$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa File: 59164d63-d428-368e-b33d-c57508b4ca42.roa (raw, json) Hash identifier: 1xieL+6l2+dEGfa89zJKsxC6/1/HgA7etUlFJN3IUG4= Subject key identifier: 13:2A:88:38:69:9E:54:CD:C5:1C:F8:7F:4A:02:EF:A7:85:B2:D5:27 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B261AEFBAA04F553CC2E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 16540 IP address blocks: 104.152.100.0/22 maxlen: 24 199.36.176.0/21 maxlen: 24 199.187.148.0/22 maxlen: 24 2607:6200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:26:1a:ef:ba:a0:4f:55:3c:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=1d8554ff-f879-4ab5-b4fa-2f4045ef1a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:e8:3b:bc:57:4e:77:3a:59:32:e3:d4:b0: 8c:7e:c2:24:55:2f:e4:da:27:7b:c0:61:ce:07:ce: cf:c7:ff:9c:b3:6f:37:f8:ce:7b:63:41:51:f2:d1: 62:b0:45:5a:1f:5c:8a:fd:2d:bb:69:1c:98:39:30: df:ed:1b:da:62:5b:1c:1b:cc:4d:2b:6a:fc:bd:2a: 7d:4a:39:b8:3a:3d:32:e6:1c:f7:a8:a8:79:0d:c3: ed:a5:42:f1:8b:14:2a:f9:ae:8a:1e:58:65:76:06: 74:bb:b2:75:4f:9c:06:5f:1a:93:b9:9d:f9:8e:33: 1f:71:ae:4a:ba:33:0e:76:27:32:28:b1:55:ee:eb: 91:3b:fb:3d:e5:09:69:4f:00:1e:8d:a1:f1:90:77: 9b:e7:40:07:c8:b2:de:5d:b5:cc:77:93:fe:6d:4f: 6f:04:a2:81:67:97:53:08:be:bf:8a:88:aa:71:79: c9:aa:62:98:27:72:5c:07:1e:ff:f0:47:02:41:29: 65:49:77:22:5f:4e:85:75:8c:26:21:30:52:04:a8: e3:36:af:c1:85:d6:9f:86:de:6e:af:94:d9:c1:b0: 45:7a:81:88:c5:a4:1c:7e:d2:75:e0:fe:f5:55:a8: f4:51:26:95:26:02:6f:49:5d:75:61:41:fe:f4:3f: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:88:38:69:9E:54:CD:C5:1C:F8:7F:4A:02:EF:A7:85:B2:D5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.100.0/22 199.36.176.0/21 199.187.148.0/22 IPv6: 2607:6200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:49:81:04:29:33:ca:50:ed:e7:38:b1:89:ba:81:ad:0f:5f: 98:49:36:77:55:0d:7c:cb:e7:0a:b4:53:66:f9:c1:09:96:91: 1f:ea:cf:04:5d:74:85:6a:de:6b:7c:f4:be:2a:bf:5c:04:b4: e7:a2:56:36:52:78:c6:31:09:08:04:3b:7f:3e:77:58:ac:c2: 44:c3:6a:06:fc:3a:fa:26:83:bd:8d:fa:86:b2:3f:de:79:25: 91:e4:e6:7e:94:4f:52:30:9e:38:9b:74:a9:db:d4:00:88:0c: 29:f9:84:82:b9:23:7e:8c:54:fe:e5:d0:fe:c2:27:46:03:18: 68:90:14:7e:33:80:23:24:5f:04:23:29:24:4a:73:57:68:71: 4c:90:42:7e:52:48:b7:d3:d4:d3:be:f4:42:66:ee:de:e1:dd: cb:4b:8a:f8:c1:2c:f5:6e:5a:09:18:cb:18:48:93:b4:71:e6: 4d:9e:0a:a9:7f:89:c7:40:a0:23:71:e9:cc:74:b6:57:e3:63: d0:2c:2d:73:1d:c7:8b:3d:25:a9:7a:dc:4c:71:28:c4:1e:25: cc:95:63:ed:26:52:c6:c2:a7:01:a3:22:2e:e3:c5:aa:4e:ec: 28:ed:fb:05:9e:33:02:29:9c:fd:4a:dd:f1:52:ed:e3:d7:ae: 94:d9:9c:e4 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEhsKyYa77qgT1U8wuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MWQ4NTU0ZmYtZjg3OS00YWI1LWI0ZmEtMmY0MDQ1ZWYxYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8foO7xXTnc6WTLj1LCMfsIkVS/k2id7wGHO B87Px/+cs283+M57Y0FR8tFisEVaH1yK/S27aRyYOTDf7RvaYlscG8xNK2r8vSp9 Sjm4Oj0y5hz3qKh5DcPtpULxixQq+a6KHlhldgZ0u7J1T5wGXxqTuZ35jjMfca5K ujMOdicyKLFV7uuRO/s95QlpTwAejaHxkHeb50AHyLLeXbXMd5P+bU9vBKKBZ5dT CL6/ioiqcXnJqmKYJ3JcBx7/8EcCQSllSXciX06FdYwmITBSBKjjNq/Bhdafht5u r5TZwbBFeoGIxaQcftJ14P71Vaj0USaVJgJvSV11YUH+9D/DUQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFBMqiDhpnlTNxRz4f0oC76eFstUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNTkxNjRkNjMtZDQyOC0z NjhlLWIzM2QtYzU3NTA4YjRjYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHpJgQQpM8pQ7ec4sYm6 ga0PX5hJNndVDXzL5wq0U2b5wQmWkR/qzwRddIVq3mt89L4qv1wEtOeiVjZSeMYx CQgEO38+d1iswkTDagb8Ovomg72N+oayP955JZHk5n6UT1IwnjibdKnb1ACIDCn5 hIK5I36MVP7l0P7CJ0YDGGiQFH4zgCMkXwQjKSRKc1docUyQQn5SSLfT1NO+9EJm 7t7h3ctLivjBLPVuWgkYyxhIk7Rx5k2eCql/icdAoCNx6cx0tlfjY9AsLXMdx4s9 Jal63ExxKMQeJcyVY+0mUsbCpwGjIi7jxapO7Cjt+wWeMwIpnP1K3fFS7ePXrpTZ nOQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:10:58 2025 by rpki-client