$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6b750da2-f045-33a7-88de-a4fb0188554d.roa File: 6b750da2-f045-33a7-88de-a4fb0188554d.roa (raw, json) Hash identifier: xF+GoUhZabHVUWdduZNPKywtNKrByog5bH+64TTM1mI= Subject key identifier: E8:E5:B6:2D:87:F7:7D:12:9B:E4:A0:5B:24:89:39:02:68:B3:E3:23 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B31B9FA4B6227FEF4A5EE Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6b750da2-f045-33a7-88de-a4fb0188554d.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 21817 IP address blocks: 104.152.100.0/22 maxlen: 24 199.36.176.0/21 maxlen: 24 199.187.148.0/22 maxlen: 24 2607:6200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:b9:fa:4b:62:27:fe:f4:a5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=5dd9e6cd-c587-43cf-9b2d-18e8844e2eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:23:1f:df:6b:6c:0f:73:05:ed:e2:4c:99: 30:af:79:56:e0:59:57:e8:d9:24:70:b6:11:fa:22: c7:42:f0:16:d9:4e:84:55:ed:82:44:d7:ca:4a:fe: 5e:9e:4a:50:e9:2c:a6:fb:92:97:ff:7a:8d:13:38: ca:26:a4:9b:ed:26:8c:a0:24:d3:68:a3:6b:63:a3: e8:a3:b9:7c:21:a0:2e:79:a1:cf:c6:93:bf:18:cb: 25:41:e5:7c:0f:a1:f7:09:a0:59:05:c5:8c:13:99: 11:90:1d:c3:d0:cf:d2:2b:39:03:b4:fa:47:47:3f: 4b:cf:a8:c5:a3:38:71:83:a6:48:fa:63:32:f2:e1: e7:0f:c9:44:1f:bc:59:87:19:c7:68:e5:c6:b4:7b: ce:72:57:84:d6:b9:bd:7d:54:99:a0:9b:f0:e4:cd: 13:7a:ad:48:93:49:cd:be:03:57:94:6a:d5:d9:dc: d5:48:41:52:7d:5d:54:61:85:6e:3e:2d:91:e6:9f: cf:dc:55:4b:c8:8c:f0:80:d8:98:74:a7:57:0d:f6: 69:9d:88:fa:3b:76:32:b8:d6:7f:6c:7c:6c:12:ed: 2d:ff:39:04:68:36:50:bf:7b:9e:28:6a:ab:cf:2f: 16:d1:b8:94:16:37:dc:65:c8:f9:07:32:b4:25:7a: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E5:B6:2D:87:F7:7D:12:9B:E4:A0:5B:24:89:39:02:68:B3:E3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6b750da2-f045-33a7-88de-a4fb0188554d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.100.0/22 199.36.176.0/21 199.187.148.0/22 IPv6: 2607:6200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9e:8d:48:fa:f3:06:33:be:91:61:b5:5e:64:c9:69:84:6e: b1:e6:e8:52:0a:78:94:6f:32:17:78:79:0b:01:08:01:a3:0a: 6a:0b:2e:e9:8d:aa:d9:75:a3:8f:fa:ac:3d:51:11:52:f7:9c: 2c:94:cf:d6:a8:da:44:82:cb:a2:ad:6c:ae:b9:cb:88:bf:2e: 40:a7:4b:09:33:d2:73:7c:08:99:20:c7:2f:64:6a:eb:3b:bf: 1c:cb:24:52:7e:cf:8f:49:ae:c6:62:41:a5:a9:1b:9f:17:35: c1:e0:e6:6a:03:d8:a7:a2:2a:f1:f7:18:02:e3:0e:c3:af:b7: 50:a7:66:ad:42:33:27:87:99:0e:52:46:83:fa:56:3b:a5:63: 80:22:9a:14:58:f3:37:66:a8:89:3e:be:13:ba:73:d4:61:32: 77:6c:61:77:20:de:da:6c:5c:e9:06:86:ac:ee:8c:ea:da:65: 5d:27:06:5f:33:7f:a4:77:89:bf:b1:e7:16:da:cf:c5:df:ac: ae:1f:e3:57:13:12:dc:74:d4:e7:8d:d4:c8:d4:04:72:20:5a: 52:61:f6:96:bf:d6:00:d3:af:d4:c4:f7:a8:d9:13:b9:4b:46: b7:ad:73:12:4c:70:bf:68:50:23:88:d6:90:f6:c7:3f:11:43: 52:66:23:ce -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEhsKzG5+ktiJ/70pe4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk NWRkOWU2Y2QtYzU4Ny00M2NmLTliMmQtMThlODg0NGUyZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxIjH99rbA9zBe3iTJkwr3lW4FlX6NkkcLYR +iLHQvAW2U6EVe2CRNfKSv5enkpQ6Sym+5KX/3qNEzjKJqSb7SaMoCTTaKNrY6Po o7l8IaAueaHPxpO/GMslQeV8D6H3CaBZBcWME5kRkB3D0M/SKzkDtPpHRz9Lz6jF ozhxg6ZI+mMy8uHnD8lEH7xZhxnHaOXGtHvOcleE1rm9fVSZoJvw5M0Teq1Ik0nN vgNXlGrV2dzVSEFSfV1UYYVuPi2R5p/P3FVLyIzwgNiYdKdXDfZpnYj6O3YyuNZ/ bHxsEu0t/zkEaDZQv3ueKGqrzy8W0biUFjfcZcj5BzK0JXo/FQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFOjlti2H930Sm+SgWySJOQJos+MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNmI3NTBkYTItZjA0NS0z M2E3LTg4ZGUtYTRmYjAxODg1NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIqejUj68wYzvpFhtV5k yWmEbrHm6FIKeJRvMhd4eQsBCAGjCmoLLumNqtl1o4/6rD1REVL3nCyUz9ao2kSC y6KtbK65y4i/LkCnSwkz0nN8CJkgxy9kaus7vxzLJFJ+z49JrsZiQaWpG58XNcHg 5moD2KeiKvH3GALjDsOvt1CnZq1CMyeHmQ5SRoP6VjulY4AimhRY8zdmqIk+vhO6 c9RhMndsYXcg3tpsXOkGhqzujOraZV0nBl8zf6R3ib+x5xbaz8XfrK4f41cTEtx0 1OeN1MjUBHIgWlJh9pa/1gDTr9TE96jZE7lLRretcxJMcL9oUCOI1pD2xz8RQ1Jm I84= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:35 2025 by rpki-client