2602:ff59::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c6:1f:68:9a:4d:68:9b:7f:b3:89:d0:40:52:ff:34:2d:bf: 1b:bc:1e:b2:46:53:e4:8b:4a:da:52:45:7f:e6:29:79:c7:52: 87:f5:8c:ca:57:35:cf:a0:8b:2b:34:88:47:33:dc:a1:aa:ef: 38:5c:c4:be:fe:73:ac:d6:07:2c:e5:d7:7a:48:2e:fe:43:dd: 66:16:6b:f2:73:3d:bc:1b:44:ca:af:66:68:91:92:c6:9f:22: d3:67:4f:4f:8e:94:58:ef:c1:c5:32:34:74:40:5e:4d:77:99: 31:b4:c6:7a:46:14:bb:37:1c:1d:59:9f:0d:12:3c:33:03:ad: 17:c0:4e:fd:a7:17:57:78:a0:4f:45:17:61:d4:7e:f2:c0:d4: c8:fb:57:15:90:12:b1:0f:e5:b8:38:20:24:21:1f:76:71:42: 5c:f2:c1:75:6b:8f:63:e6:0e:04:bf:f3:92:a2:da:00:35:21: 4f:07:26:18:40:f6:05:7a:48:95:93:16:55:21:61:0a:7c:aa: d4:ef:df:b3:2d:19:a6:ea:ec:53:35:57:13:dc:e1:95:fc:f2: c2:a6:23:a0:ab:55:f9:42:f0:11:51:a0:0e:30:5c:d8:6a:72: 12:be:15:6a:d6:89:a9:68:8c:cb:39:05:8c:77:3a:50:aa:71: 2f:c5:54:97 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEilZfnCoOpGShxF58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIyM2EzN2YtMjY2My00NjgzLWE0YmItZmQ3MjExMzBm ZThlMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk M2RmNjgwZGQtYmFmZS00YzFmLWE3OWEtMzk5MGE2ZTdlM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLMbGBNuIxcQPYAKiCB22VntX+nVrwhv+GE8 0DM+mtg3BMn1XOKX0B+WT0V2pBmOAFlrr2LiHmYY9AuCvmyV0u6P+XpOTOmRHdlb k9TULkzqregRs7AH1WLOWM5ZMIli1LL+aKVQMV37tsGZtfA19gLjz/t4oKG8xD11 EYISPpt/ZOf45iFPcj8Iam9drD/+b8irsWDkjy7sRCMu+Zx3Cb8oUATOVCwvMYMp Bmk/LttxPn0GVIFgIUsaVghQEmxTrjjgxLvZNiM+WnNExTHV0B9WqgSpLRmupNjc HOZVYM6SbUCcsoJNVLhMGomcg0gH68kTyoZcWKCErM7mTSJ4FQIDAQABo4IDcTCC A20wHQYDVR0OBBYEFNFJt8MA+bReIHAoo1yUuoTuSXfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjIz YTM3Zi0yNjYzLTQ2ODMtYTRiYi1mZDcyMTEzMGZlOGUvNTZkMDE0NDYtOTZjZC0z NWE5LTgzZGYtODE4MWZkMDZkYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWIyM2EzN2YtMjY2My00NjgzLWE0 YmItZmQ3MjExMzBmZThlL2FiMjNhMzdmLTI2NjMtNDY4My1hNGJiLWZkNzIxMTMw ZmU4ZS5jcmwwHwYDVR0jBBgwFoAUZOqIXUnSQnrIYAi1ZhCugq9oyPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjIzYTM3Zi0yNjYzLTQ2ODMtYTRiYi1mZDcy MTEzMGZlOGUuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQCQDEoAwQD aCWIAwQDot0wMA4EAgACMAgDBgQmAv9ZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3xh9omk1om3+zidBA Uv80Lb8bvB6yRlPki0raUkV/5il5x1KH9YzKVzXPoIsrNIhHM9yhqu84XMS+/nOs 1gcs5dd6SC7+Q91mFmvycz28G0TKr2ZokZLGnyLTZ09PjpRY78HFMjR0QF5Nd5kx tMZ6RhS7NxwdWZ8NEjwzA60XwE79pxdXeKBPRRdh1H7ywNTI+1cVkBKxD+W4OCAk IR92cUJc8sF1a49j5g4Ev/OSotoANSFPByYYQPYFekiVkxZVIWEKfKrU79+zLRmm 6uxTNVcT3OGV/PLCpiOgq1X5QvARUaAOMFzYanISvhVq1ompaIzLOQWMdzpQqnEv xVSX -----END CERTIFICATE-----Generated at Fri Apr 11 23:07:47 2025 by rpki-client