$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa File: 59164d63-d428-368e-b33d-c57508b4ca42.roa (raw, json) Hash identifier: ocgxYQa+GAPzruVYM4JFgmkmJYZk+IqkLOpQmo+73+Y= Subject key identifier: 0A:22:47:94:C0:69:9F:1E:A6:01:AA:96:7E:13:9E:A1:36:E8:A4:64 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6422EAF76074F6322B6820 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16540 IP address blocks: 104.152.100.0/22 maxlen: 24 199.36.176.0/21 maxlen: 24 199.187.148.0/22 maxlen: 24 2607:6200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:ea:f7:60:74:f6:32:2b:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=42d06c54-0e69-40c8-ab18-fff9381cda13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:f6:d1:3f:1a:48:dd:51:11:c3:21:f9:fa: 4f:d0:13:be:ef:fd:95:3f:c1:b1:94:ac:fa:e9:9d: f0:a4:70:fd:bc:89:7e:f2:91:06:42:eb:6a:52:4a: 2d:b1:33:db:55:c7:7b:b4:8c:1a:eb:f6:37:aa:2d: 33:24:89:82:29:3b:56:3a:be:ec:8e:91:0f:61:27: 78:a7:13:bb:78:b0:b9:b0:ca:cd:86:eb:2c:16:3c: 73:a5:26:03:60:a7:7a:e3:8f:c7:52:72:d6:46:2a: 7f:f4:86:d4:f5:1b:9c:61:d5:43:4b:bd:24:52:9c: fb:83:4a:c1:d1:07:9a:97:9e:a9:d5:66:b4:61:ea: e6:38:76:3b:45:8e:5d:2f:4e:62:69:61:96:22:01: 56:38:23:1b:9b:9d:f0:18:ee:ea:3f:87:da:29:cb: 3b:f2:71:bf:b7:12:f8:ba:98:79:a9:65:50:84:1d: 50:07:50:ba:a4:55:97:85:4b:84:00:d6:56:b2:cb: d9:db:c6:42:91:8a:05:bd:5f:81:7b:71:06:0b:ed: 9c:bb:b3:14:93:01:6f:e4:d2:bf:3c:90:b4:1b:3a: 85:5b:ed:af:58:b4:29:48:05:d5:d1:b9:8f:28:4b: 82:ef:0b:c9:01:c5:ab:3b:a8:f6:c8:6e:30:9c:2d: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:22:47:94:C0:69:9F:1E:A6:01:AA:96:7E:13:9E:A1:36:E8:A4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.100.0/22 199.36.176.0/21 199.187.148.0/22 IPv6: 2607:6200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6f:61:d9:cc:57:3b:57:6c:bf:96:68:08:88:d6:f0:34:c1: 31:60:a7:90:04:01:04:fb:95:2d:08:94:17:aa:13:b9:f0:67: d9:fd:e4:76:11:2a:b0:ba:f5:4d:18:22:e8:02:b5:9a:c9:55: d1:eb:b4:61:44:9e:2f:cd:bc:fd:a0:2f:2a:40:f5:d9:46:3b: 0a:4f:cb:86:4b:75:90:8f:c6:55:3b:27:7f:c7:38:e9:f2:7c: 5b:c7:a5:8d:4d:8b:ee:fc:bd:0a:84:93:fb:69:0a:4a:a0:d3: 3f:af:ff:46:f7:87:f8:ad:73:58:db:8c:64:fd:63:df:91:f7: 6d:9d:97:a5:cc:f1:4c:61:2c:a7:ab:8d:17:9e:f1:d2:08:03: 93:cc:22:01:58:ba:66:20:d4:e1:08:fe:ed:14:10:e2:9a:8c: e1:53:ca:0f:2b:ee:0b:f6:1a:4b:35:8f:28:75:ab:c7:67:ee: 8d:91:a8:96:6e:b0:83:35:a2:92:aa:55:c6:c6:bb:02:f9:42: da:39:22:13:63:c2:32:eb:bc:67:5e:18:bb:53:24:00:fc:a8: cd:7f:6a:d5:cb:e3:87:83:54:a6:d3:10:7a:51:cb:d1:b3:56: 47:a5:fe:74:83:f1:9a:44:1f:01:d7:67:19:0f:00:c9:fa:6b: 17:ae:a4:8d -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWElLZCLq92B09jIraCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NDJkMDZjNTQtMGU2OS00MGM4LWFiMTgtZmZmOTM4MWNkYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+T20T8aSN1REcMh+fpP0BO+7/2VP8GxlKz6 6Z3wpHD9vIl+8pEGQutqUkotsTPbVcd7tIwa6/Y3qi0zJImCKTtWOr7sjpEPYSd4 pxO7eLC5sMrNhussFjxzpSYDYKd644/HUnLWRip/9IbU9RucYdVDS70kUpz7g0rB 0Qeal56p1Wa0YermOHY7RY5dL05iaWGWIgFWOCMbm53wGO7qP4faKcs78nG/txL4 uph5qWVQhB1QB1C6pFWXhUuEANZWssvZ28ZCkYoFvV+Be3EGC+2cu7MUkwFv5NK/ PJC0GzqFW+2vWLQpSAXV0bmPKEuC7wvJAcWrO6j2yG4wnC0vOwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFAoiR5TAaZ8epgGqln4TnqE26KRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNTkxNjRkNjMtZDQyOC0z NjhlLWIzM2QtYzU3NTA4YjRjYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAElvYdnMVztXbL+WaAiI 1vA0wTFgp5AEAQT7lS0IlBeqE7nwZ9n95HYRKrC69U0YIugCtZrJVdHrtGFEni/N vP2gLypA9dlGOwpPy4ZLdZCPxlU7J3/HOOnyfFvHpY1Ni+78vQqEk/tpCkqg0z+v /0b3h/itc1jbjGT9Y9+R922dl6XM8UxhLKerjRee8dIIA5PMIgFYumYg1OEI/u0U EOKajOFTyg8r7gv2Gks1jyh1q8dn7o2RqJZusIM1opKqVcbGuwL5Qto5IhNjwjLr vGdeGLtTJAD8qM1/atXL44eDVKbTEHpRy9GzVkel/nSD8ZpEHwHXZxkPAMn6axeu pI0= -----END CERTIFICATE-----Generated at Sat Apr 12 12:49:06 2025 by rpki-client